Edit tour

Windows Analysis Report
http://ofinovardweb.cstrikehost.com/

Overview

General Information

Sample URL:	http://ofinovardweb.cstrikehost.com/
Analysis ID:	1526477
Tags:	urlscan
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3976 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4920 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2164,i,6291912327454323900,11968717775315074238,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4232 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5740 --field-trial-handle=2164,i,6291912327454323900,11968717775315074238,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ofinovardweb.cstrikehost.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: http://ofinovardweb.cstrikehost.com/

HTTP Parser: Base64 decoded: <svg fill='#D7D7D7' style="float: right" xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Source: http://ofinovardweb.cstrikehost.com/	HTTP Parser: No favicon
Source: http://ofinovardweb.cstrikehost.com/	HTTP Parser: No favicon
Source: http://ofinovardweb.cstrikehost.com/	HTTP Parser: No favicon
Source: http://ofinovardweb.cstrikehost.com/	HTTP Parser: No favicon
Source: http://ofinovardweb.cstrikehost.com/	HTTP Parser: No favicon
Source: https://www.dynadot.com/	HTTP Parser: No favicon
Source: https://www.dynadot.com/	HTTP Parser: No favicon
Source: https://www.dynadot.com/	HTTP Parser: No favicon
Source: https://www.dynadot.com/	HTTP Parser: No favicon
Source: https://www.dynadot.com/	HTTP Parser: No favicon
Source: https://www.dynadot.com/	HTTP Parser: No favicon
Source: https://www.dynadot.com/	HTTP Parser: No favicon
Source: https://www.dynadot.com/	HTTP Parser: No favicon
Source: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Signal+Relief+Patch&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Signal+Relief+Patch&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Signal+Relief+Patch&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Casino+Online+Real+Money&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Casino+Online+Real+Money&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Halo+Smart+Fence&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Halo+Smart+Fence&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&pcsa=false&nb=0	HTTP Parser: No favicon
Source: https://www.dynadot.com/	HTTP Parser: No favicon
Source: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Halo+Smart+Fence&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&pcsa=false&nb=0	HTTP Parser: No favicon
Source: https://www.dynadot.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50167 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr/mainsite2023/navbar-logo-dark-2023.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr/mainsite2023/navbar-logo-dark-2023.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2595154941770008&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301542%2C17301266%2C72717107&format=r3%7Cs&nocache=8101728166490148&num=0&output=afd_ads&domain_name=ofinovardweb.cstrikehost.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1728166490151&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=855&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=fnfje1nnfmam&aqid=XLoBZ6WVDrmujuwPsavasAY&psid=7840396037&pbt=bs&adbx=375&adby=178&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=681010707&csala=12%7C0%7C2152%7C1063%7C416&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=p8d4nmqdogi7&aqid=XLoBZ6WVDrmujuwPsavasAY&psid=7840396037&pbt=bv&adbx=375&adby=178&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=681010707&csala=12%7C0%7C2152%7C1063%7C416&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/bootstrap.min.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr/1727814744244main-compat.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /tr/general-font-param2023.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /tr/1727814744244responsive-compat.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /fontawesome6/css/all.min.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /fontawesome6/css/v4-shims.min.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /switzer/css/switzer.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /swansea/css/swansea.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /proxima_nova/css/fonts.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /tr/1727814744244cropper.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /sr/megaMenu.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /1_13_32_footer.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /tc/1727814744245css/selectV2.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sr/navigation_bar_transparent_dark2023.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /sr/chatbot_bubble.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /sr/home_2023.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /sr/home_responsive_2023.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /sr/home_search_result.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /domain/1727814740291make-offer-new.css HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr/jquery-3.6.3.min.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /account/script/1727814741572cp.yubico.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dynadot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/expiring-domain-outlook.webp HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/make-bulk-edits.webp HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /account/script/1727814741572cp.yubico.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/expiring-domain-outlook.webp HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /switzer/fonts/Switzer-Variable.woff2 HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dynadot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dynadot.com/switzer/css/switzer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /fontawesome6/webfonts/fa-solid-900.woff2 HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dynadot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dynadot.com/fontawesome6/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/buy-and-sell.webp HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/manage-on-the-go.webp HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /tr/jquery.cookie.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /tr/dotlottie-player.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/header_bg.jpg HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/sr/home_responsive_2023.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /swansea/fonts/SwanseaBold-D0ox.ttf HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dynadot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dynadot.com/swansea/css/swansea.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /fontawesome6/webfonts/fa-light-300.woff2 HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dynadot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dynadot.com/fontawesome6/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /fontawesome6/webfonts/fa-regular-400.woff2 HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dynadot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dynadot.com/fontawesome6/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /switzer/fonts/Switzer-VariableItalic.woff2 HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dynadot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dynadot.com/switzer/css/switzer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /fontawesome6/webfonts/fa-brands-400.woff2 HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dynadot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dynadot.com/fontawesome6/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/home-top-content-right.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /tr/bootstrap.min.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /signals/config/1013298092648180?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/jquery.ui.widget.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
Source: global traffic	HTTP traffic detected: GET /tr/jquery.fileupload.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /onload.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tc/1727814744245js/selectV2.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tc/1727814744245js/xssDefine.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /sr/navigation_bar_transparent_dark2023.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr/jquery-3.6.3.min.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/make-bulk-edits.webp HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-S0L3BZSLYB&gacid=1188666043.1728166508&gtm=45je4a20v872015657za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101529666~101671035~101747727&z=1020591301 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sr/chatbot_bubble.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /chat/html2canvas.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tp.widget.bootstrap.min.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /sr/home_2023.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /domain/1727814740251make-offer-new.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /domain/clipboard.min.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /signals/config/710112770279009?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C133%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C125%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr/jquery.cookie.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/manage-on-the-go.webp HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/header_bg.jpg HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/home-top-content-right.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tr/bootstrap.min.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tr/jquery.ui.widget.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/1013298092648180?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/script/webauthn-json.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dynadot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/account/script/1727814741572cp.yubico.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /sr/lottie-player.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /sr/home_search_result.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /hp_script.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /sr/megaMenu.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tr/lazysizes.min.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tr/jquery.fileupload.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sr/navigation_bar_transparent_dark2023.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tc/1727814744245js/xssDefine.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /onload.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tc/1727814744245js/selectV2.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /signals/config/710112770279009?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C133%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C125%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/2086896001510648?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C133%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C125%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sr/chatbot_bubble.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /sr/home_2023.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /domain/logo/io-banner1720419766.webp HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /domain/logo/it.com-banner1725645757.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /domain/logo/biz-banner1720419756.webp HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /domain/logo/vip-banner1720419776.webp HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /domain/1727814740251make-offer-new.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /domain/clipboard.min.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tr/mainsite2023/navbar-logo-dark-2023.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tp.widget.bootstrap.min.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /chat/html2canvas.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /sr/chatbot_bubble.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=5a73801679def00001e7f7d2 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /domain/logo/xyz-banner1720419776.webp HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=5a73801679def00001e7f7d2 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /domain/logo/me-banner1720419767.webp HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /account/script/webauthn-json.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tr/velocity.min.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /hp_script.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sr/home_search_result.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tr/1727814744244popup.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sr/megaMenu.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /signals/config/655348809639676?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C133%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C125%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/lazysizes.min.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tr/jquery.iframe-transport.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tr/1727814744244sidebar-menu.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /tr/1727814744244cropper.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr/1727814744244upload-photo.js HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/gradient_animate.mp4 HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.dynadot.com/Accept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/bulk_action.mp4 HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.dynadot.com/Accept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /trustboxes/5419b637fa0340045cd0c936/main.js HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=5a73801679def00001e7f7d2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trustboxes/53aa8912dec7e10d38f59f36/main.js HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=5a73801679def00001e7f7d2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/website-builder.webp HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/professional-email.webp HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/aftermarket-newsletter-signup.webp HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /tr/mainsite2023/icon_app_store_android_page.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /signals/config/827279986078004?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C133%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C125%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/mainsite2023/icon_google_play_store_android_page.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/icon-facebook-nav-side.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /trustbox-data/53aa8912dec7e10d38f59f36?businessUnitId=5a73801679def00001e7f7d2&locale=en-US&reviewLanguages=en&reviewTagValue=SelectedReview&includeReviews=true&reviewsPerPage=15 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=5a73801679def00001e7f7d2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/TrustboxImpression?locale=en-US&styleHeight=140px&styleWidth=100%25&theme=dark&tags=SelectedReview&reviewLanguages=en&url=https%3A%2F%2Fwww.dynadot.com%2F&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=5a73801679def00001e7f7d2&widgetId=53aa8912dec7e10d38f59f36 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=5a73801679def00001e7f7d2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trustbox-data/5419b637fa0340045cd0c936?businessUnitId=5a73801679def00001e7f7d2&locale=en-US HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=5a73801679def00001e7f7d2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/TrustboxImpression?locale=en-US&styleHeight=140px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fwww.dynadot.com%2F&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=5a73801679def00001e7f7d2&widgetId=5419b637fa0340045cd0c936 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=5a73801679def00001e7f7d2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/icon-printerest-nav-side.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/icon-linkedin-nav-side.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/icon-instagram-nav-side.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/icon-twitter-nav-side.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/icon-youtube-nav-side.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/trusted1.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/lottie-player.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /domain/logo/it.com-banner1725645757.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /domain/logo/vip-banner1720419776.webp HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /domain/logo/biz-banner1720419756.webp HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/chatbot_bubble.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /domain/logo/io-banner1720419766.webp HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/trusted2.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/trusted3.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/trusted4.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/trusted5.png HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/bulk_action.mp4 HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.dynadot.com/Accept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0Range: bytes=819200-861620If-Range: 1727814739708
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/gradient_animate.mp4 HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.dynadot.com/Accept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0Range: bytes=1572864-1625367If-Range: 1727814744111
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /signals/config/2086896001510648?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C133%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C125%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /domain/logo/xyz-banner1720419776.webp HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /domain/logo/me-banner1720419767.webp HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /tr/velocity.min.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /megaMenu/mega-info HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /tr/1727814744244popup.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /shared_ajax_handler.html HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /signals/config/655348809639676?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C133%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C125%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trustboxes/5419b637fa0340045cd0c936/main.js HTTP/1.1Host: widget.trustpilot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trustboxes/53aa8912dec7e10d38f59f36/main.js HTTP/1.1Host: widget.trustpilot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/jquery.iframe-transport.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr/1727814744244sidebar-menu.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /tr/1727814744244cropper.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.dynadot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /tr/1727814744244upload-photo.js HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/aftermarket-newsletter-signup.webp HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/professional-email.webp HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /tr/mainsite2023/icon_app_store_android_page.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /signals/config/827279986078004?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C133%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C125%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/website-builder.webp HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /trustbox-data/5419b637fa0340045cd0c936?businessUnitId=5a73801679def00001e7f7d2&locale=en-US HTTP/1.1Host: widget.trustpilot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/mainsite2023/icon_google_play_store_android_page.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /trustbox-data/53aa8912dec7e10d38f59f36?businessUnitId=5a73801679def00001e7f7d2&locale=en-US&reviewLanguages=en&reviewTagValue=SelectedReview&includeReviews=true&reviewsPerPage=15 HTTP/1.1Host: widget.trustpilot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/icon-facebook-nav-side.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/icon-printerest-nav-side.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/icon-linkedin-nav-side.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/icon-instagram-nav-side.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/icon-youtube-nav-side.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/trusted1.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/icon-twitter-nav-side.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/trusted2.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/trusted5.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/trusted4.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /sr/mainsite2023/home/trusted3.png HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.dynadot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0; _ga=GA1.1.1188666043.1728166508; _ga_S0L3BZSLYB=GS1.1.1728166507.1.0.1728166507.60.0.0; _ga_LNGS77TV0S=GS1.1.1728166507.1.0.1728166507.0.0.0; bubble_status=0
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3De088a5f8d1e2e868%3AT%3D1728166492%3ART%3D1728166492%3AS%3DALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NTM5Ljg4MDF8ZmI2ZmE3ZWM1ZjVmMGI1NTI1YTM3MzM0OGUyMGNmNjNkMjdkYjdkYXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2595154941770008&q=Signal%20Relief%20Patch&afdt=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301542%2C17301266%2C72717108&format=n3&ad=n3&nocache=7681728166539369&num=0&output=afd_ads&domain_name=ofinovardweb.cstrikehost.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1728166539370&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=855&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DSignal%2BRelief%2BPatch%26afdToken%3DChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE%26pcsa%3Dfalse%26nb%3D0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=irc841uamud5&aqid=jboBZ97ZK6efxdwP5qiZ6AU&psid=7840396037&pbt=bs&adbx=366.5&adby=194&adbh=1368&adbw=530&adbah=506%2C421%2C439&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=681010707&csala=45%7C0%7C1415%7C12%7C261&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=fn1klsokelmr&aqid=jboBZ97ZK6efxdwP5qiZ6AU&psid=7840396037&pbt=bv&adbx=366.5&adby=194&adbh=1368&adbw=530&adbah=506%2C421%2C439&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=681010707&csala=45%7C0%7C1415%7C12%7C261&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3De088a5f8d1e2e868%3AT%3D1728166492%3ART%3D1728166492%3AS%3DALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NTQ2Ljk0Mzd8NDk2MDI2MjZjNjU5ODZjNjNiNDBkZmRkYWE5MTFmNzNiMGEwMzk4NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2595154941770008&q=Casino%20Online%20Real%20Money&afdt=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301542%2C17301266%2C72717107&format=n3&ad=n3&nocache=3781728166547087&num=0&output=afd_ads&domain_name=ofinovardweb.cstrikehost.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1728166547090&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=855&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DCasino%2BOnline%2BReal%2BMoney%26afdToken%3DChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p%26pcsa%3Dfalse%26nb%3D0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=vafpsh418wix&aqid=lboBZ-nQFtDBxdwP45-q2Q0&psid=7840396037&pbt=bs&adbx=366.5&adby=194&adbh=1386&adbw=530&adbah=506%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=681010707&csala=39%7C0%7C1520%7C4%7C427&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=trf3br38o78z&aqid=lboBZ-nQFtDBxdwP45-q2Q0&psid=7840396037&pbt=bv&adbx=366.5&adby=194&adbh=1386&adbw=530&adbah=506%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=681010707&csala=39%7C0%7C1520%7C4%7C427&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3De088a5f8d1e2e868%3AT%3D1728166492%3ART%3D1728166492%3AS%3DALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NTUxLjg4MDh8NzRjNjZhZjU4MWNiMzA0YjU0MDVlMjU3OGJmMDlkMmVhMjlkOTc2ZHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2595154941770008&q=Halo%20Smart%20Fence&afdt=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301542%2C17301266%2C72717107&format=n3&ad=n3&nocache=9711728166551188&num=0&output=afd_ads&domain_name=ofinovardweb.cstrikehost.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1728166551191&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=855&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DHalo%2BSmart%2BFence%26afdToken%3DChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io%26pcsa%3Dfalse%26nb%3D0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=o0wz1lvdgud2&aqid=mboBZ86oFpnajuwPtrOYwAc&psid=7840396037&pbt=bs&adbx=366.5&adby=194&adbh=1332&adbw=530&adbah=452%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=681010707&csala=58%7C0%7C1290%7C117%7C355&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=ebx8k5be9u6u&aqid=mboBZ86oFpnajuwPtrOYwAc&psid=7840396037&pbt=bv&adbx=366.5&adby=194&adbh=1332&adbw=530&adbah=452%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=681010707&csala=58%7C0%7C1290%7C117%7C355&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjQ4OS4wODgyOmEwNzlhMjRjNWI5ZWUwN2YzNmI3NTcyMDcxYjkzZWUwNGJlMDkzNThmNWZhMmJkYWRkMzIxZTNkYzRmMjVmMzc6NjcwMWJhNTkxNTg2MA%3D%3D HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls.php?t=6701ba59&token=20a9dcb4f1b840cc657e23ba927e43c8236a9f0c HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjQ4OS4wODgyOmEwNzlhMjRjNWI5ZWUwN2YzNmI3NTcyMDcxYjkzZWUwNGJlMDkzNThmNWZhMmJkYWRkMzIxZTNkYzRmMjVmMzc6NjcwMWJhNTkxNTg2MA%3D%3D HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjQ4OS4wODgyOmEwNzlhMjRjNWI5ZWUwN2YzNmI3NTcyMDcxYjkzZWUwNGJlMDkzNThmNWZhMmJkYWRkMzIxZTNkYzRmMjVmMzc6NjcwMWJhNTkxNTg2MA%3D%3D HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ofinovardweb.cstrikehost.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjQ4OS4wODgyOmEwNzlhMjRjNWI5ZWUwN2YzNmI3NTcyMDcxYjkzZWUwNGJlMDkzNThmNWZhMmJkYWRkMzIxZTNkYzRmMjVmMzc6NjcwMWJhNTkxNTg2MA%3D%3D HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Signal+Relief+Patch&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&pcsa=false&nb=0 HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjUzOS44NTA5Ojk1OTA5Zjc0MGUyNjRmMTllNzA5NTAzYzRhMDJiOGRlM2MzZjA1NzZjNjM1MWU2OTRiNWU2NzM3NTFjNjE4OWY6NjcwMWJhOGJjZmJjYw%3D%3D HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Signal+Relief+Patch&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /ls.php?t=6701ba8b&token=576733c2046d1d1966bdbc5c07b84aba5c830319 HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Signal+Relief+Patch&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjUzOS44NTA5Ojk1OTA5Zjc0MGUyNjRmMTllNzA5NTAzYzRhMDJiOGRlM2MzZjA1NzZjNjM1MWU2OTRiNWU2NzM3NTFjNjE4OWY6NjcwMWJhOGJjZmJjYw%3D%3D HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjUzOS44NTA5Ojk1OTA5Zjc0MGUyNjRmMTllNzA5NTAzYzRhMDJiOGRlM2MzZjA1NzZjNjM1MWU2OTRiNWU2NzM3NTFjNjE4OWY6NjcwMWJhOGJjZmJjYw%3D%3D HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Signal+Relief+Patch&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjUzOS44NTA5Ojk1OTA5Zjc0MGUyNjRmMTllNzA5NTAzYzRhMDJiOGRlM2MzZjA1NzZjNjM1MWU2OTRiNWU2NzM3NTFjNjE4OWY6NjcwMWJhOGJjZmJjYw%3D%3D HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Casino+Online+Real+Money&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p&pcsa=false&nb=0 HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjU0Ni45MjQ5OmE2MjJkOTlmZjE1YjEwZTQ3NDM4ZjI4NDM4ZThjNDcyNWM4OWFlZmFiYTY5NDZkYTczZTk3OGQ3NTA1ZTczOTc6NjcwMWJhOTJlMWNjNw%3D%3D HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Casino+Online+Real+Money&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /ls.php?t=6701ba92&token=d0780dbd51096fc9cfd139f58a8cb808d162be33 HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Casino+Online+Real+Money&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjU0Ni45MjQ5OmE2MjJkOTlmZjE1YjEwZTQ3NDM4ZjI4NDM4ZThjNDcyNWM4OWFlZmFiYTY5NDZkYTczZTk3OGQ3NTA1ZTczOTc6NjcwMWJhOTJlMWNjNw%3D%3D HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjU0Ni45MjQ5OmE2MjJkOTlmZjE1YjEwZTQ3NDM4ZjI4NDM4ZThjNDcyNWM4OWFlZmFiYTY5NDZkYTczZTk3OGQ3NTA1ZTczOTc6NjcwMWJhOTJlMWNjNw%3D%3D HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Casino+Online+Real+Money&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjU0Ni45MjQ5OmE2MjJkOTlmZjE1YjEwZTQ3NDM4ZjI4NDM4ZThjNDcyNWM4OWFlZmFiYTY5NDZkYTczZTk3OGQ3NTA1ZTczOTc6NjcwMWJhOTJlMWNjNw%3D%3D HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Halo+Smart+Fence&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&pcsa=false&nb=0 HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjU1MS44NTU6MGI4ZWYyOTcxNDc2ZGE0NDc5MjNiODZiOTRhOWUxNDU3ZWQ0MDkxMjg1ZWMwMDgxNThmOTNlYzFmNDljMjRiNTo2NzAxYmE5N2QwYzAz HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Halo+Smart+Fence&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjU1MS44NTU6MGI4ZWYyOTcxNDc2ZGE0NDc5MjNiODZiOTRhOWUxNDU3ZWQ0MDkxMjg1ZWMwMDgxNThmOTNlYzFmNDljMjRiNTo2NzAxYmE5N2QwYzAz HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /ls.php?t=6701ba97&token=5e5103d4fe9070980f0937520d54ca580c1fb183 HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Halo+Smart+Fence&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjU1MS44NTU6MGI4ZWYyOTcxNDc2ZGE0NDc5MjNiODZiOTRhOWUxNDU3ZWQ0MDkxMjg1ZWMwMDgxNThmOTNlYzFmNDljMjRiNTo2NzAxYmE5N2QwYzAz HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Halo+Smart+Fence&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjU1MS44NTU6MGI4ZWYyOTcxNDc2ZGE0NDc5MjNiODZiOTRhOWUxNDU3ZWQ0MDkxMjg1ZWMwMDgxNThmOTNlYzFmNDljMjRiNTo2NzAxYmE5N2QwYzAz HTTP/1.1Host: ofinovardweb.cstrikehost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg

Source: chromecache_228.2.dr, chromecache_259.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_228.2.dr, chromecache_259.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_295.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_295.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_295.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: ofinovardweb.cstrikehost.com
Source: global traffic	DNS traffic detected: DNS query: www.dynadot.com
Source: global traffic	DNS traffic detected: DNS query: d38psrni17bvxu.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: cdn.mouseflow.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: widget.trustpilot.com

Source: unknown

HTTP traffic detected: POST /g/collect?v=2&tid=G-S0L3BZSLYB&gtm=45je4a20v872015657za200&_p=1728166504697&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101529666~101671035~101747727&cid=1188666043.1728166508&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1728166507&sct=1&seg=0&dl=https%3A%2F%2Fwww.dynadot.com%2F&dt=Buy%20a%20Domain%20Name%20-%20Register%2C%20Manage%2C%20and%20Save%20More%20%7C%20Dynadot&en=page_view&_fv=1&_nsi=1&_ss=2&_ee=1&tfd=8113 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.dynadot.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.dynadot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_168.2.dr, chromecache_189.2.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_349.2.dr, chromecache_274.2.dr, chromecache_230.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_168.2.dr, chromecache_189.2.dr	String found in binary or memory: http://html2canvas.hertzen.com
Source: chromecache_168.2.dr, chromecache_189.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_168.2.dr, chromecache_189.2.dr	String found in binary or memory: http://jsfiddle.net/niklasvh/2e48b/
Source: chromecache_168.2.dr, chromecache_189.2.dr	String found in binary or memory: http://probablyprogramming.com/2009/03/15/the-tiniest-gif-ever
Source: chromecache_172.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3062
Source: chromecache_172.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3063
Source: chromecache_172.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3064
Source: chromecache_172.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3065
Source: chromecache_172.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3066
Source: chromecache_172.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3067
Source: chromecache_172.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3068
Source: chromecache_172.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3069
Source: chromecache_259.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_204.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlOno0AgXns7l-y_HKLsie0mWJ8B
Source: chromecache_271.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqltZkbKk38jO6VQzb5UTsGXQSbk7
Source: chromecache_187.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlxlTjwzTxHZmzJTp_gsjPQt5BKp
Source: chromecache_271.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmarrBCI6Q3nND8FXDKVLEcIuueO
Source: chromecache_204.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmg3gEX3KcBFpOtqW2NZRvv6O9s-
Source: chromecache_187.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmghhEVTdx9kLfA1IfVQJl5X7B2_
Source: chromecache_271.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqn-KAJ3T0qBMchyeIVJEoWmh0mQj
Source: chromecache_187.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnYj6ArAZb4_TjnAUeLxHqDTuYzR
Source: chromecache_204.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnfdZajc4QG2cBt_IZTmOvuk3S8p
Source: chromecache_357.2.dr, chromecache_279.2.dr, chromecache_348.2.dr, chromecache_306.2.dr	String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: chromecache_228.2.dr, chromecache_259.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_197.2.dr, chromecache_241.2.dr	String found in binary or memory: https://clipboardjs.com/
Source: chromecache_350.2.dr, chromecache_295.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_350.2.dr, chromecache_295.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_168.2.dr, chromecache_189.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Guide/CSS/Understanding_z_index/The_stacking_context
Source: chromecache_190.2.dr, chromecache_364.2.dr	String found in binary or memory: https://domainagents.com/ddmodal/index.php?domain=
Source: chromecache_190.2.dr, chromecache_364.2.dr	String found in binary or memory: https://dynadot.names.club/easypayment/dynadot/index.html#/
Source: chromecache_292.2.dr, chromecache_305.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_292.2.dr, chromecache_305.2.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_251.2.dr, chromecache_260.2.dr, chromecache_235.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_227.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zS2W7XS.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-iLT9g.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-izT9qOk.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_258.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_156.2.dr, chromecache_239.2.dr, chromecache_344.2.dr	String found in binary or memory: https://github.com/fengyuanchen/cropper
Source: chromecache_300.2.dr, chromecache_345.2.dr	String found in binary or memory: https://github.com/hernansartorio/jquery-nice-select
Source: chromecache_349.2.dr, chromecache_274.2.dr, chromecache_230.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_259.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_357.2.dr, chromecache_306.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: chromecache_228.2.dr, chromecache_259.2.dr, chromecache_251.2.dr, chromecache_260.2.dr, chromecache_235.2.dr, chromecache_339.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_251.2.dr, chromecache_260.2.dr, chromecache_235.2.dr, chromecache_339.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_190.2.dr, chromecache_364.2.dr	String found in binary or memory: https://sedo.com/checkdomainoffer.php?language=
Source: chromecache_279.2.dr, chromecache_348.2.dr	String found in binary or memory: https://services.google.com/sitestats/
Source: chromecache_228.2.dr, chromecache_259.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_251.2.dr, chromecache_260.2.dr, chromecache_235.2.dr, chromecache_339.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_357.2.dr, chromecache_279.2.dr, chromecache_348.2.dr, chromecache_306.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_228.2.dr, chromecache_259.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_204.2.dr	String found in binary or memory: https://www.amazon.com/
Source: chromecache_187.2.dr	String found in binary or memory: https://www.amazon.com/muscle/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.dynadot.com/
Source: chromecache_187.2.dr	String found in binary or memory: https://www.ebay.com/
Source: chromecache_281.2.dr	String found in binary or memory: https://www.fontshare.com/fonts/switzer
Source: chromecache_259.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_271.2.dr	String found in binary or memory: https://www.google.com/images/afs/snowman.png
Source: chromecache_251.2.dr, chromecache_260.2.dr, chromecache_235.2.dr, chromecache_339.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_228.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_204.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiO2ZqMoviIAxUZrYMHHbYZBngYABAAGgJlZg
Source: chromecache_204.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiO2ZqMoviIAxUZrYMHHbYZBngYABABGgJlZg
Source: chromecache_204.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiO2ZqMoviIAxUZrYMHHbYZBngYABACGgJlZg
Source: chromecache_187.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwie1NOGoviIAxWnT5EFHWZUBl0YABAAGgJscg
Source: chromecache_187.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwie1NOGoviIAxWnT5EFHWZUBl0YABABGgJscg
Source: chromecache_187.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwie1NOGoviIAxWnT5EFHWZUBl0YABACGgJscg
Source: chromecache_271.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwip76aKoviIAxXQYJEFHeOPKtsYABAAGgJscg
Source: chromecache_271.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwip76aKoviIAxXQYJEFHeOPKtsYABABGgJscg
Source: chromecache_271.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwip76aKoviIAxXQYJEFHeOPKtsYABACGgJscg
Source: chromecache_251.2.dr, chromecache_260.2.dr, chromecache_235.2.dr, chromecache_339.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_259.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_357.2.dr, chromecache_279.2.dr, chromecache_348.2.dr, chromecache_306.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: chromecache_271.2.dr	String found in binary or memory: https://www.mcluck.com/
Source: chromecache_228.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_204.2.dr	String found in binary or memory: https://www.technobark.com/
Source: chromecache_362.2.dr, chromecache_155.2.dr, chromecache_178.2.dr, chromecache_255.2.dr	String found in binary or memory: https://www.trustpilot.com/evaluate/dynadot.com
Source: chromecache_362.2.dr, chromecache_155.2.dr, chromecache_178.2.dr, chromecache_255.2.dr	String found in binary or memory: https://www.trustpilot.com/evaluate/embed/dynadot.com
Source: chromecache_362.2.dr, chromecache_249.2.dr, chromecache_155.2.dr, chromecache_178.2.dr, chromecache_255.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.trustpilot.com/review/dynadot.com
Source: chromecache_155.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.trustpilot.com/reviews/64d69e23b444afad4b07bd22
Source: chromecache_155.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.trustpilot.com/reviews/64ef47883077f8d935c2bdc4
Source: chromecache_155.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.trustpilot.com/reviews/650ce5719a39cf0089dd3e71
Source: chromecache_155.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.trustpilot.com/reviews/65559e5cae733a6332c40c46
Source: chromecache_155.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.trustpilot.com/reviews/655626c57c06aa169ba48d74
Source: chromecache_155.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.trustpilot.com/reviews/655ae28bf5765805e2064c96
Source: chromecache_155.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.trustpilot.com/reviews/659cb6a7c6ac24a91f913e6c
Source: chromecache_155.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.trustpilot.com/reviews/659cc19ea577b061ee000bfe
Source: chromecache_228.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50167 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@25/359@56/25

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2164,i,6291912327454323900,11968717775315074238,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ofinovardweb.cstrikehost.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5740 --field-trial-handle=2164,i,6291912327454323900,11968717775315074238,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2164,i,6291912327454323900,11968717775315074238,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5740 --field-trial-handle=2164,i,6291912327454323900,11968717775315074238,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://syndicatedsearch.goog	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
https://syndicatedsearch.goog/afs/ads/i/iframe.html	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0	0%	URL Reputation	safe
https://fontawesome.com/license	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
syndicatedsearch.goog	142.250.185.78	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	66.102.1.155	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
scontent.xx.fbcdn.net	157.240.253.1	true	false	unknown
ofinovardweb.cstrikehost.com	75.2.115.196	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
analytics.google.com	142.250.186.174	true	false	unknown
td.doubleclick.net	142.250.185.66	true	false	unknown
widget.trustpilot.com	54.192.137.4	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.185.97	true	false	unknown
d38psrni17bvxu.cloudfront.net	18.66.121.138	true	false	unknown
www.dynadot.com	104.16.152.132	true	false	unknown
cdn.mouseflow.com	unknown	unknown	false	unknown
afs.googleusercontent.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	false		unknown
https://www.dynadot.com/fontawesome6/css/v4-shims.min.css	false		unknown
https://www.dynadot.com/sr/mainsite2023/home/header_bg.jpg	false		unknown
https://www.dynadot.com/tr/1727814744244sidebar-menu.js	false		unknown
https://www.dynadot.com/shared_ajax_handler.html	false		unknown
https://www.dynadot.com/sr/mainsite2023/home/professional-email.webp	false		unknown
https://www.dynadot.com/tr/mainsite2023/navbar-logo-dark-2023.png	false		unknown
https://www.dynadot.com/megaMenu/mega-info	false		unknown
https://www.dynadot.com/sr/mainsite2023/home/trusted5.png	false		unknown
https://www.google.com/images/afs/snowman.png	false		unknown
http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjU0Ni45MjQ5OmE2MjJkOTlmZjE1YjEwZTQ3NDM4ZjI4NDM4ZThjNDcyNWM4OWFlZmFiYTY5NDZkYTczZTk3OGQ3NTA1ZTczOTc6NjcwMWJhOTJlMWNjNw%3D%3D	false		unknown
https://www.dynadot.com/sr/mainsite2023/home/website-builder.webp	false		unknown
https://www.dynadot.com/tc/1727814744245js/xssDefine.js	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=ebx8k5be9u6u&aqid=mboBZ86oFpnajuwPtrOYwAc&psid=7840396037&pbt=bv&adbx=366.5&adby=194&adbh=1332&adbw=530&adbah=452%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=681010707&csala=58%7C0%7C1290%7C117%7C355&lle=0&ifv=1&hpt=1	false		unknown
https://www.dynadot.com/sr/mainsite2023/icon-facebook-nav-side.png	false		unknown
https://syndicatedsearch.goog/afs/ads/i/iframe.html	false	URL Reputation: safe	unknown
https://www.dynadot.com/tr/bootstrap.min.css	false		unknown
https://widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=140px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fwww.dynadot.com%2F&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=5a73801679def00001e7f7d2&widgetId=5419b637fa0340045cd0c936	false		unknown
https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/main.js	false		unknown
https://www.dynadot.com/sr/mainsite2023/home/trusted2.png	false		unknown
https://www.dynadot.com/sr/mainsite2023/home/buy-and-sell.webp	false		unknown
https://www.dynadot.com/account/script/1727814741572cp.yubico.js	false		unknown
https://connect.facebook.net/signals/config/2086896001510648?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C133%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C125%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127	false		unknown
https://www.dynadot.com/tr/mainsite2023/icon_app_store_android_page.png	false		unknown
http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjUzOS44NTA5Ojk1OTA5Zjc0MGUyNjRmMTllNzA5NTAzYzRhMDJiOGRlM2MzZjA1NzZjNjM1MWU2OTRiNWU2NzM3NTFjNjE4OWY6NjcwMWJhOGJjZmJjYw%3D%3D	false		unknown
https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=5a73801679def00001e7f7d2	false		unknown
http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjQ4OS4wODgyOmEwNzlhMjRjNWI5ZWUwN2YzNmI3NTcyMDcxYjkzZWUwNGJlMDkzNThmNWZhMmJkYWRkMzIxZTNkYzRmMjVmMzc6NjcwMWJhNTkxNTg2MA%3D%3D	false		unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0	false	URL Reputation: safe	unknown
https://www.dynadot.com/tr/lazysizes.min.js	false		unknown
https://www.dynadot.com/tr/1727814744244upload-photo.js	false		unknown
https://www.dynadot.com/domain/logo/it.com-banner1725645757.png	false		unknown
https://www.dynadot.com/sr/mainsite2023/icon-twitter-nav-side.png	false		unknown
http://ofinovardweb.cstrikehost.com/ls.php?t=6701ba59&token=20a9dcb4f1b840cc657e23ba927e43c8236a9f0c	false		unknown
http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjU1MS44NTU6MGI4ZWYyOTcxNDc2ZGE0NDc5MjNiODZiOTRhOWUxNDU3ZWQ0MDkxMjg1ZWMwMDgxNThmOTNlYzFmNDljMjRiNTo2NzAxYmE5N2QwYzAz	false		unknown
https://www.dynadot.com/tr/dotlottie-player.js	false		unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	false		unknown
https://www.dynadot.com/sr/home_search_result.css	false		unknown
https://www.dynadot.com/sr/mainsite2023/home/bulk_action.mp4	false		unknown
http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjQ4OS4wODgyOmEwNzlhMjRjNWI5ZWUwN2YzNmI3NTcyMDcxYjkzZWUwNGJlMDkzNThmNWZhMmJkYWRkMzIxZTNkYzRmMjVmMzc6NjcwMWJhNTkxNTg2MA%3D%3D	false		unknown
https://www.dynadot.com/domain/clipboard.min.js	false		unknown
https://www.dynadot.com/domain/logo/io-banner1720419766.webp	false		unknown
https://www.dynadot.com/sr/chatbot_bubble.png	false		unknown
https://www.dynadot.com/domain/logo/biz-banner1720419756.webp	false		unknown
https://www.dynadot.com/switzer/fonts/Switzer-VariableItalic.woff2	false		unknown
https://www.dynadot.com/sr/mainsite2023/icon-instagram-nav-side.png	false		unknown
https://www.dynadot.com/sr/mainsite2023/icon-printerest-nav-side.png	false		unknown
https://www.dynadot.com/account/script/webauthn-json.js	false		unknown
http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Signal+Relief+Patch&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&pcsa=false&nb=0	false		unknown
http://ofinovardweb.cstrikehost.com/ls.php?t=6701ba97&token=5e5103d4fe9070980f0937520d54ca580c1fb183	false		unknown
https://www.dynadot.com/tr/jquery.ui.widget.js	false		unknown
https://www.dynadot.com/sr/chatbot_bubble.css	false		unknown
http://ofinovardweb.cstrikehost.com/ls.php?t=6701ba8b&token=576733c2046d1d1966bdbc5c07b84aba5c830319	false		unknown
http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjUzOS44NTA5Ojk1OTA5Zjc0MGUyNjRmMTllNzA5NTAzYzRhMDJiOGRlM2MzZjA1NzZjNjM1MWU2OTRiNWU2NzM3NTFjNjE4OWY6NjcwMWJhOGJjZmJjYw%3D%3D	false		unknown
https://www.dynadot.com/fontawesome6/webfonts/fa-solid-900.woff2	false		unknown
https://www.dynadot.com/sr/megaMenu.js	false		unknown
https://www.dynadot.com/	false		unknown
https://www.dynadot.com/swansea/css/swansea.css	false		unknown
https://www.dynadot.com/hp_script.js	false		unknown
https://www.dynadot.com/proxima_nova/css/fonts.css	false		unknown
https://www.dynadot.com/tr/jquery.iframe-transport.js	false		unknown
https://www.dynadot.com/sr/mainsite2023/home/trusted1.png	false		unknown
http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjU1MS44NTU6MGI4ZWYyOTcxNDc2ZGE0NDc5MjNiODZiOTRhOWUxNDU3ZWQ0MDkxMjg1ZWMwMDgxNThmOTNlYzFmNDljMjRiNTo2NzAxYmE5N2QwYzAz	false		unknown
https://www.dynadot.com/tr/mainsite2023/icon_google_play_store_android_page.png	false		unknown
https://connect.facebook.net/signals/config/1013298092648180?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112	false		unknown
https://www.dynadot.com/1_13_32_footer.css	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=irc841uamud5&aqid=jboBZ97ZK6efxdwP5qiZ6AU&psid=7840396037&pbt=bs&adbx=366.5&adby=194&adbh=1368&adbw=530&adbah=506%2C421%2C439&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=681010707&csala=45%7C0%7C1415%7C12%7C261&lle=0&ifv=1&hpt=1	false		unknown
http://ofinovardweb.cstrikehost.com/	false		unknown
https://www.dynadot.com/sr/megaMenu.css	false		unknown
https://www.dynadot.com/favicon.ico	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://dynadot.names.club/easypayment/dynadot/index.html#/	chromecache_190.2.dr, chromecache_364.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_228.2.dr, chromecache_259.2.dr	false	URL Reputation: safe	unknown
https://github.com/hernansartorio/jquery-nice-select	chromecache_300.2.dr, chromecache_345.2.dr	false		unknown
https://syndicatedsearch.goog	chromecache_251.2.dr, chromecache_260.2.dr, chromecache_235.2.dr, chromecache_339.2.dr	false	URL Reputation: safe	unknown
https://www.technobark.com/	chromecache_204.2.dr	false		unknown
https://www.trustpilot.com/reviews/659cb6a7c6ac24a91f913e6c	chromecache_155.2.dr, chromecache_178.2.dr	false		unknown
https://www.trustpilot.com/reviews/650ce5719a39cf0089dd3e71	chromecache_155.2.dr, chromecache_178.2.dr	false		unknown
https://fontawesome.com	chromecache_292.2.dr, chromecache_305.2.dr	false	URL Reputation: safe	unknown
http://getbootstrap.com)	chromecache_349.2.dr, chromecache_274.2.dr, chromecache_230.2.dr	false		unknown
https://github.com/fengyuanchen/cropper	chromecache_156.2.dr, chromecache_239.2.dr, chromecache_344.2.dr	false		unknown
https://www.trustpilot.com/evaluate/embed/dynadot.com	chromecache_362.2.dr, chromecache_155.2.dr, chromecache_178.2.dr, chromecache_255.2.dr	false		unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_251.2.dr, chromecache_260.2.dr, chromecache_235.2.dr, chromecache_339.2.dr	false		unknown
http://html2canvas.hertzen.com	chromecache_168.2.dr, chromecache_189.2.dr	false		unknown
https://domainagents.com/ddmodal/index.php?domain=	chromecache_190.2.dr, chromecache_364.2.dr	false		unknown
https://www.amazon.com/	chromecache_204.2.dr	false		unknown
https://connect.facebook.net/	chromecache_350.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_349.2.dr, chromecache_274.2.dr, chromecache_230.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmarrBCI6Q3nND8FXDKVLEcIuueO	chromecache_271.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqn-KAJ3T0qBMchyeIVJEoWmh0mQj	chromecache_271.2.dr	false		unknown
https://www.trustpilot.com/reviews/655626c57c06aa169ba48d74	chromecache_155.2.dr, chromecache_178.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/Guide/CSS/Understanding_z_index/The_stacking_context	chromecache_168.2.dr, chromecache_189.2.dr	false		unknown
https://fontawesome.com/license	chromecache_292.2.dr, chromecache_305.2.dr	false	URL Reputation: safe	unknown
http://jsfiddle.net/niklasvh/2e48b/	chromecache_168.2.dr, chromecache_189.2.dr	false		unknown
https://www.mcluck.com/	chromecache_271.2.dr	false		unknown
https://www.trustpilot.com/reviews/659cc19ea577b061ee000bfe	chromecache_155.2.dr, chromecache_178.2.dr	false		unknown
https://td.doubleclick.net	chromecache_228.2.dr, chromecache_259.2.dr	false		unknown
https://adservice.google.com/pagead/regclk?	chromecache_259.2.dr	false		unknown
https://www.trustpilot.com/reviews/65559e5cae733a6332c40c46	chromecache_155.2.dr, chromecache_178.2.dr	false		unknown
https://www.trustpilot.com/review/dynadot.com	chromecache_362.2.dr, chromecache_249.2.dr, chromecache_155.2.dr, chromecache_178.2.dr, chromecache_255.2.dr, chromecache_324.2.dr	false		unknown
http://probablyprogramming.com/2009/03/15/the-tiniest-gif-ever	chromecache_168.2.dr, chromecache_189.2.dr	false		unknown
https://github.com/carhartl/jquery-cookie	chromecache_258.2.dr, chromecache_193.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.78	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
54.192.137.4	widget.trustpilot.com	United States	16509	AMAZON-02US	false
18.66.121.138	d38psrni17bvxu.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.250.186.174	analytics.google.com	United States	15169	GOOGLEUS	false
142.250.185.225	unknown	United States	15169	GOOGLEUS	false
157.240.0.6	unknown	United States	32934	FACEBOOKUS	false
75.2.115.196	ofinovardweb.cstrikehost.com	United States	16509	AMAZON-02US	false
66.102.1.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.142	unknown	United States	15169	GOOGLEUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
142.250.185.66	td.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
18.239.102.95	unknown	United States	16509	AMAZON-02US	false
142.250.185.110	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.222.236.94	unknown	United States	16509	AMAZON-02US	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false
172.217.16.132	unknown	United States	15169	GOOGLEUS	false
142.250.185.97	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.16.152.132	www.dynadot.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7
192.168.2.9
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526477
Start date and time:	2024-10-06 00:13:49 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://ofinovardweb.cstrikehost.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@25/359@56/25
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.dynadot.com/ Browse: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Signal+Relief+Patch&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&pcsa=false&nb=0 Browse: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Casino+Online+Real+Money&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p&pcsa=false&nb=0 Browse: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Halo+Smart+Fence&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&pcsa=false&nb=0

Warnings

Exclude process from analysis (whitelisted): audiodg.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 142.250.186.142, 74.125.71.84, 34.104.35.123, 142.250.185.130, 142.250.186.66, 4.245.163.56, 192.229.221.95, 13.95.31.18, 199.232.214.172, 142.250.184.226, 142.250.184.194, 142.250.185.232, 104.18.26.50, 104.18.27.50, 142.250.186.110, 20.3.187.198, 172.217.16.206, 172.217.18.106, 142.250.181.234, 142.250.184.202, 142.250.185.138, 142.250.186.170, 142.250.185.234, 216.58.206.74, 142.250.185.106, 172.217.16.202, 142.250.186.138, 142.250.185.170, 172.217.23.106, 142.250.184.234, 142.250.185.202, 216.58.212.170, 142.250.185.74, 93.184.221.240, 216.58.212.163, 172.217.18.3
Excluded domains from analysis (whitelisted): www.googleadservices.com, slscr.update.microsoft.com, partner.googleadservices.com, clientservices.googleapis.com, wu.azureedge.net, cdn.mouseflow.com.cdn.cloudflare.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://ofinovardweb.cstrikehost.com/

Input	Output
URL: http://ofinovardweb.cstrikehost.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://ofinovardweb.cstrikehost.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.dynadot.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.dynadot.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.dynadot.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.dynadot.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.dynadot.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.dynadot.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.dynadot.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.dynadot.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1559)
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	5.342332707512183
Encrypted:	false
SSDEEP:	48:0JhITQOnK8lwSb6YS4tyPWp2PXihm0wQR2FgbnYfblV:8WLDbL1tzAXr+0P
MD5:	1B290736477C4E2EF9EC52C71B6F6650
SHA1:	BE2B75DB8A28B260DD38872D094443F3AF1705E1
SHA-256:	60747E9A7A9CD351609BC78FA005FFD7F9112F29837932F99F5C5C9B88801E76
SHA-512:	BD50B9C0D74B5FC22745A45DE99D590EE264A9887940EAD52CB7699BF1726AF06582D2FC1365719B29F49C87B9CA1F05A13202DE362FB9CFE3CE1E5EE2DA3B86
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads/i/iframe.html
Preview:	<!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="zdNoaidGFP30MhYVODRtlA">if (window.name.match(/^{"name":"master-\d+"/)) {var script = document.createElement('script');script.src = "/adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\| href.indexOf('&pac=2') > 0) {script.src += '?pac=2';} else {script.src += '?pac=0';}}document.head.appendChild(script);window.IS_GOOGLE_AFS_IFRAME_ = true;}function populate(el) {var adBlock = document.getElementById('adBlock');adBlock.innerHTML += el;}function getMaster() {var m = null;var pIndex = window.name.indexOf('\|');if (pIndex > -1 && window.name.charAt(0) != '{') {try {m = window.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	72203
Entropy (8bit):	5.606602192379761
Encrypted:	false
SSDEEP:	1536:Yxy0/9yFW/kdM50NSpQCV7nh7lI2iKApQOezsYk/xIDJCOqmqM1a27RF4Ld2wPdZ:ky0/9yu0JZKWPP/G+
MD5:	9416915A5346C4088EC8C7BDB962CEDD
SHA1:	1465BD9CC3F3B5435DC581E80386B17A62DF6802
SHA-256:	225729892397D102D90970D2F26BB0856E0555CC13DB7A7CEAD9803DED7D7B19
SHA-512:	A8D60218ADAA34C95A5F4A3002C9C3AE9EAC0A04F89CE0D10A27734D2F8E16DE7B434EC7BDCB199A11A72B67F5B2C44DBA6A615BBBBDFE9FBD3ED45AEB93DF82
Malicious:	false
Reputation:	low
URL:	https://cdn.mouseflow.com/projects/f592a9ec-2b7d-40b7-b1ad-0d08c3f6316d.js
Preview:	window.mouseflowEnableCssRecording = true;var mouseflowDisableKeyLogging = true;if(typeof mouseflow==='undefined'&&typeof mouseflowPlayback==='undefined'){(function(){var _200=false;var _204=false;var _183=[];var _179=[];var _20='https://eu.mouseflow.com';function _7(_405,_151){_151=(typeof _151!=='undefined'?_151:'');if(_4.debug)console.log('MF'+(_4.includeDebugTime?' - '+_151:'')+': '+_405)}var _60=new _362(window);var _34=new _333(window);var _5=new _327(window,Math,JSON,_60);var _13=new _308(_60,_5);var _36=new _277('local',window,_5,_7);var _301=new _277('session',window,_5,_7);var _232=new _356(window);var _4=new _325(window,_36,_200,_204);_4._100();_4._169=[];_4._162=[];_4._117=[];_4._171=[];_4._418=[];_4._414=[];_4._71='f592a9ec-2b7d-40b7-b1ad-0d08c3f6316d';_4._420=true;_4._417='5242000';_4._159('appUrl',_20);var _316=new _406(window,_5,_4,_7);function _400(_0,_4,_53,_5,_13,_76,_36){var _20,_71,_7,_56;var _195='mf_liveHeatmaps';var _15;var _119=[];var _89;var _137=false;functio

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13303
Entropy (8bit):	5.0807540925994505
Encrypted:	false
SSDEEP:	384:bXFHTKPQu7MvLI0iLE0lFsVYRTtBAk5qL+I:bX5TbQALI0izFsVYRTtBA+qL1
MD5:	8D789865706B836368EC28C72D55F151
SHA1:	860262004F4C13D5A86BD36FA81EA23D6E563E40
SHA-256:	12B88017F2579167CDE35DBCC1A6B519CE39EC971EFA533AADF10EF1BB53DAC5
SHA-512:	509DBB0DA117EE0AE4CBA4FA2C747D626B6735B595C5F402C8A443C1B5065F6CFA890804F7AEAAE2E7EDACED239C49D940B4E7DB7A20D821CAFF0A32B9E3B892
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/trustbox-data/53aa8912dec7e10d38f59f36?businessUnitId=5a73801679def00001e7f7d2&locale=en-US&reviewLanguages=en&reviewTagValue=SelectedReview&includeReviews=true&reviewsPerPage=15
Preview:	{"businessUnit":{"stars":4.0,"trustScore":4.1,"displayName":"Dynadot","numberOfReviews":{"total":1241,"oneStar":217,"twoStars":26,"threeStars":28,"fourStars":76,"fiveStars":894},"websiteUrl":"https://www.dynadot.com/","identifyingName":"dynadot.com"},"businessEntity":{"stars":4.0,"trustScore":4.1,"displayName":"Dynadot","numberOfReviews":{"total":1241,"oneStar":217,"twoStars":26,"threeStars":28,"fourStars":76,"fiveStars":894},"websiteUrl":"https://www.dynadot.com/","identifyingName":"dynadot.com"},"reviews":[{"stars":5,"createdAt":"2024-01-09T05:46:39Z","title":"Solid and Dependable with Great Bulk Pricing -- 15+ year customer","text":"I moved the vast majority of my domains to Dynadot in 2008 and I still don't regret it. Since the day I signed up they've been solid and dependable, and if you spend over $500/year with them you get great bulk pricing.","reviewUrl":"https://www.trustpilot.com/reviews/659cc19ea577b061ee000bfe","language":"en","verification":{"createdAt":"2024-01-09T05:46:

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4935
Entropy (8bit):	5.061805358527
Encrypted:	false
SSDEEP:	96:axgVNg42Xy9ImVrYFNbFOFPw3+EKQZFfFZhsl7PC:pVNAXAImVrYFNbFOFPw35JFfFZs7PC
MD5:	78440AA5A8CB8E3E604C927632ADC3F2
SHA1:	4857E20B28BE3F66230EAAA7D856C343FE63CBEA
SHA-256:	62A454443E7C681EF17F00379A1D7C7DA560882D26AA3393F8FF884F0F659092
SHA-512:	CCC8E57188F9BC39F1943675236805A06BBFF1A0460E1DB8CF632AEC6D331F737EA0E4AC5491979271FD36E990891453EACE713C0BB02699AA1019C5D80BDBCB
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/1727814744244cropper.css
Preview:	/!. Cropper v4.0.0. * https://github.com/fengyuanchen/cropper. . Copyright (c) 2014-2018 Chen Fengyuan. * Released under the MIT license. . Date: 2018-04-01T06:26:32.417Z. /...cropper-container {. direction: ltr;. font-size: 0;. line-height: 0;. position: relative;. -ms-touch-action: none;. touch-action: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;.}...cropper-container img {/Avoid margin top issue (Occur only when margin-top <= -height). */. display: block;. height: 100%;. image-orientation: 0deg;. max-height: none !important;. max-width: none !important;. min-height: 0 !important;. min-width: 0 !important;. width: 100%;.}...cropper-wrap-box,..cropper-canvas,..cropper-drag-box,..cropper-crop-box,..cropper-modal {. bottom: 0;. left: 0;. position: absolute;. right: 0;. top: 0;.}...cropper-wrap-box,..cropper-canvas {. overflow: hidden;.}...cropper-drag-box {. background-color: #fff;. opacity: 0

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	43655
Entropy (8bit):	5.148314987705202
Encrypted:	false
SSDEEP:	768:plyPKUxt9kncnUwM0K52YW7RqFM7vn5bbC25y:plyPKUxt9kncnUwM0K1W7Qmvn5PC25y
MD5:	01F4EE98BE7DDF1313C4CF341F7E374E
SHA1:	A6EE82A495B0BB3621450F798CF0E34AF25C5DC8
SHA-256:	00BC36CDE7CFD8E42A0E06FFB3EA97B70A77BF0D10D386830EFEFF66469AF43D
SHA-512:	221B48A2AC00CB3A9B120EC9B62C3426649D38F05582EE8724990DC86D74B7D9387562873F1DABD6F03C180A52134F96EC9D92E4997534676B9C8A8C515BFA5F
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/navigation_bar_transparent_dark2023.css
Preview:	.account-menu-avatar-photo {..margin-right: 30px;..float: left;..display: inline-block;..background: linear-gradient(149.98deg, #FBD051 13.32%, #CBE0AE 54.14%, #7BC7F9 89.41%);..width: 110px;..height: 110px;..border-radius: 100px;..margin-top: 1px;.}...nav-side-account-user-cp-menu {..display:none;.}...nav-side-notifications-count {..color: #FBFDFF !important;..width: 25px;..height: 20px;..display: inline-block;..line-height: 20px;..border-radius: 10px;..text-align: center;..background: #0096F7;..margin-left: 20px;.}...nav-side-notifications {..margin: 20px 0 20px 60px;.}...nav-side-notifications a {..color: #001345;.}...nav-side-notifications i{..color: #A7B1C2;..font-weight: 400;..font-size: 16px;..margin-right: 10px;.}...nav-side-notifications span{..color: #001345;..font-weight: 400;..font-size: 16px;.}...nav-side-dark-logo {..display: none;.}...nav-side-return-main-menu {..display: none;.}...nav-side-return-main-menu .fa-angle-right {..margin-left: 10px;.}...support-option-chat-on

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	79778
Entropy (8bit):	5.334949534551888
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXhpwNFHM9ZK0BK01QJnYTZ02LKVsdmpyKcicyh:RIT7OXss9ZKAKBtYj8wKcHyh
MD5:	6DAA80C2C71F6879629BCF0D886D96F4
SHA1:	F1B59B2D83B919B50D28B33A924A94A6B84EDE54
SHA-256:	31FF2D8B22997FC2F28B4B912E3C5EBD3561733176E355DA9FA9332E27B386EC
SHA-512:	A1144A556B824F6C9245EB2EB455C4F6D1C54E225C3B462F31128B1DCB22BE2D8EDBC372ED5B2C0B36FFBB534A084F03B7D1436408336936FDE60D500F966C2F
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 128, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18670
Entropy (8bit):	7.933234390297527
Encrypted:	false
SSDEEP:	384:m9LS/FBYkiNX4O50yy9gy2jVmnYZYysuC1HMo+kxQPnb73Ypt1V:m9LM7iNIOK995sQYZYuC1HMSuIpXV
MD5:	452557F25CECC9D36D4A399059419FCC
SHA1:	BDFC9A05D277BA3E9041E234B453E931C8BCF2F1
SHA-256:	BC194C47B2AAA3A47B05B20D674B0565F92EE9915B3AFEEF42C592A43DF60392
SHA-512:	153A72E12782C11014007B33699BE8CEC78ADC3650FD8896B9F35A74F9661661076263C6B6C0B8C7191F9359156161C430FE8A61B48A1551B410B83E58C60FFE
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/chatbot_bubble.png
Preview:	.PNG........IHDR................E..H.IDATx^.}..Uumz..@.[g.(..X.`....bAA.RTP.(........A.mm.\....O..IH..0$...?.C.T . .Sr....^..s..KH..h.<.............k.3g.o.Sn.y.I...>i......:.s3C."..f....?~jh...........N......}......S...L...3=..S......?s..N.;.....W.Z.....7..<.].83r...G....>9..83.\|~z.........y..r..s......X9....~...o>5.3..-.s'...L.Iy<J.r>1......{?1..w.T.?.b......7......i~..3.{.:;v..3#..4=.C.K.i9.x.... ...s.<W.$..5.....(...0...4.....Iy<j.`....k.J...........&oh>6..r..>......u......7....N......kN..mp.$. XN.PHdI`AdAT..2UF.D.....ER....,s....#.D.........h....\|t.z=......k........a....c.=.._....4..i.ckN...(P...,....bi...i....2.S.".G.MELC.Y<..(........`.....&.....s......Xs..o.:q.....G.<..GS.>3q.Wf.o...X.s...Ty.`../...=.i...B..G.."...5..xK.,Ut.g....S..!.._2..P.]>.`.s..u...9d......+n:db..GMMm.(.u.]...n.~.WWM\|....O.p..X.(...,..OE...,-..(.\KA.,.-..2....."KLC..#....!9.,..V ..."..@I`....._.......'V\|..+^...../\|.g..z.......{.+..IA...*...gAd.E...!;.-R6...i..

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	dropped
Size (bytes):	30314
Entropy (8bit):	5.310864966985162
Encrypted:	false
SSDEEP:	768:so/MPtWU9Ywx3UpxbY/Y3YOgQxnYeYZYHYZYVY+YSYI7EiJcyfJb/GGXfKJX3X5A:RIT7hsZwuvLN54WAcl/7
MD5:	47188A32D7FAFA48A56C3A35CC74F81A
SHA1:	4D3EE9E67ECBC36255B0EEC679E066DE4620083C
SHA-256:	CCCE7D6881346685AEA5BBFC1223798F2E6C8A00D978A9220D187B2B6392BD76
SHA-512:	5E8134F59B5AC4373CE811990B148482D54E78679A82134A343C49BCADE17BEEBD7BC1C688DB1977DCDA8B0D37AA3AF849D1B2415EDB260FBFF5464C76FE6A91
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4453
Entropy (8bit):	4.825642525285799
Encrypted:	false
SSDEEP:	96:Ky3pX2UdUA/BTuHSYLHBXMDtBKjRw/YaODdhiP7:xpbJtKNwQQ
MD5:	99A7F967018309889395F737C13F65A6
SHA1:	F5E84F745769BE267101504B8B4000E4E43936E2
SHA-256:	16C43E5E0D3C6CAEB2D0545BAE4A77CDD1F584FB23D63CD45EBA2CC102033191
SHA-512:	56B1DD2DB98157E0882FE28722B822837CD94834754641B86CDD9DF6D416BBBF365C43A802E72F698B58143AB89AFCDF9373E6AEB4245544C1A557C692D2C869
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/domain/1727814740291make-offer-new.css
Preview:	.make-offer-title {. margin-top: 10px;. font-size: 18px;. color: #313C50;. letter-spacing: 0;. font-weight: 600;.}...make-offer-description {. margin-left: auto;. margin-right: auto;. font-size: 16px;. max-width: 90%;. display: block;. text-align: left;. color: #81878C;. font-weight: 300;. overflow: hidden;.}...make-offer-description img {. margin-top: 15px;.}...modal-hidden-css {. overflow: hidden;.}...modal-content {. border-radius: 20px;.}..div.make-offer-modal-header {. background: #F5F6FA !important;. height: auto !important;. text-align: center;. border-bottom: none;. border-radius: 20px 20px 0px 0px;.}..div.make-offer-modal-header img {. margin-left: auto;. margin-right: auto;. width: 130px;. display: block;. clear: both;. position: relative;. top: -20px;.}..div#make-offer-row {. padding: 0px 20px;.}..div#make-offer-button {. text-align: center;. margin-top: 10px;. line-height: 43p

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1219
Entropy (8bit):	4.793977145866041
Encrypted:	false
SSDEEP:	24:vUs73Hn8brdLTmiiAKi1y+dF0g+3B5GDtN9g:Hn8ndBiAKi1ootNO
MD5:	D8FF63683416B5ACFE78B44BCA3799E9
SHA1:	EB83089124C4BF75E31B7947C1134EDC544305AA
SHA-256:	1B541FF6523895EBF67A0B7A389AF91FC62249F2C01A685167B78617EA38677D
SHA-512:	1C8347C7D8B0978FE895FFB821B082F93212E911147E995C7C0AE60205A3EFC84CBA339241C1FEF7B2A0631811F4EFDEDDFD3B8A4E2DE46C255A066548A00182
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/1727814744244popup.js
Preview:	/** Designed to be used for all pop-up window functionality.. * @param win_url. * URL of the page to be loaded in the pop-up window.. * @param win_name. * Name of the pop-up window.. * @param win_height. * Height of the pop-up window in pixels.. * @param win_width. * Width of the pop-up window in pixels.. * @param win_id. * ID of the pop-up window. Use an empty String if no id is needed.. * @param no_reload. * If true, subsequent clicks don't reload the page.. /.function popup(win_url, win_name, win_height, win_width, win_id, no_reload) {. / Error Checking */. win_id = win_id \|\| ""; // if win_id is null, empty, etc., win_id = "";. win_url = win_url \|\| "";. win_name = win_name \|\| "default_popup";. win_height = win_height \|\| "600";. win_width = win_width \|\| "500";. no_reload = no_reload \|\| false;.. var url = no_reload ? "" : win_url;. var win = window.open(url, win_name + win_id, "height=" + win_height. + ",width=" + win_width + ",scrollbars=yes,resizable

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32043)
Category:	downloaded
Size (bytes):	34857
Entropy (8bit):	5.428595013800402
Encrypted:	false
SSDEEP:	768:+pxyiYGAdU1sahkgF58HF+XZky13RekzWkb99QuKjh:0yFUickgnsF+pky13RHXMRjh
MD5:	8B045D9884FF3C69D4572C7D499DEA8D
SHA1:	603FA9875AFA04C3481D4F17786F4104506D2938
SHA-256:	77DB72348B70D0B5B3009147DAEE033C61BE38C16E931CEE7714605870A1B142
SHA-512:	FFAEB067AA040E7F5C4971DDF9251CF1EAAB9719EE325020671B03D4AA142A08E0366DDD16AD2FDA255074F2B910D445D719C018F36AC076050D14CCC1A9F612
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/velocity.min.js
Preview:	/! VelocityJS.org (1.2.2). (C) 2014 Julian Shapiro. MIT @license: en.wikipedia.org/wiki/MIT_License /./! VelocityJS.org jQuery Shim (1.0.1). (C) 2014 The jQuery Foundation. MIT @license: en.wikipedia.org/wiki/MIT_License. /.!function(e){function t(e){var t=e.length,r=$.type(e);return"function"===r\|\|$.isWindow(e)?!1:1===e.nodeType&&t?!0:"array"===r\|\|0===t\|\|"number"==typeof t&&t>0&&t-1 in e}if(!e.jQuery){var $=function(e,t){return new $.fn.init(e,t)};$.isWindow=function(e){return null!=e&&e==e.window},$.type=function(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?a[o.call(e)]\|\|"object":typeof e},$.isArray=Array.isArray\|\|function(e){return"array"===$.type(e)},$.isPlainObject=function(e){var t;if(!e\|\|"object"!==$.type(e)\|\|e.nodeType\|\|$.isWindow(e))return!1;try{if(e.constructor&&!n.call(e,"constructor")&&!n.call(e.constructor.prototype,"isPrototypeOf"))return!1}catch(r){return!1}for(t in e);return void 0===t\|\|n.call(e,t)},$.each=function(e,r,a){var n,o=0,i=e.length,s=t(

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1403
Entropy (8bit):	7.713653538894172
Encrypted:	false
SSDEEP:	24:w7f6IgazKn7co237ma8vePy0pKaqVNj5XmxVAKTaSZIZKuCf9kL7OZPY68ycKrN:mgazKne37mnB0gnNj5XgVAKWGIURxpt7
MD5:	BBD1ECFA5A990AD60230D737F37BF003
SHA1:	8C6F86428F66D6CEFD53F80F2DFD87659994C5E4
SHA-256:	536A90BA0A91674874E1F89BB6D500080127659FC3679F9CF096E9E1442BF7B7
SHA-512:	BE41BAE1D5818C93C5CC19D383A74D040BF20D085C012DD23FB56F8C2D3FD629A1BEBBDAB1E89668E83162F87B71CBB083950BB7B6875870F9FC3A04D629E6F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T...BIDATx^.\.q.0..;H:p:H:.;p.....T`w M$...+i.N.N.q..:.>,...] .%.<$2$@>.p$J<.......B... .......@.... .......@.... .......@.... ........#0X....Bx.P....)}...zs...^..W"x:.\|.JM.H..O.....MB....s.s(/..X......?.... ..~>J..X".dPI...y.oE.\Bb.8..RM)................?~.~x.W...W^..'.>".'9.z......'...?.X?V..?..-f].GE[#..w.....pw..F...+r^Fd..x.].U.$#.....j4......%&..OR..V..".../....}$%SM...S..Q..&....[..{....y.n$.3!...43...zv}...<.n.....I!.KgK..6.i....C...J.c..(B.....3.o-...+J:.s..5mU..+...{Ca.t...EGF#.))......`...........\...g../&)../4........8.%..t.....&%^4H_..6.JhFfqy....~...%.&..)O...,yw{.e.......n.}....7..mQ2.NgZ.$........`.G!.P..Zgr~.k2.Mxs..boI3..>s...n.~.'.$..o....'....:..;.NH^DPyy.'.."....d;...N...}.P......E..1.......R.@[.d......:./n ..I.Z .....4B.....VH..h.'..f$....>HH#}N.D7....! DC....;.g.;].'...a...?6dZ8.r...w.d9.m.K.8.\TY.&]..(..}....Yy/f..*Su./!.).....$.U......55.ns..l...v.....P]/.!..Y.......@...7

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	13957
Entropy (8bit):	4.3568326191722235
Encrypted:	false
SSDEEP:	384:mrxYZwXkOT5RP2AAJEz/xdK6HUh4JG/irFEuj7D:1UT7jxvJE/iT
MD5:	885B7BE70BB989B58233428891EF5F1D
SHA1:	09C4A9A01D898FF2020E84AA3B99DC2AA8A05D2A
SHA-256:	C892FCF49BF6B490F0EB7ECBA808CE95173FE2DA2329A2D44D302035379E8A04
SHA-512:	767DF4D55BE2D08F55556328EAAD352FF6ACE834C798C37581B6ED6C395DBE51FDD17ADB18C68BAFBA0007C3A6922AB63E5614B2DB521090732AB59DA1F26864
Malicious:	false
Reputation:	low
Preview:	! function(factory) {. "function" == typeof define && define.amd ? define(["jquery"], factory) : factory(jQuery).}(function($, undefined) {. var uuid = 0,. slice = Array.prototype.slice,. _cleanData = $.cleanData;. $.cleanData = function(elems) {. for (var elem, i = 0; null != (elem = elems[i]); i++) try {. $(elem).triggerHandler("remove"). } catch (e) {}. _cleanData(elems). };. $.widget = function(name, base, prototype) {. var fullName, existingConstructor, constructor, basePrototype, proxiedPrototype = {},. namespace = name.split(".")[0];. name = name.split(".")[1];. fullName = namespace + "-" + name;. if (!prototype) {. prototype = base;. base = $.Widget. }. $.expr[":"][fullName.toLowerCase()] = function(elem) {. return !!$.data(elem, fullName). };. $[namespace] = $[namespace] \|\| {};. existingConstructor = $[namespace

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	88620
Entropy (8bit):	4.781780745336758
Encrypted:	false
SSDEEP:	1536:o/sg2ASKR+XWEamr0ko7tKg1GPn2hWlxhHbrEnGCV+9MnqVqpsq2dGg2A:Pg2AzmwkoZKg1GPr5V6i
MD5:	99DDEE7E36FBC6CBE0E8ABF793585BB0
SHA1:	ADB180F2EC40D4E9C87B75F0DD509E041A2AA62E
SHA-256:	9B2FEA2608018C6F89A1A47D3144A460CF84A71564C5944D9F728E0ECF9E97BE
SHA-512:	8F32F416F3E20ED5DE7F6A365D925681A1295408A1AAAB994FFB53F3DA8255AC55B87C09FF50C5709FBC4C1317A654895C4F202DB54052FF8B8F6D2A1E91B1F8
Malicious:	false
Reputation:	low
Preview:	/. html2canvas 0.4.1 <http://html2canvas.hertzen.com>. Copyright (c) 2013 Niklas von Hertzen.. Released under MIT License./..(function(window, document, undefined){.."use strict";..var _html2canvas = {},.previousElement,.computedCSS,.html2canvas;.._html2canvas.Util = {};.._html2canvas.Util.log = function(a) {. if (_html2canvas.logging && window.console && window.console.log) {. window.console.log(a);. }.};.._html2canvas.Util.trimText = (function(isNative){. return function(input) {. return isNative ? isNative.apply(input) : ((input \|\| '') + '').replace( /^\s+\|\s+$/g , '' );. };.})(String.prototype.trim);.._html2canvas.Util.asFloat = function(v) {. return parseFloat(v);.};..(function() {. // TODO: support all possible length values. var TEXT_SHADOW_PROPERTY = /((rgba\|rgb)$[^$]+\)(\s-?\d+px){0,})/g;. var TEXT_SHADOW_VALUES = /(-?\d+px)\|(#.+)\|(rgb$.+$)\|(rgba$.+$)/g;. _html2canvas.Util.parseTextShadows = function (value) {. if (!value \|\| value === 'none') {.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
URL:	http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjQ4OS4wODgyOmEwNzlhMjRjNWI5ZWUwN2YzNmI3NTcyMDcxYjkzZWUwNGJlMDkzNThmNWZhMmJkYWRkMzIxZTNkYzRmMjVmMzc6NjcwMWJhNTkxNTg2MA%3D%3D
Preview:	....................

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 55734
Category:	downloaded
Size (bytes):	17138
Entropy (8bit):	7.985486819045762
Encrypted:	false
SSDEEP:	384:1bXp9pe0GiXw9f00mCbhwBnI9gX4yCq0Pj3IBaINXBUw:15MHmCbhwjCBEBFX6w
MD5:	732769F238A36CB44705F2D6A18312EE
SHA1:	4145A129B7285EF794924619940D72DB4C03F1A0
SHA-256:	AC450BC0F8F949594349262A4F1AFCCD1B1B2DB4B8AE231BEB3D23F673120035
SHA-512:	4AE2753606AC2DC30D53DDC78FE1D233ADC8F2DA8727629A73F8B28B9EA2B458511043F38ACFA8EBEFAFBCA2D92F9B3EE1B80761C1C892DE6BFA2D0E19C375D5
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/main.js
Preview:	............v.F.'..<..>c.-...B..8.d.3r.....u. ...!......\k.d....{....W...U...)..;.V.{ED.P.k............6...\|T..#3...i....w...QvZ.._...N.Q>.TWm6.o.iq1...de....qD..2....(..,...m).....<..}U.E9.'y^..,_.V.b.LGO...@{..9/..L{.._~<....~..w?~......@..o.EYW... .O.3s.,.......1......>;M..K.......!0...i&us{...;........ib.....:J...j.`V.H........H.6r.N.T..l^kGc.H.....MU..eQ......d...brQ&...(..t.[^..W.L.1Vw.~.O.h{f8.o......ym.RP-..,.iY.sC{.&.^2.5.,...G.V.jw..]..b......(.4.(........?..Yz...jzU'....n.-.7..h.....:{..Sk#&If.Vh.....F5....I..W.+..tc.t+........#.-.R...8....d....v......<Lb.....w...].n.j..ak6..&.3}...X;...!..ww[.lY..i.......u.K.S..L.E..u.O.N=. .3..........7...N^~......W.........99.c].W..~Y..b..eUo.o...j...A... ....Q....f.9.J.g..eR_......O..X.s..Qo...K.evVzU.kP.D[....<...;5V..C.oWS..e....."J).z..f.........\...w.r9-.ER'..6.yZUS..R..z.....}.........O.....7...;..<.....(Mt,.].y...7i.<..).Nl.=m.....d..U.M^.S.Z/.Z...]#....b..}..&?:...j].U

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33973)
Category:	downloaded
Size (bytes):	173538
Entropy (8bit):	6.036429797070209
Encrypted:	false
SSDEEP:	3072:uVaKDQm555YRuIXGn3L2gPw/17NWYDKNTpnLHn1RPlJe/DEMmJFi+0eCV0GKBK8:uVaJm+dG3LxeKNlBR9ugmPVc
MD5:	7164E18F9DAC40327124ECC293A0FFFF
SHA1:	8FD8921305AB1288119D7AAB34485D22052128CD
SHA-256:	9A83617248C7D077A0704B025DFE4CC51002E956742A911942AFCDAD72855BE0
SHA-512:	51360AD728ED71B3776B7FD1EC6A707B0ED9894262323F378AF69444851169B20D5CB41B90D277BC3651B79E32C75692C7522660135202EB1DBD96C6DE2A0766
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/proxima_nova/css/fonts.css
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . proxima-nova:. * - http://typekit.com/eulas/00000000000000003b9b3068. * - http://typekit.com/eulas/00000000000000003b9b3069. * - http://typekit.com/eulas/00000000000000003b9b3066. * - http://typekit.com/eulas/00000000000000003b9b3067. * - http://typekit.com/eulas/00000000000000003b9b3062. * - http://typekit.com/eulas/00000000000000003b9b3063. * - http://typekit.com/eulas/00000000000000003b9b3064. * - http://typekit.com/eulas/00000000000000003b9b3065. . . 2009-2021 Adobe Systems Incorporated. All Rights Reserved.. /./{"last_published":"2020-06-09 21:07:28 UTC"}*/..@font-face {. font-family:"proxima-nova";. src:url('data:font/woff2;charset=utf-8;base64,d09GMgABAAAAAGNUABAAAAABD7QAAGLwAAEAAAAAAAAAAAAAAAAAAAAAAAAA

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	5737
Entropy (8bit):	4.979162124701355
Encrypted:	false
SSDEEP:	96:ahThdXlgX3JXzGXXQMX49oaAfFh6lUJDHQ+XY/9MaXL/9rXLe98OCjQJd1Ujaqlt:AThVlS3ZzGHQWaoaOr6lUJDHQoY1tL1b
MD5:	67890C76C9E42CC8A837C78BAD187A4C
SHA1:	3A51355B634918D85FA48ECFF9B58F2FACBD9A0A
SHA-256:	2E52C4D3E8C2A76F68AEEF85DBE6C2A513DB7FD5ED344C56F1E0B3B6AC821AC7
SHA-512:	7966AA893C1436F7B5299F93CD7B8ED3F141CAEAA8F828855E5D469280CAC4191036CB97F7615F68C320DE0591A06E65C039007AF231A942FB45B4544FAA7EFB
Malicious:	false
Reputation:	low
Preview:	// src/webauthn-json/base64url.ts.function base64urlToBuffer(baseurl64String) {. const padding = "==".slice(0, (4 - baseurl64String.length % 4) % 4);. const base64String = baseurl64String.replace(/-/g, "+").replace(/_/g, "/") + padding;. const str = atob(base64String);. const buffer = new ArrayBuffer(str.length);. const byteView = new Uint8Array(buffer);. for (let i = 0; i < str.length; i++) {. byteView[i] = str.charCodeAt(i);. }. return buffer;.}.function bufferToBase64url(buffer) {. const byteView = new Uint8Array(buffer);. let str = "";. for (const charCode of byteView) {. str += String.fromCharCode(charCode);. }. const base64String = btoa(str);. const base64urlString = base64String.replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");. return base64urlString;.}..// src/webauthn-json/convert.ts.var copyValue = "copy";.var convertValue = "convert";.function convert(conversionFn, schema2, input) {. if (schema2 === copyValue) {. return input;. }. if (sch

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	588
Entropy (8bit):	7.558164450699112
Encrypted:	false
SSDEEP:	12:6v/7htxOuz6YdHq/T4HskLkYLzZfsStkxhEvMHe6eTqFqgL/1:oB2qHsT4HskLzZfhc+6eTqFqe1
MD5:	8020DED5A5AC2103A40C7221ADDB6B39
SHA1:	C2D3365FF1F70F44FF519E6849502F3D0E9FFA31
SHA-256:	D6D6AADD80264CF30A2D08811B09F3AF068B4CF95B1E12002F03BF537153A7ED
SHA-512:	DBC1D9CC2B3AD79BFB4B25AFF7EF0737BE9D198D5D3C2573D76354E4F693A759B0BC430AF060007ED9149009980A4B53FF8A58A0625FB548E354BCFDD50469B7
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/mainsite2023/icon_app_store_android_page.png
Preview:	.PNG........IHDR...(...(........m....IDATx^.1K.1.....E.@..@....upS........v.cA...N......w.p89..b..9NI.$.">H.../..^.^....-YNdIei.29p.....l.R4E...,.:`Hp..L.H~...R.. .........X.....\tV........F,,v.......~V..p.`..`gu...w....8.\|....t5...iV.v7.1..le.+...O.D.^...).=...i...m...A..C.W..h.... &.n'."..........b..M.Q.T;nf.....D....I....@.kU.....:E.u...HU.Gr..6FR._.".....c/1.].k$.....M...............`..Am..2 ...D.......T..(d@.....0&...\.=.o.6...?.a.,c...!...<.z).N.u.q.xy..S...Ug,..2.&.66[..@...z'.}......t3......@L.1...0.h...;/.k.E.R.&_..r\|.\K1}...cMq.J....IEND.B`.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	886
Entropy (8bit):	7.50137186506717
Encrypted:	false
SSDEEP:	12:6v/727/+/FOtSz48JKQenD9lXN2bAgWNrSu0gQv8p9gw7DdVuXR0gj0gj0gEAV/:eNOn8LeRIMrSUQvg9gw7X0
MD5:	BDC0AA5546F9E77E04DBC734B34FF815
SHA1:	6ADAD54C0CFA4ECB3EDEBB0C0F59A2E6E6EAE1A0
SHA-256:	6A1D96681EA0BBA30DD4F3C6A257FAA8CE78CF30B8C5426C64BF40322CEFA514
SHA-512:	7BD6AC4465BDDCCB04D9132EC36A3E1B227E72F41FE939971949D3889295F3AAF9D190D3BB3D380457A2C059EE6B558F0927425165DC09681544EAADF2B9F577
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T....pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx...mN.A...g..P.I..)..z...H../..... ....M. x.........h"I_.;..7jf....,<..&v...w..S( """""""""""""""!.ySo...%......-....MX..."..a..1r&?A.\|."..q.:..j.m....... {nD.8.3.r.&..Z.9b{r......t..r.#...M^b...Y\.)..2n.k.............;.`.pr..X...~..~.z......X.z[.2.Y.k..._.._..-..\...#..V.1.t.}.[..Ew.?...b........).OU.....<...[/...$y.3+.....d...d%eO.......(....r........!...v....1I..m.....~...."<A.\....N.....Z...h?\|..2....I5......m.Q...%n-.]....Aj..] ..9..B?J......s....J...+..z.c.v....L.$H..$.$.b...-\|E.E.A.#HdK.>....HA.(...!. df....5X._...~.........a&z../(O.^.....K.9dm.w..I......O.8..,T.....O......._....W.A.kT...d.o.:..!. d.....Q.2.BFA.(...!. d.....Q.2.BFA.(...!. d.....Q.2.BFA.(...!. d.....Q.2.B&. .\|...d...zh......ng..q..,.....'.EX.................7?..3..U......IEND.B`.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	308
Entropy (8bit):	7.122744111197635
Encrypted:	false
SSDEEP:	6:6v/lhP9pFSkdSX6eRLbs8FmtazsyD05UxFlAD4AuDPZeup:6v/71tSXZJ7/zpxFlaip
MD5:	C1BC03D244A98509D93055D3418CAE6D
SHA1:	A88E65FEE0316E1E2F2DE37F3DBA9BF3E409D787
SHA-256:	5EF3979B14323A09381CD9344EAE9966FA1948115C49FFB61CB45678ADECF1B1
SHA-512:	E70ED089441D1F4A64BF7A02B8CF4DF2C2F685EC085E8341B7C7D2D887E831AE72D7F5C0966ADB4D777DE3A9E8C0B571DEB39DF4659D0E4EB97E55FE480C685E
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/icon-twitter-nav-side.png
Preview:	.PNG........IHDR.............../\....IDATx^..m..0..+..H@....HA....$L........$.r...w.nm..M...r..x..s..w.{....`...~.......6.u.....a..q.9Z..a.1.l.cv.d.AU.N\BD....T..1...bH..J#.l.G..gY...3V.=..d=.CQ.hk..eM..z....8T .......D.Y....!Ki...4[.IA...........EX....nH..AQ2q..[l..&.Q_.o...#m~...(...R....IEND.B`.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	dropped
Size (bytes):	7658
Entropy (8bit):	4.522752875740715
Encrypted:	false
SSDEEP:	192:C+bQa4folOsdemssQWsPWEsKBsvcJEHE2lQzVJ8X/9khSyE0fsYmCMs4dsylpIyl:CaV8s4szsfsWscEHE22zdsYQsEsyluiD
MD5:	8378E3B04B74705C10D7F62C1B36106E
SHA1:	AD8E2F29DB5BBD175A5E46D6D6E4E239563352A5
SHA-256:	DBC3E07253DDD7302BDC17D65C45925402B2C5256528D9E27FD0CEFAECD27066
SHA-512:	14CCB40A451214CB301C65B00B97B2184714E99FA0403F6680CED9B8AD97DD0BC292C986EEE262F1162D53129EACE18B511147EE39E90C3716EE859B15D8D492
Malicious:	false
Reputation:	low
Preview:	import * as webauthnJson from "./webauthn-json.js";..let ceremonyState = {};..if ($.DynaCP === undefined) {. $.DynaCP = {};.}.$.DynaCP.Yubico = {};..function rejected(err) {. $('#yubico-singin-error-msg').show();. window.setInterval(retryAuthenticate, 1000);. return new Promise((resolve, reject) => reject(err));.}..function retryAuthenticate() {. var countTime = $('#yubico-retry-count');. if (countTime.html() === '0') {. window.location.reload();. } else {. countTime.html(countTime.html() - 1);. }.}..function getRegisterRequest(urls, requireResidentKey, url,) {. return fetch(url, {. body: new URLSearchParams({. command: 'register',. requireResidentKey,. }),. method: 'POST',. }).then(response => response.json());.}..function executeRegisterRequest(request) {. return webauthnJson.create({publicKey: request.publicKeyCredentialCreationOptions});.}..function submitResponse(url, request, response, comma

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13303
Entropy (8bit):	5.0807540925994505
Encrypted:	false
SSDEEP:	384:bXFHTKPQu7MvLI0iLE0lFsVYRTtBAk5qL+I:bX5TbQALI0izFsVYRTtBA+qL1
MD5:	8D789865706B836368EC28C72D55F151
SHA1:	860262004F4C13D5A86BD36FA81EA23D6E563E40
SHA-256:	12B88017F2579167CDE35DBCC1A6B519CE39EC971EFA533AADF10EF1BB53DAC5
SHA-512:	509DBB0DA117EE0AE4CBA4FA2C747D626B6735B595C5F402C8A443C1B5065F6CFA890804F7AEAAE2E7EDACED239C49D940B4E7DB7A20D821CAFF0A32B9E3B892
Malicious:	false
Reputation:	low
Preview:	{"businessUnit":{"stars":4.0,"trustScore":4.1,"displayName":"Dynadot","numberOfReviews":{"total":1241,"oneStar":217,"twoStars":26,"threeStars":28,"fourStars":76,"fiveStars":894},"websiteUrl":"https://www.dynadot.com/","identifyingName":"dynadot.com"},"businessEntity":{"stars":4.0,"trustScore":4.1,"displayName":"Dynadot","numberOfReviews":{"total":1241,"oneStar":217,"twoStars":26,"threeStars":28,"fourStars":76,"fiveStars":894},"websiteUrl":"https://www.dynadot.com/","identifyingName":"dynadot.com"},"reviews":[{"stars":5,"createdAt":"2024-01-09T05:46:39Z","title":"Solid and Dependable with Great Bulk Pricing -- 15+ year customer","text":"I moved the vast majority of my domains to Dynadot in 2008 and I still don't regret it. Since the day I signed up they've been solid and dependable, and if you spend over $500/year with them you get great bulk pricing.","reviewUrl":"https://www.trustpilot.com/reviews/659cc19ea577b061ee000bfe","language":"en","verification":{"createdAt":"2024-01-09T05:46:

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	18166
Entropy (8bit):	7.977855821586262
Encrypted:	false
SSDEEP:	384:XiE67+HkA4UerW2+wAUFS1RzAUrMB7JigtqAyVyxVXr:XiN+HX92bLofe7JirgxBr
MD5:	18B6F99EBFFB264B4273485668A59741
SHA1:	93260DE60C506FEEE59B765750109BF0C8787EDD
SHA-256:	42A7E676EDE01F55C413EF0A5FC50D35B60932B13307AFC922564C59426BF7E8
SHA-512:	B97B6E4B4155BFE49761BAC6BBA9140E6603A4D2EA8EA964516D9661257065F2D787A64E0FD0C64492FC9231ECF2FAA81AE6E8A88E0C49962530A697E2C35A13
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/home/professional-email.webp
Preview:	RIFF.F..WEBPVP8X..............ALPH.....W`........u....t..[.&I.$..$G....r. I..@#v.`..37 $...%,h.....D..@.".....;...B.2e.@P.....t...r..:..\.)...........f.....C..d.).F=..a..s.S.f8#....{t.9.N1.O.i.[.T..P...3X.)P.......f.L../.S?.........@....2a .7.q.?Ynd9...7\|...`t.AoM.+..Z.:g@'0.O.Dma....9}t..&....OW.3.7.Lcq..!...st`>S.>>k..9... ...Z...4AM....@.'.rFoA.....d..i........i.k..p..j...uM.\...)H.....b... ..\@`p.$..<.y....u..\|........Q3....B...v.]\c..u.@.55......`~....g..F.5~..L3j.........H.T....K....Z3....r1.e....r.......D....`0...50.r.?...Z-G.w...{./.$...t.L..f........i9Pc.4!..........L.....#..d5...~).~.L....h..V#ZM.S..I...D..]$.&_o4...Z........w1_.(.a...2..\|[..7.PO.T...vQ..S..t.....ra../h\....c....D.t.aS.\|.M.;.$T..S.j:z.pY..Q..i.....O......tj.f(..Z.4..u..f.K'.....'..c0_..e(......].7.>...3.B.u&....q...P..Gg@-#S?.?.u.......&:..i...t._}u\.<...i.....h..s...._.q...0j..0.3.........p..o&....S.@...uU%.%.U.U.......!.DUA.P.%((.....BP.. .@.5..S=.......

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	573
Entropy (8bit):	7.494443697114778
Encrypted:	false
SSDEEP:	12:6v/7GzINWjn5BJqlZNK/x7QG8ausW7FORpfpjwNzbRFqU:sNm9MKJV8apAcSNfX
MD5:	FA62327A3CF6C5E124CA7563394A4079
SHA1:	1DED88C8992B19C2E493CB64DC829DB04C8E11E6
SHA-256:	8BA86847DA3CED51E3253D8C541BF3E54B062153A4B010AFE167D4EB17F6A9E5
SHA-512:	CA3B81E22AAABA85BAB324565D94A9C4EF7CACD8F73B52D1581C83C02E4F951102A7D3A2D078D3E284B0715C0D50C32DA6E5C719678135551BB1A93DFBB7E79D
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/mainsite2023/icon_google_play_store_android_page.png
Preview:	.PNG........IHDR...(...(........m....IDATx^..;N.0...H\ ............!....h7:v.c.0...Jto...11......W.q..$..6.:?.~)i..%.X..5.9.M.%.q&L.o~..s.Js_X:2.M8.)M.G..A[...D..5...:.....[..5R.#........v.../..u&#p\|{.d$.g...F @..?.8.;.$`.....fw..Z...B.\,.....?...dH....D.c..$g ........mE......(..d."y....l3......@.....be...2.}N4..9u..tU/..CR.n.&7.I.,.r....2....A..>W......0.n}....H.H...h...6..X.S..0Q.g ..~f;1..u..p8O..T.n..X.C?.O.t.q>f.,......,.....z....a...gJ.7..!ym.D[.L .@\8.Om.....:.s$ ..X.l.0.U......A..b......E.;x.[l.Kt.......#T.Os........?W..8.....IEND.B`.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	20928
Entropy (8bit):	7.950823678715601
Encrypted:	false
SSDEEP:	384:HwTrumbnCXaI5PccuY2l9qAtDfkqrRAeo4DB9T2v9wl219BTjKc2zcf:QTruInQaWJJ2l9qA9vOeoaIwlWrTq0
MD5:	2D61028FDD5DDAAD57EAE399C8718116
SHA1:	53D39C39D55C50053CF3D65632C0F43A162376F6
SHA-256:	9532BFCF6BE4A91CDF2AA4499C45A51CAD48BC73A4415BF773207EDE1B855B68
SHA-512:	926105C25AA368736ECF0F28781BBB82F858AD98354934727F6BE21F66599FE89686EAB20A4CF493C5438798565CDBBE914CECB1415254A73521DD71FEF497A4
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/domain/logo/me-banner1720419767.webp
Preview:	RIFF.Q..WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.....$.m.9......#b.8../........'bi...S.m.n......... f`3H.t.A.A0.................#B.$Ir...n.`.q..vz?....mC..N..8(U...P@P@P@P.D.N..;.p..-M!.\.e........m.#[....b.;>@....%.5..A. b.BM........?...h.P.s..2......?........?........?........?.........0.P...Ki..T1kK.=DR.EJ ....}G..>.7.('ovI[!M....w"".L..o..[...B.z.Mv..M....c..oW%...@A.^5.]\|m=>.S...AC'..$mf.....~..#"..E.......X........b........z...@....Xz^<.ESL.$....A.)..0.%...a..s.i.n.....>.....D.....Xb...."...\|.`2..<B?.....7]~.....

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 14 tables, 1st "OS/2", 16 names, Macintosh, Copyright c 1993 - Roger White - All Rights Reserved - see .txt file for terms for distributio
Category:	downloaded
Size (bytes):	52340
Entropy (8bit):	6.376214224342879
Encrypted:	false
SSDEEP:	1536:9g1RnHyBvLZoQ66QlioiS9bmcc2O6n/qneyY:GJQ0lio9dNRyY
MD5:	3786AB4AE5950B1EB20EE450D7292755
SHA1:	DA8AFA939D248746AC8637BED9659E851697876D
SHA-256:	02D39B0177F6F3FEF3A72C1CA27CE3DC66F276AD74E72D622014DE79D3446A5E
SHA-512:	334E51ED3C0B69F665534D795ACA961C89F880EC1102323D36C7F77DB6FE36678D2A18E6ABF81EB6931249B074E6D5300FD5E52394DECAF974EF4087B19424E2
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/swansea/fonts/SwanseaBold-D0ox.ttf
Preview:	...........`OS/2\.y:.......Ncmap...&...\|....cvt .U.........Hfpgm.\|.z...(....glyf.......4....headb.C....<...6hhea...........$hmtx......t...Lkern.......(....loca.?x....$...Pmaxp........... nameG)^F...h....post...........\|prep.}\....................2..................................................................................... .!.".#.$.%.&.'.(.).*.+.,.-.../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.Z.[.\.].^._.`.a.b.c.d.e.f.g.h.i.j.k.l.m.n.o.p.q.r.s.t.u.v.w.x.y.z.{.\|.}.~...........................................................................................................................................................................space.exclam.quotedbl.numbersign.dollar.percent.ampersand.quotesingle.parenleft.parenright.asterisk.plus.comma.hyphen.period.slash.zero.one.two.three.four.five.six.seven.eight.nine.colon.semicolon.less.equal.greater.question.at.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.Z.bracketleft.backslash.brack

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	12831
Entropy (8bit):	4.806871850914926
Encrypted:	false
SSDEEP:	192:11VKxoKNVdcRV+2Q2ru42FRFw4b+QjtnAmuhnXqXQQZnsPnanXgKK2581yNLY+2P:sw4tpuZoQnM/LcsAXUWqqauc5zPfYD
MD5:	30C67D9F7CD2F344F107A49B2AF53B0B
SHA1:	CE1F4D74BACE0DCCE66106FF27E70C344DE29924
SHA-256:	EE67B98F538D32C47009A7FFFDC66C9C35D4294CDF1C75F8586C9CAAB2C98E5A
SHA-512:	369E8CB479D0287D09A319F418BCD1986BFDEF2342BCBA1E98D90E306BC5D80410D4C82979552193D35B69A9ABF5FCFD1DD6BD9B3BA620AC17835B2CE9CD6615
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function () {. initPageStyle();. initTldAdsClick();. initHotAuctionClick();. initRegisterAndTransferButton();. initAnimateEvent();. initDoMoreWithDynadot();. initDomainSuggestionLoad();. domainSearchFormSubmit();. $(window).resize(initPageStyle);.});..function displayDoMoreBlock1() {. $(".do-more-block1").removeClass("block-inactive");. $(".do-more-block2").addClass("block-inactive");. $(".do-more-block3").addClass("block-inactive");. $(".block-bottom1").slideDown();. $(".block-bottom2").slideUp();. $(".block-bottom3").slideUp();. $(".block-img1").fadeIn();. $(".block-img2").hide();. $(".block-img3").hide();. $("#current_block").val("1");.}..function displayDoMoreBlock2() {. $(".do-more-block1").addClass("block-inactive");. $(".do-more-block2").removeClass("block-inactive");. $(".do-more-block3").addClass("block-inactive");. $(".block-bottom1").slideUp();. $(".block-bottom2").slideDown();. $(".

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21924)
Category:	downloaded
Size (bytes):	21977
Entropy (8bit):	5.2374999357024965
Encrypted:	false
SSDEEP:	384:BzP7G3iA2VmwqU3o+Vxfz3y2uyeVdPkmsuyqAGB+WVYJv5Uep/FR69f:BzP75A/wqU3o+bz3y2uyKAqAxJvCoTYf
MD5:	D827E4237EDCFE58A530CF8021154F67
SHA1:	B139E7DED09584E6B17DC8DCE930350223865ACE
SHA-256:	02E5BF47B2473C1DA7A39A25B14F0F5D9857142842D33DEF047E492F9F610CB9
SHA-512:	E7778F10CB8745A720290DF0B4B50AA35DC3C5F63B714A9DCE9D8925304D794A5BE732D0AAFF20B0C2E71F2A8536B7B44836CB93849EF3778EB2CADF78F42AEA
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tp.widget.bootstrap.min.js
Preview:	!function n(o,s,r){function a(t,e){if(!s[t]){if(!o[t]){var i="function"==typeof require&&require;if(!e&&i)return i(t,!0);if(l)return l(t,!0);throw(e=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",e}i=s[t]={exports:{}},o[t][0].call(i.exports,function(e){return a(o[t][1][e]\|\|e)},i,i.exports,n,o,s,r)}return s[t].exports}for(var l="function"==typeof require&&require,e=0;e<r.length;e++)a(r[e]);return a}({1:[function(e,t,i){"use strict";Object.defineProperty(i,"__esModule",{value:!0});i.EMPTY_WIDGET_ID="000000000000000000000000",i.LAZY_LOADED_WIDGETS=["54d39695764ea907c0f34825","577258fb31f02306e4e3aaf9"]},{}],2:[function(e,t,i){"use strict";function n(e,t){for(var i=0;i<t.length;i++){var n=t[i];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}Object.defineProperty(i,"__esModule",{value:!0});(function(e,t,i){t&&n(e.prototype,t),i&&n(e,i)})(s,[{key:"mutationHandler",value:function(d){var e=!0,t=!1,i=void 0;try{for

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (384), with no line terminators
Category:	dropped
Size (bytes):	384
Entropy (8bit):	5.51596131752965
Encrypted:	false
SSDEEP:	6:xWzP8pwZas8YsP9wdt8DV2Q6PYRXPAfI67M+dhLNs8YsP9hnCAWudV2Q6PYRXPAd:xWX8nP9w/8D7V27HhL68nP9ZCBS7V27n
MD5:	EF6F976B9BAA5AE55D865F4D4520F571
SHA1:	E20F8C4FCCEBD4276EBCB2495D7EB7F15279AC47
SHA-256:	2AF22BB31C55ACFDDF8A8FB3263EF0CD73382907C97BCD96733535F9E1392B82
SHA-512:	A903AF2DD2CECCE3D36217DFCF7EFD0E7B442F61587F49C571FE8E5E09206ECF5DE0C74C008C8F83DFFA6C42AC3530037250F1456FD63FB06DE033DFCF6CFF05
Malicious:	false
Reputation:	low
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=ce0ff5ec11623eb6:T=1728166494:RT=1728166494:S=ALNI_MZv9I0_vyOHsEtCGVRSdhl1KZanqw","_expires_":1761862494,"_path_":"/","_domain_":"cstrikehost.com","_version_":1},{"_value_":"UID=00000f02fffd5eb5:T=1728166494:RT=1728166494:S=ALNI_MYAO88HXOMzRMX2SSljygyYj8dU_w","_expires_":1761862494,"_path_":"/","_domain_":"cstrikehost.com","_version_":2}]});

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 15598
Category:	downloaded
Size (bytes):	5853
Entropy (8bit):	7.963819142303873
Encrypted:	false
SSDEEP:	96:xvJzGAGRV0Y0rDyCI0a+tdI71n8OjbkMlrfhU3UNq5BD+G6a8pVwXkImx4ypSlgd:PzGAG2mCIa3VsbrfhxEjD+Za8pVEkImR
MD5:	067899FA4B5CADB0470F44CD2573456F
SHA1:	EEC2331F829B2FB34C9E1215DEFB05DBE70B7160
SHA-256:	9761873EB1FB93927D58C220549E14E641DADAFC57CDF49D778048FF5EF549CB
SHA-512:	46A866448F0EBD640211A456572CA256A8CE9C27835A2EC1C567569841BEC5EF3829D9D42DFC38799AE592DEA4299D771CCEFFF6BCD3E78521DFBA1B4FF5C804
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Signal+Relief+Patch&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&pcsa=false&nb=0
Preview:	...........[iw.H....WT.y..f.Xl...6^. v..s29B@ $Z.....<.J.bq..{....j.u.{.Vq...<m.?...?........e4.c9.p..D.\|:...?:OW.g.Q.9;9...L../..._'....\.J.{.y...7k.G..q}^\|..?..K{..s..4..k]{.=..o.........^K7.k.s..Q-.O..j..R.....C..i4R..<...i.i.X:....[.....Q....3.......y.]P....x.h.m.....y..8...8.f#......r..t.............#.,..U..N...f.o1......q.8......c...3...'...*.....A:dz_s=.W&~7SN..lm.+.g.O...OM..W..l.<#^..M....k...i..]..f\|'.5...D.}......9.}..3:..fA......g#n.Z%.....f5..~.\|.U.o[..h...:..8`..J%s9.P.{.m.{...$.[... =ks?....{9....8..M.0..\|.5..`.w...%h;`ja<.[......x5Loli...n.6...<.z..!..EH..'.......=...spwH..5.0.^...Kb v{..{.....v@.....&A36...g.nh.t.\|.6YL...b..>....:.O\.q...oB.SG..3...).z..J.v@.c..U..........<...6...c.3"%../T.\|Q.h...k.Z.w.]..0.....}.9.D..L....2S...~..@!.j.9...\(3r^6.l..z..y.........}.!......`@.......C1....t..i.F=..2.wM.LP.<5..A...S.../.@u.HJ.........n&.(.".P.r..}.0.-....i..X..."...+eK+ke.zr.Bk%..@..:6.J..W;.^f..Cn.q..I..9....

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (19525)
Category:	downloaded
Size (bytes):	36429
Entropy (8bit):	5.374718971602118
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDC8xUJFdMLBl0tmKOuj4G36I7IlfQsIGbOB:2iIP/z9og7mLOmO6YPB
MD5:	DFA57300F9186DAFBFE8CF75DB84F769
SHA1:	AD27094EE351B5369D64087ACDA934D8C0D9A57F
SHA-256:	C09B71EFA5A780072BB5D2EDFD3F69C91E936CB7DB30F1328D850880A414ADB9
SHA-512:	329D316E2B176CF848E3CED751353D5728AB7A8DFBFBEB4DFC20B8D336883698B52737570FBCF78EFCF9F23ACF4AB3744933D25B0A1391B276DA7CB0DAA2CCC4
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3De088a5f8d1e2e868%3AT%3D1728166492%3ART%3D1728166492%3AS%3DALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NTM5Ljg4MDF8ZmI2ZmE3ZWM1ZjVmMGI1NTI1YTM3MzM0OGUyMGNmNjNkMjdkYjdkYXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2595154941770008&q=Signal%20Relief%20Patch&afdt=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301542%2C17301266%2C72717108&format=n3&ad=n3&nocache=7681728166539369&num=0&output=afd_ads&domain_name=ofinovardweb.cstrikehost.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1728166539370&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=855&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DSignal%2BRelief%2BPatch%26afdToken%3DChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	dropped
Size (bytes):	30366
Entropy (8bit):	5.317834606020379
Encrypted:	false
SSDEEP:	768:so/MPtWU9Ywx3UpxbY/Y3YOgQxnYeYZYHYZYVY+YSYsrqEccBpHzGAnLYDZaX0Du:RIT7hsZwuvLN54WAcl/V
MD5:	94174C7A06813115A524C0C153C369EF
SHA1:	CF1EE4041A812745AA6A94127C3AE651AE464D06
SHA-256:	7ECC6CCD19BB06F2CF6406A99B5693D944524113834A1B55ABA930A04028842B
SHA-512:	7432B39A9478AA60A3FA283E2400F373C0FBFA66FD84FF6C10FBA6627E5F8823FD9044723AA4B604797C558B8416DBEDE87C32B91C1170257032ABF11E4AB540
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	88620
Entropy (8bit):	4.781780745336758
Encrypted:	false
SSDEEP:	1536:o/sg2ASKR+XWEamr0ko7tKg1GPn2hWlxhHbrEnGCV+9MnqVqpsq2dGg2A:Pg2AzmwkoZKg1GPr5V6i
MD5:	99DDEE7E36FBC6CBE0E8ABF793585BB0
SHA1:	ADB180F2EC40D4E9C87B75F0DD509E041A2AA62E
SHA-256:	9B2FEA2608018C6F89A1A47D3144A460CF84A71564C5944D9F728E0ECF9E97BE
SHA-512:	8F32F416F3E20ED5DE7F6A365D925681A1295408A1AAAB994FFB53F3DA8255AC55B87C09FF50C5709FBC4C1317A654895C4F202DB54052FF8B8F6D2A1E91B1F8
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/chat/html2canvas.js
Preview:	/. html2canvas 0.4.1 <http://html2canvas.hertzen.com>. Copyright (c) 2013 Niklas von Hertzen.. Released under MIT License./..(function(window, document, undefined){.."use strict";..var _html2canvas = {},.previousElement,.computedCSS,.html2canvas;.._html2canvas.Util = {};.._html2canvas.Util.log = function(a) {. if (_html2canvas.logging && window.console && window.console.log) {. window.console.log(a);. }.};.._html2canvas.Util.trimText = (function(isNative){. return function(input) {. return isNative ? isNative.apply(input) : ((input \|\| '') + '').replace( /^\s+\|\s+$/g , '' );. };.})(String.prototype.trim);.._html2canvas.Util.asFloat = function(v) {. return parseFloat(v);.};..(function() {. // TODO: support all possible length values. var TEXT_SHADOW_PROPERTY = /((rgba\|rgb)$[^$]+\)(\s-?\d+px){0,})/g;. var TEXT_SHADOW_VALUES = /(-?\d+px)\|(#.+)\|(rgb$.+$)\|(rgba$.+$)/g;. _html2canvas.Util.parseTextShadows = function (value) {. if (!value \|\| value === 'none') {.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	14300
Entropy (8bit):	5.291763375875081
Encrypted:	false
SSDEEP:	192:ijdeQS/URZAzGOMyRbALGPCeVbe+ErGH5jsjV2oJNtXQakw4KRFbGtqsj:6eI3cPnc9rYjixA4ctqE
MD5:	A827F156994A777BF095698485183786
SHA1:	138CC44E90726C29CCD2958EE962EBC0782B1FEC
SHA-256:	54FD345FFB0550D576D383F4CB3EED4C180C89A8F4AAC3079D67075C9E492AE8
SHA-512:	610207D3E7026C74FEB346D10D26EEE97CF3CBC1552AF90F5D33DF944A6B71E7D7DC82ADC47ED7410E664F27E86D89D547FAAD03D40DB5659C85D462E2E10FAA
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function() {..initMakeOffer();..initFinanceLink();..initClick();..moneyNumCheck();.});../*. Initiate events for new make offer btn. */.function moneyNumCheck() {..$(document).on("keyup", ".make-offer-price", function() {...console.log(111);...$(this).val($(this).val().replace(/[^0-9.]/g,''));...let val = $(this).val(),... reg = /(^[1-9]([0-9]+)?(\.[0-9]{1,2})?$)\|(^(0){1}$)\|(^[0-9]\.[0-9]([0-9])?$)/,....btn = $('#add-cart-btn');...if($(this).val().length > 10) {....$(this).val($(this).val().slice(0, 10));...}...if(reg.test(val) && val > 0) {....btn.removeAttr('disabled');....btn.css('background', '#3C92E7');...} else {....btn.attr('disabled', true);....btn.css('background', '#C9D1D9');...}..});....// premium-make-offer-price..$(document).on("keyup", ".premium-make-offer-price", function() {...$(this).val($(this).val().replace(/[^0-9.]/g,''));...if($(this).val().length > 10) {....$(this).val($(this).val().slice(0, 10));...}..});.}..function initClick() {..$(docume

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/ls.php?t=6701ba59&token=20a9dcb4f1b840cc657e23ba927e43c8236a9f0c
Preview:	{"success":true}

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/ls.php?t=6701ba97&token=5e5103d4fe9070980f0937520d54ca580c1fb183
Preview:	{"success":true}

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4165
Entropy (8bit):	5.289678119307705
Encrypted:	false
SSDEEP:	96:ZJIyVx2cgHppbdLGLhosAIN0/ZljDKV9FPut0CQHT6Z:ZyyjvgHg+s4Zs9cbQHTE
MD5:	A5AEE93D7EEC6DF82B3C3F96BCCEB934
SHA1:	55AF00C219B19EF6BF4EE3573C101D204DF33E8B
SHA-256:	B68C8502A141114E63FFE9FD975877DE775FC3AE43B22A6809C5662D054E3ECF
SHA-512:	9D7C805A02C0BD6D35D1023E08E52D102B80F4A292871F1708F1E1D6999073FA55938BC4FB84A8891E4B77E794BC23FBE977A42A647EB93FE8CA08F7A94EF232
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/jquery.cookie.js
Preview:	/!. jQuery Cookie Plugin v1.4.0. * https://github.com/carhartl/jquery-cookie. . Copyright 2013 Klaus Hartl. * Released under the MIT license. */.(function (factory) {..if (typeof define === 'function' && define.amd) {...// AMD. Register as anonymous module....define(['jquery'], factory);..} else {...// Browser globals....factory(jQuery);..}.}(function ($) {...var pluses = /\+/g;...function encode(s) {...return config.raw ? s : encodeURIComponent(s);..}...function decode(s) {...return config.raw ? s : decodeURIComponent(s);..}...function stringifyCookieValue(value) {...return encode(config.json ? JSON.stringify(value) : String(value));..}...function parseCookieValue(s) {...if (s.indexOf('"') === 0) {....// This is a quoted cookie as according to RFC2068, unescape.......s = s.slice(1, -1).replace(/\\"/g, '"').replace(/\\\\/g, '\\');...}....try {....// Replace server-side written pluses with spaces.....// If we can't decode the cookie, ignore it, it's unusable.....s = decodeURICompo

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	163283
Entropy (8bit):	7.99680217293877
Encrypted:	true
SSDEEP:	3072:/dp3XFRVfhm5+hPGVRiqoOGI3E651s3v9vXcoHQTfLTPiamOL:/dpl91PGVs0Ek12XcoHQLP3L
MD5:	55C14143448B0395109FE018A586C773
SHA1:	617D69D836121DE02C89C1AED71EC54A5BC27106
SHA-256:	E4AB338C277BCD0063C1C4CC2376FD6C05BE64EB037EDEFE79842106BD0689F9
SHA-512:	C3F9C28E5E578820101B01424554592BF765B6ADD524A0F74EEF8A113F8147201A7C5D64E21E436AE599F1FF36A6FEFD28FA42D0115C445B6806619CF52C81A0
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/home/buy-and-sell.webp
Preview:	RIFF....WEBPVP8X..............ALPHT......m$)R..n.....=#...m.F....t@4...$q<..'Qg..g..).9...NI....\|/?sA..."..,.;.,...p9G.........3C..U...."0..(d.9...m$GRK.G...}#b.X...a.'Q............dL..V8Rq....e../..t.R.r...."........0.%I.$I.-e.._.`..b.s....[....m.V[..-..8.\.._.......9...R...R@...`.%..T..............h.>..x~..BDH.$9l.F...p.U..@...<.V.-.....P.... ..G...@.@.....~..'..............9.2.........ma.$......uv....O..m..-I.}.`2..Ls-B..$f."Tf...4..QfN2H...{....S..K...>...4.BD..$.$I..2<...N,.@)....3...?.>........../...".)........KAc...7..j..\.\EN.~...!.Z=..Ma.*a.Y.............}..=..s.9.x..>B....h`..#.v....aL\...l....p`..If.7...X%..J~..Z...oy./...O..l.....Bk..'...(..~..M...,"..iG.....jT............FJ7.X.~1`....Lo./x.cCB.e..3q .2P...H.$Rp..."...$...h....Pm>.BE#-:...e...7h.......RCh..B.i(q......wK.....dy;.%f4Y.v.........v.~H90.. ...P.Rf8..J.!&w.+.....Hd@.:...}...}.J....;..x.!.....\.,..v..>..@Y......o...N.PE..0..v.K.8@...,$.b...2o.`{..AI..~p.P.D.;.......=F.....Q~+...q

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15769
Entropy (8bit):	4.421044042020617
Encrypted:	false
SSDEEP:	192:/0f4KDojksC4MnbdfHi1KLEcCSEcISbCQJ2STtCValEywRZOGO/jgca:KDojknJfC/6aR0Za
MD5:	73BA239AD5F820D7FFB0BCFFBF597B08
SHA1:	DEF6A64CC7DDB9D38FE41FDD71A5349065354739
SHA-256:	66928E8639115AE4406EF6745B56255641B478A6427C2822AAD60C1CF3B18088
SHA-512:	48983D4966C4F030F211D8A02A5739EE49EA353254C673C7A5628400D3EAFD7C40BD53ECD6674ADE852B041EE446469AFB9D9ADD0B2EA7D5312BF072D087B185
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/megaMenu.js
Preview:	(function () {.. if ($.MegaMenu === undefined) {. $.MegaMenu = {};. }. // this function is async, if you need it sync, use $.parseJSON(json) with try catch. if ($.MegaMenu.parseJson === undefined) {. $.MegaMenu.parseJson = function (json) {. return new Promise(function (resolve, reject) {. try {. resolve($.parseJSON(json)). } catch (e) {. reject(e). }. }). }. }.. function initDropdownMenu() {. let $nav_bar = $(".new-navbar-scroll");. let $site = $(".site-dropdown");. let $nav = $(".new-navbar-default");. let $sub = $(".sub-navbar-dropdown");. // element. let domain = $sub.children().children().eq(0);. let afterMarket = $sub.children().children().eq(1);. let support = $sub.children().children().eq(2);. // icon. let domain_icon = $("#Domains").children().children();. let

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10360)
Category:	downloaded
Size (bytes):	10453
Entropy (8bit):	5.089704510744486
Encrypted:	false
SSDEEP:	192:kLR/hkAisAHf4Lys153p17zoWsBqwuLJLHg4LyTByIMOTorA:kLR/vhp3MWsBq9LJFgByVrA
MD5:	AF8AB36589315582CCDD82F22E84BFFB
SHA1:	6371EC0A8E242395C7D4D008D2B98E472C9DCC52
SHA-256:	8A7739925F4C03586479852DF840B7061948832A7FDA30C8C812D2EA4DD4C4F2
SHA-512:	843586CA1F88CB832BF401CECD43F6F98D2254F9FF070C716A84A57848C7FE2D68E0455317FB21D3F0354B28A2F0F58E69EFAE3EBF93FCA1F0CA7A1E6D2B8087
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/domain/clipboard.min.js
Preview:	/!. clipboard.js v2.0.6. * https://clipboardjs.com/. * . * Licensed MIT . Zeno Rocha. */.!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.ClipboardJS=e():t.ClipboardJS=e()}(this,function(){return o={},r.m=n=[function(t,e){t.exports=function(t){var e;if("SELECT"===t.nodeName)t.focus(),e=t.value;else if("INPUT"===t.nodeName\|\|"TEXTAREA"===t.nodeName){var n=t.hasAttribute("readonly");n\|\|t.setAttribute("readonly",""),t.select(),t.setSelectionRange(0,t.value.length),n\|\|t.removeAttribute("readonly"),e=t.value}else{t.hasAttribute("contenteditable")&&t.focus();var o=window.getSelection(),r=document.createRange();r.selectNodeContents(t),o.removeAllRanges(),o.addRange(r),e=o.toString()}return e}},function(t,e){function n(){}n.prototype={on:function(t,e,n){var o=this.e\|\|(this.e={});return(o[t]\|\|(o[t]=[])).push({fn:e,ctx:n}),this},once:function(t,e,n){var o=this;function r(){o.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (666)
Category:	downloaded
Size (bytes):	33972
Entropy (8bit):	4.715238032167002
Encrypted:	false
SSDEEP:	768:pF3uFTTKAFPwFNF+FjBjvpvU0xamavH/PIZFKFERPP7QaFNX1U92zDzA:pktTKAFwT4BBjxRam82RPP7QaD1UUzD8
MD5:	F8DAE6229B9016255E68CE39034D3818
SHA1:	241725104945320CB35CEAE99ADCBFD2B0B07F14
SHA-256:	2DCA278701738D7611787BB53F8D21462D1F909C4D24DF5E1BF82018AB54EE4C
SHA-512:	821BD06E61A261C5C00D040FF92DC7B6541D7B73BBC50F792030A99E64F3DB91B153D0EF4F54786936539E21D307864F4AD4E30348E44FBE3665BFBABE79A7C0
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/megaMenu.css
Preview:	.mega-menu-container ul {. list-style: none;.}..button {. font-family: "Switzer", sans-serif;. font-style: normal;. font-weight: 400;. font-size: 14px;. line-height: 18px;. transition: 0.5s;.}..div.head-account-menu-signout>li {. color: #031242;. display: flex;. align-items: center;.}...badge-v2 {. display: inline-flex;. flex-direction: row;. align-items: center;. justify-content: center;. padding: 0 8px;. gap: 4px;. min-width: 62px;. height: fit-content;. min-height: 20px;. border-radius: 15px;. font-style: normal;. font-weight: 600;. font-size: 12px;. line-height: 16px;.}...btn.active, .btn:active {. background-image: none;. outline: 0;. -webkit-box-shadow: none;. box-shadow: none;.}...btn.active.focus, .btn.active:focus, .btn.focus, .btn:active.focus, .btn:active:focus, .btn:focus {. outline: none;. outline-offset: 0;.}../** button default dark */..btn-default-dark {. display: inline-flex;.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10048
Entropy (8bit):	7.907340439223519
Encrypted:	false
SSDEEP:	192:YwTkmNfVY+X9Xw4JUKgoRo1As84kyB0fFivG3xvWWfqdtnY8mXfNe6c/d99m:YwTkmN+Wpgo1fWGfFoc+F0NfNe6890
MD5:	7BEC0E3786A8BCDF371F6D1A14739C44
SHA1:	C142BB0424C54345D10E7B9AAFA069E43601431D
SHA-256:	845307A9CCBBFBEBC3FF100E33825F4ACD74F42DEF1201B264805BD90F1BFAD3
SHA-512:	83D5CA106C386957D29CE7A38CC4CD31AFB594A277600AA40AA76157943FB25B3AF77BD0F2E7AFDFD90E99F3626F655CFC81BCE0B5DB574F96DD53A9E7BFAA87
Malicious:	false
Reputation:	low
Preview:	RIFF8'..WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.....$.i.0....@DL.d.x..g..m...Ry_......+.;........M.u..,..VDL.'.UK.m....X.,?.d...ff.T...'`..E"b..../O...K.B<.._..O....^.`rUZ.?..x..._._...U...!Xk.....SoIXm.."0.Y-.p.fs..Z&..J-rd.p......a.......Z.....a...".{H=....G..e.}..@..:../-tl..,OU......-..?h..i.6.0y.I-4.P.SQ.x.X(......B................6....W....)2..(R.....V[..D.....L.V+.H.............w..{.._.-T.V..w,..!6..`..j.b..U3.a.@.Z\]#..Zkl7..$..P;`2.Z0.a.XT.U\|$-Li...8,....n{..;.j..,.....2..73.%...s...f..(N.....H.HM.,D....

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10048
Entropy (8bit):	7.907340439223519
Encrypted:	false
SSDEEP:	192:YwTkmNfVY+X9Xw4JUKgoRo1As84kyB0fFivG3xvWWfqdtnY8mXfNe6c/d99m:YwTkmN+Wpgo1fWGfFoc+F0NfNe6890
MD5:	7BEC0E3786A8BCDF371F6D1A14739C44
SHA1:	C142BB0424C54345D10E7B9AAFA069E43601431D
SHA-256:	845307A9CCBBFBEBC3FF100E33825F4ACD74F42DEF1201B264805BD90F1BFAD3
SHA-512:	83D5CA106C386957D29CE7A38CC4CD31AFB594A277600AA40AA76157943FB25B3AF77BD0F2E7AFDFD90E99F3626F655CFC81BCE0B5DB574F96DD53A9E7BFAA87
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/domain/logo/biz-banner1720419756.webp
Preview:	RIFF8'..WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.....$.i.0....@DL.d.x..g..m...Ry_......+.;........M.u..,..VDL.'.UK.m....X.,?.d...ff.T...'`..E"b..../O...K.B<.._..O....^.`rUZ.?..x..._._...U...!Xk.....SoIXm.."0.Y-.p.fs..Z&..J-rd.p......a.......Z.....a...".{H=....G..e.}..@..:../-tl..,OU......-..?h..i.6.0y.I-4.P.SQ.x.X(......B................6....W....)2..(R.....V[..D.....L.V+.H.............w..{.._.-T.V..w,..!6..`..j.b..U3.a.@.Z\]#..Zkl7..$..P;`2.Z0.a.XT.U\|$-Li...8,....n{..;.j..,.....2..73.%...s...f..(N.....H.HM.,D....

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (32249)
Category:	downloaded
Size (bytes):	35056
Entropy (8bit):	5.348826075486351
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDCsBvJX7bLzZG9yG9OUeG9UXOw:2iIP/z9ogC5JX7bLzwHOUb7w
MD5:	3B07B868E6B50C4D89EF77838CBA49DF
SHA1:	466E4DFC23D9CD37F04D201D86AA69C38A87B852
SHA-256:	66C279230387B7BC840E0C3BCD336C4413D47D78D5F03AA1D71073CE5794210C
SHA-512:	D5B5D2F9ACA1BBF399B0CF0BF382706FC3FB8B2ADFF790A853791E281B68B1B8618D35B06258F0FF4E9BA1BAB759535797E29A4A19A04EE22D30058255E5BAB1
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3De088a5f8d1e2e868%3AT%3D1728166492%3ART%3D1728166492%3AS%3DALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NTUxLjg4MDh8NzRjNjZhZjU4MWNiMzA0YjU0MDVlMjU3OGJmMDlkMmVhMjlkOTc2ZHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2595154941770008&q=Halo%20Smart%20Fence&afdt=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301542%2C17301266%2C72717107&format=n3&ad=n3&nocache=9711728166551188&num=0&output=afd_ads&domain_name=ofinovardweb.cstrikehost.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1728166551191&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=855&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DHalo%2BSmart%2BFence%26afdToken%3DChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/afs/snowman.png
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1219
Entropy (8bit):	4.793977145866041
Encrypted:	false
SSDEEP:	24:vUs73Hn8brdLTmiiAKi1y+dF0g+3B5GDtN9g:Hn8ndBiAKi1ootNO
MD5:	D8FF63683416B5ACFE78B44BCA3799E9
SHA1:	EB83089124C4BF75E31B7947C1134EDC544305AA
SHA-256:	1B541FF6523895EBF67A0B7A389AF91FC62249F2C01A685167B78617EA38677D
SHA-512:	1C8347C7D8B0978FE895FFB821B082F93212E911147E995C7C0AE60205A3EFC84CBA339241C1FEF7B2A0631811F4EFDEDDFD3B8A4E2DE46C255A066548A00182
Malicious:	false
Reputation:	low
Preview:	/** Designed to be used for all pop-up window functionality.. * @param win_url. * URL of the page to be loaded in the pop-up window.. * @param win_name. * Name of the pop-up window.. * @param win_height. * Height of the pop-up window in pixels.. * @param win_width. * Width of the pop-up window in pixels.. * @param win_id. * ID of the pop-up window. Use an empty String if no id is needed.. * @param no_reload. * If true, subsequent clicks don't reload the page.. /.function popup(win_url, win_name, win_height, win_width, win_id, no_reload) {. / Error Checking */. win_id = win_id \|\| ""; // if win_id is null, empty, etc., win_id = "";. win_url = win_url \|\| "";. win_name = win_name \|\| "default_popup";. win_height = win_height \|\| "600";. win_width = win_width \|\| "500";. no_reload = no_reload \|\| false;.. var url = no_reload ? "" : win_url;. var win = window.open(url, win_name + win_id, "height=" + win_height. + ",width=" + win_width + ",scrollbars=yes,resizable

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	dropped
Size (bytes):	25952
Entropy (8bit):	5.2966237201299995
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZYVY+YSYMFLi0kpB7z6/vhRHe+MPv:RIT7sZwuvL54WAcl/7i
MD5:	DDEE19B11F585A772E2D852CD8E67A15
SHA1:	9B9BFB1D0659016848A65169078AC393CC9069FA
SHA-256:	04A77977AC6C9C158DF45444A773E30968B8F31D593FB25AB8F5CCF01FB20E14
SHA-512:	E008150451B90E9445399E42EFB2191120D7E599CDD1A6A241261B9C695886E41D80913ED2F32CCC9EC71130482C490F96B023D3FE855E55631E32890311146B
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	239
Entropy (8bit):	6.784177735762539
Encrypted:	false
SSDEEP:	6:6v/lhP6IcV6q4ksFW1ohhx+izZWNuvZpqdDKD/jvLl4J0ORhxacw/Vp:6v/7iIzqpB1+qTuREd2D/3l4Dntw7
MD5:	B122E472AED11E924E06ABE84429B6A3
SHA1:	2AEEE5CABB3DB56C36F5F69BBB91B1F1FC1B7886
SHA-256:	1DC20CBF3041F4DCAEF91A8DE9D82340B5A287FCDF8FAF9AB79C3F8FD50F4D96
SHA-512:	BA363AB5B10A5FB106FD282D0D2CD223A37295CA9391826A6A07B52F76193E4901CA83474E07D11BFC8DDABCF38BFE77C42E4715DD8FECD8AF043125F88BD3A8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............H-.....IDATx^.....0.D.&......`.F.......X.......9M.."m@"..$.....h...=Pe......q.n1...}.S..%...<..8V.O...".ZI..V...I....R.&.{.....(Sq..h.....yE........ZW..k...........j..\.rn.....>.~..y..[..b..<....IEND.B`.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 14, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	250
Entropy (8bit):	6.863499301282675
Encrypted:	false
SSDEEP:	6:6v/lhPnlzO4mHbV7vUjWh7aF5ZFbQvQJaSlUqsT0GelTp:6v/7dzOPcaZO5ZFbRalqswGa9
MD5:	0A3D30645B7F2867733A7557F683566C
SHA1:	0911E02B490AD231B35CB1F89B0901DB78400703
SHA-256:	060574B9F1900DC3917DE25345CE21A2AEE6A681576915875DB0CB55977397F2
SHA-512:	95FBB11FA6224C8381E17BFC4A6C767CEDC2399FCE441B9CEB57317E7DE76769791D4E1BBABB5BD9B70F75951450200FFF1C444846ECE7321E77BF4368059BC5
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/icon-linkedin-nav-side.png
Preview:	.PNG........IHDR...............F.....IDATx^..... ......Mt.7p.7p.7q..I..?.p.y.iIj....p$\|..:..Ox...RDG.UAK......J......A..$.^.C..d>..C..b.>...6..U.9l..0Xpb..evX...,.....FX.m..1...G.?8..<.wV......uc./..7=.<.......z~..}.Y...y......w....IEND.B`.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14125)
Category:	downloaded
Size (bytes):	14947
Entropy (8bit):	5.48242930737824
Encrypted:	false
SSDEEP:	192:2E12iMpgbLLgh3VLWrKsevnsei3se5+FWhG9IFW5Om:2ni0d3hDFw5+FWhFFW5Om
MD5:	0EA63F13EF18A6F8A516119F9B847E86
SHA1:	9827829CFE1FCD55B2FE77FD782063A93174C91A
SHA-256:	C41F9199F7F1FF4D6A3DDBEAD2A3C663B84EAEB6FB01FD0E46A9FD529921D087
SHA-512:	1D694FD08CD148385CDC420828C91952B8A0F04639067DB5A0E0353AA056A027A9F4B97DA1CD379F0426DE201FAB57422DD7D9E11AAED00E34EFA2534A23CB8B
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2595154941770008&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301542%2C17301266%2C72717107&format=r3%7Cs&nocache=8101728166490148&num=0&output=afd_ads&domain_name=ofinovardweb.cstrikehost.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1728166490151&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=855&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 290 x 68, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4843
Entropy (8bit):	7.924853519109151
Encrypted:	false
SSDEEP:	96:7yEr1KWiyHLFm4IAZ0tgOfzjRrqmGdMH1bM3J63fI+kBdb01ye:Vr1KWiGm4vqzbtWmGdKtCwIbM5
MD5:	76AF4342A7E8E04541014114975C7D02
SHA1:	AB1278B3610E2CE0DCAAD9CA984B89B155F56F5D
SHA-256:	E01ACC3A33D5C195B6B6AFB510A78D06D8015608A5F929E03B0FC12AA74E9A7B
SHA-512:	D934E9FF17A53C13CD4EF3BFFD6C2D86A06D9A23BF741597A7B2381616551C982D2CC86EE37D71DA18ADFA94254693B7303D8FE1E067FEA7C0BD3D261A59375B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..."...D.....%d8E....IDATx^.]k....^..U..U....._......)W....qN ....".....9.u......7`...3....<8.%X.v.@......gg..Y...7./..?._^o......?...k..{7....c.R..p.p..8.X/.`^..S.....%PZ..P......s.@?......bn.,.........P#tcp.<,!...^h...........).(.(.hr.\|A..v.9.......FE........._...RW.9_^q.......n;..."...2.(O....W..z...Qxw.X.wqy.....3:eE,c?M.0.... .z........6T./....2...!.(`..b...>..^..<.`..N..=..r>........(-.}W..!8].(.......?.......hh..............z=..i.\|......m....!80s.....n-D.J.....F.@.........Pj..WD...;s.v..~.!d.Ky......T....\....P=.6b.+Z^.W.....W.wS.W........!...Z{.....d.bf..;.......-x.+h.....1....T......W..\.........x.r.v......Y..F.....8f z..{...O........i..z6.T.X..YW.G.Km....D....h..(..Jhf..?......6...7..(%\|..}..>.#.#....t\..a....I.;q.._^.^P..>..zC!..!#...@g^yRss3.=WN.....D...FM."..l...R.~.l..E..}..h...3.Ht....f,.n.. B.f{E..8..[@.Z.d..-..Tc^..&.;.}.S-g.... ..c....cY..i.).w. .i....5..m&..q.s...[...I....'..v.nA(.>.;.)\.u.B.D.-...4.}sy

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4289), with no line terminators
Category:	dropped
Size (bytes):	4289
Entropy (8bit):	5.254201645330513
Encrypted:	false
SSDEEP:	48:EVs9CntfQvSwXwRA7wTfwErWX0wR4tT0iWjv0CrrtreAf1JbgrzrH02cwTxWwEWh:tWadgRA7C3rMpZtgPrUGvERRjPMv3
MD5:	E3A38F9F90665F041FC2F74A7783D11F
SHA1:	36A00E17F15F30E9BB864D42ACF2614F0A6085AF
SHA-256:	76B055D98452D34162573203254CBDAA9938774E55FAE84D7E8A41B912522687
SHA-512:	FB6F924DE583713B6C28699D7FBBF74AFB85A748589DE184AE0EE81DAEE90F9EE65289AFA23E21CD8D0D27969B5A0CE4CFC6CA5AFCF6D1ADD372B4F8E9C8B81E
Malicious:	false
Reputation:	low
Preview:	!function(a){"use strict";function b(){}function c(){try{return document.activeElement}catch(a){}}function d(a,b){for(var c=0,d=a.length;d>c;c++)if(a[c]===b)return!0;return!1}function e(a,b,c){return a.addEventListener?a.addEventListener(b,c,!1):a.attachEvent?a.attachEvent("on"+b,c):void 0}function f(a,b){var c;a.createTextRange?(c=a.createTextRange(),c.move("character",b),c.select()):a.selectionStart&&(a.focus(),a.setSelectionRange(b,b))}function g(a,b){try{return a.type=b,!0}catch(c){return!1}}function h(a,b){if(a&&a.getAttribute(B))b(a);else for(var c,d=a?a.getElementsByTagName("input"):N,e=a?a.getElementsByTagName("textarea"):O,f=d?d.length:0,g=e?e.length:0,h=f+g,i=0;h>i;i++)c=f>i?d[i]:e[i-f],b(c)}function i(a){h(a,k)}function j(a){h(a,l)}function k(a,b){var c=!!b&&a.value!==b,d=a.value===a.getAttribute(B);if((c\|\|d)&&"true"===a.getAttribute(C)){a.removeAttribute(C),a.value=a.value.replace(a.getAttribute(B),""),a.className=a.className.replace(A,"");var e=a.getAttribute(I);parseInt(e

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	28682
Entropy (8bit):	7.988018770335548
Encrypted:	false
SSDEEP:	768:i4iTviSTk2t6CB5SzTMZh7Fq0mI/xOlrWWPN210QZUu/056FWg:i4iqSgwuKcy8lrWWF2SQZRWo
MD5:	D56219B8BC40AF183E6FCF40F70EADCA
SHA1:	353A8DBEDBE6E3EE88EAE9FF3A99A60C0EE5C4AB
SHA-256:	47D8FB7EECB628C9A8085E9816FE14E783FBAF1950BC4D6CB3E013ADAC7C6301
SHA-512:	4B50A4A4F14753CA13FD377E4FA8D6E75D222CFE215409A4E40C27794C18FDCE4BD506D28B4ACCC6E975F7FC345A34674ECF1E3F1A19112ECA7A08F08D22834B
Malicious:	false
Reputation:	low
Preview:	RIFF.p..WEBPVP8X..............ALPH.........0._....!$H${D.4[}.H..$A.d^....DU.=wlDL..H.,I.mK...k.0.X.tD..........p......gDL.'I.d.$.iO..b..o.7....Z.._Xm..1.....5...&..{jGC#.4.L...i..&.,.i.C...-Fkh.Mk.h._.rH.`.X..o...&ka...s.\|.`.\.GX...L,...b...X....d....r.,...j....L.<6....gX.......k.d.....k...X.k[.sy...1r6k]>s_,X.}.e],.ZX~s5...*,..,...Ec..7..u9...7........4-,.y...W..ea]....}As_X......u..</..b...7,...t......\^.Ks]&.....-&/.S.X..N....p6...\...7......\|o....k.....7.x.Zk.c.....F.Z......2?l.e..=,hY.2g...b..b.2.!..Z.i.bYk1...L.....aM....d.kb..2.)...].pcAk~...k....A[.Ks..c..~..7/.....t..L{Z.ed..h..2.....4....5..........24Y.<f7..M.o..iG.K..v..e.......9.`Y.......s1:0Y.....1..Vs_.sb-k.VF..74r....e.v..5..h.f.y.hh.M#.9....Msd^6...\.v.2.e...F.ia....CkM.!...YXk.5..4.,.ZO.0.M.eY.5].12a.Z,.Z....\.M...ZO...k2Z.#..&....i..C..44a...!&...Z............X....b.-m._.A[4......,.`.._...t.."8..Y....Z...&.O...>...Ac.X.._.S7...J.....y...Z..&_........$.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33408, version 1.0
Category:	downloaded
Size (bytes):	33408
Entropy (8bit):	7.993228515944861
Encrypted:	true
SSDEEP:	768:w/rpBKJJ2nclgErjXL/5SLqtQtgr7hZE9XztCFA0dv3M0gmi09BT2dwGR:OV8J4nXMjT53tQ07hCFhi3M0ViQBT2dX
MD5:	98BF8BDC576D6A920EED3FAFA99F20CD
SHA1:	11481665CBE24542DFD68776420C0BEDBC954A7E
SHA-256:	BF66EB64D539C68C9EBC455E7776CBFCF16CF3CAE8B57CE1930E0F0F6AB32A49
SHA-512:	C680D434470793C8C214940AFE2876D2B02E5B7E9D0EC2F8356C37C068357876132A02F9FC2724705EB2D6C3B4A1AFBB82F6282B773B487AA23838287EF8B144
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/switzer/fonts/Switzer-VariableItalic.woff2
Preview:	wOF2..............N...............................X... ..\?HVAR..?MVARP.`?STAT.'..../l.............0..J.6.$.... .....F[.9qB.#.Uz....\|....M..........C....'......OL2f.I.v.."z.....w..P9(..0..GQ.E.....!......'.QuJ5........~&.:D.H........b.X[..z..An\...4Nh.X....)......HJ..Z.$....Sp.)R.....B}......by.N..\.Fo8......./.bf......v...%W.e... .".z.sx....K.I.M.4mS.u.u.....p..g.o.E...........q..1A....l+.t^R.o2@...........l.-..+........0U..........(..). .x.....VU....:`.@ .u.Y..J...i.~.i...iF#4P....cu..i......#..l.<.o?5....PS...2.X.}..bF1gbbbR.z.@!...@..e...J.5?...l.......4~...8...,..55.$P... .!D.6..8!..R1........U.z..3i{=.o...H-.Mh.r....3...y.....d..s..N...v.Vm7...R...l!.TL.-..Bv.c.a..........JQhO.3..r.....n..1.A.~/.9i..]_?..H..K.4.NG@..bK.d......M.....T..I.n.)..?b.h..6.....v..&..L.k..3...t.q!.5g.H.B....T...5 ..B.WW.p..:N.8P..H....e..ark.....i......<....{S..?.y........r.\.h...Ab.$o..OK.9..O..O<}Bi.w..p..H.Lg...T..SX......P.H.TI.=}.Ttz..

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	32240
Entropy (8bit):	4.134908344126713
Encrypted:	false
SSDEEP:	192:r+HIu4Hke8cG3g3bv1EzCLUYbx+MgSLjIiSlRgaK7tBV8SFCbRgaK7tBVgR0qCzK:zG3oEm+mjGS430ZcWusYrH
MD5:	CECD5E935A39A529DED677713DA1C6C7
SHA1:	0752B1262156354D3BE4CBDCC67AD5B5DDC48687
SHA-256:	C8154C2383EB0FF77A7CDD2A30051EB1378673BEEEE9E28CB987DB52D6F60621
SHA-512:	9223F95DD4A3F2971BDEFA67DBF9990EC837B5D9F78B036D921FBCBD3B67B41B1E4A7820E521AB7D102FE67F908DC87886E881682C3B37A877FDB553BB571E8B
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/home_search_result.js
Preview:	(function(){.. $(document).ready(function(){. init();. });. . function init() {. initSearchEvent();. aiSearchSwitch();. initAiBulkSearch();. $(window).scroll(domainSearchInput);. }.. function domainSearchInput() {. let scrollTop = $(document).scrollTop();. if (scrollTop > 0) {. $('.home-top-search-wrap').addClass('scroll');. $('.home-search-active').hide();. } else {. $('.home-top-search-wrap').removeClass('scroll');. $('.home-search-active').show();. }. }.. function initSearchEvent() {. $("#search-result-domain-input").keydown(function (event) {. if (event.keyCode === 13) {. let domain = $("#search-result-domain-input").val();. displaySearchResult(domain);. }. });.. $("#search-result-button").click(function () {. let domain = $("#search-result-domain-input").val();.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	4975
Entropy (8bit):	4.522797451367884
Encrypted:	false
SSDEEP:	96:8EJINL57ClyMG2Jqghk2kbPISCnLrUdY75HwWUlT2sRp:8EJINpClb3hTkjISCnXUa75HwWIT2sRp
MD5:	5BFDDB6C4F6F25236DB01C7EFB487DE8
SHA1:	051872573F2F7743800E6BC6AB4B75B5F2986352
SHA-256:	94B9CEC0679DA2C7D868A055FD8785C50585F02C45A110E0364AD76BAD745E47
SHA-512:	DBD451FFEC5D683A6FC1E7D63137E627330C40EA5892F538B015FA2E626C810B21D7467B5D9FC17FB4D478F6013098A11900BD4EB38F3247A1E6D260B852D2A5
Malicious:	false
Reputation:	low
Preview:	$(function () {. initCropperInModal($('#photo'), $('#photoInput'), $('#changeModal'));. hoverAction();. displayModelViewAfterDeletingAvatar();.})..function initCropperInModal(img, input, modal) {. const options = {. aspectRatio: 1,. viewMode: 2. };. const URL = window.URL \|\| window.webkitURL;.. let saveData = {};. let blobURL;.. modal.on('shown.bs.modal', function () {. img.cropper($.extend(options, {. ready: function () {. if (saveData.canvasData) {. img.cropper('setCanvasData', saveData.canvasData);. img.cropper('setCropBoxData', saveData.cropBoxData);. }. }. }));. }).on('hidden.bs.modal', function () {. saveData.cropBoxData = img.cropper('getCropBoxData');. saveData.canvasData = img.cropper('getCanvasData');. img.cropper('destroy').attr('src', blobURL);. $('#upload-head-info-error').empty();. });.. if (U

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	72203
Entropy (8bit):	5.606602192379761
Encrypted:	false
SSDEEP:	1536:Yxy0/9yFW/kdM50NSpQCV7nh7lI2iKApQOezsYk/xIDJCOqmqM1a27RF4Ld2wPdZ:ky0/9yu0JZKWPP/G+
MD5:	9416915A5346C4088EC8C7BDB962CEDD
SHA1:	1465BD9CC3F3B5435DC581E80386B17A62DF6802
SHA-256:	225729892397D102D90970D2F26BB0856E0555CC13DB7A7CEAD9803DED7D7B19
SHA-512:	A8D60218ADAA34C95A5F4A3002C9C3AE9EAC0A04F89CE0D10A27734D2F8E16DE7B434EC7BDCB199A11A72B67F5B2C44DBA6A615BBBBDFE9FBD3ED45AEB93DF82
Malicious:	false
Reputation:	low
Preview:	window.mouseflowEnableCssRecording = true;var mouseflowDisableKeyLogging = true;if(typeof mouseflow==='undefined'&&typeof mouseflowPlayback==='undefined'){(function(){var _200=false;var _204=false;var _183=[];var _179=[];var _20='https://eu.mouseflow.com';function _7(_405,_151){_151=(typeof _151!=='undefined'?_151:'');if(_4.debug)console.log('MF'+(_4.includeDebugTime?' - '+_151:'')+': '+_405)}var _60=new _362(window);var _34=new _333(window);var _5=new _327(window,Math,JSON,_60);var _13=new _308(_60,_5);var _36=new _277('local',window,_5,_7);var _301=new _277('session',window,_5,_7);var _232=new _356(window);var _4=new _325(window,_36,_200,_204);_4._100();_4._169=[];_4._162=[];_4._117=[];_4._171=[];_4._418=[];_4._414=[];_4._71='f592a9ec-2b7d-40b7-b1ad-0d08c3f6316d';_4._420=true;_4._417='5242000';_4._159('appUrl',_20);var _316=new _406(window,_5,_4,_7);function _400(_0,_4,_53,_5,_13,_76,_36){var _20,_71,_7,_56;var _195='mf_liveHeatmaps';var _15;var _119=[];var _89;var _137=false;functio

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	32244
Entropy (8bit):	7.979147767623942
Encrypted:	false
SSDEEP:	768:M3AOul92KQm6IRFcOOxUnmV8ywNwplp7s23:eCmKR6IPcOuV8Hwp7Z3
MD5:	7ACCB894AB1ECCE2BFEB1B1B7C78D555
SHA1:	016F5ACE0D3286F1F682E26C4117228CB1FBC731
SHA-256:	B1650BE9ADECE83F1C38C0184A2BF2905DB937BB3CEE9B47EEB90B5BFF32290B
SHA-512:	BF368BDB328F7DB70D4DB2388102E5CA639A3BC46A58C7587A43D28D22818DC3102A544E74D4B77AC47D27AA2719BE91FF9E04A404AF3E54D653771527868D05
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/home/home-top-content-right.png
Preview:	.PNG........IHDR...,..........mz.....pHYs.................sRGB.........gAMA......a...}.IDATx..{..Q.6s....zm.....l0...$...F.h.....J..Bsj.HU...ri.jS!.P..C )..JK.z........(..H)$%I..^.nv.....5...\......v}...{....<..3...oD.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.k.T.-[.l...._y.....m......v.wi.yK..M...vy.~s.M.....On..y..u........lf..._.7}y.....Z..o......v\>..>...f...s..k.B~...O..oy.s.{.W..rX.}...~.o..M.7..^.{.>a_..........6.7k..N..TS.iMd.6i.e....q:..................c.;v...N_....}...M.v.../....gn....f.k...........Z.k...{.G....O}Mk....N..~5{...q;..w...N....Rs.$.......h....u.~.N.#.9......:..i.m.................{ g......<'.Ogvn*...gf....e.e.-3

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5079)
Category:	downloaded
Size (bytes):	23557
Entropy (8bit):	5.1303986823440235
Encrypted:	false
SSDEEP:	384:sQd0yRyxuF2CT5AIWDY+nOMMTMr4+x5HWzTKTCIXchtCwj/q:sQ61xFgenOMs+b2asCi/q
MD5:	51AB257AA017404B028D45283C46F3E4
SHA1:	64D676B90E6E0FC832576D8DC76E1FA3BF82F43C
SHA-256:	A93822051D3D1F44D0A5B90D05DE813F562967A046274D3842E70922B26BFA09
SHA-512:	E1AD74AB74635BF6833E218280C14AC971690C195EF7AD017CA613B6FADD01C093F76D640F438AE9A33D5F8C9D9299B2419ADB3057A9118B82D1D222976409C9
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/jquery.fileupload.js
Preview:	!function(factory){"function"==typeof define&&define.amd?define(["jquery","jquery.ui.widget"],factory):"object"==typeof exports?factory(require("jquery"),require("./vendor/jquery.ui.widget")):factory(window.jQuery)}(function($){function getDragHandler(type){var isDragOver="dragover"===type;return function(e){e.dataTransfer=e.originalEvent&&e.originalEvent.dataTransfer;var dataTransfer=e.dataTransfer;if(dataTransfer&&-1!==$.inArray("Files",dataTransfer.types)&&false!==this._trigger(type,$.Event(type,{delegatedEvent:e}))){e.preventDefault();isDragOver&&(dataTransfer.dropEffect="copy")}}}$.support.fileInput=!(new RegExp("(Android (1\\.[0156]\|2\\.[01]))\|(Windows Phone (OS 7\|8\\.0))\|(XBLWP)\|(ZuneWP)\|(WPDesktop)\|(w(eb)?OSBrowser)\|(webOS)\|(Kindle/(1\\.0\|2\\.[05]\|3\\.0))").test(window.navigator.userAgent)\|\|$('<input type="file">').prop("disabled"));$.support.xhrFileUpload=!!(window.ProgressEvent&&window.FileReader);$.support.xhrFormDataFileUpload=!!window.FormData;$.support.blobSlice=window.Bl

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (497)
Category:	dropped
Size (bytes):	51813
Entropy (8bit):	5.132181664320481
Encrypted:	false
SSDEEP:	768:275q+7eUmZRwwJ7gYKNUgOncTu1r5kU51eQwWUuF/4HF:CzuKNUJWu9+U51eQTta
MD5:	54461654A35A7F286722003F446F3904
SHA1:	C38B29C271DE99AD35901996243C6A8A1FEEEB5D
SHA-256:	8177CA17849FB10820473B79FBE47FD6ACD7FC02E4D0D517E12C8A4F85BD0953
SHA-512:	2D428860F4D194CF4C1FA66AF86DBD09E798316D2CF3676B155DC330DE4DB583D085549C9D897E07064513B966F274DD396A68928942D0676235385EE0E0F400
Malicious:	false
Reputation:	low
Preview:	(function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){./*. default settings. . @author Zongmin Lei<leizongmin@gmail.com>. */..var FilterCSS = require("cssfilter").FilterCSS;.var getDefaultCSSWhiteList = require("cssfilter").getDefaultWhiteList;.var _ = require("./util");..function getDefaultWhiteList() {. return {. a: ["target", "href", "title"],. abbr: ["title"],. address: [],. area: ["shape", "coords", "href", "alt"],. article: [],. aside: [],. audio: [. "autoplay",. "controls",. "crossorigin",. "loop"

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.463628415646158
Encrypted:	false
SSDEEP:	3:xPUd/kuS7P9MCnS3+FslR1n:xPUNS7PFS3BlLn
MD5:	7616C2DF1C44DE11EF8EC15512D06A47
SHA1:	27323B65095848B375D14FC9F167CA85661C1314
SHA-256:	49D188AE4DCC7493B1AFEDD6B5C935FDB55E4DE94A7C075FBC5C91E0CC9ECE32
SHA-512:	1F452799A34BB71E3B61F007A4905F19F21B8FFD2EAAC100A25AB8914AF26E19D4A4818F8634D3A082C18FFF12D90919E19968C9983EC516F9C574990334F1B1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSMwmuaVlQe-5r9xIFDV033xASBQ2uXsj2EgUNnu6CghIFDTyruh0SBQ1to-hAEgUNAo_7aA==?alt=proto
Preview:	CjYKBw1dN98QGgAKBw2uXsj2GgAKBw2e7oKCGgAKBw08q7odGgAKBw1to+hAGgAKBw0Cj/toGgA=

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjU0Ni45MjQ5OmE2MjJkOTlmZjE1YjEwZTQ3NDM4ZjI4NDM4ZThjNDcyNWM4OWFlZmFiYTY5NDZkYTczZTk3OGQ3NTA1ZTczOTc6NjcwMWJhOTJlMWNjNw%3D%3D
Preview:	....................

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	20928
Entropy (8bit):	7.950823678715601
Encrypted:	false
SSDEEP:	384:HwTrumbnCXaI5PccuY2l9qAtDfkqrRAeo4DB9T2v9wl219BTjKc2zcf:QTruInQaWJJ2l9qA9vOeoaIwlWrTq0
MD5:	2D61028FDD5DDAAD57EAE399C8718116
SHA1:	53D39C39D55C50053CF3D65632C0F43A162376F6
SHA-256:	9532BFCF6BE4A91CDF2AA4499C45A51CAD48BC73A4415BF773207EDE1B855B68
SHA-512:	926105C25AA368736ECF0F28781BBB82F858AD98354934727F6BE21F66599FE89686EAB20A4CF493C5438798565CDBBE914CECB1415254A73521DD71FEF497A4
Malicious:	false
Reputation:	low
Preview:	RIFF.Q..WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.....$.m.9......#b.8../........'bi...S.m.n......... f`3H.t.A.A0.................#B.$Ir...n.`.q..vz?....mC..N..8(U...P@P@P@P.D.N..;.p..-M!.\.e........m.#[....b.;>@....%.5..A. b.BM........?...h.P.s..2......?........?........?........?.........0.P...Ki..T1kK.=DR.EJ ....}G..>.7.('ovI[!M....w"".L..o..[...B.z.Mv..M....c..oW%...@A.^5.]\|m=>.S...AC'..$mf.....~..#"..E.......X........b........z...@....Xz^<.ESL.$....A.)..0.%...a..s.i.n.....>.....D.....Xb...."...\|.`2..<B?.....7]~.....

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	588
Entropy (8bit):	7.558164450699112
Encrypted:	false
SSDEEP:	12:6v/7htxOuz6YdHq/T4HskLkYLzZfsStkxhEvMHe6eTqFqgL/1:oB2qHsT4HskLzZfhc+6eTqFqe1
MD5:	8020DED5A5AC2103A40C7221ADDB6B39
SHA1:	C2D3365FF1F70F44FF519E6849502F3D0E9FFA31
SHA-256:	D6D6AADD80264CF30A2D08811B09F3AF068B4CF95B1E12002F03BF537153A7ED
SHA-512:	DBC1D9CC2B3AD79BFB4B25AFF7EF0737BE9D198D5D3C2573D76354E4F693A759B0BC430AF060007ED9149009980A4B53FF8A58A0625FB548E354BCFDD50469B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....IDATx^.1K.1.....E.@..@....upS........v.cA...N......w.p89..b..9NI.$.">H.../..^.^....-YNdIei.29p.....l.R4E...,.:`Hp..L.H~...R.. .........X.....\tV........F,,v.......~V..p.`..`gu...w....8.\|....t5...iV.v7.1..le.+...O.D.^...).=...i...m...A..C.W..h.... &.n'."..........b..M.Q.T;nf.....D....I....@.kU.....:E.u...HU.Gr..6FR._.".....c/1.].k$.....M...............`..Am..2 ...D.......T..(d@.....0&...\.=.o.6...?.a.,c...!...<.z).N.u.q.xy..S...Ug,..2.&.66[..@...z'.}......t3......@L.1...0.h...;/.k.E.R.&_..r\|.\K1}...cMq.J....IEND.B`.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3856
Entropy (8bit):	5.408297976823041
Encrypted:	false
SSDEEP:	96:6OEaM7Vc+uuOEaMzNKOEaF9Vc+uGOEaiN1OEaNPlOEaNVFZKOEaNHOEaNk3yOEaU:dMDEMn3GXNP6NfNANk3FNNN8YNYn
MD5:	FD90B2E322504D22FF0E849CCC595CCA
SHA1:	DD1F1D5AF0D1E50FC41F1297EFEA6B5CD01124C9
SHA-256:	3CE2554E586B71B83AEFAA869E6675614E2C910B111A5194660230E9C7303A78
SHA-512:	EB03995040AF10B83E28A662F702D2BEFADCE38948FE9460DF1FB06B7F0A2B50BFA9606759BD8B7650D0B385E3653F18DAA3626E0E6EEBB4B71B79AB268A905A
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Mate%20SC%7CMate%7CRoboto%7CRoboto%20Light&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Mate';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zS2W7XS.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Mate';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Mate SC';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-izT9qOk.woff2) format('woff2');. unicode-range: U+01

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	dropped
Size (bytes):	323139
Entropy (8bit):	5.609728113956098
Encrypted:	false
SSDEEP:	6144:j4GRIGKlqjbgdMvO5K1x72Dej7dsEFVVl2bT+lBM:0GRwUjbgelgT+le
MD5:	26CB03443316833D3F27686D7440D25E
SHA1:	43AD7AF39A8DE87B2E102ECAA83EE32CC83B87B9
SHA-256:	DD22649831292E0C2E52B249CF842047D53D4A335D9FB5604CE8D38FCC036957
SHA-512:	BB7EF8EFB8D9D2BCA6C3BF3AD1A1667D8C2C86F4120822A1159F2779B56F362327E379297DE3489DC32A9742915C63CBF58673B8F1B54F87B47ADB9E853DDAB9
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":15,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_au

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	79778
Entropy (8bit):	5.334949534551888
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXhpwNFHM9ZK0BK01QJnYTZ02LKVsdmpyKcicyh:RIT7OXss9ZKAKBtYj8wKcHyh
MD5:	6DAA80C2C71F6879629BCF0D886D96F4
SHA1:	F1B59B2D83B919B50D28B33A924A94A6B84EDE54
SHA-256:	31FF2D8B22997FC2F28B4B912E3C5EBD3561733176E355DA9FA9332E27B386EC
SHA-512:	A1144A556B824F6C9245EB2EB455C4F6D1C54E225C3B462F31128B1DCB22BE2D8EDBC372ED5B2C0B36FFBB534A084F03B7D1436408336936FDE60D500F966C2F
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1013298092648180?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32025)
Category:	dropped
Size (bytes):	35951
Entropy (8bit):	5.180198689709046
Encrypted:	false
SSDEEP:	768:e8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcKGf3Z1RQ:Ne78+S1Klvla3ZrQ
MD5:	B889D0E0E360373791A7478530BFC61F
SHA1:	A45320736B67A1C255DC734B162EE0C67F01393C
SHA-256:	0183EF0763E720F30973508786716B02890ED82EC71239B6EC6DEE24B9DAE7E3
SHA-512:	B5E3BBC1B898AACCF086770A5A068EBEA01CFC9C71B7F972F0FDA4135B3F854D2A9EFA2A5F9701B3CF787A954330C2B4A1B097812C8D9B1CF290FB119F79BFA7
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v3.3.4 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 15604
Category:	downloaded
Size (bytes):	5761
Entropy (8bit):	7.965186369738741
Encrypted:	false
SSDEEP:	96:vjp+2u29YuVbLIJ5zcVyJLoF2ffx1HiurXtodGHrXbXkYyXmcr1rCGg:bpdj9YU0J5zcQZoFCfxxiuHLrXkYy2oA
MD5:	E6FE01080EE99FDCF5F39DBF94C890BD
SHA1:	9B33EC4D3447E868FD8A8237644D76C4A49EA0ED
SHA-256:	F40E9C5EF3EC92773745FF966E06DBA1812D601F43A40EAFAC2E590D5C7265E7
SHA-512:	F2C98FAF0B48F414485F9B4AAF331D80DD2F2B7E2EB92D392CB2D968065A3DFF1779B071C6979C5814EED25BA6A4C3EDD2B67566928361FEC57692E68EE8240E
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Casino+Online+Real+Money&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p&pcsa=false&nb=0
Preview:	...........[{s.....StH].o@.06~..`.N.q...T6%...Bb$a.s...w.%!0.LnMvjk..H.8.>.>...._..;..l.....c.`...y..:.9..i..f....[..rpo.j7...Z..6.X.:...mZ?o..\|p.7.V...o\........Cw.\...o;..w.p..^.ZW....\|{s.../o...M..^.yo..-V.g.Y.V.....\|p...)^.].C....w.W.m_.jt.^.qk........V.x^..X..}...n.E.~.pV.....f.....}wd.t=..c.... .'...l6Sge.......AaN..0.p.z.....7..-...1.......oS.^.yn..0.^Lx...M.\|.....3....P...\|5SH.r.1.3.6.M<?LM..V8.-~o.</^r.v..6.\|`...9..\|...C/.C.....:...B.........Y.!x....[..g...[..@.. 4\|......a...7u.C6...R(X..$.]....OU..V.....B8.c..... .}...0...\|.........!x;d..d........%.j...1..`.]...y....."....Y..D....\|.....!.tGD..,....h..h.H..w...0B...8......6A.6...{.oh7...,&oq...s..-..N.S?..CF.......m.Pc...........s,...hh.X.@...2.....;.......F...liW.h...k.Z^.z=0....U.J.>..QR.......3...a... !...=...D..{..{6..<....O~`....Pw,...R...Y.h@...E.h......L>.3.....7....3A..i8v.K..;..I.....>...%.+...TP7..4..T..x..mY..S.d.4...h............. ONZj..#..)....X.T.j'y;.O...-1..0-$tN

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5900
Entropy (8bit):	7.766263355884296
Encrypted:	false
SSDEEP:	96:WElbw+iXvx4kPn7XRjDO//ACjCO6TqkF5on7X15woAkYXrr4L0+dcCvBNfIi+:TwTvekjXs/ACGO6ti7X1Oob8EL0+dp4R
MD5:	A59242EF3CE36AA7262DC0271CD1005F
SHA1:	031749A42AF6B3F3C00C5EA96FBA7369480F2F1B
SHA-256:	B06A827658ABF839057D688D4784A0EBE2C9FB05F3343C5BDE8C50954B65892B
SHA-512:	0D90CEEF12FDEE87FB6919E80B85F76E6E4731971ABB5F02F18944474A1750CB322E3EB30BE8CC1A4C5D247B38A92773B67FCE60ED9B95BBEE6B6ADF16CA5194
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH......jm.2.s..r........:...p..$339..-.l....z..W.1..U]...k^..Rwo.H....i..........N.....I.....).h..:.#{.=4.;u..s.3.<.C...Ox].0.]!....1.r....Ev.Bc.]....n....N#.l:.Ns.h.......!X,.v..)/vjb.K3d..7...de...<.\.<:...Fv.....&4.5].=..4..![..v......d9g.z.\..v....&.....I{c.....j2.b.{.L.`1w.F;io.....K#.m5.&.u.XFk.....h'.m<.i...E.....L.`..mMF;io.i.,..;.&..^.k4.....v....,h........5......F[kM;..&kY....0]4.A_.]..d..v..5.S.tw..\..4......j.5.....k...h...9w[.d.$GX.e.,;-L.X.S{.d...u.Z..=....

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6725
Entropy (8bit):	5.147157814654551
Encrypted:	false
SSDEEP:	192:VibiDwW53VE0H6mqOI0NniJnvifAFiqi1Kibiuj1iglFiwcVi1:VibiDwkXNniJnvifAFiqi1Kibiuj1igh
MD5:	4B9D8D7D66CAB53DB7DC84E338AE342E
SHA1:	196EE897842C503D8FF93CF50D204994E98A9EFC
SHA-256:	1DD51B295551DB30A85FBB417F79C16E737B61425FC5E9691BF36A5FAE59CCD8
SHA-512:	3BB4B4B5AD5033277D3215218C76B1B72C059D4502BE11FCD06DDDE8868F0B9237A696D6AA34919478F90EF9EF5C4649784AAF559981748CEEFC6FA456E71A11
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/onload.js
Preview:	function showSignin() {..var e = document.getElementById("signin_menu");..if (e != null) {...e.style.display = "block";...return false;..}.}..function hideSignin() {..var e = document.getElementById("signin_menu");..if (e != null) {...e.style.display = "none";...return false;..}.}..function initSignin() {..var p = document.getElementById("signin-click");..if (p != null) {...p.onclick = showSignin;..}..p = document.getElementById("close-login");..if (p != null) {...p.onclick = hideSignin;..}.}..function makeVis(id) {..var e = document.getElementById(id);..e.style.visibility = "visible";..e.style.position = "static";..e = document.getElementById(id + "-head");..e.setAttribute("onclick", "makeHid('" + id + "')");..e = document.getElementById(id + "-arrow");..e.src = "/arrow_down_marketplace.png";.}..function makeHid(id) {..var e = document.getElementById(id);..e.style.visibility = "hidden";..e.style.position = "absolute";..e = document.getElementById(id + "-head");..e.setAttribute("onclic

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	32240
Entropy (8bit):	4.134908344126713
Encrypted:	false
SSDEEP:	192:r+HIu4Hke8cG3g3bv1EzCLUYbx+MgSLjIiSlRgaK7tBV8SFCbRgaK7tBVgR0qCzK:zG3oEm+mjGS430ZcWusYrH
MD5:	CECD5E935A39A529DED677713DA1C6C7
SHA1:	0752B1262156354D3BE4CBDCC67AD5B5DDC48687
SHA-256:	C8154C2383EB0FF77A7CDD2A30051EB1378673BEEEE9E28CB987DB52D6F60621
SHA-512:	9223F95DD4A3F2971BDEFA67DBF9990EC837B5D9F78B036D921FBCBD3B67B41B1E4A7820E521AB7D102FE67F908DC87886E881682C3B37A877FDB553BB571E8B
Malicious:	false
Reputation:	low
Preview:	(function(){.. $(document).ready(function(){. init();. });. . function init() {. initSearchEvent();. aiSearchSwitch();. initAiBulkSearch();. $(window).scroll(domainSearchInput);. }.. function domainSearchInput() {. let scrollTop = $(document).scrollTop();. if (scrollTop > 0) {. $('.home-top-search-wrap').addClass('scroll');. $('.home-search-active').hide();. } else {. $('.home-top-search-wrap').removeClass('scroll');. $('.home-search-active').show();. }. }.. function initSearchEvent() {. $("#search-result-domain-input").keydown(function (event) {. if (event.keyCode === 13) {. let domain = $("#search-result-domain-input").val();. displaySearchResult(domain);. }. });.. $("#search-result-button").click(function () {. let domain = $("#search-result-domain-input").val();.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153123
Entropy (8bit):	5.54016437962147
Encrypted:	false
SSDEEP:	1536:mSG6arvU/wAQWPyXpKHhitCnAyYHLaUbxijIHWvxDZz7/wurgsjWbcbWgQWZpVqk:DH1YrCIHWpDB74u7RzqNYPCfaQBZwK0j
MD5:	7222F5E3DF97D2F57B74CF8587977B0C
SHA1:	F9043C031A46D99E7E5F294E113BB134AE072F09
SHA-256:	48C69D9B74A2DF416998E17AEB4FB9ED1D8565BC78899591A84F455EB2C4BA94
SHA-512:	6DD3F302E7D1DF5F03BBAB16D11B1A4125393AFA2499FCF0A8E3D1EF24AC50177694B0C913D694E0C49DCAEF80DC2EB0AEF0569E5ADE0234C322520DCA93B9BD
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,17301442,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":10,"afs_gpp_api":0}}};var n;function aa(a){var b=0;return funct

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (384), with no line terminators
Category:	downloaded
Size (bytes):	384
Entropy (8bit):	5.458184327899594
Encrypted:	false
SSDEEP:	6:xWzPvf6uslsHbhMpQXod72luuPYRXPAfI67M+dEUBqaslsHbIQ64DiPr8V2luuPZ:xWboSHbgd8uV27HEUBqBSHbpDheuV27n
MD5:	3D910DB8E512FC2863C12F17298AE60E
SHA1:	6710E5FDB56387E7FB179684311695E36365913B
SHA-256:	59EB4790A0C8FF352BF4DA06FF1E9B97C516380C100AAA78F63767D465C6339B
SHA-512:	2D8DB68B8C99BA68146FE19EC4278D1B3E54A0B48A8200DB81EA02D68C549F3B1E68AE410E500A04B5003DA0EE98169C7AB7FBEDF23E455047F34642FC360491
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=ofinovardweb.cstrikehost.com&client=dp-teaminternet09_3ph&product=SAS&callback=__sasCookie&cookie_types=v1%2Cv2
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg","_expires_":1761862492,"_path_":"/","_domain_":"cstrikehost.com","_version_":1},{"_value_":"UID=00000f02ffd1cfd5:T=1728166492:RT=1728166492:S=ALNI_MaS3rEqidCjoCDSRIT_-KIDcNNtzw","_expires_":1761862492,"_path_":"/","_domain_":"cstrikehost.com","_version_":2}]});

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	239
Entropy (8bit):	6.784177735762539
Encrypted:	false
SSDEEP:	6:6v/lhP6IcV6q4ksFW1ohhx+izZWNuvZpqdDKD/jvLl4J0ORhxacw/Vp:6v/7iIzqpB1+qTuREd2D/3l4Dntw7
MD5:	B122E472AED11E924E06ABE84429B6A3
SHA1:	2AEEE5CABB3DB56C36F5F69BBB91B1F1FC1B7886
SHA-256:	1DC20CBF3041F4DCAEF91A8DE9D82340B5A287FCDF8FAF9AB79C3F8FD50F4D96
SHA-512:	BA363AB5B10A5FB106FD282D0D2CD223A37295CA9391826A6A07B52F76193E4901CA83474E07D11BFC8DDABCF38BFE77C42E4715DD8FECD8AF043125F88BD3A8
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/icon-facebook-nav-side.png
Preview:	.PNG........IHDR..............H-.....IDATx^.....0.D.&......`.F.......X.......9M.."m@"..$.....h...=Pe......q.n1...}.S..%...<..8V.O...".ZI..V...I....R.&.{.....(Sq..h.....yE........ZW..k...........j..\.rn.....>.~..y..[..b..<....IEND.B`.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.877520065772821
Encrypted:	false
SSDEEP:	3:icIPhnhKKTsxj51VtKgtmYrkKoP+4ASQ:icyhhKVxj5EoWKSm
MD5:	5959913385EE8BD55220C0DEFB9166FC
SHA1:	273804E0C237BDFB7376E411DA6E6A0015BD1B48
SHA-256:	3D13B8B5F7378AA0E6C06EBF705078B64307B4D2296DFA62F8FEEE2DC5F5159F
SHA-512:	9C79D56BEB1384E654E669735E2B98B8957F9E569E8006EB5199A6C955525EECB736B0D354139651B881D1976A98649F59A9DC279393002E5BF3A3BF2328C8E2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwlyl8pdJjAhfhIFDYxHKaMSBQ1kXOzDEjMJrmlZUHvua_cSBQ1dN98QEgUNrl7I9hIFDZ7ugoISBQ08q7odEgUNbaPoQBIFDQKP-2g=?alt=proto
Preview:	ChIKBw2MRymjGgAKBw1kXOzDGgAKNgoHDV033xAaAAoHDa5eyPYaAAoHDZ7ugoIaAAoHDTyruh0aAAoHDW2j6EAaAAoHDQKP+2gaAA==

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5146)
Category:	downloaded
Size (bytes):	63488
Entropy (8bit):	5.304066517531714
Encrypted:	false
SSDEEP:	1536:SRv877DcoN7hkWRkiNWE3z1uTzXKD4dxP3iR5Drn:SRv877DVkiKWS3iT
MD5:	2B803B5F1679880BE86041F2DEAA4A4F
SHA1:	9A2723EE3B64119C151F91210F6717E5203C91B0
SHA-256:	81A89B90D1A2E3914B2ACFE9B9E405F4BCFC7C6B0917538B83B583CA3C613205
SHA-512:	E747B16B838BB10BB31092B2BDF3A0272E2F9D5AE3D2155B5D9CD05FB433E98EE767615887A484CB253D983695FC3B23670342987E5C3EB97E2490F7B8826CBD
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/1727814744244cropper.js
Preview:	/!. Cropper v4.0.0. * https://github.com/fengyuanchen/cropper. . Copyright (c) 2014-2018 Chen Fengyuan. * Released under the MIT license. . Date: 2018-04-01T06:27:27.267Z. */.(function(global,factory){typeof exports==="object"&&typeof module!=="undefined"?factory(require("jquery")):typeof define==="function"&&define.amd?define(["jquery"],factory):(factory(global.jQuery))}(this,(function($){$=$&&$.hasOwnProperty("default")?$["default"]:$;var IN_BROWSER=typeof window!=="undefined";var WINDOW=IN_BROWSER?window:{};var NAMESPACE="cropper";var ACTION_ALL="all";var ACTION_CROP="crop";var ACTION_MOVE="move";var ACTION_ZOOM="zoom";var ACTION_EAST="e";var ACTION_WEST="w";var ACTION_SOUTH="s";var ACTION_NORTH="n";var ACTION_NORTH_EAST="ne";var ACTION_NORTH_WEST="nw";var ACTION_SOUTH_EAST="se";var ACTION_SOUTH_WEST="sw";var CLASS_CROP=NAMESPACE+"-crop";var CLASS_DISABLED=NAMESPACE+"-disabled";var CLASS_HIDDEN=NAMESPACE+"-hidden";var CLASS_HIDE=NAMESPACE+"-hide";var CLASS_INVISIBLE=NAMESPA

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5079)
Category:	dropped
Size (bytes):	23557
Entropy (8bit):	5.1303986823440235
Encrypted:	false
SSDEEP:	384:sQd0yRyxuF2CT5AIWDY+nOMMTMr4+x5HWzTKTCIXchtCwj/q:sQ61xFgenOMs+b2asCi/q
MD5:	51AB257AA017404B028D45283C46F3E4
SHA1:	64D676B90E6E0FC832576D8DC76E1FA3BF82F43C
SHA-256:	A93822051D3D1F44D0A5B90D05DE813F562967A046274D3842E70922B26BFA09
SHA-512:	E1AD74AB74635BF6833E218280C14AC971690C195EF7AD017CA613B6FADD01C093F76D640F438AE9A33D5F8C9D9299B2419ADB3057A9118B82D1D222976409C9
Malicious:	false
Reputation:	low
Preview:	!function(factory){"function"==typeof define&&define.amd?define(["jquery","jquery.ui.widget"],factory):"object"==typeof exports?factory(require("jquery"),require("./vendor/jquery.ui.widget")):factory(window.jQuery)}(function($){function getDragHandler(type){var isDragOver="dragover"===type;return function(e){e.dataTransfer=e.originalEvent&&e.originalEvent.dataTransfer;var dataTransfer=e.dataTransfer;if(dataTransfer&&-1!==$.inArray("Files",dataTransfer.types)&&false!==this._trigger(type,$.Event(type,{delegatedEvent:e}))){e.preventDefault();isDragOver&&(dataTransfer.dropEffect="copy")}}}$.support.fileInput=!(new RegExp("(Android (1\\.[0156]\|2\\.[01]))\|(Windows Phone (OS 7\|8\\.0))\|(XBLWP)\|(ZuneWP)\|(WPDesktop)\|(w(eb)?OSBrowser)\|(webOS)\|(Kindle/(1\\.0\|2\\.[05]\|3\\.0))").test(window.navigator.userAgent)\|\|$('<input type="file">').prop("disabled"));$.support.xhrFileUpload=!!(window.ProgressEvent&&window.FileReader);$.support.xhrFormDataFileUpload=!!window.FormData;$.support.blobSlice=window.Bl

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10360)
Category:	dropped
Size (bytes):	10453
Entropy (8bit):	5.089704510744486
Encrypted:	false
SSDEEP:	192:kLR/hkAisAHf4Lys153p17zoWsBqwuLJLHg4LyTByIMOTorA:kLR/vhp3MWsBq9LJFgByVrA
MD5:	AF8AB36589315582CCDD82F22E84BFFB
SHA1:	6371EC0A8E242395C7D4D008D2B98E472C9DCC52
SHA-256:	8A7739925F4C03586479852DF840B7061948832A7FDA30C8C812D2EA4DD4C4F2
SHA-512:	843586CA1F88CB832BF401CECD43F6F98D2254F9FF070C716A84A57848C7FE2D68E0455317FB21D3F0354B28A2F0F58E69EFAE3EBF93FCA1F0CA7A1E6D2B8087
Malicious:	false
Reputation:	low
Preview:	/!. clipboard.js v2.0.6. * https://clipboardjs.com/. * . * Licensed MIT . Zeno Rocha. */.!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.ClipboardJS=e():t.ClipboardJS=e()}(this,function(){return o={},r.m=n=[function(t,e){t.exports=function(t){var e;if("SELECT"===t.nodeName)t.focus(),e=t.value;else if("INPUT"===t.nodeName\|\|"TEXTAREA"===t.nodeName){var n=t.hasAttribute("readonly");n\|\|t.setAttribute("readonly",""),t.select(),t.setSelectionRange(0,t.value.length),n\|\|t.removeAttribute("readonly"),e=t.value}else{t.hasAttribute("contenteditable")&&t.focus();var o=window.getSelection(),r=document.createRange();r.selectNodeContents(t),o.removeAllRanges(),o.addRange(r),e=o.toString()}return e}},function(t,e){function n(){}n.prototype={on:function(t,e,n){var o=this.e\|\|(this.e={});return(o[t]\|\|(o[t]=[])).push({fn:e,ctx:n}),this},once:function(t,e,n){var o=this;function r(){o.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12386
Entropy (8bit):	7.972981126285598
Encrypted:	false
SSDEEP:	192:mN6y7fclQwDZY2E33RZYkSCUG27wh5Rm+/or3KLTxmYYzDZOZK8zIPtNSqO7:S6OreWf3hKC+kvRn+3KRmYEsZKUfqO7
MD5:	3269AD25DAAFA42A0EE39F616C387230
SHA1:	618DFCD0A99C06C35959C46BDBBA53760B6F8C37
SHA-256:	2707795EFA814EA1EF0592E05EC50622B37DAC21498797C5D8AFA9CF7E80C3C8
SHA-512:	53A1B263E7AFACAA8A01BE07F4E042C7378CC79A24731BFE53C59504EE532551250472BC247D14DEE6DA6BFD1973C1624A965B2E84C6F6BC65FE1570FA333929
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/home/expiring-domain-outlook.webp
Preview:	RIFFZ0..WEBPVP8X...........}..ALPH.....o` m..j...#".........H@...$ !+..H.9.U4i.uD.'....W....={..gk..u.W{.k..uN.5].t.................................................................................(.g...:.k....W].5JW.....6.gc..7VP8 X/.........~.>m6.I$"."!T.....gn.:..^..v.v.{...b......q........>.>.s.~.n..^.t.r.`.....W...........w..........9x....W.g._[........e?.........K.....g...{...i...G.._.?-..z/.?.?..._....v...q......X.]............9......Q.7.....g..........K.....o..........O.o....L.....-................U.k.7...^.....~....5.....T@/7...i....i....i.Z9.u\4.b.t4.b.t4.b..#.'O.5...U..o.......m...=..D....0Ll-"&.f..._.p..J.......TKtP.....W.5..7...,..q...]S.W..<~..:.NN...2.....1k..g.$.98<f..!.(./BHY....y...$...6.J..w........wL....7{......N.C'.....2.\?>O.Hoj.[..j^.2aR...M....^.....)O....i....e.[t.\<Ac..1K....L..........k..\|3.......XG.......*=.....\|3....ke...W.\...X)`....X)`....X.....3...3...3...3...3...3...3...F..h.4..+..Z.N..'K.'@.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 290 x 68, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4843
Entropy (8bit):	7.924853519109151
Encrypted:	false
SSDEEP:	96:7yEr1KWiyHLFm4IAZ0tgOfzjRrqmGdMH1bM3J63fI+kBdb01ye:Vr1KWiGm4vqzbtWmGdKtCwIbM5
MD5:	76AF4342A7E8E04541014114975C7D02
SHA1:	AB1278B3610E2CE0DCAAD9CA984B89B155F56F5D
SHA-256:	E01ACC3A33D5C195B6B6AFB510A78D06D8015608A5F929E03B0FC12AA74E9A7B
SHA-512:	D934E9FF17A53C13CD4EF3BFFD6C2D86A06D9A23BF741597A7B2381616551C982D2CC86EE37D71DA18ADFA94254693B7303D8FE1E067FEA7C0BD3D261A59375B
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/mainsite2023/navbar-logo-dark-2023.png
Preview:	.PNG........IHDR..."...D.....%d8E....IDATx^.]k....^..U..U....._......)W....qN ....".....9.u......7`...3....<8.%X.v.@......gg..Y...7./..?._^o......?...k..{7....c.R..p.p..8.X/.`^..S.....%PZ..P......s.@?......bn.,.........P#tcp.<,!...^h...........).(.(.hr.\|A..v.9.......FE........._...RW.9_^q.......n;..."...2.(O....W..z...Qxw.X.wqy.....3:eE,c?M.0.... .z........6T./....2...!.(`..b...>..^..<.`..N..=..r>........(-.}W..!8].(.......?.......hh..............z=..i.\|......m....!80s.....n-D.J.....F.@.........Pj..WD...;s.v..~.!d.Ky......T....\....P=.6b.+Z^.W.....W.wS.W........!...Z{.....d.bf..;.......-x.+h.....1....T......W..\.........x.r.v......Y..F.....8f z..{...O........i..z6.T.X..YW.G.Km....D....h..(..Jhf..?......6...7..(%\|..}..>.#.#....t\..a....I.;q.._^.^P..>..zC!..!#...@g^yRss3.=WN.....D...FM."..l...R.~.l..E..}..h...3.Ht....f,.n.. B.f{E..8..[@.Z.d..-..Tc^..&.;.}.S-g.... ..c....cY..i.).w. .i....5..m&..q.s...[...I....'..v.nA(.>.;.)\.u.B.D.-...4.}sy

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	227912
Entropy (8bit):	7.998497613576763
Encrypted:	true
SSDEEP:	6144:qQ2W/2VBHZVB7un3Kmrw3+sZn1x5Ac2wralTuHQpBn:Nu97dmrw3+m18c2wrbwpBn
MD5:	4E6C2DC3FCD07E818A8F7F2E6D717037
SHA1:	8BB1A91D077B7153AD2AC24802767AA7460043B3
SHA-256:	3EDF2D3FCA63106E71202A15078937EE27880CAF89AEB92C0726DF7B9B679EAC
SHA-512:	06B5E8866BF9A74EF4A7E0672A8D243573481868FDE726281AC25A470EFBC1FF6C0C655AD5E65B1F2A90FF80E5F9524B9F29D1B4D7E8C503B5302DF7C0933BA8
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/home/manage-on-the-go.webp
Preview:	RIFF@z..WEBPVP8X..............ALPH......Gn.H....z.....\"...m.%=../..w"D.)@D.&....%. {:.p..LA<...Q...h.s.....V...K..K....c...j..d.ni..T.$m...$........lic...R.j..TwJF.f.[;.jx.J....m$G....^s...O"B..6.......K..........@.A.....+...G.z.+..g....B.QP..D....nU.P-.WJ{..2\|.4T..v.^V..@..q.P..&.oI.,I.l.8.....\.Y....s.5b.<A.-K.$I..8.9.Y.w.g.AmZ.m[.6I../..=. ..8e...5..$..UN....$.H...J/7..4....l.1.....RD.$.r.@..no.Pcw.>H....]...f......@E..T.".....I...)Mm......J......5Z.c..../eD.m[l..%)...}...x.....t.mR$9.{..=....T.P........e.d.y2..A.....l....S..KY.O...p..j.<.0A..,.i....!..........?.%.^.+.r...s...(.p.\..vu=..+{...Y.Z...N........e.,.........'....L7o.?.._....r.k.p.!...,...O.%.ol.j<o.x...?.-.W.!o%.K....%.Q...'\yi1%Q.z:\............-.....k....yi.7...9Y.bG...>..{../...-..-=...}...2..&.....N.}....2d.....ob...yY.k ..... ..j.W.O......0.:)......b.dae,.n....O....\..e..../.....{.=...'....y^\tL.......[2Z.......y^..z .[o...._.ajc:...[........W.....M..jZ.GQb.....~

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7580
Entropy (8bit):	5.137567498518147
Encrypted:	false
SSDEEP:	96:eLfJG9uriLe6KR0L79rVpdsIZZSnJxf/TPydCY9nFFaFapa44zAkneiAhO:379xUGdFkE4nH
MD5:	560C5C2E96F003B093C189C9BBACDB30
SHA1:	995CFD2F873465753D7FA22E79E2F56D9DCB45DA
SHA-256:	870933596F4B86A13E053CE1572706F58CD89E35CCE046902ECD550C351DE0B6
SHA-512:	5E4739A1710C0F5EF269A0B758535D6EFA914C60328E083A1005BD4B71EDD84CF885289DD8416F981CE84B8A595E19BA262D9170EECD78585DA1851F96366E53
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/home_2023.css
Preview:	/* Basic CSS /.body {..font-family: Switzer, sans-serif;..font-weight: 500;..font-style: normal;.}...h1, .h2, .h3, .h4, .h5, .h6, h1, h2, h3, h4, h5, h6 {..font-family: proxima-nova, sans-serif;..font-weight: 600;..font-style: normal;.}..button, input, select, textarea{..font-family: proxima-nova, sans-serif;..font-style: normal;.}../ Home page CSS /..home-top-container {..padding: 1px 0;..background-position-y: top !important;..background-size: cover;.}...tld-promo-img {../ max-height: 40px; /../ max-width: 110px; */..height: 40px;.}...page-content-section-container.carousel {..background: linear-gradient(to bottom, #3D9A9F, #70B554);..height: 700px;..padding-top: 0;..padding-bottom: 0;..position: static;.}...carousel-container.container-fluid {..height: 700px;..overflow: hidden;..position: relative;.}...carousel-cell {..height: 700px;.}...carousel-content-container span.title {..display: block;..font-size: 16px;..color: #fff;..margin-bottom: 15px;..line-height: 1.2;..letter-spa

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 115, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2865
Entropy (8bit):	7.860603819879877
Encrypted:	false
SSDEEP:	48:Z8/S3G//bL0gSF8VwOAvdHjihP3A2Akf6nRyqvEXoS1lpZgS820givaK0SQfPp0n:Z8q2jyrHjwA2df4yuUCSSgivf0ScPSRJ
MD5:	06513ABA487FBD75C82AD2883667CB5F
SHA1:	BC47B7308D5882D4C0E518582DE732D52CEBE276
SHA-256:	0C3C763BA16D6B715611C52F925DDA9073C9FE10788E8D4E25C9768E169F32F1
SHA-512:	D874311ED22E970018CF741C9E98448B87385094BB8CE3C92F0E370A07C0B3AD13558A4AC0BB65269128ED62AF77DEE3345488A603D044BE09CEB12FAAFA2C02
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...s............{PLTE.....K..K..J..L..K..K..K..K..I..K..K..K..J..K..K..K..K..K..K..K..K..K..K..K..K..K..J..K..K..K..K..K..J..J..J..K..K..K..K..L......(tRNS.....F.^.....,of.0....v..6..V=.M .&..R 0:...=IDATx...I..@.....8D.........c.w}G.S..........H..DE.@.....2.;..BF..5i.o #6..4g.A.U.{...=d.~...2....T-c...{.l..F?.).Oq"....q.~U2.m3..'......'.......\....>[.. .Bd...z.0....%.....Q.......S+.!,=.'..........O....i....tb.G.JM...Dn..y.N..U...!.Z._.=......E..........@.a.&k...F.....@...hP'k.e.......U..!...............~t...(H...........\|.&6.`...........Z..C..A..Y....s....uD.c.q.K9...E.. .[U2.e.5.......n.r.(......lk#..h.tu.uRV..~T.L.jf.o.Y.... ..l:(k;.R..V.[v.q!..Y.,-...L.de.........%...k..W.Y?]N..cJB..x.<...jd...c.&.U.ZU.*..k..FV.. h....,._.+P.....8F...../.....g....3._.H'@.~...w]Q...j&>.E.jYI..q...]...k...Y!a7..~.t..,..F..6.......-..CX..9.......ZV;......7..p......}\|....)..r...&...^n..O..rc.B.dk.......vY...5.@x. .R(\|D\|...ol..."....UP..

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	300
Entropy (8bit):	7.009815544168486
Encrypted:	false
SSDEEP:	6:6v/lhP2tZjx/kMmDxdv+3qJSpydvfXSrXkkqS7/5UWTYC0Kp:6v/7Otpxvwv+aSpsXYPT75UWsC0g
MD5:	AD43E934C476A3CD781F2FF352F5A872
SHA1:	0493281D663A2502505DB9C4C308FBF6FF93030C
SHA-256:	53BC3B526815C9D478D3CE04093B992B7A11159885346B2AB7D82400B223A79F
SHA-512:	588DF08C5879DFD7D6827CE4035CE9C03CC40E61DA22F18A69F6BAC0B568C89C80B0D9AD035EC3714368FAEE4ECC59E20B690CFDF3E6495068672CE7962FC8CD
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/icon-youtube-nav-side.png
Preview:	.PNG........IHDR..............m?h....IDATx^.....0.....\.....d.6.Mt.6...@G.QmS~.(P..D......,...8R...].K..4,.d.kQ.]I.y.uw".4c..O@1.=...T}.x.K*.)....VKB.k..;u.`..."."p.........f#G./...X......(n..b......wI.k{...<9i..Y.fg.f...p.s6nM.m.<.c......n.3:.G.....Z.l..yH^..2:........=........IEND.B`.

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	dropped
Size (bytes):	29483
Entropy (8bit):	5.303239896504778
Encrypted:	false
SSDEEP:	768:so/MPtWU9Ywx3UpxbY/Y3YOgQxnYeYZYHYZYVY+YSYa9Ld5jW58VOZt6INxoAKtx:RIT7hsZwuvLN54WAcl/3
MD5:	925384CD70ED00394EE33B9CD44E75C5
SHA1:	59830DFA2F71AC902347B40E7D476CE0E4AEAABC
SHA-256:	404427599DB08DAC767D2A7B834916E96F158464BA9E3CFEF42BA70B79B8C6A3
SHA-512:	60B11CC01CE1C9B72400BD95E5E5940089B3B93C5799546002DE9BB7D78B5B49CC3D6C7D89F57487E0CF116E004B3C449215F886226539CFF9F9051184AE3AC7
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	79560
Entropy (8bit):	4.79065218999817
Encrypted:	false
SSDEEP:	768:/HcsLBoHT+x2ABQ+27aH/nV82ySRFpNhhaokwKgOE:F7AABQ+oaH/V8tg5DkwKgT
MD5:	216622200B3697EAF29A24120D47117A
SHA1:	A032C9A8F91015D4DF5161A1B66836F5EFECD2CE
SHA-256:	555D0A07DA786106F75C13F3956A598584C981965826683CF5A0AF1C0AA44F56
SHA-512:	83E035B1E91DDB1E5447A994183224A5CE6C10F271A7C70E228105845B4B2DB1E88484DFA1BD2BE10CE4C7D1806E11DFC614DF528AFF81373D36575A216A85FC
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/chatbot_bubble.js
Preview:	let box_content;.let box_sign_in_btn;.let box_bottom;.let customerAvatar;.let customerName;.let isWake;.let cookie;.let last_time_edit;.let messageCount;.let updateMessageOpen;.let updateTypingOpen;.let lastUploaded;.let MiniReminderLen;.let isMinimize;.let emojiBoxShow;.let isTranslateDropDown;.let unSendImgFile;.let sendMessageLock;.// let closeUpdateLimit;.// let closeUpdateInfo;.let closePageUpdate;.let wakeCsLock;...//chatbot polling param.let chatbotCount = 0;.let chatbotDone;.let chatbotCookie;..let yellowStar;.let blankStar;..let checkGreyIcon;.let checkGreenIcon;.let isCheck;..// show:0-bubble 1-box 2-minimize.let BubbleStatus = "bubble_status";.// box_show:0-is_login 1-chat_bot 2-cs.let ChatStatus = "chat_status";.// sign-btn: hide-0, show-1.let ChatSignInBtnStatus = "chat_sign_btn_status";.$(document).ready(function () {. init();. initCategoryEvent();. allHoverEvent();. allClickEvent();. initGuestSignIn();. allMonitorEvent();. initCheckBubbleStatus();.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	12168
Entropy (8bit):	7.922085098684317
Encrypted:	false
SSDEEP:	192:JwTUPo/sIjVZaJ6XaqP6fF+Js6jAUZdFxl1Ug+/4VjTCf89dHzDgMXRloa+Cpx/I:JwTbZlFEMsfOpar/XUZzdDBzQ
MD5:	5F7A0212FF68FDAA29376F803D702E85
SHA1:	6209E353FCFFB17F42CECF3DF8A2BCF783716FFB
SHA-256:	FFA1EFB3FE74F80E134C275CE1A6C21341AFD24A1B54652B52595E4BC662E4E5
SHA-512:	45D1CFAB920AF19000C958699B7CAA45F430D309C7DB0AEA1A8B6358F656896A0C677AE0609728F395AE0A4896661907EAD2FCC4945B11D98CA500398E6E4E48
Malicious:	false
Reputation:	low
Preview:	RIFF./..WEBPVP8X....0...W..`..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.........:%.......... .0.(.s...;...[.w.m....a_...tY....k`..>......... ...j)..F.\|]n.....D=...........Ll.....i....y.....7...p..>..{.:...t...:.....g......{.x._....xk..u+..,.t..{%.G.[\|.Wd...Z....H..tYVRiB.XZrap....f.mf.-FFY_.G.\|....TVZ...M8<.$.............hmf...!.@...........\J.y.....))G.Z..{{.{..q5,G.kB..~ h....a1.X....E....O.rooj.)@D...W.I-.A..~E;..P{.\|z....o.`..(...Yq...8h.2.......u..%&v....w.......<d....> .=....w.=.../.E&}`Tg.k..{6...@=....\.cU........F.}.Y.[.s.i_Z5F.O2.1...>

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153123
Entropy (8bit):	5.5401520772555415
Encrypted:	false
SSDEEP:	1536:JSG6arvU/wAQWPyXpKHhitCnAyYHLaUbxijIHWvxDZz7/wurgsjWbcbWgQWZpVqk:sH1YrCIHWpDB74u7RzqNYPCfaQBZwK0j
MD5:	5D456342C4E7871B227A5F2CF9085E0D
SHA1:	1AB2EA688236C11E26D3667B93556109058143BF
SHA-256:	BD1FC79709E6D9400989E10645C953E7A1487EA4C32D44BA488428E4CE3A7FA9
SHA-512:	76BEBD9B8AD208751E0347971BA024585E45373BE10591DB60915BB31D864863D13D6DF77CC0AE522CA03EF904E531D4549EE15C5377B8674E3E37ED0795DA5B
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":10,"afs_gpp_api":0}}};var n;function aa(a){var b=0;return funct

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	4975
Entropy (8bit):	4.522797451367884
Encrypted:	false
SSDEEP:	96:8EJINL57ClyMG2Jqghk2kbPISCnLrUdY75HwWUlT2sRp:8EJINpClb3hTkjISCnXUa75HwWIT2sRp
MD5:	5BFDDB6C4F6F25236DB01C7EFB487DE8
SHA1:	051872573F2F7743800E6BC6AB4B75B5F2986352
SHA-256:	94B9CEC0679DA2C7D868A055FD8785C50585F02C45A110E0364AD76BAD745E47
SHA-512:	DBD451FFEC5D683A6FC1E7D63137E627330C40EA5892F538B015FA2E626C810B21D7467B5D9FC17FB4D478F6013098A11900BD4EB38F3247A1E6D260B852D2A5
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/1727814744244upload-photo.js
Preview:	$(function () {. initCropperInModal($('#photo'), $('#photoInput'), $('#changeModal'));. hoverAction();. displayModelViewAfterDeletingAvatar();.})..function initCropperInModal(img, input, modal) {. const options = {. aspectRatio: 1,. viewMode: 2. };. const URL = window.URL \|\| window.webkitURL;.. let saveData = {};. let blobURL;.. modal.on('shown.bs.modal', function () {. img.cropper($.extend(options, {. ready: function () {. if (saveData.canvasData) {. img.cropper('setCanvasData', saveData.canvasData);. img.cropper('setCropBoxData', saveData.cropBoxData);. }. }. }));. }).on('hidden.bs.modal', function () {. saveData.cropBoxData = img.cropper('getCropBoxData');. saveData.canvasData = img.cropper('getCanvasData');. img.cropper('destroy').attr('src', blobURL);. $('#upload-head-info-error').empty();. });.. if (U

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	24889
Entropy (8bit):	5.2387894641255475
Encrypted:	false
SSDEEP:	192:LIpEFVHDUqzLt5efm0Ijwa1hCfYG/ZIWX4JPWrMjTetjuS8Rqtjuw8RwjKtjunR1:LIpECfYh8iRQERngRwwL8dYKTMknwzDb
MD5:	1018ADFB0E6F40A9F8027DF0D02E1FE9
SHA1:	3DAC585E506356408735FE01A2E98BDB26DC3AAC
SHA-256:	9933C484C68A0958755EAC8F5CA3EA6FDA388F28DA365C11B9DBBF630031AD10
SHA-512:	89B283B3754F87758B2BCADDD072179067E6DE18F61C877FC014A33DFE4AB5438562C9A441F2DDE6B4FED32ED7F6FE7CA4417911B3B1B269D40B4AD44B019865
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/navigation_bar_transparent_dark2023.js
Preview:	$(document).ready(function() {..initPageContentDisplayHeight();..initNavigationBar();..initSideBar();..initDefaultNavigationBar();..dropdownSubmenu();..initNavSideMenu();..topBarMenuSubtitleHoverStyle();..navSideBarMenuSubtitleHoverStyle();..$(window).scroll(domainSearchNav);..$(window).resize(monitorTop);.});..function domainSearchNav() {..let scrollTop = $(document).scrollTop();..if (scrollTop > 0) {...$('.domain_search_nav_container').hide();..} else {...if (!$('.submenu-content-domains').is(':visible')....&& !$('.submenu-content-aftermarket').is(':visible')....&& !$('#sub-navbar-name-message').is(':visible')....&& !$('.submenu-content-support').is(':visible')) {....$('.domain_search_nav_container').show();...}...monitorTop();..}.}..function monitorTop(){..var height_px = 0;..var hasAlertPromote = ($(".alert-promote").length >= 1);..var hasAlertSiteMaintenance = ($(".alert-site-maintenance").length >= 1);..var hasSubAccountLogoutDiv = ($(".sub-account-logout-div").length >= 1);..var

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 118743
Category:	dropped
Size (bytes):	32269
Entropy (8bit):	7.991762627746389
Encrypted:	true
SSDEEP:	768:YtlKf5OwIOO2LTekZKjQOJe8xIlpOs2nG3al9/j3:sl45OwY2Hlp82rO2az/z
MD5:	B3DA72A4088A30A6F8AA98D42F2BD080
SHA1:	9C9EBB7093E28F1D09C5FBD90BABE56AF3EB12A8
SHA-256:	B8965E40B02C17FA187DE10C843B1107D4EC93088CF11FDF53B230C80135F19D
SHA-512:	7DF7C91AAAE7A26065F67BE31A02427E34FB04B98E051025D68C19F566773AE374DBDA85A040AF1C4E33CCC0EB81788EE19BC6D601D24B1630A8610814C4FE46
Malicious:	false
Reputation:	low
Preview:	...........{...u'.U.......(.QM./E.......\.;\...F.......&...8...x.&Y..:..(..8.=...Yk8....C[v.._...yT....n...;..6p....~.......i.O.00.R`{vh..%q)..u...y.....O.^dD=S55{..p...#b_...;.^~X.>..X2..#..sU..G.l$.a...X/`...(...y...01v.``...t...Z.f^0-.....g....7.>.u...k....i.Y.#.{...$...=..lB}..U.{.Q)..[M...J...o.lm....5.#;...R3.FR...`M....:6.U...2b.n2\gkkV\.1...P....w3C.N.H,...K..\."..../&.(.....x;.U..E^...`..~...5.K..~os..z.v.;..^o?..Fu=.....B;..9x[%k.\)..^\........../...4....7.2.>.=~..i..."k....g}/..i).B......vxL.....+bR...6.4........3QB\|u.+!y.z.d07/I.x..Ih.X.D.>z1#..2..6........./..X..?..N&.(L.....N..A..........g.1.b.i..q.....$bqL.dYD.3C.&>F..@.A8F.....&.(F....~y..{I......BT.e.y.>El.g.1.o...d....M..cA...!...8.A..7..x.E..s..+.z..AH.C..W....u8b..(N..c."t...6..D .i.u.<e..*.U.<`.M.z......MG..f..".T .^.x=...`0bQI.;"...g...c{dO.=..{.....5/.0.V...'l.T...%.'.../.z...({.Ji..J......2...(<`........Z.$V.e?..B".p.FV.!.K"/.... F.i/_d?(M-.5.c..^......0.A.'..`:.f...

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	986
Entropy (8bit):	4.9741916213796085
Encrypted:	false
SSDEEP:	24:Ya5sDemlJM5sDemlJLfTwVYwO5oRW/n6K+IPs:YamimlJMmimlJPbXoRW/n6K+qs
MD5:	EFE7D66B6FC7974730B797986D9ADA1E
SHA1:	AB0D4E92B8B6377888EAAE00D3A616DFE91D4B5D
SHA-256:	1E0FBFC75C90BD14A4829DE2D2B8B3436D87A0FC0CAC253468BF8EAC1E84DF94
SHA-512:	F10982DB0B72CDD233888B61BD184DAE537FCF41597BED5DF70922708DABD15D48E92EED65741DBAFEC66EE84717BF04C6723FE6084354E88BD59B36DE3792F9
Malicious:	false
Reputation:	low
Preview:	{"businessUnit":{"stars":4.0,"trustScore":4.1,"displayName":"Dynadot","numberOfReviews":{"total":1241,"oneStar":217,"twoStars":26,"threeStars":28,"fourStars":76,"fiveStars":894},"websiteUrl":"https://www.dynadot.com/","identifyingName":"dynadot.com"},"businessEntity":{"stars":4.0,"trustScore":4.1,"displayName":"Dynadot","numberOfReviews":{"total":1241,"oneStar":217,"twoStars":26,"threeStars":28,"fourStars":76,"fiveStars":894},"websiteUrl":"https://www.dynadot.com/","identifyingName":"dynadot.com"},"reviews":null,"links":{"profileUrl":"https://www.trustpilot.com/review/dynadot.com","evaluateUrl":"https://www.trustpilot.com/evaluate/dynadot.com","evaluateEmbedUrl":"https://www.trustpilot.com/evaluate/embed/dynadot.com","consumerWebPageUrl":null},"starsString":"Great","translations":{"main":"<span class='score'>[RATED]</span> <span class='text'>out of 5</span>","firstreviewer":"Be the first to review us on"},"settings":{"customStylesAllowed":true,"syndicationEnabled":false}}

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	29483
Entropy (8bit):	5.303239896504778
Encrypted:	false
SSDEEP:	768:so/MPtWU9Ywx3UpxbY/Y3YOgQxnYeYZYHYZYVY+YSYa9Ld5jW58VOZt6INxoAKtx:RIT7hsZwuvLN54WAcl/3
MD5:	925384CD70ED00394EE33B9CD44E75C5
SHA1:	59830DFA2F71AC902347B40E7D476CE0E4AEAABC
SHA-256:	404427599DB08DAC767D2A7B834916E96F158464BA9E3CFEF42BA70B79B8C6A3
SHA-512:	60B11CC01CE1C9B72400BD95E5E5940089B3B93C5799546002DE9BB7D78B5B49CC3D6C7D89F57487E0CF116E004B3C449215F886226539CFF9F9051184AE3AC7
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/2086896001510648?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C133%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C125%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	4165
Entropy (8bit):	5.289678119307705
Encrypted:	false
SSDEEP:	96:ZJIyVx2cgHppbdLGLhosAIN0/ZljDKV9FPut0CQHT6Z:ZyyjvgHg+s4Zs9cbQHTE
MD5:	A5AEE93D7EEC6DF82B3C3F96BCCEB934
SHA1:	55AF00C219B19EF6BF4EE3573C101D204DF33E8B
SHA-256:	B68C8502A141114E63FFE9FD975877DE775FC3AE43B22A6809C5662D054E3ECF
SHA-512:	9D7C805A02C0BD6D35D1023E08E52D102B80F4A292871F1708F1E1D6999073FA55938BC4FB84A8891E4B77E794BC23FBE977A42A647EB93FE8CA08F7A94EF232
Malicious:	false
Reputation:	low
Preview:	/!. jQuery Cookie Plugin v1.4.0. * https://github.com/carhartl/jquery-cookie. . Copyright 2013 Klaus Hartl. * Released under the MIT license. */.(function (factory) {..if (typeof define === 'function' && define.amd) {...// AMD. Register as anonymous module....define(['jquery'], factory);..} else {...// Browser globals....factory(jQuery);..}.}(function ($) {...var pluses = /\+/g;...function encode(s) {...return config.raw ? s : encodeURIComponent(s);..}...function decode(s) {...return config.raw ? s : decodeURIComponent(s);..}...function stringifyCookieValue(value) {...return encode(config.json ? JSON.stringify(value) : String(value));..}...function parseCookieValue(s) {...if (s.indexOf('"') === 0) {....// This is a quoted cookie as according to RFC2068, unescape.......s = s.slice(1, -1).replace(/\\"/g, '"').replace(/\\\\/g, '\\');...}....try {....// Replace server-side written pluses with spaces.....// If we can't decode the cookie, ignore it, it's unusable.....s = decodeURICompo

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	323146
Entropy (8bit):	5.609757748450466
Encrypted:	false
SSDEEP:	6144:j4GRIGKlq32gdMvO5K1x72Dej7dsEFVVl2bT+lBI:0GRwU32gelgT+lO
MD5:	C81CEE366C1A41330EC27D55000259BA
SHA1:	313469C9480E162F9064588015F58FC191BB3032
SHA-256:	7AF32842442F43B55803609D2DFC711B40704B4AB8FEFBFDC4A600C619574AB3
SHA-512:	64C0C4E020E8BC1E76ECAE0361B6C21E62669B6D12905C8B1F606BCCFADB3ACA8896B2635AACA0D233F5F89AAC1B8DAEF3A22B8C49CB35801A74ED7569D14F46
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-S0L3BZSLYB
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":15,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_au

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153126
Entropy (8bit):	5.540382432436095
Encrypted:	false
SSDEEP:	1536:WSG6arvU/wAQWPyXpKHhitCnAyYHLaUbxijIHWvxDZz7/wurgsjWbcbWgQWZpVqk:TH1YrCIHWpDB74u7RzqNYPCfaQBZwK0j
MD5:	209181C2118F5B0460C3D03A8099DFA5
SHA1:	0B0BDA9F0649236274CC5DD6E24357727A37EB12
SHA-256:	A319735061208265D8C2B5F45F232585AC362A8EA3C706D95B8F7EB1FC7D67E6
SHA-512:	AA36FD27A20DD44AAFADF491742A3365CAD2C87289A08CCDF76E3924C138FB4381DB0E71F4EDA3247EE82C8FFEE58BA72CEBDB77ABB1E4462E803A0D5C2BE4CE
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,17301433,17301436,17301511,17301516,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":100,"afs_gpp_api":0}}};var n;function aa(a){var b=0;return fu

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12121
Entropy (8bit):	4.105733545345474
Encrypted:	false
SSDEEP:	192:TcM/yHA4z78Rp1/CHAs7FRWw+VMSMbMPUUS2RyQTRS1RVW3/MwbyXNS+S2XtNJeE:gMkzYv1ARc23oZrRuR6mNjZh
MD5:	31A61A3C92161C1E7A3C61309FD0B445
SHA1:	4B0DE83B8629BDA5E0517CB76C39F97F5B3485FC
SHA-256:	E2DD3471094B65AB1B0C7A4E1AFE1C65B7B7D4EC6C08656E941A3D368E47AB94
SHA-512:	FFE7870C185B77B0ED2196812C61F31B920D5B6DF86BF53BBA642931292A9CDEF964C82B38E5A7FC1CE42E211A1E3D9A0A77C84E789D27B58FADDEEBD8C59512
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/1727814744244sidebar-menu.js
Preview:	(function() {.. // set default value click. var clickwindow = false;.. function headImageUpload() {. $('#head-image-upload-thumbnail').fileupload({. autoUpload: true,. dataType: 'json',. formData: { 'upload-head-image': '1' },. done: function(e, data) {. if (data.result.code == 0 && data.result.imagInfo != null) {. $("#avatar-photo-nav").attr('src', data.result.imagInfo + "&" + Math.random());. $("#avatar-photo-computer").attr('src', data.result.imagInfo + "&" + Math.random());. $("#avatar-photo-phone").attr('src', data.result.imagInfo + "&" + Math.random());.. if ($('#upload-head-info-error').hasClass('head-info-error')) {. $('.head-info-error').remove();. }.. }.. if (data.result.code != null && data.result.msg != null) {. if ($('#upload-head-info

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjU1MS44NTU6MGI4ZWYyOTcxNDc2ZGE0NDc5MjNiODZiOTRhOWUxNDU3ZWQ0MDkxMjg1ZWMwMDgxNThmOTNlYzFmNDljMjRiNTo2NzAxYmE5N2QwYzAz
Preview:	....................

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	19909
Entropy (8bit):	5.121041886655441
Encrypted:	false
SSDEEP:	192:WPQVtqLDFLnFoh/xWmEahGI1yKVSwKt0L9m/FPFasusmsbst56i5Ws:WPQVtqLDFLnFM/QjC1y3FeUs
MD5:	EF7AD6D7E99254B2FADEED9CD7D1C305
SHA1:	306DCEBB7224CD475D90CE21A9BDEBADE6CDAFDF
SHA-256:	43110EE356360CF4935AEDEF306914B6E41872F9B23A6C6F8D9B51973A164BB3
SHA-512:	D2CF61E5D78F2679E0619C3AC7DDD46F2D9411FCD6371EEFAFF9D18DA87C48C51D33331619694E6DB77FB12C44C4F8DFD4025A26D5D920BAAC48580FB9C3ECD2
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/1727814744244main-compat.css
Preview:	/TODO move these css to template sytle ();/..page-top-container {..padding-top: 10px;..padding-bottom: 10px;..background-position-x: center;..background-position-y: top;..color: #FFF;.}...page-top-title {..color: #fff;..text-transform: capitalize;..text-align: center;..font-weight: 100;.}...page-top-subtitle {..font-size: 17px;..text-align: center;..color: #fff;..font-weight: 100;.}..a.page-top-button, a:link.page-top-button, a:hover.page-top-button, a:visited.page-top-button..{..border-radius: 5px;..background-color: #ff3265;..color: #fff;..text-align: center;..width: 191px;..margin: 0 auto;..font-size: 16px;..font-weight: 100;..letter-spacing: 1px;..display: block;..margin-top: 60px;..margin-bottom: 125px;..text-align: center;..text-decoration: none;..padding-top: 11px;..padding-bottom: 11px;..transition: all 0.3s ease 0s;..text-transform: uppercase;..font-weight: 100;..letter-spacing: 1px;.}..a.page-top-button:hover {..background-color: #F42056;.}...page-content-section-container

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 15576
Category:	downloaded
Size (bytes):	5733
Entropy (8bit):	7.967880540535568
Encrypted:	false
SSDEEP:	96:Pnf/DAXDRy2KW3MvZhgmTNImBB/zNj7fzyJpEO4koPcnpf+/H8DrxnxWwC2n:PfsZaZhg2xZj3bO4ch+/H8DFnkwnn
MD5:	2C35DD6CF3EC0289371F5194F5F2E972
SHA1:	2926E9243417B46423F8EBDF10B4F03B7BC0F91B
SHA-256:	D060435A1E063BCCB3A22B43517D1AFBC6D3A593A6D15CC2C8EC008B3F9ABEF6
SHA-512:	ECCDE7A6F5BAF88AD2A917A11D8388B9D963149E274685A77BDC19E3162152CCBA70C40F668C551FB38E3D11D717C2EA0BD3452BD45E6F60E55BDAFF87242ABA
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Halo+Smart+Fence&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&pcsa=false&nb=0
Preview:	...........[ys.H......Z.7 .e.C.b.#N.v...lJH....H...w...-.q8.L.....e#..\.\.ts.~y.z.:a.`h.n...3.@..f.v....T.t2._?\\|t.?...f.....V...&7..........z......Ekgg..\.?.G.Y.iP..`.;..N...0././....\|..x.i.eX..j.=..P...&'...}?..<Y......j%8..^mx}.\.7..S..n.W.}l?..G...w.w;.........\|i...[....y:......MK...v\|-....^>?.L.IIq.n.......<R.....N.$.u.p...`.....F9...z.R..p'.f#.b.\|.R...y......<..A'WM..}...'#....'...4.?Y...,..+.t;....B..=.r....u.@s..v`.6?4........b...l.\|.^.`fs6.k)...V.}P...tOe.o........s..=;....Ru.{.U.i?M.a.c..u..A>..!......p...Io1..y\|........7.%x.c..h........E.jZ...g{`........ ....Y.;.<...<.....C...p....ts^....$n..6.>..z}....j.E..5==..{k.u#..8.&...p=`q.=h......]o.Q.:b0u.{]..S..G...d......=.......2.Q...V..S..1v>#V.P.".-...F..&..m.....P.XU.T...!%....q.)7.......r.nZc..ID.....g...X..........uG..(Ui..9..$.z[P.Fi{_L...s.}h.Q_w...=.<.T...mu....S...[.\|...\Qr.b}h@D.u3.O..I.:.;..Y...1.G.O........7A..T.p..yr.\k%..P.W:.c%S....,?7..7.P....9.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 329204, version 769.768
Category:	downloaded
Size (bytes):	329204
Entropy (8bit):	7.996806643337293
Encrypted:	true
SSDEEP:	6144:mBnb+K2f2sr8Yf7thk3sZ9Md1Mr+4nifNKrGMGG/64fTioUkqRaEwB:mp+Qsr1fw3n4rBifNKrnR/64fuoUveB
MD5:	6EBCF9F18DED9C54F71EC1198C32AA52
SHA1:	06695B645047B29C333EDAC0C78A97922A135AD9
SHA-256:	F350C708B5E7748A452B4B98600FA49127166D995686E260CCAFB58D51A4EA62
SHA-512:	3E1D714CB85F332718496FB050DF282F71A0979EA71884BDE441E229682070BFC66CC3633DD89BD47ADE6F50F808E94CC5D8860A4938DE7B29427A43B938E042
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/fontawesome6/webfonts/fa-solid-900.woff2
Preview:	wOF2...............p.............................8.$. .`..T......T..X..d. ...t+..8....<.....s..8..\.C@UU....j...O....?..o.........q....l...............j....Y..{.+!FZI..v...?..+...U...'3..G....N~/.j.c...dba..i......m.=\|.v..^.....;..\.......;...G.E._.Vqe..`.. <.x}....kL.;wa....7.?....Q..~Q....YS....f{.N.0..8../5Ii....xF....~..:...X...~..O.4..'-...f..?......F.h..J..{{..{n.>.s=....`...1.2.....,.$.H........$...RYH#..R!...'-W.~...._!).j..A-U.%u...'yl...........>..l`was...;.!].....8.^.".......N.^H.....t....!.'...af...Y@..K.%.....~...<.BQ8..UkS84..a.d..s...7.{....f7....../...\|\G.B..8..sHdB.......WZ....">.4E...S..y..t.........H.?,....-..P3.B...5..{.....jF55#...z.@.'..#.....=..5.D..P........."MO.G.....$.^Y$.3..YE.....'x.....e.r.....>.UW/..^.r.a..^.~n.....h.+P1...v.C4..Qq...j...";6...3~....;lU..^.9.ai..:.../......"M....U4.c2..{..ZAD..L..1T...k.YU..*./c.....Z.Q...q....}...[I/.9....C}..%[...&V..B.2L.L.v....B.$`.............F...!kY..X....]...

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	17691
Entropy (8bit):	4.993483387522818
Encrypted:	false
SSDEEP:	384:s8nwBGENLWnwB6xio/jLr/S1aK2RnaK2BTaKAz:s8nwBGEZWnwB6xiGjLr/S1aK2RnaK2B2
MD5:	504EEA4220AEEC4089D7EA0C62C0CD67
SHA1:	3DD9BB9976AED26968E6B1607D7FED4231B8D777
SHA-256:	DFA8A42E80F269E1D1B6DCB63803753F063419C51B7CB863B8DA4C7D0B55D930
SHA-512:	292D71942569335A4C62E13F45E1EEF762B1218F7C0F937282077AED56931C661B4F4DB88FC46B3F4B3F9E99AD40E02D7F790F4139776C91C5FCC7D59AAB2CD4
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/1727814744244responsive-compat.css
Preview:	@media ( max-width : 549px) {../* main site css/..h2 {...font-weight: 100;.../text-transform: uppercase;*/...font-size: 28px;...padding: 10px 0;...margin: 10px 0;...letter-spacing: 1px;..}..h3 {...font-weight: 100;...text-transform: uppercase;...font-size: 17px;...padding: 8px 0;...margin: 8px 0;...letter-spacing: 1px;..}..h4 {...font-weight: 100;...text-transform: uppercase;...font-size: 13px;...padding: 8px 0;...margin: 8px 0;...letter-spacing: 1px;..}...page-content {...margin-top: -20px;..}...text-xs-left {...text-align: left;..}...page-popup-menu-container {...width: 0;...height: 0;...overflow: hidden;..}...bottom-label {...text-align: center;..}...page-sidebar {...position: fixed;...left: -250px;...top: 0;...width: 250px;...height: 100%;...background-color: #fff;...z-index: 9999;...overflow: auto;..}...page-bottom-menu-dropdown {...display: none;..}...footer-container {...width: 100%;...padding-left: 0;...padding-right: 0;..}...page-bottom-menu-dropdown {...text-align: center;.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 16376
Category:	downloaded
Size (bytes):	6203
Entropy (8bit):	7.967127002054035
Encrypted:	false
SSDEEP:	96:Td2XK0V1uFY8+Z1kbzQmClqlLn5criFKI6dkhOgoyTX6Zej54D5ZUXJtSnEQgxqG:6DVd8+Z1kbz56wKJUOjy6GyUZtPaRo
MD5:	9440421FDA83A9BD8BA6DB76687B32D2
SHA1:	9A81C127C318D754D44B2DA33F04CC7A51C5FADF
SHA-256:	495887F75C6C5A68C608050363516C6F9DF7D61EBE091C35B219459B012E3C11
SHA-512:	E5896AFD8901091B6B632C6D569E1462AAD1448A5730FD3FAF47B4DF507C675BB98D1B6889A98F3D9FE7C036EECAFDD59BA7FA4C537CDE2CFC3742A2C6D0B448
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/
Preview:	...........[yw.....ST.y.O....6...q....8'.#...B.%a.....w.JB`.N..>s.N.T..n...7...v.....}.uH....=..].5F#..&..f..U..W..1x4Z.....Z.fV....k.~..?.................\......8...c.9......:7.......yKs..}8...6...^.=..5_.;..Nk..j.[.qy..U........}..y0./...r..>.j.g..N=.^.;.....\|.^.;.A..0.......t1...........N...v.jb...J.7...b.......~nN.H0[w...w..!..G[.?.c..`\0....c5q.:.w.L{1..f.j".. G...1.=P^....^"....c^M<Z\|6q. 6}f...j.G....f.c..ng\|C.y5.f....Q&p3=+.:n.;.....~.Y#>p. k...l.........^M....J...J....i....tuc...cV..S.\.,.M\|.....4k....yXv..A...1.s....p.}...f.......3....l.C.......o.n...^....../X.m9<#$.`.yk+Fd.O"2.W.y.'.y....[..wGD.D7M..g<..;...n..6.....>.+4!...."h.......X..p..dLn....N...p.1.\|.0..D...u.o9..i.r..ZD.Z.k..#,jh&_.@..."....P..........E.P.2...z.k..^...(.V.@..'..%y...i.)3...d....2.nZS..$...}..i..!4..}$,.fM./0..C....j..].\...E..ky..s &...>.l.;~..5.T...m.....S...[O....X.(.W.?4 ......I.$B=.U..irGL....,.!%o.J..#Ob..pe.yr.Rj%..>%./:6c%U...d,?3..7.8.`.H..m

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/ls.php?t=6701ba92&token=d0780dbd51096fc9cfd139f58a8cb808d162be33
Preview:	{"success":true}

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	30366
Entropy (8bit):	5.317834606020379
Encrypted:	false
SSDEEP:	768:so/MPtWU9Ywx3UpxbY/Y3YOgQxnYeYZYHYZYVY+YSYsrqEccBpHzGAnLYDZaX0Du:RIT7hsZwuvLN54WAcl/V
MD5:	94174C7A06813115A524C0C153C369EF
SHA1:	CF1EE4041A812745AA6A94127C3AE651AE464D06
SHA-256:	7ECC6CCD19BB06F2CF6406A99B5693D944524113834A1B55ABA930A04028842B
SHA-512:	7432B39A9478AA60A3FA283E2400F373C0FBFA66FD84FF6C10FBA6627E5F8823FD9044723AA4B604797C558B8416DBEDE87C32B91C1170257032ABF11E4AB540
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/655348809639676?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C133%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C125%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (18702)
Category:	downloaded
Size (bytes):	35913
Entropy (8bit):	5.348504366189287
Encrypted:	false
SSDEEP:	384:2ni0XP/Z1QuiS4u1bdHeDCYYeZ0EimiRksJcKdtjOr:2iIP/ZOs52YI0EFiRksJcKdIr
MD5:	17A8FEFA85C74FFA1A1F77378C09E4C8
SHA1:	47EE321A5B3FA788555D87283520735D85570B22
SHA-256:	6B6F1131FDAFEB3802FB1B67C0629142DCD9C8E6C7B798CF1C2388649D12FA10
SHA-512:	C2C3C7D6A3579BBFAAAB2FEA0FEE57D5120DE6EF32C0E2A6C239C68ACAD2BDF37D0AC0DD3D5479B548C78E9E84C6D63F13AFEF2104DCB141764823299F8D364D
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3De088a5f8d1e2e868%3AT%3D1728166492%3ART%3D1728166492%3AS%3DALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NTQ2Ljk0Mzd8NDk2MDI2MjZjNjU5ODZjNjNiNDBkZmRkYWE5MTFmNzNiMGEwMzk4NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2595154941770008&q=Casino%20Online%20Real%20Money&afdt=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301542%2C17301266%2C72717107&format=n3&ad=n3&nocache=3781728166547087&num=0&output=afd_ads&domain_name=ofinovardweb.cstrikehost.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1728166547090&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=855&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DCasino%2BOnline%2BReal%2BMoney%26afdToken%3DChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjQ4OS4wODgyOmEwNzlhMjRjNWI5ZWUwN2YzNmI3NTcyMDcxYjkzZWUwNGJlMDkzNThmNWZhMmJkYWRkMzIxZTNkYzRmMjVmMzc6NjcwMWJhNTkxNTg2MA%3D%3D
Preview:	....................

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 388900, version 769.768
Category:	downloaded
Size (bytes):	388900
Entropy (8bit):	7.99731767570969
Encrypted:	true
SSDEEP:	6144:RYYFamiEXWy7gNtlIg/TWPJDg9+u5+BKhDnlKwLhsiXqU1af8vl1zMelmm5uBJ3F:PFamBXWxlIgaPJk9h+BKlKYhsiXpaf86
MD5:	A927362A975051E5D7361D860D8FFBA7
SHA1:	6B97F2EA63D6E7E04006D0366B87697FB4A594D0
SHA-256:	121B176974226DBC9B1AB227BECB657D40B88D2BB7010A746C2360C31D7C373E
SHA-512:	AA2A13E377D7079AB805BA67F2C3D013D38864B8CA0F47349559A99BA2A64FC937E0B33A82445C38E322D413A5DA5A21146FFBA7DB7329F4CFE46E7ADC142AD6
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/fontawesome6/webfonts/fa-regular-400.woff2
Preview:	wOF2.......$......4..............................8.$. .`..T.........X..\|. ......<......?..H.=.G....@.>.TUUUMH..P...?..O~.._..w..._.................l.............V.~..r...N..N..R....)...!..J..[...-..v.......#O.....s..0...C.. `.\; K.c...a....y..>..7g8..p...>r.g.....j].<=X._.....6HR..].C\..).O...)t&...&....7..].5%...o.f..t0...j.R.:..........?...6O.7..8...?b..s..X....^...vD.j]=3....'.l.;sy....p8.D8.......c...(.T.)..M.V....t....(G8.m8...tZ.DK.........,...hu.w.l..n.+.......v..+h.........;%.'v.U.g....z...H{...J.`...q..8......h#.'K.z.^...uOH=.3=.{.g.gw..#+.%[.g..q^G.`c.5.,c.........&.[s.."{..\.%..>...u.;].>.......{..S..7.....l.jG.dk%.....c.^.f..@.hA..x...).'.........B.I~>Jk...Mg..}.~.}.).i....fF....2......]..H.^..&..&R.IC...I..Mp.Al%.....-..e[.mY.....V._..!C.z.f..sD).X.zvU.+..]F^#.e.RB.0.2.......RqQI].v..N!q.3..s.O.....0.av.4..P..Q4.D.v.......q..s...BZ.Ch..K./...e...,kj..........U........@0(... .@..X.P.@..I._CR==...O......H......P.,..s....

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32025)
Category:	downloaded
Size (bytes):	35951
Entropy (8bit):	5.180198689709046
Encrypted:	false
SSDEEP:	768:e8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcKGf3Z1RQ:Ne78+S1Klvla3ZrQ
MD5:	B889D0E0E360373791A7478530BFC61F
SHA1:	A45320736B67A1C255DC734B162EE0C67F01393C
SHA-256:	0183EF0763E720F30973508786716B02890ED82EC71239B6EC6DEE24B9DAE7E3
SHA-512:	B5E3BBC1B898AACCF086770A5A068EBEA01CFC9C71B7F972F0FDA4135B3F854D2A9EFA2A5F9701B3CF787A954330C2B4A1B097812C8D9B1CF290FB119F79BFA7
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/bootstrap.min.js
Preview:	/!. Bootstrap v3.3.4 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12831
Entropy (8bit):	4.806871850914926
Encrypted:	false
SSDEEP:	192:11VKxoKNVdcRV+2Q2ru42FRFw4b+QjtnAmuhnXqXQQZnsPnanXgKK2581yNLY+2P:sw4tpuZoQnM/LcsAXUWqqauc5zPfYD
MD5:	30C67D9F7CD2F344F107A49B2AF53B0B
SHA1:	CE1F4D74BACE0DCCE66106FF27E70C344DE29924
SHA-256:	EE67B98F538D32C47009A7FFFDC66C9C35D4294CDF1C75F8586C9CAAB2C98E5A
SHA-512:	369E8CB479D0287D09A319F418BCD1986BFDEF2342BCBA1E98D90E306BC5D80410D4C82979552193D35B69A9ABF5FCFD1DD6BD9B3BA620AC17835B2CE9CD6615
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/home_2023.js
Preview:	$(document).ready(function () {. initPageStyle();. initTldAdsClick();. initHotAuctionClick();. initRegisterAndTransferButton();. initAnimateEvent();. initDoMoreWithDynadot();. initDomainSuggestionLoad();. domainSearchFormSubmit();. $(window).resize(initPageStyle);.});..function displayDoMoreBlock1() {. $(".do-more-block1").removeClass("block-inactive");. $(".do-more-block2").addClass("block-inactive");. $(".do-more-block3").addClass("block-inactive");. $(".block-bottom1").slideDown();. $(".block-bottom2").slideUp();. $(".block-bottom3").slideUp();. $(".block-img1").fadeIn();. $(".block-img2").hide();. $(".block-img3").hide();. $("#current_block").val("1");.}..function displayDoMoreBlock2() {. $(".do-more-block1").addClass("block-inactive");. $(".do-more-block2").removeClass("block-inactive");. $(".do-more-block3").addClass("block-inactive");. $(".block-bottom1").slideUp();. $(".block-bottom2").slideDown();. $(".

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 55734
Category:	dropped
Size (bytes):	17138
Entropy (8bit):	7.985486819045762
Encrypted:	false
SSDEEP:	384:1bXp9pe0GiXw9f00mCbhwBnI9gX4yCq0Pj3IBaINXBUw:15MHmCbhwjCBEBFX6w
MD5:	732769F238A36CB44705F2D6A18312EE
SHA1:	4145A129B7285EF794924619940D72DB4C03F1A0
SHA-256:	AC450BC0F8F949594349262A4F1AFCCD1B1B2DB4B8AE231BEB3D23F673120035
SHA-512:	4AE2753606AC2DC30D53DDC78FE1D233ADC8F2DA8727629A73F8B28B9EA2B458511043F38ACFA8EBEFAFBCA2D92F9B3EE1B80761C1C892DE6BFA2D0E19C375D5
Malicious:	false
Reputation:	low
Preview:	............v.F.'..<..>c.-...B..8.d.3r.....u. ...!......\k.d....{....W...U...)..;.V.{ED.P.k............6...\|T..#3...i....w...QvZ.._...N.Q>.TWm6.o.iq1...de....qD..2....(..,...m).....<..}U.E9.'y^..,_.V.b.LGO...@{..9/..L{.._~<....~..w?~......@..o.EYW... .O.3s.,.......1......>;M..K.......!0...i&us{...;........ib.....:J...j.`V.H........H.6r.N.T..l^kGc.H.....MU..eQ......d...brQ&...(..t.[^..W.L.1Vw.~.O.h{f8.o......ym.RP-..,.iY.sC{.&.^2.5.,...G.V.jw..]..b......(.4.(........?..Yz...jzU'....n.-.7..h.....:{..Sk#&If.Vh.....F5....I..W.+..tc.t+........#.-.R...8....d....v......<Lb.....w...].n.j..ak6..&.3}...X;...!..ww[.lY..i.......u.K.S..L.E..u.O.N=. .3..........7...N^~......W.........99.c].W..~Y..b..eUo.o...j...A... ....Q....f.9.J.g..eR_......O..X.s..Qo...K.evVzU.kP.D[....<...;5V..C.oWS..e....."J).z..f.........\...w.r9-.ER'..6.yZUS..R..z.....}.........O.....7...;..<.....(Mt,.].y...7i.<..).Nl.=m.....d..U.M^.S.Z/.Z...]#....b..}..&?:...j].U

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x911, components 3
Category:	downloaded
Size (bytes):	49814
Entropy (8bit):	7.572047969387504
Encrypted:	false
SSDEEP:	1536:qNrCkY88baq2wl/Y1lGxEYB4woyCzgeetrTPZ:wCkaaAl/YIBDohgegrbZ
MD5:	63A46EFCE19A1ABFE4AD8C4076D1F2CB
SHA1:	AED3E80A3C3C74485D44B993A5D08E12B2C2380C
SHA-256:	1F039C6DDB095850A4E3727609CA6A8A9E11570EC3C6FDBCEA1A8A656477FA2A
SHA-512:	50D581D9519D9EBB6C43BCC0F9C5EE31F84CEA795A106614259AE87044D5072B83C7F3CDF3611511EEB4DA0D255A595DB10E56B3BCE0D20386980C508175F6DE
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/home/header_bg.jpg
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....)?.>.q.W.y.O...)....N).....Z.4.b..N3..x........i8.4.. ..H.{.I......'~.....S....?.PNi;....L.{Ppz...1.y....){..=).C..#})zR51..i....d...<Q.(..LB.qI..Q.=.<S..i.....!>.i(....LA.qH.v.......Fx...LA..{Pz.PzS..rh....."z.g...B}...'...4..!:..[.b...sFs.'......;.b..{.O......9...!.......By.z...R....4....i.x......f.4...4Hg.74..U..0..'... =i.....4....!......!99..

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2188)
Category:	dropped
Size (bytes):	57725
Entropy (8bit):	5.523067922465343
Encrypted:	false
SSDEEP:	768:etkI7pGt8BbK1WYykZ7g4KBbamZhzBMFeV6LsHUwxE4Fv:etkSGOKzpiFBbaEhKhwxHFv
MD5:	BF4DFCF23EE87C11EFE494EC3DFD4CC0
SHA1:	B44E5ACEFF24455C81D4B64E8A21A6BE6C48866D
SHA-256:	2B1C747C8C1A690C797EBAE4BCCD3C4298C4F6ADC5A75045CFF7165A402BB33A
SHA-512:	03C075F120174F081B764FD9A658596432F7BD9A2DCF0737167C759AB76C290130381AE4711C5A40DBD90B601146433C3B1B46EF16ED76AA5EC536157A2F8DAD
Malicious:	false
Reputation:	low
Preview:	(function(){var n,ba;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var fa=ea(this),ha=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},la={};function u(a,b,c){if(!c\|\|a!=null){c=la[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in q?f=q:f=fa;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ha&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?da(q,d,{configurable:!0,writable:!0,value:b}):b!==c&

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1967
Entropy (8bit):	7.860134872051551
Encrypted:	false
SSDEEP:	48:c0kKz4RZ1S+ens2hGXujz2UA0m8M/6+YkDhzQJkqyyyyyB:c72Oq+B5ujzYb7X3LqyyyyyB
MD5:	7089F306CE8F82BB921E284CD8A4958A
SHA1:	22D3D2812A78BAA261A5D8C0CBD379E088AA53E2
SHA-256:	8D02C69C19D2A4E2A41BD36B83A5E165B9171041F7B1412F547CB5E401B1A88C
SHA-512:	260F57541EDCFAC9A5DE02801E072FFACB0FD5A7EB22C684A46A0FD52D33CA83BD38EE03891A538CC1917B74226BA4747C32CC6973CFA5A167744C8E4F33FD78
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T...vIDATx^.\.u.6..7h6H7h;A2A2A..P...Y..L..Q'h:A...NPk..!.I.A.w..........>."@.^\|...$V..C..0...C..0...C..0...C..0...C..0...C..0...C..0...C n.F./.l.<I..dz3K...$+.r.[.<I.?..wI..H...$hk.....i......M..7H......F......f..$.....c....MD..+#F..j.sJD..m.6-f..jb..\t..^......l.u%c.N./...+G{..@.\|\|.XZ\.._...p...ra+.5d...U.. .....jS..pT...?l...2).$.._..sq....HF.B....4!...i..1\...02...(...%..i.Nb....."...%.NZ..!..}j..f.. ...4.6.HF."+...$....$.p...g...d.5..../O]a.t.........[....C3.\|.......N.i.VmG.........UG.9R...$.N....w.....K2.!5!%...K..]zI..Q..v?'..{I..a/.l.j?z.U..e.$..Oj.....L.f.m......NN....j+...........-...H.5...s_.T.7..68.~...v?>o..{G..DF+%^..,.!..^...IV.6W..........M.D%:......u.I.W9. .npT.<..)..C..y.h..UMf4j.e[...\|.......@.{/........=....x#.O..ys.....^P..J.P{.F.....o.e.........W..;.y..I~..<B..0B.K...<.<...'..._....`<.9._.......I.^M..@U...m.).<...5]RJ><..,.n.`.<.s..V.x.6.31....R...S.~D_[....?!.O.......]..h.!..F.......

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	7650
Entropy (8bit):	4.8471980496577585
Encrypted:	false
SSDEEP:	192:TaYMGupu/1xcyf1kj1V61aH1i11Tsnon1hG1eBI:TaYMGSSX1f6K8OOwOMI
MD5:	168D1566DC57C30AA03A6AA4B90634AB
SHA1:	24D1224B37D571DCABEE52645ECDBB81CBC55955
SHA-256:	C1BAC1B5447B443CCB97C6453329AC8997D8FBEF799FA48D357E3DAFEB35D2DD
SHA-512:	B424F88AAC7E6311C035DE3D9D8B56AB460E52666D52BE95B958D2847A55666A86BF89C8C71094E7DA32991BA32B6CA47E8B8F4716CE07E430A6898347709E1D
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/switzer/css/switzer.css
Preview:	/*. @license. . Font Family: Switzer. * Designed by: J.r.mie Hornus. * URL: https://www.fontshare.com/fonts/switzer. * . 2022 Indian Type Foundry. . Font Styles:. * Switzer Variable(Variable font). * Switzer Variable Italic(Variable font). * Switzer Thin. * Switzer Thin Italic. * Switzer Extralight. * Switzer Extralight Italic. * Switzer Light. * Switzer Light Italic. * Switzer Regular. * Switzer Italic. * Switzer Medium. * Switzer Medium Italic. * Switzer Semibold. * Switzer Semibold Italic. * Switzer Bold. * Switzer Bold Italic. * Switzer Extrabold . * Switzer Extrabold Italic. * Switzer Black. * Switzer Black Italic. ./.../*. This is a variable font.* You can controll variable axes as shown below:.* font-variation-settings: 'wght' 400.0;.. available axes:..* 'wght' (range from 100.0 to 900.0)..*/..@font-face {. font-family: 'Switzer';. src: url('/switzer/fonts/Switzer-Variable.woff2') format('woff2'),. url('/switzer/fonts/Switzer-Variable.woff') for

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	308
Entropy (8bit):	7.122744111197635
Encrypted:	false
SSDEEP:	6:6v/lhP9pFSkdSX6eRLbs8FmtazsyD05UxFlAD4AuDPZeup:6v/71tSXZJ7/zpxFlaip
MD5:	C1BC03D244A98509D93055D3418CAE6D
SHA1:	A88E65FEE0316E1E2F2DE37F3DBA9BF3E409D787
SHA-256:	5EF3979B14323A09381CD9344EAE9966FA1948115C49FFB61CB45678ADECF1B1
SHA-512:	E70ED089441D1F4A64BF7A02B8CF4DF2C2F685EC085E8341B7C7D2D887E831AE72D7F5C0966ADB4D777DE3A9E8C0B571DEB39DF4659D0E4EB97E55FE480C685E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............../\....IDATx^..m..0..+..H@....HA....$L........$.r...w.nm..M...r..x..s..w.{....`...~.......6.u.....a..q.9Z..a.1.l.cv.d.AU.N\BD....T..1...bH..J#.l.G..gY...3V.=..d=.CQ.hk..eM..z....8T .......D.Y....!Ki...4[.IA...........EX....nH..AQ2q..[l..&.Q_.o...#m~...(...R....IEND.B`.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	39386
Entropy (8bit):	7.982927056333054
Encrypted:	false
SSDEEP:	768:JZ7XAaajmL2VPv7aNK5nQm+ZNtvFvBUWQdnsdsxMLJHwnxccJD0OdEMmrT:X7XAaajmL2hidm+ZHvFv2FYVHpIIVdX
MD5:	F123FDD8E8AE441936C29BE8EFCC6EB0
SHA1:	462E6D8BD4C1E4F6DE1F141732B6E30ACF563727
SHA-256:	1D1DA935F1AE0E09A16FDBDFA1B9BB397E34F738A19A77A2427A32DA9AD0BDB8
SHA-512:	0EBDFAF04271AEFA8C58B967EEDA4C7C1717D54CC5513991B571B7C78BD0CB73D8A6B1BA2ACB8D08AC03F5815E985479BDF55F9444BD3A8D822F2651C817CBAF
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/home/make-bulk-edits.webp
Preview:	RIFF...WEBPVP8X...........g..ALPHD......m....mt$"&@.Y.g.....6..p!.. .AZ.)..Am...0....$...{..;.<3...............E.!.]$.NI...V....z...Z.N7..E....j.........;ImzF..."..........?.... :W..d.....j..].8...W.r.\|.8_m.......................................................................................................................................................................................................................................................v..6..d.r..+vP.......d...t.R..@U,..T.Rp2....0..K8.I...4S..q.@P,...JN.D\...XK..j...Z..>Nk...b.2F\.VP8 R...P....*..h.>m6.I$".&!4.8...gnP.S.u..:........?.?.....o;....rzd4..g;...3....!.UR~K.>.....ob...G..`.8....1...+_.....2\|.O.........>....@....=..............}.?.._.....{.........?....d...q...W.......>@...}...s.).......{...W............d...........+.......~................}/...?.z.....?.~....U.....c.'...................i...!....{...............K.W........g.?.........

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	774
Entropy (8bit):	4.738931031768091
Encrypted:	false
SSDEEP:	24:57i/W+TWN+7i1WJVGWNUN7iAWdEWNNF7iKW1WNI:F7QJbbGNZuqYO13
MD5:	65C25284DDC0879FA1A32BECBFA28CA2
SHA1:	E2BD66C72B15CDEEBC94054B168D85930D42A4FC
SHA-256:	28C14E4A19B80F45C86080284B92C57BF95DFBAF5AE23C26063C06F96A996768
SHA-512:	D1595B70AB81C925A77457D550017D3FD01B03C6C38E68625E0A19678F4F1118788AF08DB01E648318CCE274CDCC7FD09A596C48BB5F6954EE99E55D670EFF9C
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/swansea/css/swansea.css
Preview:	@font-face {. font-family: 'swansea';. src: url('/swansea/fonts/Swansea-q3pd.ttf') format('truetype');. font-weight: 100 900;. font-display: swap;. font-style: normal;.}..@font-face {. font-family: 'swansea-bold';. src: url('/swansea/fonts/SwanseaBold-D0ox.ttf') format('truetype');. font-weight: 600;. font-display: swap;. font-style: normal;.}..@font-face {. font-family: 'swansea-bold-italic';. src: url('/swansea/fonts/SwanseaBoldItalic-p3Dv.ttf') format('truetype');. font-weight: 700;. font-display: swap;. font-style: normal;.}..@font-face {. font-family: 'swansea-italic';. src: url('/swansea/fonts/SwanseaItalic-AwqD.ttf') format('truetype');. font-weight: 400;. font-display: swap;. font-style: normal;.}

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	25952
Entropy (8bit):	5.2966237201299995
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZYVY+YSYMFLi0kpB7z6/vhRHe+MPv:RIT7sZwuvL54WAcl/7i
MD5:	DDEE19B11F585A772E2D852CD8E67A15
SHA1:	9B9BFB1D0659016848A65169078AC393CC9069FA
SHA-256:	04A77977AC6C9C158DF45444A773E30968B8F31D593FB25AB8F5CCF01FB20E14
SHA-512:	E008150451B90E9445399E42EFB2191120D7E599CDD1A6A241261B9C695886E41D80913ED2F32CCC9EC71130482C490F96B023D3FE855E55631E32890311146B
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/827279986078004?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C133%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C125%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	39386
Entropy (8bit):	7.982927056333054
Encrypted:	false
SSDEEP:	768:JZ7XAaajmL2VPv7aNK5nQm+ZNtvFvBUWQdnsdsxMLJHwnxccJD0OdEMmrT:X7XAaajmL2hidm+ZHvFv2FYVHpIIVdX
MD5:	F123FDD8E8AE441936C29BE8EFCC6EB0
SHA1:	462E6D8BD4C1E4F6DE1F141732B6E30ACF563727
SHA-256:	1D1DA935F1AE0E09A16FDBDFA1B9BB397E34F738A19A77A2427A32DA9AD0BDB8
SHA-512:	0EBDFAF04271AEFA8C58B967EEDA4C7C1717D54CC5513991B571B7C78BD0CB73D8A6B1BA2ACB8D08AC03F5815E985479BDF55F9444BD3A8D822F2651C817CBAF
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8X...........g..ALPHD......m....mt$"&@.Y.g.....6..p!.. .AZ.)..Am...0....$...{..;.<3...............E.!.]$.NI...V....z...Z.N7..E....j.........;ImzF..."..........?.... :W..d.....j..].8...W.r.\|.8_m.......................................................................................................................................................................................................................................................v..6..d.r..+vP.......d...t.R..@U,..T.Rp2....0..K8.I...4S..q.@P,...JN.D\...XK..j...Z..>Nk...b.2F\.VP8 R...P....*..h.>m6.I$".&!4.8...gnP.S.u..:........?.?.....o;....rzd4..g;...3....!.UR~K.>.....ob...G..`.8....1...+_.....2\|.O.........>....@....=..............}.?.._.....{.........?....d...q...W.......>@...}...s.).......{...W............d...........+.......~................}/...?.z.....?.~....U.....c.'...................i...!....{...............K.W........g.?.........

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjU0Ni45MjQ5OmE2MjJkOTlmZjE1YjEwZTQ3NDM4ZjI4NDM4ZThjNDcyNWM4OWFlZmFiYTY5NDZkYTczZTk3OGQ3NTA1ZTczOTc6NjcwMWJhOTJlMWNjNw%3D%3D
Preview:	....................

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2513
Entropy (8bit):	4.732727228283136
Encrypted:	false
SSDEEP:	48:+mvp78tp78awT178EC3k1784BY7r5K78Ga78OdK78L4eiO0b:+SCATEaB244dnqb
MD5:	25652D4EAB8AEC601B855DC5831A61F0
SHA1:	785DB07D4F87AF0DA191CA382F223F27613ED9DD
SHA-256:	D435FD388F14EE3981B9BE2C5BBE270F38BE893EE0F9420235A97E9ADD62480D
SHA-512:	0CF3A35A457DD99D1B5FB0EDC61EB322695069DFBB3CDF47B385AFD4E572157DDD1E330CA2E8596D3ABFA88AB0E954A464B3AEDCB7069B3BD3F85A858583DCE3
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/general-font-param2023.css
Preview:	@charset "UTF-8";...swansea-h1 { /* H1 - Swansea Bold - 72 /. font-family: 'Swansea-bold', sans-serif;. font-style: normal;. font-weight: 700;. font-size: 72px;. line-height: 74px;. / identical to box height, or 103% /. letter-spacing: -0.01em;. color: #000000;.}...swansea-h2 {. font-family: 'Swansea-bold', sans-serif;. font-style: normal;. font-weight: 700;. font-size: 64px;. line-height: 66px;. / identical to box height, or 103% /. letter-spacing: -0.01em;. color: #000000;.}...swansea-h3 {. font-family: 'Swansea-bold', sans-serif;. font-style: normal;. font-weight: 700;. font-size: 45px;. line-height: 48px;. / identical to box height, or 107% /. letter-spacing: -0.01em;. color: #000000;.}...swansea-h4 {. font-family: 'Swansea-bold', sans-serif;. font-style: normal;. font-weight: 700;. font-size: 40px;. line-height: 46px;. / identical to box height, or 115% */. letter-spacing: -0.01em;

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (497)
Category:	downloaded
Size (bytes):	51813
Entropy (8bit):	5.132181664320481
Encrypted:	false
SSDEEP:	768:275q+7eUmZRwwJ7gYKNUgOncTu1r5kU51eQwWUuF/4HF:CzuKNUJWu9+U51eQTta
MD5:	54461654A35A7F286722003F446F3904
SHA1:	C38B29C271DE99AD35901996243C6A8A1FEEEB5D
SHA-256:	8177CA17849FB10820473B79FBE47FD6ACD7FC02E4D0D517E12C8A4F85BD0953
SHA-512:	2D428860F4D194CF4C1FA66AF86DBD09E798316D2CF3676B155DC330DE4DB583D085549C9D897E07064513B966F274DD396A68928942D0676235385EE0E0F400
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tc/1727814744245js/xssDefine.js
Preview:	(function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){./*. default settings. . @author Zongmin Lei<leizongmin@gmail.com>. */..var FilterCSS = require("cssfilter").FilterCSS;.var getDefaultCSSWhiteList = require("cssfilter").getDefaultWhiteList;.var _ = require("./util");..function getDefaultWhiteList() {. return {. a: ["target", "href", "title"],. abbr: ["title"],. address: [],. area: ["shape", "coords", "href", "alt"],. article: [],. aside: [],. audio: [. "autoplay",. "controls",. "crossorigin",. "loop"

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5097
Entropy (8bit):	4.036424162099916
Encrypted:	false
SSDEEP:	96:xUBjHZxqI8hawCgfi22lHCyZc4ORQ73y6:sDqIeaNgK2UCyHOAy6
MD5:	D59A5CE0A00D33AECCF081669F2EC753
SHA1:	453CBC2E4F47BFD2B35DAD79A3D2A0C8682EE46B
SHA-256:	AA6B539209325ED101EB6A7E4F8C39CA535C6492455200209960D9E5F75D92DE
SHA-512:	AFAB9240CB814621E76849A79090F45215BBE1DD7E0FCE5F75AB0DCA8AAC2EB12CF3BEE1268288631DE20A6A8E1EDA500A8A69E6EC1CB07C8F7D4BACBC76C0ED
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/jquery.iframe-transport.js
Preview:	! function(factory) {. "use strict";. "function" == typeof define && define.amd ? define(["jquery"], factory) : factory(window.jQuery).}(function($) {. "use strict";. var counter = 0;. $.ajaxTransport("iframe", function(options) {. if (options.async) {. var form, iframe, addParamChar, initialIframeSrc = options.initialIframeSrc \|\| "javascript:false;";. return {. send: function(_, completeCallback) {. form = $('<form style="display:none;"></form>');. form.attr("accept-charset", options.formAcceptCharset);. addParamChar = /\?/.test(options.url) ? "&" : "?";. if ("DELETE" === options.type) {. options.url = options.url + addParamChar + "_method=DELETE";. options.type = "POST". } else if ("PUT" === options.type) {. options.url = options.url + addParamChar + "_method=PUT";

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89947
Entropy (8bit):	5.290839266829335
Encrypted:	false
SSDEEP:	1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQK:EcqmCU3zhINzfmR4lb3e34UQ47GKL
MD5:	CF2FBBF84281D9ECBFFB4993203D543B
SHA1:	832A6A4E86DAF38B1975D705C5DE5D9E5F5844BC
SHA-256:	A6F3F0FAEA4B3D48E03176341BEF0ED3151FFBF226D4C6635F1C6039C0500575
SHA-512:	493A1FE319B5C2091F9BB85E5AA149567E7C1E6DC4B52DF55C569A81A6BC54C45E097024427259FA3132F0F082FE24F5F1D172F7959C131347153A8BCA9EF679
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.3 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},S=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|S).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25889)
Category:	downloaded
Size (bytes):	26065
Entropy (8bit):	4.844079633777217
Encrypted:	false
SSDEEP:	192:8PSxxbQ74F9VUpfPHHgP0jhp8S1cZTRG1BOt1E0gLPiJV68NJAmnRt:5I74F9VIAP0j/1IRG1YgPUNNJAmnRt
MD5:	141D4E999710B61896E257C3E69ABF30
SHA1:	D0F5819725CDA9E62C128C487645CA8942EDD334
SHA-256:	98A4F34901CFD3A7E23B9D7BF24F976FBCE3756D39D1CD524BED39C6AD618969
SHA-512:	3D4F2C879631B7527D41932A73519364DFD203CE1E736D965661375914D3B645D995D8C5F85F75D745FCA4EE2C5C44377E0E8680A6AF456325F98B8AC11097AB
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/fontawesome6/css/v4-shims.min.css
Preview:	/!. Font Awesome Pro 6.1.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license (Commercial License). * Copyright 2022 Fonticons, Inc.. */..fa.fa-glass:before{content:"\f000"}.fa.fa-envelope-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-envelope-o:before{content:"\f0e0"}.fa.fa-star-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-home:before{content:"\f015"}.fa.fa-file-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-u

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1967
Entropy (8bit):	7.860134872051551
Encrypted:	false
SSDEEP:	48:c0kKz4RZ1S+ens2hGXujz2UA0m8M/6+YkDhzQJkqyyyyyB:c72Oq+B5ujzYb7X3LqyyyyyB
MD5:	7089F306CE8F82BB921E284CD8A4958A
SHA1:	22D3D2812A78BAA261A5D8C0CBD379E088AA53E2
SHA-256:	8D02C69C19D2A4E2A41BD36B83A5E165B9171041F7B1412F547CB5E401B1A88C
SHA-512:	260F57541EDCFAC9A5DE02801E072FFACB0FD5A7EB22C684A46A0FD52D33CA83BD38EE03891A538CC1917B74226BA4747C32CC6973CFA5A167744C8E4F33FD78
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/home/trusted4.png
Preview:	.PNG........IHDR...d...d.....p.T...vIDATx^.\.u.6..7h6H7h;A2A2A..P...Y..L..Q'h:A...NPk..!.I.A.w..........>."@.^\|...$V..C..0...C..0...C..0...C..0...C..0...C..0...C..0...C n.F./.l.<I..dz3K...$+.r.[.<I.?..wI..H...$hk.....i......M..7H......F......f..$.....c....MD..+#F..j.sJD..m.6-f..jb..\t..^......l.u%c.N./...+G{..@.\|\|.XZ\.._...p...ra+.5d...U.. .....jS..pT...?l...2).$.._..sq....HF.B....4!...i..1\...02...(...%..i.Nb....."...%.NZ..!..}j..f.. ...4.6.HF."+...$....$.p...g...d.5..../O]a.t.........[....C3.\|.......N.i.VmG.........UG.9R...$.N....w.....K2.!5!%...K..]zI..Q..v?'..{I..a/.l.j?z.U..e.$..Oj.....L.f.m......NN....j+...........-...H.5...s_.T.7..68.~...v?>o..{G..DF+%^..,.!..^...IV.6W..........M.D%:......u.I.W9. .npT.<..)..C..y.h..UMf4j.e[...\|.......@.{/........=....x#.O..ys.....^P..J.P{.F.....o.e.........W..;.y..I~..<B..0B.K...<.<...'..._....`<.9._.......I.^M..@U...m.).<...5]RJ><..,.n.`.<.s..V.x.6.31....R...S.~D_[....?!.O.......]..h.!..F.......

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1284
Entropy (8bit):	7.63551324306178
Encrypted:	false
SSDEEP:	24:eRVxkbuPGV86BcMMd79F4FUVlnsrGTTt4tvzb/G:OVi6enBcv9F4FklnsrGTTGR/G
MD5:	E9E54A4C303EF9E743CEE11C7466FAC9
SHA1:	24A29BD04CA3DBEF0FE8B1A83BA0C35B9F4A601C
SHA-256:	2FD0876C8D5C871F457790CA8849AF58D6E68850A4852383EB20E3F2B9109014
SHA-512:	AE43B1968CF0893CF6A4D6F5EE3446343393E4D6E01A5FEA2123DDB6CB604BD5499C397B5DFFAAFFEF8CCB8CDE9822CCC6955B1482D42F4EA6F919A5BAD98FCD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T....IDATx^..Q.@../.$.$.... P.t.. i .....!$.@* .@....@,.<..=Y.N..$.$.....!c....w..!p.........................................................?"L......./B....o8]....d#.e._A<K%.c..g"z:....ou..WG.I.<.....&))y?\|hm}Ck...t.8C....r4=@J...d....3...]........x~z.2....9y......W.#y'm..........?.k..r...yL<<..0yPh.....c.....s....r{2(Q.fN.DP.....E...[H.2..H.\%..Q^.i[F6s..$........bX.{..;...>...j.;...*]....g.....W.......O....-cSB..3X;.A...$..u..b.2...-)..4Vv.....vh.IN.E.....x..Z.....].....5.x..2....)+...y...y.#Z....(.h..^....'.g@<t.......F\...{.z...9bq........Q...C..To...U.......K"M%.E..f.s&../fj.P>).v=...;.\.T._.....7d#C.W.8o......fD.kR!..G.IM..w.....`#C..Mp..(..Bv.foK..Wg......W\|......V'%.%..\....1.5.8.. :.Ef#.}..^.......^.....VgS.4st-hQX.U.;U..2$.\|W.Z.:..kdo. -....gU....2...Ut..K~..wv....+.i..gTY..O.O.{..G7B(qGO....Lr.Oq..v...!#.z....j........F..Q...`.?.}{.~m.d.N.-Oo.H.%.M..h..&.c....t/...=..R.cx..H.V.wT8..b..B.e...O.\.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	231864
Entropy (8bit):	5.458039173946496
Encrypted:	false
SSDEEP:	3072:nfLeYH8At6JK37OeR8NteGvQ+AMPpgArl0xYu5s713TW:nfLeYc+6JaH8N7QQGArHu5s713K
MD5:	40283CFC473AFBE1D4ABBA7E6C809885
SHA1:	8A32CB88D9F537B02582DF17A5BB11C2087937F6
SHA-256:	48BA1993011DB4834882D81B2153753437607292F704A6543D4466C0F6D1372A
SHA-512:	DABD9FD4CC3FB4FF3EBC2C3529E602E91939DDB1F42C2D7E70188DFC3262548922EA45C96691D567F2C777D393B5CE7162B5BD4C2054B33A03856BBEA1C1A0E3
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	7.004761274848394
Encrypted:	false
SSDEEP:	6:6v/lhP6Ichq0vGtQwNlnWCnLaXycFWbfpIz14n/KJttDR5JS9LWkiynvWdp:6v/7iIhoGt7rWnX/FWDw14n/cJfFyvk
MD5:	6C0D0A7EB9763043F7DC773524225E74
SHA1:	661A4C9B1F703CB1A193EAD24E7E1293B51C898A
SHA-256:	888FE401B7B6208396D69C8D3F0F74FF5814970DE6C520BB7D4C405CE3602872
SHA-512:	F1ACE9AD2AC23CBAF8F56B2A1026A27569F968FDBB588929B3B815FEBAD470E2D97DC0995B0E1561324655330059A8D2D5A0E0D0E353111EA393DFE9FCF56BD5
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/icon-instagram-nav-side.png
Preview:	.PNG........IHDR..............H-.....IDATx^.....0......(lD..P&....lP&.~.M....T..J..}~8...,\|.....%. h.Xe.$...'\|.....D@^............_.y.3X..E.'.s..Y[..K5.........nP.IjDKx...9x.QY.\|.Q}\|[....U..Dy......7.&.....p..o,...V.**..Pl`.#....e+..0.......>g...k(....L...z..1..A.u.....IEND.B`.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjU1MS44NTU6MGI4ZWYyOTcxNDc2ZGE0NDc5MjNiODZiOTRhOWUxNDU3ZWQ0MDkxMjg1ZWMwMDgxNThmOTNlYzFmNDljMjRiNTo2NzAxYmE5N2QwYzAz
Preview:	....................

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43220, version 1.0
Category:	downloaded
Size (bytes):	43220
Entropy (8bit):	7.994450172775213
Encrypted:	true
SSDEEP:	768:WbqDNK0akIHfDE+D7rE0zm4R0YN/FZM0TX0aQv/3giGENXis:/DNJaP/DE87I0afQFRTVJiys
MD5:	4523D2C62663A8CF267DAFBC456E5E98
SHA1:	2A46D02291560D570407D0853BAF711DD2F79A22
SHA-256:	D1BF801FFB1A6096DEF70A7C532255722AD87D948B13A8A586E342F7091F8EE4
SHA-512:	948AF7A8C443B5651AF5E20D0FEF25338CABFE1C8FBBC593C3B8EB3F0138DE26619DE93D398B1E47DDC02F1E4027BF043D413639A603B808687CABDC1FC76CA1
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/switzer/fonts/Switzer-Variable.woff2
Preview:	wOF2..............(L...[..........................}...R..\?HVAR..?MVARF.`?STAT.'..../l.............0..r.6.$.... ..l..F[....."..(.;@..#.1.V...[.......L/.&.-.w.a.;..l...........IE.L...6..r..r#Y...&....).:]1/u)...(..0{IXL..BE~.hf.F..ST....ss.C.&#..".L,[L....n........;f.y..LuF..i.......o.....L2W.....D...d..oH..c............y...'A..=0![G..p##!..!...S..L..!z#..>.9..j.~ .M.>..N?.w.\|.....@...3...H..$ .;y.9.x..x.IZ?...$...D.Q<..s.c...]..).....P_B.........x.6...i....T...+"6V...c....4g..b>b..Geb.....5]Q+..g._..{....^h.%.._]R_.-.a...,\.....+.)3KDAX$.........yr...g..L`z.U.........j.KKM.hR...I..l6..F....RZZZ....8..+wp..'...v.}...ec.>..A....jv...%$..i./.ds.&M.............?..z.x.h...f..i.......=.k.......Xk./..\.m........=P...H..C...q...............I.0.,..m..z.O\|.k.B..X.F...,e........A .D....d7......m.../f...'@..Z}....[.n..O....mn.....W2..l*.....F...h4...S.=EQ..EG..(:...(...(.N.H$rR9..+...M`<..<,r........WN"/+.p.r.R...DFVF".K.........S.+.......VT...zR...x={.6..A

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	12386
Entropy (8bit):	7.972981126285598
Encrypted:	false
SSDEEP:	192:mN6y7fclQwDZY2E33RZYkSCUG27wh5Rm+/or3KLTxmYYzDZOZK8zIPtNSqO7:S6OreWf3hKC+kvRn+3KRmYEsZKUfqO7
MD5:	3269AD25DAAFA42A0EE39F616C387230
SHA1:	618DFCD0A99C06C35959C46BDBBA53760B6F8C37
SHA-256:	2707795EFA814EA1EF0592E05EC50622B37DAC21498797C5D8AFA9CF7E80C3C8
SHA-512:	53A1B263E7AFACAA8A01BE07F4E042C7378CC79A24731BFE53C59504EE532551250472BC247D14DEE6DA6BFD1973C1624A965B2E84C6F6BC65FE1570FA333929
Malicious:	false
Reputation:	low
Preview:	RIFFZ0..WEBPVP8X...........}..ALPH.....o` m..j...#".........H@...$ !+..H.9.U4i.uD.'....W....={..gk..u.W{.k..uN.5].t.................................................................................(.g...:.k....W].5JW.....6.gc..7VP8 X/.........~.>m6.I$"."!T.....gn.:..^..v.v.{...b......q........>.>.s.~.n..^.t.r.`.....W...........w..........9x....W.g._[........e?.........K.....g...{...i...G.._.?-..z/.?.?..._....v...q......X.]............9......Q.7.....g..........K.....o..........O.o....L.....-................U.k.7...^.....~....5.....T@/7...i....i....i.Z9.u\4.b.t4.b.t4.b..#.'O.5...U..o.......m...=..D....0Ll-"&.f..._.p..J.......TKtP.....W.5..7...,..q...]S.W..<~..:.NN...2.....1k..g.$.98<f..!.(./BHY....y...$...6.J..w........wL....7{......N.C'.....2.\?>O.Hoj.[..j^.2aR...M....^.....)O....i....e.[t.\<Ac..1K....L..........k..\|3.......XG.......*=.....\|3....ke...W.\...X)`....X)`....X.....3...3...3...3...3...3...3...F..h.4..+..Z.N..'K.'@.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	8135
Entropy (8bit):	4.077700105538888
Encrypted:	false
SSDEEP:	96:i0Yk3ziFD4pX188Bq3W84OhEVdnIz0CUTdojKUFfn4S7uLSFICE:iODip4pX68w3BpWnIrUxojJ4SESFICE
MD5:	06F107A856CD571A18A3E96034E85AF3
SHA1:	AC172B6E0FC55DCB9318FC8CEECEA6376C0B8D6A
SHA-256:	02A2692F58769584189024E4F9750B1F77FD8D374C9D5C635CBC892CAED138A2
SHA-512:	C8F09B2B4E06A9ED1364FC333409C578F3F31A3C9DCDD4B342E8AD706C06588FE1FCF18ECBFD968369C472FF0D53B3D05E6A2023267EAF97EDEA38EFA1D53DEF
Malicious:	false
Reputation:	low
Preview:	/* jQuery Nice Select - v1.1.0. https://github.com/hernansartorio/jquery-nice-select. Made by Hern.n Sartorio */..(function ($) {.. $.fn.niceSelect = function (method) {.. // Methods. if (typeof method == 'string') {. if (method == 'update') {. this.each(function () {. var $select = $(this);. var $dropdown = $(this).next('.nice-select');. var open = $dropdown.hasClass('open');.. if ($dropdown.length) {. $dropdown.remove();. create_nice_select($select);.. if (open) {. $select.next().trigger('click');. }. }. });. } else if (method == 'destroy') {. this.each(function () {. var $select = $(this);. var $dropdown = $(this).next('.nice-select');..

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15286
Category:	downloaded
Size (bytes):	3403
Entropy (8bit):	7.943375710229563
Encrypted:	false
SSDEEP:	96:KQbnv2xKz/pwnohWrmtj0OaGwkB5knr3KuXkEtFAL:K+vg84oYrmtj0OV5kr6uXrzQ
MD5:	B5B96BB33C8E35B5249A784A80B3C349
SHA1:	6BD8354E75B2E26DB6151E0CB3FE414BA1575527
SHA-256:	37F4F270409F47CDEBC92048B03694D87A8C5A05B16231EEDBCFCE1174812B6B
SHA-512:	2DC01D4195D76FB0F3E08E9EB1B52DE9057519F6F81DE833332291D582205B2E9F2296563B674AD73E1D11835A643DED091AF60BABD897FA54754CBCFB24C6B1
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=5a73801679def00001e7f7d2
Preview:	............k...{~..C....c.....i......P...(.YY..o7....zP.%?v..g....p........??..l.....{..8.[FC\|.......4.L~..2r.&.{.3.;.i..~....D...&)OB....\....../<.0......S.\|.O...........\|.g..i.LB.'"...Y.3IR.7.H..P".....vA..d.$........"..d9#.P.....4y....9...\|C..c.4d$d1........ .~H>.A..eD.h..!s...+M6D.>.eDJ..9.IA8../,'!..$.I.."&1'.gq..%Q..HL}X1f...DR?.<h&y....Q.J"q......\...R.C.....%...}..2............~m..p.. ....Y!I^..D.cq.(v;....8.O...!O..VM.~.. o..@.<.lY.zq...y....5.....e.o.l.i..{..4...`1O.K........Q:J..!.YL.=%./.....n..l.7{Q..m..EY...0d..A}.n.........F....s.t(U.L.........qL3...a]v....k.....x..M~`.!'..X.&.i.....-h"\.;.M..gO/~).........M..~!.i...Rb...A.Y...n...cD...}.n.c`...\|..D.....D(..{...DQJ.:.&9.69......y.....\|GQ`.....I...K4n.hl....PN.V...Ms.;L......!.....4....p."..x/...X..f.I.\.;.n..Eq.....}Ml=..q...c.K.W..e.....U.".....h...#x....r..a.....AE..g.D.9>...1.p.Yg..H.G}..dk.f..6&.H...b.......Od...C..h...{.EQi..Y....<t.A..Ue.r..Bx`}..-

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12674
Entropy (8bit):	7.928840800815539
Encrypted:	false
SSDEEP:	192:UwT5FFO6xQvVHwCT7VzpiwFYu6X4BsTfA5l71mo/1mhWnHKHYgC5atQR11yy0MS:UwTPi5wUzpiwFpE83FYcHVv/R1Uy0M
MD5:	D52DA5E0992C5672C70BB44B3C082C14
SHA1:	0FDAD6C4C6F6D9D34BF2F6BA19ACA3CEA59D6871
SHA-256:	9B59A3D1068F8771CB14C276B4720578DB27561B72A6C3B67C8CB52CA746778A
SHA-512:	3CB8D731A3E2AEB3D939F5BD32D14F4EB2280F03AE2E2D48CC08A9D088FFC4E5E9A15FF786BD601EB2DD63AA7AA49FBE5523A5C69ECFB5654D296BF6606C8C08
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/domain/logo/vip-banner1720419776.webp
Preview:	RIFFz1..WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH('...$.m.0I................d...h.+.5=.++.ti..s@.k..f.6..."...t:..G.pF`9.p........"@....(".......U{.9.Z. " .U.9.P........,f.....T`.....T`.....+.SAH.CX..UX....,..H...0...D@7.%"..MU.&.t.8O.@...MR.(..........%AB... Q..X( Q.A.t+..=?_...y.....h.j.V....T.1....w.?.....\|..o...?....z._....n........_..M.....[...v...Y.(.NzU.aF.,....E.K].......]..^..X....j..."q.tU...]..D....F..............Q....ZM..T.).....1.5.@..V../.V..why.U.h..^...n.uP.\|..\..O-....Z.U."I...Ow..Y...wF.r.d..P..*.>L]...

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x911, components 3
Category:	dropped
Size (bytes):	49814
Entropy (8bit):	7.572047969387504
Encrypted:	false
SSDEEP:	1536:qNrCkY88baq2wl/Y1lGxEYB4woyCzgeetrTPZ:wCkaaAl/YIBDohgegrbZ
MD5:	63A46EFCE19A1ABFE4AD8C4076D1F2CB
SHA1:	AED3E80A3C3C74485D44B993A5D08E12B2C2380C
SHA-256:	1F039C6DDB095850A4E3727609CA6A8A9E11570EC3C6FDBCEA1A8A656477FA2A
SHA-512:	50D581D9519D9EBB6C43BCC0F9C5EE31F84CEA795A106614259AE87044D5072B83C7F3CDF3611511EEB4DA0D255A595DB10E56B3BCE0D20386980C508175F6DE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....)?.>.q.W.y.O...)....N).....Z.4.b..N3..x........i8.4.. ..H.{.I......'~.....S....?.PNi;....L.{Ppz...1.y....){..=).C..#})zR51..i....d...<Q.(..LB.qI..Q.=.<S..i.....!>.i(....LA.qH.v.......Fx...LA..{Pz.PzS..rh....."z.g...B}...'...4..!:..[.b...sFs.'......;.b..{.O......9...!.......By.z...R....4....i.x......f.4...4Hg.74..U..0..'... =i.....4....!......!99..

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65360)
Category:	downloaded
Size (bytes):	498160
Entropy (8bit):	4.671794264543212
Encrypted:	false
SSDEEP:	3072:/r3CYP5vO+mDFwFyiFCIUMZ+sEx06eJls0ugtMHxx3/to4hQQ/:jCYVhmDeFyzPG6eJl9tMHD/toU
MD5:	325672B036BAB9B57F6873AED5ECCC43
SHA1:	264F5DB348311950380AD1BCA79754FF593D87E2
SHA-256:	A35F901D01118E5649091BD03AC5784A7DB52E111FB3806524C412F3D1DCFC5D
SHA-512:	50A041C49E4DDFF318892B184E512C011B29E2F10B295448925103E0C6FAC29B9514E832E4196DFAC5D4773D530D17AA5AC9BAE31C41036428049442C48D31E5
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/fontawesome6/css/all.min.css
Preview:	/!. Font Awesome Pro 6.1.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license (Commercial License). * Copyright 2022 Fonticons, Inc.. */..fa{font-family:var(--fa-style-family,"Font Awesome 6 Pro");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-duotone,.fa-light,.fa-regular,.fa-solid,.fa-thin,.fab,.fad,.fal,.far,.fas,.fat{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-height:.08333em;vertical-align:.125em}.fa-sm{font-size:.875em;line-height:.07143em;vertical-align:.05357em}.fa-lg{font-size:1.25em;line-height:.05em;v

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2253)
Category:	dropped
Size (bytes):	57680
Entropy (8bit):	5.502178063830125
Encrypted:	false
SSDEEP:	768:IfoILNVBIBsr4nLkCLUOmDu6a5ZIduFoaJzMRsgj0SQovxXBHCm:IfoyNVXr4wwU7Du6a5Zhmj03ovhBX
MD5:	209574A0DCE98B35A295CCCFDF98016A
SHA1:	0AC381CCA3C51CD2A48BC2B06D7D4A1D2B601ADA
SHA-256:	DAC93BF066C9DF034A671FA8CC4D7D1DF01E54A1383042422FAE0C1DE24668E8
SHA-512:	7C1C6427D057A39F68697BF138E0EC1F035487E810D5D478DAAFE6A69BC554EAF24188DC8C19BD4BFAD11C897AD407F2490D2208214A21A175734A164C75375B
Malicious:	false
Reputation:	low
Preview:	(function(){var n,aa;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this),fa=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},ia={};function u(a,b,c){if(!c\|\|a!=null){c=ia[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function w(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in q?f=q:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=fa&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ca(q,d,{configurable:!0,writable:!0,value:b}):b!==c&

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7862)
Category:	downloaded
Size (bytes):	7889
Entropy (8bit):	5.353789005168187
Encrypted:	false
SSDEEP:	192:dIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxOn:d2kNdcC9J6co91qwLcI6KgkixbdjqBFH
MD5:	96201ABB62283557A9D7B97B4CAB14AB
SHA1:	A72F33D920D0AB863DF4CB60EDF44EC140304CDB
SHA-256:	46112DBCEED738F759D03F04B115D5256A7D73660B7795ACB382192AD84D9F98
SHA-512:	26B2F5C174744DE4E87AB925E933C351AF75DF64B73C1D5478DA594479827BA4F14B8DCF14951C1185218C96FF8BADEB49DFAE46FA7395C18EB6F0BFAC341C0E
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/lazysizes.min.js
Preview:	/! lazysizes - v5.3.0 /..!function(e){var t=function(u,D,f){"use strict";var k,H;if(function(){var e;var t={lazyClass:"lazyload",loadedClass:"lazyloaded",loadingClass:"lazyloading",preloadClass:"lazypreload",errorClass:"lazyerror",autosizesClass:"lazyautosizes",fastLoadedClass:"ls-is-cached",iframeLoadMode:0,srcAttr:"data-src",srcsetAttr:"data-srcset",sizesAttr:"data-sizes",minSize:40,customMedia:{},init:true,expFactor:1.5,hFac:.8,loadMode:2,loadHidden:true,ricTimeout:0,throttleDelay:125};H=u.lazySizesConfig\|\|u.lazysizesConfig\|\|{};for(e in t){if(!(e in H)){H[e]=t[e]}}}(),!D\|\|!D.getElementsByClassName){return{init:function(){},cfg:H,noSupport:true}}var O=D.documentElement,i=u.HTMLPictureElement,P="addEventListener",$="getAttribute",q=u[P].bind(u),I=u.setTimeout,U=u.requestAnimationFrame\|\|I,o=u.requestIdleCallback,j=/^picture$/i,r=["load","error","lazyincluded","_lazyloaded"],a={},G=Array.prototype.forEach,J=function(e,t){if(!a[t]){a[t]=new RegExp("(\\s\|^)"+t+"(\\s\|$)")}return a[t].tes

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5737
Entropy (8bit):	4.979162124701355
Encrypted:	false
SSDEEP:	96:ahThdXlgX3JXzGXXQMX49oaAfFh6lUJDHQ+XY/9MaXL/9rXLe98OCjQJd1Ujaqlt:AThVlS3ZzGHQWaoaOr6lUJDHQoY1tL1b
MD5:	67890C76C9E42CC8A837C78BAD187A4C
SHA1:	3A51355B634918D85FA48ECFF9B58F2FACBD9A0A
SHA-256:	2E52C4D3E8C2A76F68AEEF85DBE6C2A513DB7FD5ED344C56F1E0B3B6AC821AC7
SHA-512:	7966AA893C1436F7B5299F93CD7B8ED3F141CAEAA8F828855E5D469280CAC4191036CB97F7615F68C320DE0591A06E65C039007AF231A942FB45B4544FAA7EFB
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/account/script/webauthn-json.js
Preview:	// src/webauthn-json/base64url.ts.function base64urlToBuffer(baseurl64String) {. const padding = "==".slice(0, (4 - baseurl64String.length % 4) % 4);. const base64String = baseurl64String.replace(/-/g, "+").replace(/_/g, "/") + padding;. const str = atob(base64String);. const buffer = new ArrayBuffer(str.length);. const byteView = new Uint8Array(buffer);. for (let i = 0; i < str.length; i++) {. byteView[i] = str.charCodeAt(i);. }. return buffer;.}.function bufferToBase64url(buffer) {. const byteView = new Uint8Array(buffer);. let str = "";. for (const charCode of byteView) {. str += String.fromCharCode(charCode);. }. const base64String = btoa(str);. const base64urlString = base64String.replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");. return base64urlString;.}..// src/webauthn-json/convert.ts.var copyValue = "copy";.var convertValue = "convert";.function convert(conversionFn, schema2, input) {. if (schema2 === copyValue) {. return input;. }. if (sch

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	380
Entropy (8bit):	7.222831423370456
Encrypted:	false
SSDEEP:	6:6v/lhP6Ic8iuOl+lHDcL7Q7lsXV31ivREuZ0WGCLgZ8z1LZXIQg/mECwHyMgltjp:6v/7iIA4j0Q7ix1oRPhc8bX6nhgXN
MD5:	D37F2763953F4CC19BEECCA5FB41BF5D
SHA1:	3BB462F8974CF8AB1B4C44C97F5702F7AF74E3DA
SHA-256:	9E4653C9EC28EA89218320F7BFEE11A04B46C724A2F37AAECC3CCA0D5245EB67
SHA-512:	E2064E3EC42DD2A8859E2A9927F4038726CB5ADACDA2F7536C15AAAF3B36D362969BB57527F143CF4FA44FEA43680E2192DB4FA6DAE9BECCF170D10FCE6BCFE8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............H-....CIDATx^URmU.0.....H..8...`s.I..(.p0....A..5Is...%d=''ir..K.....#...8.62......[....x..B.9.8...;......H.....F,'....P......+....<7.G....H......Q.".....j......qP=%.p y....3N"ZmR...%R..Rw.?V..\|.........\.M=W.>.E..U.\|...H.XEU.Fy.[.K....r.m.....vE......^'..X.....K\W.H"...~..A.D..W#.Od.p.y.j.......;&../...{.,1..*.....c.j..E....IEND.B`.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7862)
Category:	dropped
Size (bytes):	7889
Entropy (8bit):	5.353789005168187
Encrypted:	false
SSDEEP:	192:dIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxOn:d2kNdcC9J6co91qwLcI6KgkixbdjqBFH
MD5:	96201ABB62283557A9D7B97B4CAB14AB
SHA1:	A72F33D920D0AB863DF4CB60EDF44EC140304CDB
SHA-256:	46112DBCEED738F759D03F04B115D5256A7D73660B7795ACB382192AD84D9F98
SHA-512:	26B2F5C174744DE4E87AB925E933C351AF75DF64B73C1D5478DA594479827BA4F14B8DCF14951C1185218C96FF8BADEB49DFAE46FA7395C18EB6F0BFAC341C0E
Malicious:	false
Reputation:	low
Preview:	/! lazysizes - v5.3.0 /..!function(e){var t=function(u,D,f){"use strict";var k,H;if(function(){var e;var t={lazyClass:"lazyload",loadedClass:"lazyloaded",loadingClass:"lazyloading",preloadClass:"lazypreload",errorClass:"lazyerror",autosizesClass:"lazyautosizes",fastLoadedClass:"ls-is-cached",iframeLoadMode:0,srcAttr:"data-src",srcsetAttr:"data-srcset",sizesAttr:"data-sizes",minSize:40,customMedia:{},init:true,expFactor:1.5,hFac:.8,loadMode:2,loadHidden:true,ricTimeout:0,throttleDelay:125};H=u.lazySizesConfig\|\|u.lazysizesConfig\|\|{};for(e in t){if(!(e in H)){H[e]=t[e]}}}(),!D\|\|!D.getElementsByClassName){return{init:function(){},cfg:H,noSupport:true}}var O=D.documentElement,i=u.HTMLPictureElement,P="addEventListener",$="getAttribute",q=u[P].bind(u),I=u.setTimeout,U=u.requestAnimationFrame\|\|I,o=u.requestIdleCallback,j=/^picture$/i,r=["load","error","lazyincluded","_lazyloaded"],a={},G=Array.prototype.forEach,J=function(e,t){if(!a[t]){a[t]=new RegExp("(\\s\|^)"+t+"(\\s\|$)")}return a[t].tes

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	12674
Entropy (8bit):	7.928840800815539
Encrypted:	false
SSDEEP:	192:UwT5FFO6xQvVHwCT7VzpiwFYu6X4BsTfA5l71mo/1mhWnHKHYgC5atQR11yy0MS:UwTPi5wUzpiwFpE83FYcHVv/R1Uy0M
MD5:	D52DA5E0992C5672C70BB44B3C082C14
SHA1:	0FDAD6C4C6F6D9D34BF2F6BA19ACA3CEA59D6871
SHA-256:	9B59A3D1068F8771CB14C276B4720578DB27561B72A6C3B67C8CB52CA746778A
SHA-512:	3CB8D731A3E2AEB3D939F5BD32D14F4EB2280F03AE2E2D48CC08A9D088FFC4E5E9A15FF786BD601EB2DD63AA7AA49FBE5523A5C69ECFB5654D296BF6606C8C08
Malicious:	false
Reputation:	low
Preview:	RIFFz1..WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH('...$.m.0I................d...h.+.5=.++.ti..s@.k..f.6..."...t:..G.pF`9.p........"@....(".......U{.9.Z. " .U.9.P........,f.....T`.....T`.....+.SAH.CX..UX....,..H...0...D@7.%"..MU.&.t.8O.@...MR.(..........%AB... Q..X( Q.A.t+..=?_...y.....h.j.V....T.1....w.?.....\|..o...?....z._....n........_..M.....[...v...Y.(.NzU.aF.,....E.K].......]..^..X....j..."q.tU...]..D....F..............Q....ZM..T.).....1.5.@..V../.V..why.U.h..^...n.uP.\|..\..O-....Z.U."I...Ow..Y...wF.r.d..P..*.>L]...

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	12121
Entropy (8bit):	4.105733545345474
Encrypted:	false
SSDEEP:	192:TcM/yHA4z78Rp1/CHAs7FRWw+VMSMbMPUUS2RyQTRS1RVW3/MwbyXNS+S2XtNJeE:gMkzYv1ARc23oZrRuR6mNjZh
MD5:	31A61A3C92161C1E7A3C61309FD0B445
SHA1:	4B0DE83B8629BDA5E0517CB76C39F97F5B3485FC
SHA-256:	E2DD3471094B65AB1B0C7A4E1AFE1C65B7B7D4EC6C08656E941A3D368E47AB94
SHA-512:	FFE7870C185B77B0ED2196812C61F31B920D5B6DF86BF53BBA642931292A9CDEF964C82B38E5A7FC1CE42E211A1E3D9A0A77C84E789D27B58FADDEEBD8C59512
Malicious:	false
Reputation:	low
Preview:	(function() {.. // set default value click. var clickwindow = false;.. function headImageUpload() {. $('#head-image-upload-thumbnail').fileupload({. autoUpload: true,. dataType: 'json',. formData: { 'upload-head-image': '1' },. done: function(e, data) {. if (data.result.code == 0 && data.result.imagInfo != null) {. $("#avatar-photo-nav").attr('src', data.result.imagInfo + "&" + Math.random());. $("#avatar-photo-computer").attr('src', data.result.imagInfo + "&" + Math.random());. $("#avatar-photo-phone").attr('src', data.result.imagInfo + "&" + Math.random());.. if ($('#upload-head-info-error').hasClass('head-info-error')) {. $('.head-info-error').remove();. }.. }.. if (data.result.code != null && data.result.msg != null) {. if ($('#upload-head-info

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27447)
Category:	dropped
Size (bytes):	367374
Entropy (8bit):	5.302607151918668
Encrypted:	false
SSDEEP:	6144:W4oQYPIDDagHulGpoRHYmGbpJGDbopEi+zs5eFMSt:GPI336GZ2vQ5ez
MD5:	C3221694980B368DA337CFD23D2F9338
SHA1:	5E0FAE6A6037716B910519E7F621C90CC1574CB3
SHA-256:	0500D62E9C3B553DC35054745D9CE93F6E7BD00A1C67650D1A2A42C5D1545ED2
SHA-512:	0F3D6F13FBD405ACB46B56B699A2CFB9082CDE5DF81BD9AB933119DE24224DB09183E9C8E5FEA3D90D5E1F96BB7C7D81F5B532E80B48515F6A531B2A1A6464F5
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self)["lottie-player"]={})}(this,(function(exports){"use strict";function _asyncIterator(t){var e,r,i,s=2;for("undefined"!=typeof Symbol&&(r=Symbol.asyncIterator,i=Symbol.iterator);s--;){if(r&&null!=(e=t[r]))return e.call(t);if(i&&null!=(e=t[i]))return new AsyncFromSyncIterator(e.call(t));r="@@asyncIterator",i="@@iterator"}throw new TypeError("Object is not async iterable")}function AsyncFromSyncIterator(t){function e(t){if(Object(t)!==t)return Promise.reject(new TypeError(t+" is not an object."));var e=t.done;return Promise.resolve(t.value).then((function(t){return{value:t,done:e}}))}return AsyncFromSyncIterator=function(t){this.s=t,this.n=t.next},AsyncFromSyncIterator.prototype={s:null,n:null,next:function(){return e(this.n.apply(this.s,arguments))},return:function(t){var r=this.s.return;return voi

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1403
Entropy (8bit):	7.713653538894172
Encrypted:	false
SSDEEP:	24:w7f6IgazKn7co237ma8vePy0pKaqVNj5XmxVAKTaSZIZKuCf9kL7OZPY68ycKrN:mgazKne37mnB0gnNj5XgVAKWGIURxpt7
MD5:	BBD1ECFA5A990AD60230D737F37BF003
SHA1:	8C6F86428F66D6CEFD53F80F2DFD87659994C5E4
SHA-256:	536A90BA0A91674874E1F89BB6D500080127659FC3679F9CF096E9E1442BF7B7
SHA-512:	BE41BAE1D5818C93C5CC19D383A74D040BF20D085C012DD23FB56F8C2D3FD629A1BEBBDAB1E89668E83162F87B71CBB083950BB7B6875870F9FC3A04D629E6F1
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/home/trusted5.png
Preview:	.PNG........IHDR...d...d.....p.T...BIDATx^.\.q.0..;H:p:H:.;p.....T`w M$...+i.N.N.q..:.>,...] .%.<$2$@>.p$J<.......B... .......@.... .......@.... .......@.... ........#0X....Bx.P....)}...zs...^..W"x:.\|.JM.H..O.....MB....s.s(/..X......?.... ..~>J..X".dPI...y.oE.\Bb.8..RM)................?~.~x.W...W^..'.>".'9.z......'...?.X?V..?..-f].GE[#..w.....pw..F...+r^Fd..x.].U.$#.....j4......%&..OR..V..".../....}$%SM...S..Q..&....[..{....y.n$.3!...43...zv}...<.n.....I!.KgK..6.i....C...J.c..(B.....3.o-...+J:.s..5mU..+...{Ca.t...EGF#.))......`...........\...g../&)../4........8.%..t.....&%^4H_..6.JhFfqy....~...%.&..)O...,yw{.e.......n.}....7..mQ2.NgZ.$........`.G!.P..Zgr~.k2.Mxs..boI3..>s...n.~.'.$..o....'....:..;.NH^DPyy.'.."....d;...N...}.P......E..1.......R.@[.d......:./n ..I.Z .....4B.....VH..h.'..f$....>HH#}N.D7....! DC....;.g.;].'...a...?6dZ8.r...w.d9.m.K.8.\TY.&]..(..}....Yy/f..*Su./!.).....$.U......55.ns..l...v.....P]/.!..Y.......@...7

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	28682
Entropy (8bit):	7.988018770335548
Encrypted:	false
SSDEEP:	768:i4iTviSTk2t6CB5SzTMZh7Fq0mI/xOlrWWPN210QZUu/056FWg:i4iqSgwuKcy8lrWWF2SQZRWo
MD5:	D56219B8BC40AF183E6FCF40F70EADCA
SHA1:	353A8DBEDBE6E3EE88EAE9FF3A99A60C0EE5C4AB
SHA-256:	47D8FB7EECB628C9A8085E9816FE14E783FBAF1950BC4D6CB3E013ADAC7C6301
SHA-512:	4B50A4A4F14753CA13FD377E4FA8D6E75D222CFE215409A4E40C27794C18FDCE4BD506D28B4ACCC6E975F7FC345A34674ECF1E3F1A19112ECA7A08F08D22834B
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/home/website-builder.webp
Preview:	RIFF.p..WEBPVP8X..............ALPH.........0._....!$H${D.4[}.H..$A.d^....DU.=wlDL..H.,I.mK...k.0.X.tD..........p......gDL.'I.d.$.iO..b..o.7....Z.._Xm..1.....5...&..{jGC#.4.L...i..&.,.i.C...-Fkh.Mk.h._.rH.`.X..o...&ka...s.\|.`.\.GX...L,...b...X....d....r.,...j....L.<6....gX.......k.d.....k...X.k[.sy...1r6k]>s_,X.}.e],.ZX~s5...*,..,...Ec..7..u9...7........4-,.y...W..ea]....}As_X......u..</..b...7,...t......\^.Ks]&.....-&/.S.X..N....p6...\...7......\|o....k.....7.x.Zk.c.....F.Z......2?l.e..=,hY.2g...b..b.2.!..Z.i.bYk1...L.....aM....d.kb..2.)...].pcAk~...k....A[.Ks..c..~..7/.....t..L{Z.ed..h..2.....4....5..........24Y.<f7..M.o..iG.K..v..e.......9.`Y.......s1:0Y.....1..Vs_.sb-k.VF..74r....e.v..5..h.f.y.hh.M#.9....Msd^6...\.v.2.e...F.ia....CkM.!...YXk.5..4.,.ZO.0.M.eY.5].12a.Z,.Z....\.M...ZO...k2Z.#..&....i..C..44a...!&...Z............X....b.-m._.A[4......,.`.._...t.."8..Y....Z...&.O...>...Ac.X.._.S7...J.....y...Z..&_........$.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19684, version 1.0
Category:	downloaded
Size (bytes):	19684
Entropy (8bit):	7.988639555000283
Encrypted:	false
SSDEEP:	384:ONwiXfXdhL8GpPfyGjRzz40RK4dqy5n393AFCdIXSXxk+ukfD+EPzDF7z9XkZfYz:+f3AGpPrRzz4h4dqy393AFuXx+EbD1xJ
MD5:	29F5BA8FC1F2AC21FA0ED86EC404BCDE
SHA1:	ADDA13FABCBFE7C004AA99A5642012A927B20F3F
SHA-256:	251342FF1E3A31CD968101F7492ECD6B59E0058190A38B77E15A64928FC44593
SHA-512:	5149122690C7BE981EBA0018B751DD9615EBF24839912BA377ABE252E026AC441F14DC68BCF5A80E3733644107F971F107DAC0E0D322FD8ECA0222E74E9AB34E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2
Preview:	wOF2......L...........L..............................8....`..d.l........X.....l..6.$..T. ..R..w..=....6.'.....[.Q..Y...6.`..S.......X.V.C..Pi.....]..DJ.....\..%N.P..]..S..[^fCh.x..........X,.......rv..ms............cq.h.y.O...J2..IE.[.{...3.m.kr....O{.>t.{O..M.=&.p.P~.?$.W.8.Q.J/.<E..RtD.O..&..=<?......f.1j.m..l#V.......>Q.;..N.>O...<O......kx.g?.}3....P.x.....5...!B(..)......$.H.........J..{...Z-...B.%..........!.......-........;.....f...7..PX...>.tM."k".N.+<._..7..2....#....hW?.......j.....r.B.Y./..2...OD.S.~.@`.no......\.6...l.0...G!.............6@.(.!....=...Z]5.c.i..\|+....t~m.......)...N...l.>t.3y5gV!...T...AR..`<...Q..A.O.$<.>......!f!9`.n....w...n...nSZl7q9._..o".d..dI?u....ZV.$..>Vf...T.!............,0....Q.2._+...C..Z}Y#...c...k...R...c.* ...W..._..... D.\q.u7.r...<...0..A0.M.A@..6-...>..q)SaO.N..-.N*.......c..P..;........U..mM.......d......2.`-..fD5"...D.hD.....i..$.'......b7.9....a .z6.....\..Y[[...!....-..s ...6.>.......-..q

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	27958
Entropy (8bit):	4.814646518579396
Encrypted:	false
SSDEEP:	768:Ja5eaaF75QxjUgLSS3DFwzMabIFovqFCFUIHFq+3FfFlk86WFcF2vFrFFFHFP:Ja2B5WrSa+zMa8evq8CIHEwp886WSQv1
MD5:	D932D2B4AE20B6ED3EA5F5BA9DF6A0C4
SHA1:	181B2B812F262B1D4C03848BB040CF90D28DA3B5
SHA-256:	E727F3711262D4140E03850887028C2FEC3975EEBC1FF27AEC6ADEA9EAE66EDA
SHA-512:	486A9C0158BE719A7339AA909C91AAAD00973D1B70E898DB1E105027A1CF77A1CD532765F575EB77A6A60EFA3EC4E5D08B0E144D6C3FF03B8E6B2A087F8AD76C
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/home_search_result.css
Preview:	..skeleton-loader {. width: 242px;. height: 18px;. background: linear-gradient(90deg, #E0E0E0 0%, #FBFBFB 50%, #E0E0E0 100%);. background-size: 200% 100%;. animation: loading 1.5s infinite;. border-radius: 5px;.}..@keyframes loading {. 0% {. background-position: 100% 0;. }. 100% {. background-position: -100% 0;. }.}...search-result-error {. background: rgba(234, 67, 55, 0.1);. border: 1px solid #EA4337;. border-radius: 6px;. height: 70px;. display: flex;. align-items: center;.}...search-result-error-content {. font-family: 'Switzer';. font-style: normal;. font-weight: 400;. font-size: 16px;. color: #EA4337;. display: flex;. align-items: center;.}...search-result-error .fa-times {. font-style: normal;. font-weight: 400;. font-size: 16px;. color: #EA4337;. height: 24px;. width: 10px;. margin-left: auto;. margin-right: 20px;. cursor: pointer;.}...domain-search-ai-wrap {. displa

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 290 x 68, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4843
Entropy (8bit):	7.924853519109151
Encrypted:	false
SSDEEP:	96:7yEr1KWiyHLFm4IAZ0tgOfzjRrqmGdMH1bM3J63fI+kBdb01ye:Vr1KWiGm4vqzbtWmGdKtCwIbM5
MD5:	76AF4342A7E8E04541014114975C7D02
SHA1:	AB1278B3610E2CE0DCAAD9CA984B89B155F56F5D
SHA-256:	E01ACC3A33D5C195B6B6AFB510A78D06D8015608A5F929E03B0FC12AA74E9A7B
SHA-512:	D934E9FF17A53C13CD4EF3BFFD6C2D86A06D9A23BF741597A7B2381616551C982D2CC86EE37D71DA18ADFA94254693B7303D8FE1E067FEA7C0BD3D261A59375B
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/mainsite2023/navbar-logo-dark-2023.png
Preview:	.PNG........IHDR..."...D.....%d8E....IDATx^.]k....^..U..U....._......)W....qN ....".....9.u......7`...3....<8.%X.v.@......gg..Y...7./..?._^o......?...k..{7....c.R..p.p..8.X/.`^..S.....%PZ..P......s.@?......bn.,.........P#tcp.<,!...^h...........).(.(.hr.\|A..v.9.......FE........._...RW.9_^q.......n;..."...2.(O....W..z...Qxw.X.wqy.....3:eE,c?M.0.... .z........6T./....2...!.(`..b...>..^..<.`..N..=..r>........(-.}W..!8].(.......?.......hh..............z=..i.\|......m....!80s.....n-D.J.....F.@.........Pj..WD...;s.v..~.!d.Ky......T....\....P=.6b.+Z^.W.....W.wS.W........!...Z{.....d.bf..;.......-x.+h.....1....T......W..\.........x.r.v......Y..F.....8f z..{...O........i..z6.T.X..YW.G.Km....D....h..(..Jhf..?......6...7..(%\|..}..>.#.#....t\..a....I.;q.._^.^P..>..zC!..!#...@g^yRss3.=WN.....D...FM."..l...R.~.l..E..}..h...3.Ht....f,.n.. B.f{E..8..[@.Z.d..-..Tc^..&.;.}.S-g.... ..c....cY..i.).w. .i....5..m&..q.s...[...I....'..v.nA(.>.;.)\.u.B.D.-...4.}sy

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	7658
Entropy (8bit):	4.522752875740715
Encrypted:	false
SSDEEP:	192:C+bQa4folOsdemssQWsPWEsKBsvcJEHE2lQzVJ8X/9khSyE0fsYmCMs4dsylpIyl:CaV8s4szsfsWscEHE22zdsYQsEsyluiD
MD5:	8378E3B04B74705C10D7F62C1B36106E
SHA1:	AD8E2F29DB5BBD175A5E46D6D6E4E239563352A5
SHA-256:	DBC3E07253DDD7302BDC17D65C45925402B2C5256528D9E27FD0CEFAECD27066
SHA-512:	14CCB40A451214CB301C65B00B97B2184714E99FA0403F6680CED9B8AD97DD0BC292C986EEE262F1162D53129EACE18B511147EE39E90C3716EE859B15D8D492
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/account/script/1727814741572cp.yubico.js
Preview:	import * as webauthnJson from "./webauthn-json.js";..let ceremonyState = {};..if ($.DynaCP === undefined) {. $.DynaCP = {};.}.$.DynaCP.Yubico = {};..function rejected(err) {. $('#yubico-singin-error-msg').show();. window.setInterval(retryAuthenticate, 1000);. return new Promise((resolve, reject) => reject(err));.}..function retryAuthenticate() {. var countTime = $('#yubico-retry-count');. if (countTime.html() === '0') {. window.location.reload();. } else {. countTime.html(countTime.html() - 1);. }.}..function getRegisterRequest(urls, requireResidentKey, url,) {. return fetch(url, {. body: new URLSearchParams({. command: 'register',. requireResidentKey,. }),. method: 'POST',. }).then(response => response.json());.}..function executeRegisterRequest(request) {. return webauthnJson.create({publicKey: request.publicKeyCredentialCreationOptions});.}..function submitResponse(url, request, response, comma

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	7.004761274848394
Encrypted:	false
SSDEEP:	6:6v/lhP6Ichq0vGtQwNlnWCnLaXycFWbfpIz14n/KJttDR5JS9LWkiynvWdp:6v/7iIhoGt7rWnX/FWDw14n/cJfFyvk
MD5:	6C0D0A7EB9763043F7DC773524225E74
SHA1:	661A4C9B1F703CB1A193EAD24E7E1293B51C898A
SHA-256:	888FE401B7B6208396D69C8D3F0F74FF5814970DE6C520BB7D4C405CE3602872
SHA-512:	F1ACE9AD2AC23CBAF8F56B2A1026A27569F968FDBB588929B3B815FEBAD470E2D97DC0995B0E1561324655330059A8D2D5A0E0D0E353111EA393DFE9FCF56BD5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............H-.....IDATx^.....0......(lD..P&....lP&.~.M....T..J..}~8...,\|.....%. h.Xe.$...'\|.....D@^............_.y.3X..E.'.s..Y[..K5.........nP.IjDKx...9x.QY.\|.Q}\|[....U..Dy......7.&.....p..o,...V.**..Pl`.#....e+..0.......>g...k(....L...z..1..A.u.....IEND.B`.

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27447)
Category:	downloaded
Size (bytes):	367374
Entropy (8bit):	5.302607151918668
Encrypted:	false
SSDEEP:	6144:W4oQYPIDDagHulGpoRHYmGbpJGDbopEi+zs5eFMSt:GPI336GZ2vQ5ez
MD5:	C3221694980B368DA337CFD23D2F9338
SHA1:	5E0FAE6A6037716B910519E7F621C90CC1574CB3
SHA-256:	0500D62E9C3B553DC35054745D9CE93F6E7BD00A1C67650D1A2A42C5D1545ED2
SHA-512:	0F3D6F13FBD405ACB46B56B699A2CFB9082CDE5DF81BD9AB933119DE24224DB09183E9C8E5FEA3D90D5E1F96BB7C7D81F5B532E80B48515F6A531B2A1A6464F5
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/lottie-player.js
Preview:	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self)["lottie-player"]={})}(this,(function(exports){"use strict";function _asyncIterator(t){var e,r,i,s=2;for("undefined"!=typeof Symbol&&(r=Symbol.asyncIterator,i=Symbol.iterator);s--;){if(r&&null!=(e=t[r]))return e.call(t);if(i&&null!=(e=t[i]))return new AsyncFromSyncIterator(e.call(t));r="@@asyncIterator",i="@@iterator"}throw new TypeError("Object is not async iterable")}function AsyncFromSyncIterator(t){function e(t){if(Object(t)!==t)return Promise.reject(new TypeError(t+" is not an object."));var e=t.done;return Promise.resolve(t.value).then((function(t){return{value:t,done:e}}))}return AsyncFromSyncIterator=function(t){this.s=t,this.n=t.next},AsyncFromSyncIterator.prototype={s:null,n:null,next:function(){return e(this.n.apply(this.s,arguments))},return:function(t){var r=this.s.return;return voi

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5900
Entropy (8bit):	7.766263355884296
Encrypted:	false
SSDEEP:	96:WElbw+iXvx4kPn7XRjDO//ACjCO6TqkF5on7X15woAkYXrr4L0+dcCvBNfIi+:TwTvekjXs/ACGO6ti7X1Oob8EL0+dp4R
MD5:	A59242EF3CE36AA7262DC0271CD1005F
SHA1:	031749A42AF6B3F3C00C5EA96FBA7369480F2F1B
SHA-256:	B06A827658ABF839057D688D4784A0EBE2C9FB05F3343C5BDE8C50954B65892B
SHA-512:	0D90CEEF12FDEE87FB6919E80B85F76E6E4731971ABB5F02F18944474A1750CB322E3EB30BE8CC1A4C5D247B38A92773B67FCE60ED9B95BBEE6B6ADF16CA5194
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/domain/logo/io-banner1720419766.webp
Preview:	RIFF....WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH......jm.2.s..r........:...p..$339..-.l....z..W.1..U]...k^..Rwo.H....i..........N.....I.....).h..:.#{.=4.;u..s.3.<.C...Ox].0.]!....1.r....Ev.Bc.]....n....N#.l:.Ns.h.......!X,.v..)/vjb.K3d..7...de...<.\.<:...Fv.....&4.5].=..4..![..v......d9g.z.\..v....&.....I{c.....j2.b.{.L.`1w.F;io.....K#.m5.&.u.XFk.....h'.m<.i...E.....L.`..mMF;io.i.,..;.&..^.k4.....v....,h........5......F[kM;..&kY....0]4.A_.]..d..v..5.S.tw..\..4......j.5.....k...h...9w[.d.$GX.e.,;-L.X.S{.d...u.Z..=....

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	300
Entropy (8bit):	7.009815544168486
Encrypted:	false
SSDEEP:	6:6v/lhP2tZjx/kMmDxdv+3qJSpydvfXSrXkkqS7/5UWTYC0Kp:6v/7Otpxvwv+aSpsXYPT75UWsC0g
MD5:	AD43E934C476A3CD781F2FF352F5A872
SHA1:	0493281D663A2502505DB9C4C308FBF6FF93030C
SHA-256:	53BC3B526815C9D478D3CE04093B992B7A11159885346B2AB7D82400B223A79F
SHA-512:	588DF08C5879DFD7D6827CE4035CE9C03CC40E61DA22F18A69F6BAC0B568C89C80B0D9AD035EC3714368FAEE4ECC59E20B690CFDF3E6495068672CE7962FC8CD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............m?h....IDATx^.....0.....\.....d.6.Mt.6...@G.QmS~.(P..D......,...8R...].K..4,.d.kQ.]I.y.uw".4c..O@1.=...T}.x.K*.)....VKB.k..;u.`..."."p.........f#G./...X......(n..b......wI.k{...<9i..Y.fg.f...p.s6nM.m.<.c......n.3:.G.....Z.l..yH^..2:........=........IEND.B`.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	79560
Entropy (8bit):	4.79065218999817
Encrypted:	false
SSDEEP:	768:/HcsLBoHT+x2ABQ+27aH/nV82ySRFpNhhaokwKgOE:F7AABQ+oaH/V8tg5DkwKgT
MD5:	216622200B3697EAF29A24120D47117A
SHA1:	A032C9A8F91015D4DF5161A1B66836F5EFECD2CE
SHA-256:	555D0A07DA786106F75C13F3956A598584C981965826683CF5A0AF1C0AA44F56
SHA-512:	83E035B1E91DDB1E5447A994183224A5CE6C10F271A7C70E228105845B4B2DB1E88484DFA1BD2BE10CE4C7D1806E11DFC614DF528AFF81373D36575A216A85FC
Malicious:	false
Reputation:	low
Preview:	let box_content;.let box_sign_in_btn;.let box_bottom;.let customerAvatar;.let customerName;.let isWake;.let cookie;.let last_time_edit;.let messageCount;.let updateMessageOpen;.let updateTypingOpen;.let lastUploaded;.let MiniReminderLen;.let isMinimize;.let emojiBoxShow;.let isTranslateDropDown;.let unSendImgFile;.let sendMessageLock;.// let closeUpdateLimit;.// let closeUpdateInfo;.let closePageUpdate;.let wakeCsLock;...//chatbot polling param.let chatbotCount = 0;.let chatbotDone;.let chatbotCookie;..let yellowStar;.let blankStar;..let checkGreyIcon;.let checkGreenIcon;.let isCheck;..// show:0-bubble 1-box 2-minimize.let BubbleStatus = "bubble_status";.// box_show:0-is_login 1-chat_bot 2-cs.let ChatStatus = "chat_status";.// sign-btn: hide-0, show-1.let ChatSignInBtnStatus = "chat_sign_btn_status";.$(document).ready(function () {. init();. initCategoryEvent();. allHoverEvent();. allClickEvent();. initGuestSignIn();. allMonitorEvent();. initCheckBubbleStatus();.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 14, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	250
Entropy (8bit):	6.863499301282675
Encrypted:	false
SSDEEP:	6:6v/lhPnlzO4mHbV7vUjWh7aF5ZFbQvQJaSlUqsT0GelTp:6v/7dzOPcaZO5ZFbRalqswGa9
MD5:	0A3D30645B7F2867733A7557F683566C
SHA1:	0911E02B490AD231B35CB1F89B0901DB78400703
SHA-256:	060574B9F1900DC3917DE25345CE21A2AEE6A681576915875DB0CB55977397F2
SHA-512:	95FBB11FA6224C8381E17BFC4A6C767CEDC2399FCE441B9CEB57317E7DE76769791D4E1BBABB5BD9B70F75951450200FFF1C444846ECE7321E77BF4368059BC5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............F.....IDATx^..... ......Mt.7p.7p.7q..I..?.p.y.iIj....p$\|..:..Ox...RDG.UAK......J......A..$.^.C..d>..C..b.>...6..U.9l..0Xpb..evX...,.....FX.m..1...G.?8..<.wV......uc./..7=.<.......z~..}.Y...y......w....IEND.B`.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	886
Entropy (8bit):	7.50137186506717
Encrypted:	false
SSDEEP:	12:6v/727/+/FOtSz48JKQenD9lXN2bAgWNrSu0gQv8p9gw7DdVuXR0gj0gj0gEAV/:eNOn8LeRIMrSUQvg9gw7X0
MD5:	BDC0AA5546F9E77E04DBC734B34FF815
SHA1:	6ADAD54C0CFA4ECB3EDEBB0C0F59A2E6E6EAE1A0
SHA-256:	6A1D96681EA0BBA30DD4F3C6A257FAA8CE78CF30B8C5426C64BF40322CEFA514
SHA-512:	7BD6AC4465BDDCCB04D9132EC36A3E1B227E72F41FE939971949D3889295F3AAF9D190D3BB3D380457A2C059EE6B558F0927425165DC09681544EAADF2B9F577
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/home/trusted3.png
Preview:	.PNG........IHDR...d...d.....p.T....pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx...mN.A...g..P.I..)..z...H../..... ....M. x.........h"I_.;..7jf....,<..&v...w..S( """""""""""""""!.ySo...%......-....MX..."..a..1r&?A.\|."..q.:..j.m....... {nD.8.3.r.&..Z.9b{r......t..r.#...M^b...Y\.)..2n.k.............;.`.pr..X...~..~.z......X.z[.2.Y.k..._.._..-..\...#..V.1.t.}.[..Ew.?...b........).OU.....<...[/...$y.3+.....d...d%eO.......(....r........!...v....1I..m.....~...."<A.\....N.....Z...h?\|..2....I5......m.Q...%n-.]....Aj..] ..9..B?J......s....J...+..z.c.v....L.$H..$.$.b...-\|E.E.A.#HdK.>....HA.(...!. df....5X._...~.........a&z../(O.^.....K.9dm.w..I......O.8..,T.....O......._....W.A.kT...d.o.:..!. d.....Q.2.BFA.(...!. d.....Q.2.BFA.(...!. d.....Q.2.BFA.(...!. d.....Q.2.B&. .\|...d...zh......ng..q..,.....'.EX.................7?..3..U......IEND.B`.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18670
Entropy (8bit):	7.933234390297527
Encrypted:	false
SSDEEP:	384:m9LS/FBYkiNX4O50yy9gy2jVmnYZYysuC1HMo+kxQPnb73Ypt1V:m9LM7iNIOK995sQYZYuC1HMSuIpXV
MD5:	452557F25CECC9D36D4A399059419FCC
SHA1:	BDFC9A05D277BA3E9041E234B453E931C8BCF2F1
SHA-256:	BC194C47B2AAA3A47B05B20D674B0565F92EE9915B3AFEEF42C592A43DF60392
SHA-512:	153A72E12782C11014007B33699BE8CEC78ADC3650FD8896B9F35A74F9661661076263C6B6C0B8C7191F9359156161C430FE8A61B48A1551B410B83E58C60FFE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................E..H.IDATx^.}..Uumz..@.[g.(..X.`....bAA.RTP.(........A.mm.\....O..IH..0$...?.C.T . .Sr....^..s..KH..h.<.............k.3g.o.Sn.y.I...>i......:.s3C."..f....?~jh...........N......}......S...L...3=..S......?s..N.;.....W.Z.....7..<.].83r...G....>9..83.\|~z.........y..r..s......X9....~...o>5.3..-.s'...L.Iy<J.r>1......{?1..w.T.?.b......7......i~..3.{.:;v..3#..4=.C.K.i9.x.... ...s.<W.$..5.....(...0...4.....Iy<j.`....k.J...........&oh>6..r..>......u......7....N......kN..mp.$. XN.PHdI`AdAT..2UF.D.....ER....,s....#.D.........h....\|t.z=......k........a....c.=.._....4..i.ckN...(P...,....bi...i....2.S.".G.MELC.Y<..(........`.....&.....s......Xs..o.:q.....G.<..GS.>3q.Wf.o...X.s...Ty.`../...=.i...B..G.."...5..xK.,Ut.g....S..!.._2..P.]>.`.s..u...9d......+n:db..GMMm.(.u.]...n.~.WWM\|....O.p..X.(...,..OE...,-..(.\KA.,.-..2....."KLC..#....!9.,..V ..."..@I`....._.......'V\|..+^...../\|.g..z.......{.+..IA...*...gAd.E...!;.-R6...i..

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4886
Entropy (8bit):	7.8233103943375095
Encrypted:	false
SSDEEP:	96:EDrswRNK4lZe1LstKEOI6wVEJAkB0PO/SfqAFT:OrnbS1LstxLV0B5SS6
MD5:	3FF73197A96DE509CD7A095BAA93A8AB
SHA1:	D4DD6FF34F197706C253E7F077B72637CBDE19E2
SHA-256:	2224B62567D95C154E6C1F4911C994E37A3BABA346405E033AF815869EBA101E
SHA-512:	EE9158AB6EB1A63FA5D14F3FB2CAF62F70D75F4FB518019892358BD646B40D3B7984781F6CD507664B64F7BE388AF992BF124756DDF86D7AE5F46EE2E5E9E413
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............ALPH:.........J.3....p..4NxNZ./.J.\.(..................Z....Z...b..._.1]...#.B.z..k%..V.\.Z..k-.................................................................................................................................................................................w.e....p.dz.X..6".2&.x>e..K..z./.....s....C<.VP8 ....0........>m6.I.#%. v(....iKx....M...f.v..5..Z{..v....X...f>q....?&?%..._.>.~-........`.....~..{.5...../...=.7.............;.........C....X.O......}k...9.=..$..l..u7.....S{.l..p0.M....F./..{..3.=I..l..u7.....S{.l..u .#VE...P^..9..C6!....6...5....,.]M..5..H~ck.t..+.o.'..].X9....Ce.k...6X....Ce.k...}.. p.A@.WI...D..~."...5....,.]M..5....O.>..q".L..8.ya1......RE...Ce.k...6X....Ce.k..M....V.gN.....#..TD}....l..u7.....S{.l...s....W....0.f.=..N...6X....Ce.k...6X....;/".5......9...[...Y...)..U...5....,.]M..5...oD.-.......!)./h9sN.....6X....Ce.k...6X.............'.g.....Z..}.;..(...5....,.]M..5...[..q.....

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19600, version 1.0
Category:	downloaded
Size (bytes):	19600
Entropy (8bit):	7.987896864926305
Encrypted:	false
SSDEEP:	384:DO9QOKK1ov0/vS0RMIy5z+s3O4mszugwVSy8ypC+eFfPYDE:q9QRN0/vTRv1t5s9wMyp2dPYDE
MD5:	A97AF381DD8B174164F0BD1D5BF5B123
SHA1:	C8B72AEE9FC4FA425761C2DA454F95D45B42F506
SHA-256:	4A9FA9C4ECB0EAEC0AF1E4949930232604B331CD076CA7EFBA2A4E2EFDBAA367
SHA-512:	A0833DBE283F89503A173F47C4C0C9F61FBE2553E62FD2151786F63AEADDA7FD1DDAF5BBF5B77B74D269D43B140887CA683F11D0DDAE8DC980416D55F09D8261
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-iLT9g.woff2
Preview:	wOF2......L...........L,.............................<..,.`..l...........t........6.$..\|. ..f..i..K.w.5l.....8.K..E.q...z$.`..b......%p"C.4....$%.........D.2.N.T..A.R6+.&.w..#..q.l.t....v5+O..d..w9.>.`.P(........ptJP...>W.......'........h...Q....@.ZL.PQ..b...U.p....s}..v..X.....nf..}....'..(4.<O...../0t/......P...v.F...E.+.....X{.=..(.Rl...c. w...o...j!-..t:.dP....W..]_..o.fZ.W.:... g2.2i7..9s~v.w.!.L....MVYEB.Qg..KXI[e...O0....`..$.re.q....<o.-....K....t. 8T.4e.G.....O....t...$-.~Q..2..fm...p.K8..y.<.H.N.../]v.}...L.:E.6.N..\G.{f.&.rR.Wc.... vk/...v...A......$..m'.{...J..m.I..L..'g....oN........(yC\|...P]y.^...g..?..!...".\|...q.h...'..+.M!..@.z%{C.}9....W.).u{.e5..z. L.{..P.>.M...#V...LF..:....$.V)M.g..4.~...... ..t.O..........{.^..@......h.......8...g..d...`...`.%x.O..........r...wwz....06....z..v..L.....4....+....(d...."....d.hA...x..L+Q.8Rb..A8 .F3..1.d...9=..vW....Nv..i..A$.{...,..,.<..4..27..wFF...4}.JQ.%,~.\|@..N ..............{...^..v

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4534
Entropy (8bit):	4.791550837085722
Encrypted:	false
SSDEEP:	96:WFof/FriRX6r2swYxN1z4FO/9uLD/bCt4nG:WFA/FrFr2swY7yFe9uLD/bDnG
MD5:	3503FF54E9FA30999F7504FFC9841668
SHA1:	53EB58BA70BD3C64B85A5A2FD3D52CEF8B1FEB2B
SHA-256:	5AC6A39AB59C81E4AA8D28F59BEF1F582E08013FD5EF14D1F1AE778282E7DE7B
SHA-512:	30EC019D2F20993C882602561847C0360CB29D4E606792ABA2D925556BE0492E139E529D0EBEA1DE4A6F0551EA13963905EE8EF7082493412ABD3F7877D29AC1
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tc/1727814744245css/selectV2.css
Preview:	.nice-select {. -webkit-tap-highlight-color: transparent;. background-color: #fff;. border-radius: 5px;. border: solid 1px #e8e8e8;. box-sizing: border-box;. clear: both;. cursor: pointer;. /display: block;/. display: grid;. align-items: center;. justify-content: left;. float: left;. font-family: inherit;. font-size: 14px;. font-weight: normal;. height: 36px;. /line-height: 40px;/. outline: none;. padding-left: 18px;. padding-right: 30px;. position: relative;. text-align: left !important;. -webkit-transition: all 0.2s ease-in-out;. transition: all 0.2s ease-in-out;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. white-space: nowrap;. width: auto;.}...nice-select span.current {. overflow-y: hidden;.}...nice-select:hover {. border-color: #dbdbdb;.}...nice-select:active, .nice-select.open, .nice-select:focus {. border-color: #D3DBE2;.}...

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1284
Entropy (8bit):	7.63551324306178
Encrypted:	false
SSDEEP:	24:eRVxkbuPGV86BcMMd79F4FUVlnsrGTTt4tvzb/G:OVi6enBcv9F4FklnsrGTTGR/G
MD5:	E9E54A4C303EF9E743CEE11C7466FAC9
SHA1:	24A29BD04CA3DBEF0FE8B1A83BA0C35B9F4A601C
SHA-256:	2FD0876C8D5C871F457790CA8849AF58D6E68850A4852383EB20E3F2B9109014
SHA-512:	AE43B1968CF0893CF6A4D6F5EE3446343393E4D6E01A5FEA2123DDB6CB604BD5499C397B5DFFAAFFEF8CCB8CDE9822CCC6955B1482D42F4EA6F919A5BAD98FCD
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/home/trusted1.png
Preview:	.PNG........IHDR...d...d.....p.T....IDATx^..Q.@../.$.$.... P.t.. i .....!$.@* .@....@,.<..=Y.N..$.$.....!c....w..!p.........................................................?"L......./B....o8]....d#.e._A<K%.c..g"z:....ou..WG.I.<.....&))y?\|hm}Ck...t.8C....r4=@J...d....3...]........x~z.2....9y......W.#y'm..........?.k..r...yL<<..0yPh.....c.....s....r{2(Q.fN.DP.....E...[H.2..H.\%..Q^.i[F6s..$........bX.{..;...>...j.;...*]....g.....W.......O....-cSB..3X;.A...$..u..b.2...-)..4Vv.....vh.IN.E.....x..Z.....].....5.x..2....)+...y...y.#Z....(.h..^....'.g@<t.......F\...{.z...9bq........Q...C..To...U.......K"M%.E..f.s&../fj.P>).v=...;.\.T._.....7d#C.W.8o......fD.kR!..G.IM..w.....`#C..Mp..(..Bv.foK..Wg......W\|......V'%.%..\....1.5.8.. :.Ef#.}..^.......^.....VgS.4st-hQX.U.;U..2$.\|W.Z.:..kdo. -....gU....2...Ut..K~..wv....+.i..gTY..O.O.{..G7B(qGO....Lr.Oq..v...!#.z....j........F..Q...`.?.}{.~m.d.N.-Oo.H.%.M..h..&.c....t/...=..R.cx..H.V.wT8..b..B.e...O.\.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7751
Category:	downloaded
Size (bytes):	2114
Entropy (8bit):	7.905881336427597
Encrypted:	false
SSDEEP:	24:XzI6AOrIeZrjeWHi+fNS3QhLncJeZn92iNF4sG0I8lrOVGIY6kAm5RlBJHZMAr9J:XU2Eeljkq7JNF4d0n5OsI+b97wDPq
MD5:	BBD26C541B063878DDDB6095C1F82221
SHA1:	AD7402097C8A410E880016BF77B037E2DEF9A09F
SHA-256:	D7CC9429D7DDDE82E2F3D9390E483CA72489B153A4356A401456411D5B40FA9A
SHA-512:	B2A65FC9D7F020231290BE91F49A05C4C41225DB23BD22D9C1CFD88BDCA2D855DA165216DB65F520832848A54747C6245B5D7327FDA3561B529D715B6EA95DA3
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=5a73801679def00001e7f7d2
Preview:	...........Ymo..........Jl'vr.w..z...h....J.,n(R!)'>...C..,....-.YQ.r...3..........Qfr...z ..(Il....N?..Jm..A?AK.._,YQ.........(M.Qi..~..}. 9.0R2.F.P,......DB_....X....d...[c]..IQpj..>..`......8...-.f8...G\.O.4...b.I.)Lb%.&.$I...Gl.c.cb.P.P..T`.c..0..?F.~..k..X.s..b..>.Xa]F.W`c.(...3..ZT.....$Xr\r..N......R..$r.."..D.p..0).qj.TJ....6...$.(.b.J4K...&.......M@.........d.+%.sNE..YcY..4X...k0....<'.00.0..1).&....m$.0.....2.Q.{.4.........Z1....7.+h..EOx@8[.0".r&.T...@..I=j...M.`gM..R...Uf...9..4...... ..y.....0..;....ZLO-.......F....9_.6.b.9)4...&@...j...)...._(_SkI.7Z...w@.O...OM..4x&...../.....se...xwe...-.@....r.......wh.p.....!.{\|......t.ck[.`.t.K..l.L.;.$....Q.C.Pl.D.'A.;....-.]+4.........""A.A.......E.....K<D!..kz....J...........?....5..u(C..*cIB....O>.nM{=)X+"....Z..E!5.+<$...4tad.(`).....'.^.@.....{.0.9+..!d..+td..n.6......Vy...[."....b..,.....=\|E. .....+JE..9..$.fu.^........X.........Y.6....[.Z..8..I...,A..-...H])......[...NR.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-S0L3BZSLYB&gacid=1188666043.1728166508&gtm=45je4a20v872015657za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101529666~101671035~101747727&z=1020591301
Preview:	<html></html>

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 424536, version 769.768
Category:	downloaded
Size (bytes):	424536
Entropy (8bit):	7.994999375929394
Encrypted:	true
SSDEEP:	12288:KkKyDxLL2erLD0ZAvB71RJ8zfLtZI4M5zLs6:99rv0WB7omH
MD5:	B7412EB0B0D0A37DEFFBB70250B4011D
SHA1:	B89AD9DFE0720D47EB134B6A32806F185CC12EE3
SHA-256:	515954FE1DC163277D36B51F79FE56265F6B6CF79F99E307BBF6E52B477B9C87
SHA-512:	C5DAE743BAD81C8CFCD0A2601A2CD3BBCD2309C585E2D1ADFE29C0080A164F7765DC195E8888EAFE0F74440E36C0935C2E9CF79FC2403356746B250644E3F945
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/fontawesome6/webfonts/fa-light-300.woff2
Preview:	wOF2......zX.......T..z..........................8.$. .`..T......8..X..d. ........6.......Ij.....z..........p\..... ..O~.._..w~....O../..o....._..?........n...b...N...........z....j..f&@p.....' t..0....PY#t@_{.^.X...%QJ...[...B.qe).q..>.Hr.(..$%v..V..#.i.....k.\|U.m; .....A...CR.....\|.......r......A...y..?.M....N7..O....>......\|o.......U.A.A.....2....=.+..p.._......FH$..N.+.. ..l.....j..k..R.a^z!.x\~V..z..3.0.$_.C....G...+4..j.H. .dC`.M,).=..">0W?.\|.ua.2=..`.W.....k.t..................$".b.. ..R...I%?......j...qV8.=;.z]....1..lC.qZ....u..!.R.z.......4P.0....;....Y.N.\.K....HQCR.(.....4....J...S8..l..../.!_..%_.....?....kf....e...ZK.,..HYL.qJ."g......'Ly..........?..R..R..r...X..Xq,us........r.8.G.#...}.9.....x.m.....g.o.N.......3........3....,7p.....a.2.,.M..Z"..J"e.B.i.R.8.....!.Y.z^g....?....UwUuu..\3.gz.{6N...j.#.$..E...fl.N.A..a...G.;.\|y..%].{).R...=.y\j..\@.^...(.d.h.#....$..n.v..}....g....y.y.~..0...?.J..UuUuuwU5V.p.t.....3...v$;..rd.v...8

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6999
Entropy (8bit):	7.9564755986053175
Encrypted:	false
SSDEEP:	192:Q6rhhhhh+dRwP+ybbSsfMiz8TEb6NQNvYQSEHZthhhh2:Q6sdiWybusxz8TEuNQCQSEO
MD5:	24C3EF4456B2C1C9C244728E91B27511
SHA1:	730A836CAE71CFCE98C16911BC003B46D8EC83CB
SHA-256:	BA6DF22053C98E9D924E4B7B4E917BD036899292D43F2609CACC92F5B01720A6
SHA-512:	7A7F14D3CE5D47FF720C64E3BE435255087E70ED17DB3619B3CE75D087245846D053F63E920469C803095979203A5FCC24CAF1EF4680D040D131F0218EBD7961
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/favicon.ico
Preview:	.PNG........IHDR.............=..2....IDATx...X.....]l`D..+.k...(6.5..{.Q.F..K.(...b..Eb....+..X....r....,3...<......?gN...F..{}W.N..h...zg.`....p....&F.A.F....6...C.0.....9..KHH......^...@..M.>.......z.A..G.^....1/...C.m...h...y....&fWp8i...)......Ut.^.EAk..\|.......-...\.N.x...(..B....^...Gf.....m........)].".y..3G.h.w...7../.0.}h..G.8..~\|$h.ln.X.2......]4..bx./..Cg..........#8....dk..O..C.{...\...a.......'.?.s48...Ni{:.......Q,......C....(.=0.>j.kN....Q8.....:.+8.....z...8...c..V..:.J`.........;.r....Z...Q.\..U...Q.\..U...Q.\..U...Q.\..U...Q.\..U...Q.\..U...Q...Q.vY.A...(U..e...ys"o...53..l-.F.....x.=}..[.......n......:..jGc...GvXYi.....hR...wA........?...^"...N\.....~.2^.\|.5..-3r.K.......*.:SF..+....P...@......#..h.@!E..-0.o+d... 1.pj{......6.t.C.g..>.-...FZ@B..p..,G..P2\.i..u&4oR..GtF.b.!...."......w.D...V..G..8...-..F."2......0FLX.'..4...H.:.0fHG..r..-g.\.B.3q.<<..%&]:+......=P.\|1!.P..q...o&..:....-.t....fz..s."......Y..

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32043)
Category:	dropped
Size (bytes):	34857
Entropy (8bit):	5.428595013800402
Encrypted:	false
SSDEEP:	768:+pxyiYGAdU1sahkgF58HF+XZky13RekzWkb99QuKjh:0yFUickgnsF+pky13RHXMRjh
MD5:	8B045D9884FF3C69D4572C7D499DEA8D
SHA1:	603FA9875AFA04C3481D4F17786F4104506D2938
SHA-256:	77DB72348B70D0B5B3009147DAEE033C61BE38C16E931CEE7714605870A1B142
SHA-512:	FFAEB067AA040E7F5C4971DDF9251CF1EAAB9719EE325020671B03D4AA142A08E0366DDD16AD2FDA255074F2B910D445D719C018F36AC076050D14CCC1A9F612
Malicious:	false
Reputation:	low
Preview:	/! VelocityJS.org (1.2.2). (C) 2014 Julian Shapiro. MIT @license: en.wikipedia.org/wiki/MIT_License /./! VelocityJS.org jQuery Shim (1.0.1). (C) 2014 The jQuery Foundation. MIT @license: en.wikipedia.org/wiki/MIT_License. /.!function(e){function t(e){var t=e.length,r=$.type(e);return"function"===r\|\|$.isWindow(e)?!1:1===e.nodeType&&t?!0:"array"===r\|\|0===t\|\|"number"==typeof t&&t>0&&t-1 in e}if(!e.jQuery){var $=function(e,t){return new $.fn.init(e,t)};$.isWindow=function(e){return null!=e&&e==e.window},$.type=function(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?a[o.call(e)]\|\|"object":typeof e},$.isArray=Array.isArray\|\|function(e){return"array"===$.type(e)},$.isPlainObject=function(e){var t;if(!e\|\|"object"!==$.type(e)\|\|e.nodeType\|\|$.isWindow(e))return!1;try{if(e.constructor&&!n.call(e,"constructor")&&!n.call(e.constructor.prototype,"isPrototypeOf"))return!1}catch(r){return!1}for(t in e);return void 0===t\|\|n.call(e,t)},$.each=function(e,r,a){var n,o=0,i=e.length,s=t(

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21924)
Category:	dropped
Size (bytes):	21977
Entropy (8bit):	5.2374999357024965
Encrypted:	false
SSDEEP:	384:BzP7G3iA2VmwqU3o+Vxfz3y2uyeVdPkmsuyqAGB+WVYJv5Uep/FR69f:BzP75A/wqU3o+bz3y2uyKAqAxJvCoTYf
MD5:	D827E4237EDCFE58A530CF8021154F67
SHA1:	B139E7DED09584E6B17DC8DCE930350223865ACE
SHA-256:	02E5BF47B2473C1DA7A39A25B14F0F5D9857142842D33DEF047E492F9F610CB9
SHA-512:	E7778F10CB8745A720290DF0B4B50AA35DC3C5F63B714A9DCE9D8925304D794A5BE732D0AAFF20B0C2E71F2A8536B7B44836CB93849EF3778EB2CADF78F42AEA
Malicious:	false
Reputation:	low
Preview:	!function n(o,s,r){function a(t,e){if(!s[t]){if(!o[t]){var i="function"==typeof require&&require;if(!e&&i)return i(t,!0);if(l)return l(t,!0);throw(e=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",e}i=s[t]={exports:{}},o[t][0].call(i.exports,function(e){return a(o[t][1][e]\|\|e)},i,i.exports,n,o,s,r)}return s[t].exports}for(var l="function"==typeof require&&require,e=0;e<r.length;e++)a(r[e]);return a}({1:[function(e,t,i){"use strict";Object.defineProperty(i,"__esModule",{value:!0});i.EMPTY_WIDGET_ID="000000000000000000000000",i.LAZY_LOADED_WIDGETS=["54d39695764ea907c0f34825","577258fb31f02306e4e3aaf9"]},{}],2:[function(e,t,i){"use strict";function n(e,t){for(var i=0;i<t.length;i++){var n=t[i];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}Object.defineProperty(i,"__esModule",{value:!0});(function(e,t,i){t&&n(e.prototype,t),i&&n(e,i)})(s,[{key:"mutationHandler",value:function(d){var e=!0,t=!1,i=void 0;try{for

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153126
Entropy (8bit):	5.540374777898656
Encrypted:	false
SSDEEP:	1536:BSG6arvU/wAQWPyXpKHhitCnAyYHLaUbxijIHWvxDZz7/wurgsjWbcbWgQWZpVqk:EH1YrCIHWpDB74u7RzqNYPCfaQBZwK0j
MD5:	36649FAF8D7F63937458311FB9256CB4
SHA1:	FE9D2A4EBCB7F9B213AABE701BA440CEABB05EA3
SHA-256:	1597852E8DC2259BD2ED4E299A2B82A5C46F6239DC7B3ECFB7F07F3A01D5170A
SHA-512:	F80DD800CBEE95457949E4B4F5F646950E8EBF900D07632A06352183DA1E1DE28E18A6449F01F665CF8B7E5FFC42CE215D0A09BA7D2FBA3AD650297AC18C8DF0
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301431,17301433,17301436,17301511,17301516,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":100,"afs_gpp_api":0}}};var n;function aa(a){var b=0;return fu

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjUzOS44NTA5Ojk1OTA5Zjc0MGUyNjRmMTllNzA5NTAzYzRhMDJiOGRlM2MzZjA1NzZjNjM1MWU2OTRiNWU2NzM3NTFjNjE4OWY6NjcwMWJhOGJjZmJjYw%3D%3D
Preview:	....................

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	45990
Entropy (8bit):	4.8660663924348135
Encrypted:	false
SSDEEP:	768:sNlU+wNeFIFHNF1O2isq902JbFcFYFoFT9o4YXeJX0BqPP3zww5L73qFvAd+3JZM:sNlU+wNeinLO2A02Jbu2KF9o4YXeJX0u
MD5:	EF62846472E77764ECAD11BB77958AF3
SHA1:	46EDAABE222057B0CE171064523E75C5C94CD180
SHA-256:	FD24B10C43E472A4F95489B448AA68FA1AD8512EFA3581BD59F3839315AE1709
SHA-512:	32D0CC4C8DA5EB41BDEEA622E52AF7C28EA09C46EF0DE2FBDD71965FF9740543B0F4DC2ECD2BE176F1B67FD7095E6F1A697C4B774C25C1CC683BA74EC05CEF69
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/chatbot_bubble.css
Preview:	::-webkit-scrollbar {. width: 6px;. height: 5px;.}..::-webkit-scrollbar-thumb {. border-radius: 1em;. background-color: rgba(50, 50, 50, .3);.}..::-webkit-scrollbar-track {. border-radius: 1em;. background-color: rgba(50, 50, 50, .1);.}..::-webkit-scrollbar-thumb:hover {. background-color: rgba(0, 0, 0, .3);.}...notification-area {. min-height: 80px;. padding: 15px;. text-align: center;.}...notification-area div {. border-radius: 3px;. border: 1px solid #1ABE9C;. background: #C1F7E7;. padding: 15px 20px;. color: #001345;. font-family: Switzer, sans-serif;. font-size: 14px;. font-style: normal;. font-weight: 600;. line-height: normal;. display: flex;. justify-content: space-between;. align-items: center;.}...trustpilot-check {. font-size: 16px;. color: #3BBF93;. margin-right: 10px;.}...trustpilot-times {. font-size: 14px;. color: #8792A1;. cursor: pointer;.}...trustpilot-thanks-div {. color: #00134

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	380
Entropy (8bit):	7.222831423370456
Encrypted:	false
SSDEEP:	6:6v/lhP6Ic8iuOl+lHDcL7Q7lsXV31ivREuZ0WGCLgZ8z1LZXIQg/mECwHyMgltjp:6v/7iIA4j0Q7ix1oRPhc8bX6nhgXN
MD5:	D37F2763953F4CC19BEECCA5FB41BF5D
SHA1:	3BB462F8974CF8AB1B4C44C97F5702F7AF74E3DA
SHA-256:	9E4653C9EC28EA89218320F7BFEE11A04B46C724A2F37AAECC3CCA0D5245EB67
SHA-512:	E2064E3EC42DD2A8859E2A9927F4038726CB5ADACDA2F7536C15AAAF3B36D362969BB57527F143CF4FA44FEA43680E2192DB4FA6DAE9BECCF170D10FCE6BCFE8
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/icon-printerest-nav-side.png
Preview:	.PNG........IHDR..............H-....CIDATx^URmU.0.....H..8...`s.I..(.p0....A..5Is...%d=''ir..K.....#...8.62......[....x..B.9.8...;......H.....F,'....P......+....<7.G....H......Q.".....j......qP=%.p y....3N"ZmR...%R..Rw.?V..\|.........\.M=W.>.E..U.\|...H.XEU.Fy.[.K....r.m.....vE......^'..X.....K\W.H"...~..A.D..W#.Od.p.y.j.......;&../...{.,1..*.....c.j..E....IEND.B`.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	15769
Entropy (8bit):	4.421044042020617
Encrypted:	false
SSDEEP:	192:/0f4KDojksC4MnbdfHi1KLEcCSEcISbCQJ2STtCValEywRZOGO/jgca:KDojknJfC/6aR0Za
MD5:	73BA239AD5F820D7FFB0BCFFBF597B08
SHA1:	DEF6A64CC7DDB9D38FE41FDD71A5349065354739
SHA-256:	66928E8639115AE4406EF6745B56255641B478A6427C2822AAD60C1CF3B18088
SHA-512:	48983D4966C4F030F211D8A02A5739EE49EA353254C673C7A5628400D3EAFD7C40BD53ECD6674ADE852B041EE446469AFB9D9ADD0B2EA7D5312BF072D087B185
Malicious:	false
Reputation:	low
Preview:	(function () {.. if ($.MegaMenu === undefined) {. $.MegaMenu = {};. }. // this function is async, if you need it sync, use $.parseJSON(json) with try catch. if ($.MegaMenu.parseJson === undefined) {. $.MegaMenu.parseJson = function (json) {. return new Promise(function (resolve, reject) {. try {. resolve($.parseJSON(json)). } catch (e) {. reject(e). }. }). }. }.. function initDropdownMenu() {. let $nav_bar = $(".new-navbar-scroll");. let $site = $(".site-dropdown");. let $nav = $(".new-navbar-default");. let $sub = $(".sub-navbar-dropdown");. // element. let domain = $sub.children().children().eq(0);. let afterMarket = $sub.children().children().eq(1);. let support = $sub.children().children().eq(2);. // icon. let domain_icon = $("#Domains").children().children();. let

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5146)
Category:	dropped
Size (bytes):	63488
Entropy (8bit):	5.304066517531714
Encrypted:	false
SSDEEP:	1536:SRv877DcoN7hkWRkiNWE3z1uTzXKD4dxP3iR5Drn:SRv877DVkiKWS3iT
MD5:	2B803B5F1679880BE86041F2DEAA4A4F
SHA1:	9A2723EE3B64119C151F91210F6717E5203C91B0
SHA-256:	81A89B90D1A2E3914B2ACFE9B9E405F4BCFC7C6B0917538B83B583CA3C613205
SHA-512:	E747B16B838BB10BB31092B2BDF3A0272E2F9D5AE3D2155B5D9CD05FB433E98EE767615887A484CB253D983695FC3B23670342987E5C3EB97E2490F7B8826CBD
Malicious:	false
Reputation:	low
Preview:	/!. Cropper v4.0.0. * https://github.com/fengyuanchen/cropper. . Copyright (c) 2014-2018 Chen Fengyuan. * Released under the MIT license. . Date: 2018-04-01T06:27:27.267Z. */.(function(global,factory){typeof exports==="object"&&typeof module!=="undefined"?factory(require("jquery")):typeof define==="function"&&define.amd?define(["jquery"],factory):(factory(global.jQuery))}(this,(function($){$=$&&$.hasOwnProperty("default")?$["default"]:$;var IN_BROWSER=typeof window!=="undefined";var WINDOW=IN_BROWSER?window:{};var NAMESPACE="cropper";var ACTION_ALL="all";var ACTION_CROP="crop";var ACTION_MOVE="move";var ACTION_ZOOM="zoom";var ACTION_EAST="e";var ACTION_WEST="w";var ACTION_SOUTH="s";var ACTION_NORTH="n";var ACTION_NORTH_EAST="ne";var ACTION_NORTH_WEST="nw";var ACTION_SOUTH_EAST="se";var ACTION_SOUTH_WEST="sw";var CLASS_CROP=NAMESPACE+"-crop";var CLASS_DISABLED=NAMESPACE+"-disabled";var CLASS_HIDDEN=NAMESPACE+"-hidden";var CLASS_HIDE=NAMESPACE+"-hide";var CLASS_INVISIBLE=NAMESPA

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	8135
Entropy (8bit):	4.077700105538888
Encrypted:	false
SSDEEP:	96:i0Yk3ziFD4pX188Bq3W84OhEVdnIz0CUTdojKUFfn4S7uLSFICE:iODip4pX68w3BpWnIrUxojJ4SESFICE
MD5:	06F107A856CD571A18A3E96034E85AF3
SHA1:	AC172B6E0FC55DCB9318FC8CEECEA6376C0B8D6A
SHA-256:	02A2692F58769584189024E4F9750B1F77FD8D374C9D5C635CBC892CAED138A2
SHA-512:	C8F09B2B4E06A9ED1364FC333409C578F3F31A3C9DCDD4B342E8AD706C06588FE1FCF18ECBFD968369C472FF0D53B3D05E6A2023267EAF97EDEA38EFA1D53DEF
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tc/1727814744245js/selectV2.js
Preview:	/* jQuery Nice Select - v1.1.0. https://github.com/hernansartorio/jquery-nice-select. Made by Hern.n Sartorio */..(function ($) {.. $.fn.niceSelect = function (method) {.. // Methods. if (typeof method == 'string') {. if (method == 'update') {. this.each(function () {. var $select = $(this);. var $dropdown = $(this).next('.nice-select');. var open = $dropdown.hasClass('open');.. if ($dropdown.length) {. $dropdown.remove();. create_nice_select($select);.. if (open) {. $select.next().trigger('click');. }. }. });. } else if (method == 'destroy') {. this.each(function () {. var $select = $(this);. var $dropdown = $(this).next('.nice-select');..

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	573
Entropy (8bit):	7.494443697114778
Encrypted:	false
SSDEEP:	12:6v/7GzINWjn5BJqlZNK/x7QG8ausW7FORpfpjwNzbRFqU:sNm9MKJV8apAcSNfX
MD5:	FA62327A3CF6C5E124CA7563394A4079
SHA1:	1DED88C8992B19C2E493CB64DC829DB04C8E11E6
SHA-256:	8BA86847DA3CED51E3253D8C541BF3E54B062153A4B010AFE167D4EB17F6A9E5
SHA-512:	CA3B81E22AAABA85BAB324565D94A9C4EF7CACD8F73B52D1581C83C02E4F951102A7D3A2D078D3E284B0715C0D50C32DA6E5C719678135551BB1A93DFBB7E79D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....IDATx^..;N.0...H\ ............!....h7:v.c.0...Jto...11......W.q..$..6.:?.~)i..%.X..5.9.M.%.q&L.o~..s.Js_X:2.M8.)M.G..A[...D..5...:.....[..5R.#........v.../..u&#p\|{.d$.g...F @..?.8.;.$`.....fw..Z...B.\,.....?...dH....D.c..$g ........mE......(..d."y....l3......@.....be...2.}N4..9u..tU/..CR.n.&7.I.,.r....2....A..>W......0.n}....H.H...h...6..X.S..0Q.g ..~f;1..u..p8O..T.n..X.C?.O.t.q>f.,......,.....z....a...gJ.7..!ym.D[.L .@\8.Om.....:.s$ ..X.l.0.U......A..b......E.;x.[l.Kt.......#T.Os........?W..8.....IEND.B`.

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4289), with no line terminators
Category:	downloaded
Size (bytes):	4289
Entropy (8bit):	5.254201645330513
Encrypted:	false
SSDEEP:	48:EVs9CntfQvSwXwRA7wTfwErWX0wR4tT0iWjv0CrrtreAf1JbgrzrH02cwTxWwEWh:tWadgRA7C3rMpZtgPrUGvERRjPMv3
MD5:	E3A38F9F90665F041FC2F74A7783D11F
SHA1:	36A00E17F15F30E9BB864D42ACF2614F0A6085AF
SHA-256:	76B055D98452D34162573203254CBDAA9938774E55FAE84D7E8A41B912522687
SHA-512:	FB6F924DE583713B6C28699D7FBBF74AFB85A748589DE184AE0EE81DAEE90F9EE65289AFA23E21CD8D0D27969B5A0CE4CFC6CA5AFCF6D1ADD372B4F8E9C8B81E
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/hp_script.js
Preview:	!function(a){"use strict";function b(){}function c(){try{return document.activeElement}catch(a){}}function d(a,b){for(var c=0,d=a.length;d>c;c++)if(a[c]===b)return!0;return!1}function e(a,b,c){return a.addEventListener?a.addEventListener(b,c,!1):a.attachEvent?a.attachEvent("on"+b,c):void 0}function f(a,b){var c;a.createTextRange?(c=a.createTextRange(),c.move("character",b),c.select()):a.selectionStart&&(a.focus(),a.setSelectionRange(b,b))}function g(a,b){try{return a.type=b,!0}catch(c){return!1}}function h(a,b){if(a&&a.getAttribute(B))b(a);else for(var c,d=a?a.getElementsByTagName("input"):N,e=a?a.getElementsByTagName("textarea"):O,f=d?d.length:0,g=e?e.length:0,h=f+g,i=0;h>i;i++)c=f>i?d[i]:e[i-f],b(c)}function i(a){h(a,k)}function j(a){h(a,l)}function k(a,b){var c=!!b&&a.value!==b,d=a.value===a.getAttribute(B);if((c\|\|d)&&"true"===a.getAttribute(C)){a.removeAttribute(C),a.value=a.value.replace(a.getAttribute(B),""),a.className=a.className.replace(A,"");var e=a.getAttribute(I);parseInt(e

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2188)
Category:	downloaded
Size (bytes):	57725
Entropy (8bit):	5.523067922465343
Encrypted:	false
SSDEEP:	768:etkI7pGt8BbK1WYykZ7g4KBbamZhzBMFeV6LsHUwxE4Fv:etkSGOKzpiFBbaEhKhwxHFv
MD5:	BF4DFCF23EE87C11EFE494EC3DFD4CC0
SHA1:	B44E5ACEFF24455C81D4B64E8A21A6BE6C48866D
SHA-256:	2B1C747C8C1A690C797EBAE4BCCD3C4298C4F6ADC5A75045CFF7165A402BB33A
SHA-512:	03C075F120174F081B764FD9A658596432F7BD9A2DCF0737167C759AB76C290130381AE4711C5A40DBD90B601146433C3B1B46EF16ED76AA5EC536157A2F8DAD
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion.js
Preview:	(function(){var n,ba;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var fa=ea(this),ha=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},la={};function u(a,b,c){if(!c\|\|a!=null){c=la[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in q?f=q:f=fa;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ha&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?da(q,d,{configurable:!0,writable:!0,value:b}):b!==c&

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371)
Category:	downloaded
Size (bytes):	117837
Entropy (8bit):	5.103029337752621
Encrypted:	false
SSDEEP:	768:myzGxw/jyBkWrJxtQDINSHlkmqIKmSqARwFKrH2DmrDI/O5UPcu8psYvS1Ft:Ew/G5eINSHlkmRSp9rDQ9Pepg
MD5:	CB73AF2B56FC8A0E7B193387D473A1A8
SHA1:	FC3D4EDC11160FE40E76CB2501E92E121752C8D3
SHA-256:	0E58E340FCA39CFF8888BD54D0DC2F0D898D1FA7CC062AE64D63AFE790971504
SHA-512:	A192BDD2031C9E26467C8219012CB97DAAE552AB7374182F4A0B62773826DA13B650BEBCE3E31B7E0528372602D7BCB2C7326632592416AE3361500B0FE9EA53
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/bootstrap.min.css
Preview:	/!. Bootstrap v3.3.4 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.2 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{height:0;-webki

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	231864
Entropy (8bit):	5.458039173946496
Encrypted:	false
SSDEEP:	3072:nfLeYH8At6JK37OeR8NteGvQ+AMPpgArl0xYu5s713TW:nfLeYc+6JaH8N7QQGArHu5s713K
MD5:	40283CFC473AFBE1D4ABBA7E6C809885
SHA1:	8A32CB88D9F537B02582DF17A5BB11C2087937F6
SHA-256:	48BA1993011DB4834882D81B2153753437607292F704A6543D4466C0F6D1372A
SHA-512:	DABD9FD4CC3FB4FF3EBC2C3529E602E91939DDB1F42C2D7E70188DFC3262548922EA45C96691D567F2C777D393B5CE7162B5BD4C2054B33A03856BBEA1C1A0E3
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	24889
Entropy (8bit):	5.2387894641255475
Encrypted:	false
SSDEEP:	192:LIpEFVHDUqzLt5efm0Ijwa1hCfYG/ZIWX4JPWrMjTetjuS8Rqtjuw8RwjKtjunR1:LIpECfYh8iRQERngRwwL8dYKTMknwzDb
MD5:	1018ADFB0E6F40A9F8027DF0D02E1FE9
SHA1:	3DAC585E506356408735FE01A2E98BDB26DC3AAC
SHA-256:	9933C484C68A0958755EAC8F5CA3EA6FDA388F28DA365C11B9DBBF630031AD10
SHA-512:	89B283B3754F87758B2BCADDD072179067E6DE18F61C877FC014A33DFE4AB5438562C9A441F2DDE6B4FED32ED7F6FE7CA4417911B3B1B269D40B4AD44B019865
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function() {..initPageContentDisplayHeight();..initNavigationBar();..initSideBar();..initDefaultNavigationBar();..dropdownSubmenu();..initNavSideMenu();..topBarMenuSubtitleHoverStyle();..navSideBarMenuSubtitleHoverStyle();..$(window).scroll(domainSearchNav);..$(window).resize(monitorTop);.});..function domainSearchNav() {..let scrollTop = $(document).scrollTop();..if (scrollTop > 0) {...$('.domain_search_nav_container').hide();..} else {...if (!$('.submenu-content-domains').is(':visible')....&& !$('.submenu-content-aftermarket').is(':visible')....&& !$('#sub-navbar-name-message').is(':visible')....&& !$('.submenu-content-support').is(':visible')) {....$('.domain_search_nav_container').show();...}...monitorTop();..}.}..function monitorTop(){..var height_px = 0;..var hasAlertPromote = ($(".alert-promote").length >= 1);..var hasAlertSiteMaintenance = ($(".alert-site-maintenance").length >= 1);..var hasSubAccountLogoutDiv = ($(".sub-account-logout-div").length >= 1);..var

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2021
Entropy (8bit):	7.817333141313171
Encrypted:	false
SSDEEP:	48:TNNNNNI72CIyI0eYD7i9siUrmxk7BnKMFI14iTV6nXxNNNNNH:YXL7Zi1MBn1eTS
MD5:	DF51393326A12EF7DD1BBC905D99E9C6
SHA1:	3620CF97B06D094934A105D95152D47F1B535D47
SHA-256:	8088F52338EF3AA603BA543516AF13FCC9670BC8B76DFDA49D36BD138682A3A6
SHA-512:	00257790175851D71A3D220F0C7937DBD1369557E017BECD2F0F4BBA92C5401E665F3D8439E1807066C28D5691A79C3606884F07C1082D3E7A4120C0BB6A0A95
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/home/trusted2.png
Preview:	.PNG........IHDR...d...d.....p.T....IDATx^.\.q.6..;.u........T.K.v..g$.y./.y.K.I.I:.;.'c...`e?..D`.. %..b.c.....@I"E.....A@.....A@.....A@.....A@.....A@.....A@.....A@....@..)I..$+o....."...IyJ.X.....L.8...i......8'>].`.$...?Y'...]2[\|R}.......&....%.rV\|....;..$.W... ..@..dl.....S..m;.KI....&%IG.....z...F...+..~...A.z}.....n..yy-H.".>...0.1o.....<t:RO._[B..o.z........J2R=...-';...P.4~..... ..1.ur.....J.....H..&..`...-..2~a.<.=.......S..".D}Q^TF}"VQ.U.P.0.Qxb.{.8......4.G.-@...t...b.8.h....h....C......I.M.u..];..E......&...sDzN~]}.;....v...5.sSrm....$.hr]..~>..wU2...\.%.(v..u.7m..B.K.~...1.G......V...n...eM........vc%:..&.c<)..>-)h4%......YtZ......A.3..EB.\..U.=.&........0`dA..%...a..#p....p................0.O.?.)...^n\....Q....9/..c..v...o".O:.u...%u.......'<....cQ...>.co}..\|Z..<.l.......d.U..w..i.]....=.....97......."If...A...i.y......+.C{.e.Z.%$[..v}X.y+......A.E.z...vJ3.....0.iQ......&...O..?j...g.rN.~c......0.fb..O...dz]m._

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	18166
Entropy (8bit):	7.977855821586262
Encrypted:	false
SSDEEP:	384:XiE67+HkA4UerW2+wAUFS1RzAUrMB7JigtqAyVyxVXr:XiN+HX92bLofe7JirgxBr
MD5:	18B6F99EBFFB264B4273485668A59741
SHA1:	93260DE60C506FEEE59B765750109BF0C8787EDD
SHA-256:	42A7E676EDE01F55C413EF0A5FC50D35B60932B13307AFC922564C59426BF7E8
SHA-512:	B97B6E4B4155BFE49761BAC6BBA9140E6603A4D2EA8EA964516D9661257065F2D787A64E0FD0C64492FC9231ECF2FAA81AE6E8A88E0C49962530A697E2C35A13
Malicious:	false
Reputation:	low
Preview:	RIFF.F..WEBPVP8X..............ALPH.....W`........u....t..[.&I.$..$G....r. I..@#v.`..37 $...%,h.....D..@.".....;...B.2e.@P.....t...r..:..\.)...........f.....C..d.).F=..a..s.S.f8#....{t.9.N1.O.i.[.T..P...3X.)P.......f.L../.S?.........@....2a .7.q.?Ynd9...7\|...`t.AoM.+..Z.:g@'0.O.Dma....9}t..&....OW.3.7.Lcq..!...st`>S.>>k..9... ...Z...4AM....@.'.rFoA.....d..i........i.k..p..j...uM.\...)H.....b... ..\@`p.$..<.y....u..\|........Q3....B...v.]\c..u.@.55......`~....g..F.5~..L3j.........H.T....K....Z3....r1.e....r.......D....`0...50.r.?...Z-G.w...{./.$...t.L..f........i9Pc.4!..........L.....#..d5...~).~.L....h..V#ZM.S..I...D..]$.&_o4...Z........w1_.(.a...2..\|[..7.PO.T...vQ..S..t.....ra../h\....c....D.t.aS.\|.M.;.$T..S.j:z.pY..Q..i.....O......tj.f(..Z.4..u..f.K'.....'..c0_..e(......].7.>...3.B.u&....q...P..Gg@-#S?.?.u.......&:..i...t._}u\.<...i.....h..s...._.q...0j..0.3.........p..o&....S.@...uU%.%.U.U.......!.DUA.P.%((.....BP.. .@.5..S=.......

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6999
Entropy (8bit):	7.9564755986053175
Encrypted:	false
SSDEEP:	192:Q6rhhhhh+dRwP+ybbSsfMiz8TEb6NQNvYQSEHZthhhh2:Q6sdiWybusxz8TEuNQCQSEO
MD5:	24C3EF4456B2C1C9C244728E91B27511
SHA1:	730A836CAE71CFCE98C16911BC003B46D8EC83CB
SHA-256:	BA6DF22053C98E9D924E4B7B4E917BD036899292D43F2609CACC92F5B01720A6
SHA-512:	7A7F14D3CE5D47FF720C64E3BE435255087E70ED17DB3619B3CE75D087245846D053F63E920469C803095979203A5FCC24CAF1EF4680D040D131F0218EBD7961
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............=..2....IDATx...X.....]l`D..+.k...(6.5..{.Q.F..K.(...b..Eb....+..X....r....,3...<......?gN...F..{}W.N..h...zg.`....p....&F.A.F....6...C.0.....9..KHH......^...@..M.>.......z.A..G.^....1/...C.m...h...y....&fWp8i...)......Ut.^.EAk..\|.......-...\.N.x...(..B....^...Gf.....m........)].".y..3G.h.w...7../.0.}h..G.8..~\|$h.ln.X.2......]4..bx./..Cg..........#8....dk..O..C.{...\...a.......'.?.s48...Ni{:.......Q,......C....(.=0.>j.kN....Q8.....:.+8.....z...8...c..V..:.J`.........;.r....Z...Q.\..U...Q.\..U...Q.\..U...Q.\..U...Q.\..U...Q.\..U...Q...Q.vY.A...(U..e...ys"o...53..l-.F.....x.=}..[.......n......:..jGc...GvXYi.....hR...wA........?...^"...N\.....~.2^.\|.5..-3r.K.......*.:SF..+....P...@......#..h.@!E..-0.o+d... 1.pj{......6.t.C.g..>.-...FZ@B..p..,G..P2\.i..u&4oR..GtF.b.!...."......w.D...V..G..8...-..F."2......0FLX.'..4...H.:.0fHG..r..-g.\.B.3q.<<..%&]:+......=P.\|1!.P..q...o&..:....-.t....fz..s."......Y..

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12168
Entropy (8bit):	7.922085098684317
Encrypted:	false
SSDEEP:	192:JwTUPo/sIjVZaJ6XaqP6fF+Js6jAUZdFxl1Ug+/4VjTCf89dHzDgMXRloa+Cpx/I:JwTbZlFEMsfOpar/XUZzdDBzQ
MD5:	5F7A0212FF68FDAA29376F803D702E85
SHA1:	6209E353FCFFB17F42CECF3DF8A2BCF783716FFB
SHA-256:	FFA1EFB3FE74F80E134C275CE1A6C21341AFD24A1B54652B52595E4BC662E4E5
SHA-512:	45D1CFAB920AF19000C958699B7CAA45F430D309C7DB0AEA1A8B6358F656896A0C677AE0609728F395AE0A4896661907EAD2FCC4945B11D98CA500398E6E4E48
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/domain/logo/xyz-banner1720419776.webp
Preview:	RIFF./..WEBPVP8X....0...W..`..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.........:%.......... .0.(.s...;...[.w.m....a_...tY....k`..>......... ...j)..F.\|]n.....D=...........Ll.....i....y.....7...p..>..{.:...t...:.....g......{.x._....xk..u+..,.t..{%.G.[\|.Wd...Z....H..tYVRiB.XZrap....f.mf.-FFY_.G.\|....TVZ...M8<.$.............hmf...!.@...........\J.y.....))G.Z..{{.{..q5,G.kB..~ h....a1.X....E....O.rooj.)@D...W.I-.A..~E;..P{.\|z....o.`..(...Yq...8h.2.......u..%&v....w.......<d....> .=....w.=.../.E&}`Tg.k..{6...@=....\.cU........F.}.Y.[.s.i_Z5F.O2.1...>

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjUzOS44NTA5Ojk1OTA5Zjc0MGUyNjRmMTllNzA5NTAzYzRhMDJiOGRlM2MzZjA1NzZjNjM1MWU2OTRiNWU2NzM3NTFjNjE4OWY6NjcwMWJhOGJjZmJjYw%3D%3D
Preview:	....................

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2253)
Category:	downloaded
Size (bytes):	57680
Entropy (8bit):	5.502178063830125
Encrypted:	false
SSDEEP:	768:IfoILNVBIBsr4nLkCLUOmDu6a5ZIduFoaJzMRsgj0SQovxXBHCm:IfoyNVXr4wwU7Du6a5Zhmj03ovhBX
MD5:	209574A0DCE98B35A295CCCFDF98016A
SHA1:	0AC381CCA3C51CD2A48BC2B06D7D4A1D2B601ADA
SHA-256:	DAC93BF066C9DF034A671FA8CC4D7D1DF01E54A1383042422FAE0C1DE24668E8
SHA-512:	7C1C6427D057A39F68697BF138E0EC1F035487E810D5D478DAAFE6A69BC554EAF24188DC8C19BD4BFAD11C897AD407F2490D2208214A21A175734A164C75375B
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion_async.js
Preview:	(function(){var n,aa;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this),fa=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},ia={};function u(a,b,c){if(!c\|\|a!=null){c=ia[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function w(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in q?f=q:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=fa&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ca(q,d,{configurable:!0,writable:!0,value:b}):b!==c&

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89947
Entropy (8bit):	5.290839266829335
Encrypted:	false
SSDEEP:	1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQK:EcqmCU3zhINzfmR4lb3e34UQ47GKL
MD5:	CF2FBBF84281D9ECBFFB4993203D543B
SHA1:	832A6A4E86DAF38B1975D705C5DE5D9E5F5844BC
SHA-256:	A6F3F0FAEA4B3D48E03176341BEF0ED3151FFBF226D4C6635F1C6039C0500575
SHA-512:	493A1FE319B5C2091F9BB85E5AA149567E7C1E6DC4B52DF55C569A81A6BC54C45E097024427259FA3132F0F082FE24F5F1D172F7959C131347153A8BCA9EF679
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/jquery-3.6.3.min.js
Preview:	/! jQuery v3.6.3 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},S=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|S).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://ofinovardweb.cstrikehost.com/ls.php?t=6701ba8b&token=576733c2046d1d1966bdbc5c07b84aba5c830319
Preview:	{"success":true}

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	34046
Entropy (8bit):	4.81158621212887
Encrypted:	false
SSDEEP:	192:bi55JD3KY80KdYaHl9Dvu6BSALc43zF5ZUF51x01PAFTVLQNY9kpxnwa7ZQ/giXK:bAw5jDF7UFltFTVjcfk50a3OVl
MD5:	4B3F83D9C110D55FB3C85AB47E690805
SHA1:	CBD4B7FD25C2B7854393A5F7B5AD2CEC9F3D288A
SHA-256:	6BB1666E2AA4C57A50D383DED3F93C5B77528779DE684B075805765091D69976
SHA-512:	3FA8618378C603464AF9085A32B72E2F69C06E36EF2075D6970AEBBE9FF40F3E4E98A6B524E830588BD3E0DC4141AD0316468876832838F032E84A84D858EAC3
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/home_responsive_2023.css
Preview:	.home-top-container {. background-size: 100% 100%;. background-color: #000;. padding: 0;. background-image: url(/sr/mainsite2023/home/header_bg.jpg);.}...home-top-box {. margin: 0 auto;. padding-top: 150px;.}...head-title {. font-family: 'swansea-bold';. font-style: normal;. font-weight: 700;. font-size: 45px;. line-height: 48px;. letter-spacing: -0.01em;. color: #031242;. position: relative;.}...sub-title {. font-family: 'Switzer';. font-style: normal;. font-weight: 400;. font-size: 16px;. line-height: 24px;. color: #031242;. max-width: 726px;. margin-top: 20px;. margin-bottom: 70px;. position: relative;.}...home-search-result-error {. background: rgba(234, 67, 55, 0.1);. border: 1px solid #EA4337;. border-radius: 6px;. display: flex;. align-items: center;. margin-top: 10px;. display: none;.}...home-search-result-error-content {. font-family: 'Switzer';. font-style: normal;. font-weig

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 115, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2865
Entropy (8bit):	7.860603819879877
Encrypted:	false
SSDEEP:	48:Z8/S3G//bL0gSF8VwOAvdHjihP3A2Akf6nRyqvEXoS1lpZgS820givaK0SQfPp0n:Z8q2jyrHjwA2df4yuUCSSgivf0ScPSRJ
MD5:	06513ABA487FBD75C82AD2883667CB5F
SHA1:	BC47B7308D5882D4C0E518582DE732D52CEBE276
SHA-256:	0C3C763BA16D6B715611C52F925DDA9073C9FE10788E8D4E25C9768E169F32F1
SHA-512:	D874311ED22E970018CF741C9E98448B87385094BB8CE3C92F0E370A07C0B3AD13558A4AC0BB65269128ED62AF77DEE3345488A603D044BE09CEB12FAAFA2C02
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/domain/logo/it.com-banner1725645757.png
Preview:	.PNG........IHDR...,...s............{PLTE.....K..K..J..L..K..K..K..K..I..K..K..K..J..K..K..K..K..K..K..K..K..K..K..K..K..K..J..K..K..K..K..K..J..J..J..K..K..K..K..L......(tRNS.....F.^.....,of.0....v..6..V=.M .&..R 0:...=IDATx...I..@.....8D.........c.w}G.S..........H..DE.@.....2.;..BF..5i.o #6..4g.A.U.{...=d.~...2....T-c...{.l..F?.).Oq"....q.~U2.m3..'......'.......\....>[.. .Bd...z.0....%.....Q.......S+.!,=.'..........O....i....tb.G.JM...Dn..y.N..U...!.Z._.=......E..........@.a.&k...F.....@...hP'k.e.......U..!...............~t...(H...........\|.&6.`...........Z..C..A..Y....s....uD.c.q.K9...E.. .[U2.e.5.......n.r.(......lk#..h.tu.uRV..~T.L.jf.o.Y.... ..l:(k;.R..V.[v.q!..Y.,-...L.de.........%...k..W.Y?]N..cJB..x.<...jd...c.&.U.ZU.*..k..FV.. h....,._.+P.....8F...../.....g....3._.H'@.~...w]Q...j&>.E.jYI..q...]...k...Y!a7..~.t..,..F..6.......-..CX..9.......ZV;......7..p......}\|....)..r...&...^n..O..rc.B.dk.......vY...5.@x. .R(\|D\|...ol..."....UP..

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	986
Entropy (8bit):	4.9741916213796085
Encrypted:	false
SSDEEP:	24:Ya5sDemlJM5sDemlJLfTwVYwO5oRW/n6K+IPs:YamimlJMmimlJPbXoRW/n6K+qs
MD5:	EFE7D66B6FC7974730B797986D9ADA1E
SHA1:	AB0D4E92B8B6377888EAAE00D3A616DFE91D4B5D
SHA-256:	1E0FBFC75C90BD14A4829DE2D2B8B3436D87A0FC0CAC253468BF8EAC1E84DF94
SHA-512:	F10982DB0B72CDD233888B61BD184DAE537FCF41597BED5DF70922708DABD15D48E92EED65741DBAFEC66EE84717BF04C6723FE6084354E88BD59B36DE3792F9
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/trustbox-data/5419b637fa0340045cd0c936?businessUnitId=5a73801679def00001e7f7d2&locale=en-US
Preview:	{"businessUnit":{"stars":4.0,"trustScore":4.1,"displayName":"Dynadot","numberOfReviews":{"total":1241,"oneStar":217,"twoStars":26,"threeStars":28,"fourStars":76,"fiveStars":894},"websiteUrl":"https://www.dynadot.com/","identifyingName":"dynadot.com"},"businessEntity":{"stars":4.0,"trustScore":4.1,"displayName":"Dynadot","numberOfReviews":{"total":1241,"oneStar":217,"twoStars":26,"threeStars":28,"fourStars":76,"fiveStars":894},"websiteUrl":"https://www.dynadot.com/","identifyingName":"dynadot.com"},"reviews":null,"links":{"profileUrl":"https://www.trustpilot.com/review/dynadot.com","evaluateUrl":"https://www.trustpilot.com/evaluate/dynadot.com","evaluateEmbedUrl":"https://www.trustpilot.com/evaluate/embed/dynadot.com","consumerWebPageUrl":null},"starsString":"Great","translations":{"main":"<span class='score'>[RATED]</span> <span class='text'>out of 5</span>","firstreviewer":"Be the first to review us on"},"settings":{"customStylesAllowed":true,"syndicationEnabled":false}}

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	227912
Entropy (8bit):	7.998497613576763
Encrypted:	true
SSDEEP:	6144:qQ2W/2VBHZVB7un3Kmrw3+sZn1x5Ac2wralTuHQpBn:Nu97dmrw3+m18c2wrbwpBn
MD5:	4E6C2DC3FCD07E818A8F7F2E6D717037
SHA1:	8BB1A91D077B7153AD2AC24802767AA7460043B3
SHA-256:	3EDF2D3FCA63106E71202A15078937EE27880CAF89AEB92C0726DF7B9B679EAC
SHA-512:	06B5E8866BF9A74EF4A7E0672A8D243573481868FDE726281AC25A470EFBC1FF6C0C655AD5E65B1F2A90FF80E5F9524B9F29D1B4D7E8C503B5302DF7C0933BA8
Malicious:	false
Reputation:	low
Preview:	RIFF@z..WEBPVP8X..............ALPH......Gn.H....z.....\"...m.%=../..w"D.)@D.&....%. {:.p..LA<...Q...h.s.....V...K..K....c...j..d.ni..T.$m...$........lic...R.j..TwJF.f.[;.jx.J....m$G....^s...O"B..6.......K..........@.A.....+...G.z.+..g....B.QP..D....nU.P-.WJ{..2\|.4T..v.^V..@..q.P..&.oI.,I.l.8.....\.Y....s.5b.<A.-K.$I..8.9.Y.w.g.AmZ.m[.6I../..=. ..8e...5..$..UN....$.H...J/7..4....l.1.....RD.$.r.@..no.Pcw.>H....]...f......@E..T.".....I...)Mm......J......5Z.c..../eD.m[l..%)...}...x.....t.mR$9.{..=....T.P........e.d.y2..A.....l....S..KY.O...p..j.<.0A..,.i....!..........?.%.^.+.r...s...(.p.\..vu=..+{...Y.Z...N........e.,.........'....L7o.?.._....r.k.p.!...,...O.%.ol.j<o.x...?.-.W.!o%.K....%.Q...'\yi1%Q.z:\............-.....k....yi.7...9Y.bG...>..{../...-..-=...}...2..&.....N.}....2d.....ob...yY.k ..... ..j.W.O......0.:)......b.dae,.n....O....\..e..../.....{.=...'....y^\tL.......[2Z.......y^..z .[o...._.ajc:...[........W.....M..jZ.GQb.....~

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14300
Entropy (8bit):	5.291763375875081
Encrypted:	false
SSDEEP:	192:ijdeQS/URZAzGOMyRbALGPCeVbe+ErGH5jsjV2oJNtXQakw4KRFbGtqsj:6eI3cPnc9rYjixA4ctqE
MD5:	A827F156994A777BF095698485183786
SHA1:	138CC44E90726C29CCD2958EE962EBC0782B1FEC
SHA-256:	54FD345FFB0550D576D383F4CB3EED4C180C89A8F4AAC3079D67075C9E492AE8
SHA-512:	610207D3E7026C74FEB346D10D26EEE97CF3CBC1552AF90F5D33DF944A6B71E7D7DC82ADC47ED7410E664F27E86D89D547FAAD03D40DB5659C85D462E2E10FAA
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/domain/1727814740251make-offer-new.js
Preview:	$(document).ready(function() {..initMakeOffer();..initFinanceLink();..initClick();..moneyNumCheck();.});../*. Initiate events for new make offer btn. */.function moneyNumCheck() {..$(document).on("keyup", ".make-offer-price", function() {...console.log(111);...$(this).val($(this).val().replace(/[^0-9.]/g,''));...let val = $(this).val(),... reg = /(^[1-9]([0-9]+)?(\.[0-9]{1,2})?$)\|(^(0){1}$)\|(^[0-9]\.[0-9]([0-9])?$)/,....btn = $('#add-cart-btn');...if($(this).val().length > 10) {....$(this).val($(this).val().slice(0, 10));...}...if(reg.test(val) && val > 0) {....btn.removeAttr('disabled');....btn.css('background', '#3C92E7');...} else {....btn.attr('disabled', true);....btn.css('background', '#C9D1D9');...}..});....// premium-make-offer-price..$(document).on("keyup", ".premium-make-offer-price", function() {...$(this).val($(this).val().replace(/[^0-9.]/g,''));...if($(this).val().length > 10) {....$(this).val($(this).val().slice(0, 10));...}..});.}..function initClick() {..$(docume

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 118743
Category:	downloaded
Size (bytes):	32269
Entropy (8bit):	7.991762627746389
Encrypted:	true
SSDEEP:	768:YtlKf5OwIOO2LTekZKjQOJe8xIlpOs2nG3al9/j3:sl45OwY2Hlp82rO2az/z
MD5:	B3DA72A4088A30A6F8AA98D42F2BD080
SHA1:	9C9EBB7093E28F1D09C5FBD90BABE56AF3EB12A8
SHA-256:	B8965E40B02C17FA187DE10C843B1107D4EC93088CF11FDF53B230C80135F19D
SHA-512:	7DF7C91AAAE7A26065F67BE31A02427E34FB04B98E051025D68C19F566773AE374DBDA85A040AF1C4E33CCC0EB81788EE19BC6D601D24B1630A8610814C4FE46
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/main.js
Preview:	...........{...u'.U.......(.QM./E.......\.;\...F.......&...8...x.&Y..:..(..8.=...Yk8....C[v.._...yT....n...;..6p....~.......i.O.00.R`{vh..%q)..u...y.....O.^dD=S55{..p...#b_...;.^~X.>..X2..#..sU..G.l$.a...X/`...(...y...01v.``...t...Z.f^0-.....g....7.>.u...k....i.Y.#.{...$...=..lB}..U.{.Q)..[M...J...o.lm....5.#;...R3.FR...`M....:6.U...2b.n2\gkkV\.1...P....w3C.N.H,...K..\."..../&.(.....x;.U..E^...`..~...5.K..~os..z.v.;..^o?..Fu=.....B;..9x[%k.\)..^\........../...4....7.2.>.=~..i..."k....g}/..i).B......vxL.....+bR...6.4........3QB\|u.+!y.z.d07/I.x..Ih.X.D.>z1#..2..6........./..X..?..N&.(L.....N..A..........g.1.b.i..q.....$bqL.dYD.3C.&>F..@.A8F.....&.(F....~y..{I......BT.e.y.>El.g.1.o...d....M..cA...!...8.A..7..x.E..s..+.z..AH.C..W....u8b..(N..c."t...6..D .i.u.<e..*.U.<`.M.z......MG..f..".T .^.x=...`0bQI.;"...g...c{dO.=..{.....5/.0.V...'l.T...%.'.../.z...({.Ji..J......2...(<`........Z.$V.e?..B".p.FV.!.K"/.... F.i/_d?(M-.5.c..^......0.A.'..`:.f...

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	30314
Entropy (8bit):	5.310864966985162
Encrypted:	false
SSDEEP:	768:so/MPtWU9Ywx3UpxbY/Y3YOgQxnYeYZYHYZYVY+YSYI7EiJcyfJb/GGXfKJX3X5A:RIT7hsZwuvLN54WAcl/7
MD5:	47188A32D7FAFA48A56C3A35CC74F81A
SHA1:	4D3EE9E67ECBC36255B0EEC679E066DE4620083C
SHA-256:	CCCE7D6881346685AEA5BBFC1223798F2E6C8A00D978A9220D187B2B6392BD76
SHA-512:	5E8134F59B5AC4373CE811990B148482D54E78679A82134A343C49BCADE17BEEBD7BC1C688DB1977DCDA8B0D37AA3AF849D1B2415EDB260FBFF5464C76FE6A91
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/710112770279009?v=2.9.170&r=stable&domain=www.dynadot.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C133%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C125%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 105768, version 769.768
Category:	downloaded
Size (bytes):	105768
Entropy (8bit):	7.991179464006182
Encrypted:	true
SSDEEP:	3072:brZ7WPxReYz0qE/GnTLcS86PNo5gL47hSHRZM:bRWPxRDziQkSrNugL4sbM
MD5:	EA24446014EA86D85129883A9511629F
SHA1:	90FE0513C6A0FF1D8F564EC782FA54B559E7D3F8
SHA-256:	3701CBFF3ACCCD80B1F2EEDE4311050514F7A64C2039EB77A77368FCD6E3DE28
SHA-512:	E74FB5C9695D374DE27FA93FE23CA771F499C93E387AFDB443B8E6206122286EEFDAA781D6704E71517D1C3D268D2BC0C66A52DFE443CE83DFA9B07819F0A426
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/fontawesome6/webfonts/fa-brands-400.woff2
Preview:	wOF2.......(.....................................8.$. .`..\..`..t.`.. . ..XQf......k.A..I.............o..........b.........-IU.eKCb;.-%...K..v..{.v;.........?...."g..j..#d..ZJ......s...m.........7.2.2....k.".A......."KB..IB.bDlCD.>..........s.o..:U..>xO._`.%Y.L.-.v...c...r.^..w...nJ.F....n.+{......4..hH........\Q./.g.......[.....MQ......._B......yZ2.<E....o. .!...+..py.C[.Y)..'M.L.2...........b..X)..#......0....Gf.?3...Y.#..FdUGVUs.....S`s..b...={H.g...;.jDdaD..s6.....H..(6W.=.4i.Ud......l..!....i.\.rV..v.5._.....V.gN.$..m6..9.f........i.7..$.1..sXE..".\0.i.{..g.5!...h0...U..(PX.L&{2."..U~.I........#.....x..9.bND&.......a~6'b....fom..5.._.?.=....sc.....A:..s.......Ao'bdh@W........._...&te.a._MD]"L[..M...}..E..>=;.w..PG.....%p.)uv...M.k.9..dp.)...9.lR..l...b8k...,F$......FTa.d..Z.%.D.M.P...4E....'.O.fO..p...4.M..o4.......m....0....k...='....E..\|E.4.....Uw4..L6^,.'$0.vy...bOx......~..)aJ...d.r....2.........e..j..lJ.."..%.xq....

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	6725
Entropy (8bit):	5.147157814654551
Encrypted:	false
SSDEEP:	192:VibiDwW53VE0H6mqOI0NniJnvifAFiqi1Kibiuj1iglFiwcVi1:VibiDwkXNniJnvifAFiqi1Kibiuj1igh
MD5:	4B9D8D7D66CAB53DB7DC84E338AE342E
SHA1:	196EE897842C503D8FF93CF50D204994E98A9EFC
SHA-256:	1DD51B295551DB30A85FBB417F79C16E737B61425FC5E9691BF36A5FAE59CCD8
SHA-512:	3BB4B4B5AD5033277D3215218C76B1B72C059D4502BE11FCD06DDDE8868F0B9237A696D6AA34919478F90EF9EF5C4649784AAF559981748CEEFC6FA456E71A11
Malicious:	false
Reputation:	low
Preview:	function showSignin() {..var e = document.getElementById("signin_menu");..if (e != null) {...e.style.display = "block";...return false;..}.}..function hideSignin() {..var e = document.getElementById("signin_menu");..if (e != null) {...e.style.display = "none";...return false;..}.}..function initSignin() {..var p = document.getElementById("signin-click");..if (p != null) {...p.onclick = showSignin;..}..p = document.getElementById("close-login");..if (p != null) {...p.onclick = hideSignin;..}.}..function makeVis(id) {..var e = document.getElementById(id);..e.style.visibility = "visible";..e.style.position = "static";..e = document.getElementById(id + "-head");..e.setAttribute("onclick", "makeHid('" + id + "')");..e = document.getElementById(id + "-arrow");..e.src = "/arrow_down_marketplace.png";.}..function makeHid(id) {..var e = document.getElementById(id);..e.style.visibility = "hidden";..e.style.position = "absolute";..e = document.getElementById(id + "-head");..e.setAttribute("onclic

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4886
Entropy (8bit):	7.8233103943375095
Encrypted:	false
SSDEEP:	96:EDrswRNK4lZe1LstKEOI6wVEJAkB0PO/SfqAFT:OrnbS1LstxLV0B5SS6
MD5:	3FF73197A96DE509CD7A095BAA93A8AB
SHA1:	D4DD6FF34F197706C253E7F077B72637CBDE19E2
SHA-256:	2224B62567D95C154E6C1F4911C994E37A3BABA346405E033AF815869EBA101E
SHA-512:	EE9158AB6EB1A63FA5D14F3FB2CAF62F70D75F4FB518019892358BD646B40D3B7984781F6CD507664B64F7BE388AF992BF124756DDF86D7AE5F46EE2E5E9E413
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/sr/mainsite2023/home/aftermarket-newsletter-signup.webp
Preview:	RIFF....WEBPVP8X..............ALPH:.........J.3....p..4NxNZ./.J.\.(..................Z....Z...b..._.1]...#.B.z..k%..V.\.Z..k-.................................................................................................................................................................................w.e....p.dz.X..6".2&.x>e..K..z./.....s....C<.VP8 ....0........>m6.I.#%. v(....iKx....M...f.v..5..Z{..v....X...f>q....?&?%..._.>.~-........`.....~..{.5...../...=.7.............;.........C....X.O......}k...9.=..$..l..u7.....S{.l..p0.M....F./..{..3.=I..l..u7.....S{.l..u .#VE...P^..9..C6!....6...5....,.]M..5..H~ck.t..+.o.'..].X9....Ce.k...6X....Ce.k...}.. p.A@.WI...D..~."...5....,.]M..5....O.>..q".L..8.ya1......RE...Ce.k...6X....Ce.k..M....V.gN.....#..TD}....l..u7.....S{.l...s....W....0.f.=..N...6X....Ce.k...6X....;/".5......9...[...Y...)..U...5....,.]M..5...oD.-.......!)./h9sN.....6X....Ce.k...6X.............'.g.....Z..}.;..(...5....,.]M..5...[..q.....

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6088
Entropy (8bit):	5.084263827524872
Encrypted:	false
SSDEEP:	48:ksrCYHZhHgSdnit54/67FNjdQ5bzgYCpxnWzpa8qAZFLFWANmAdbo8xAjyYwzGcC:BZh36467OPAMFa8qaFL9zxwyYAhx0Jl/
MD5:	A50E49509C53CD6C0EA01794746A8647
SHA1:	B8230D9D8B5A0A7CFD94330F95875A4D6BE4CC69
SHA-256:	5F058533D3C4371EDA8F7038C9FFC8A2126C4292ED51920D543A1F65FF18368B
SHA-512:	2199B7B183CD433194BA2D365BF635BC181348C7B48B0FC025617B045A96877805BD365BD960ED251F4AEBB616E7AFD2FEEE7D41FAF4853C8B5E46A280064A61
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/1_13_32_footer.css
Preview:	/* Base rules. The defaults. /../ Layout rules. Definitions that divide the page into sections. /.#social {..margin: 0 0 28px 0;..padding: 28px 0 28px 0;..text-align: center;..border: 1px solid #333;..border-right: 0;..border-left: 0;..overflow: hidden;..height: auto;.}..#social a {..margin: 0 8px 0 8px;..padding: 0;..width: 20px;..height: 20px;..background: transparent url(footer_sprite.png) no-repeat;..background-position: -38px -94px;../fb/..display: inline-block;..display: inline;../* IE 7 hack /..zoom: 1;.}..#social .twitter {..background-position: -113px -21px;.}..#social .pinterest {..background-position: -59px -73px;.}..#social .linkedin {..background-position: -113px 0;.}..#social .googleplus {..background-position: -38px -73px;.}..#social .youtube {..background-position: -21px -31px;.}..#social .instagram {..background-position: -59px -52px;.}..#social span {..display: none;.}..#partners {..margin: 0 0 18px 0;..padding: 0;..text-align: center;.}..#partners img {..back

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2021
Entropy (8bit):	7.817333141313171
Encrypted:	false
SSDEEP:	48:TNNNNNI72CIyI0eYD7i9siUrmxk7BnKMFI14iTV6nXxNNNNNH:YXL7Zi1MBn1eTS
MD5:	DF51393326A12EF7DD1BBC905D99E9C6
SHA1:	3620CF97B06D094934A105D95152D47F1B535D47
SHA-256:	8088F52338EF3AA603BA543516AF13FCC9670BC8B76DFDA49D36BD138682A3A6
SHA-512:	00257790175851D71A3D220F0C7937DBD1369557E017BECD2F0F4BBA92C5401E665F3D8439E1807066C28D5691A79C3606884F07C1082D3E7A4120C0BB6A0A95
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T....IDATx^.\.q.6..;.u........T.K.v..g$.y./.y.K.I.I:.;.'c...`e?..D`.. %..b.c.....@I"E.....A@.....A@.....A@.....A@.....A@.....A@.....A@....@..)I..$+o....."...IyJ.X.....L.8...i......8'>].`.$...?Y'...]2[\|R}.......&....%.rV\|....;..$.W... ..@..dl.....S..m;.KI....&%IG.....z...F...+..~...A.z}.....n..yy-H.".>...0.1o.....<t:RO._[B..o.z........J2R=...-';...P.4~..... ..1.ur.....J.....H..&..`...-..2~a.<.=.......S..".D}Q^TF}"VQ.U.P.0.Qxb.{.8......4.G.-@...t...b.8.h....h....C......I.M.u..];..E......&...sDzN~]}.;....v...5.sSrm....$.hr]..~>..wU2...\.%.(v..u.7m..B.K.~...1.G......V...n...eM........vc%:..&.c<)..>-)h4%......YtZ......A.3..EB.\..U.=.&........0`dA..%...a..#p....p................0.O.?.)...^n\....Q....9/..c..v...o".O:.u...%u.......'<....cQ...>.co}..\|Z..<.l.......d.U..w..i.]....=.....97......."If...A...i.y......+.C{.e.Z.%$[..v}X.y+......A.E.z...vJ3.....0.iQ......&...O..?j...g.rN.~c......0.fb..O...dz]m._

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	13957
Entropy (8bit):	4.3568326191722235
Encrypted:	false
SSDEEP:	384:mrxYZwXkOT5RP2AAJEz/xdK6HUh4JG/irFEuj7D:1UT7jxvJE/iT
MD5:	885B7BE70BB989B58233428891EF5F1D
SHA1:	09C4A9A01D898FF2020E84AA3B99DC2AA8A05D2A
SHA-256:	C892FCF49BF6B490F0EB7ECBA808CE95173FE2DA2329A2D44D302035379E8A04
SHA-512:	767DF4D55BE2D08F55556328EAAD352FF6ACE834C798C37581B6ED6C395DBE51FDD17ADB18C68BAFBA0007C3A6922AB63E5614B2DB521090732AB59DA1F26864
Malicious:	false
Reputation:	low
URL:	https://www.dynadot.com/tr/jquery.ui.widget.js
Preview:	! function(factory) {. "function" == typeof define && define.amd ? define(["jquery"], factory) : factory(jQuery).}(function($, undefined) {. var uuid = 0,. slice = Array.prototype.slice,. _cleanData = $.cleanData;. $.cleanData = function(elems) {. for (var elem, i = 0; null != (elem = elems[i]); i++) try {. $(elem).triggerHandler("remove"). } catch (e) {}. _cleanData(elems). };. $.widget = function(name, base, prototype) {. var fullName, existingConstructor, constructor, basePrototype, proxiedPrototype = {},. namespace = name.split(".")[0];. name = name.split(".")[1];. fullName = namespace + "-" + name;. if (!prototype) {. prototype = base;. base = $.Widget. }. $.expr[":"][fullName.toLowerCase()] = function(elem) {. return !!$.data(elem, fullName). };. $[namespace] = $[namespace] \|\| {};. existingConstructor = $[namespace

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	5097
Entropy (8bit):	4.036424162099916
Encrypted:	false
SSDEEP:	96:xUBjHZxqI8hawCgfi22lHCyZc4ORQ73y6:sDqIeaNgK2UCyHOAy6
MD5:	D59A5CE0A00D33AECCF081669F2EC753
SHA1:	453CBC2E4F47BFD2B35DAD79A3D2A0C8682EE46B
SHA-256:	AA6B539209325ED101EB6A7E4F8C39CA535C6492455200209960D9E5F75D92DE
SHA-512:	AFAB9240CB814621E76849A79090F45215BBE1DD7E0FCE5F75AB0DCA8AAC2EB12CF3BEE1268288631DE20A6A8E1EDA500A8A69E6EC1CB07C8F7D4BACBC76C0ED
Malicious:	false
Reputation:	low
Preview:	! function(factory) {. "use strict";. "function" == typeof define && define.amd ? define(["jquery"], factory) : factory(window.jQuery).}(function($) {. "use strict";. var counter = 0;. $.ajaxTransport("iframe", function(options) {. if (options.async) {. var form, iframe, addParamChar, initialIframeSrc = options.initialIframeSrc \|\| "javascript:false;";. return {. send: function(_, completeCallback) {. form = $('<form style="display:none;"></form>');. form.attr("accept-charset", options.formAcceptCharset);. addParamChar = /\?/.test(options.url) ? "&" : "?";. if ("DELETE" === options.type) {. options.url = options.url + addParamChar + "_method=DELETE";. options.type = "POST". } else if ("PUT" === options.type) {. options.url = options.url + addParamChar + "_method=PUT";

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	32244
Entropy (8bit):	7.979147767623942
Encrypted:	false
SSDEEP:	768:M3AOul92KQm6IRFcOOxUnmV8ywNwplp7s23:eCmKR6IPcOuV8Hwp7Z3
MD5:	7ACCB894AB1ECCE2BFEB1B1B7C78D555
SHA1:	016F5ACE0D3286F1F682E26C4117228CB1FBC731
SHA-256:	B1650BE9ADECE83F1C38C0184A2BF2905DB937BB3CEE9B47EEB90B5BFF32290B
SHA-512:	BF368BDB328F7DB70D4DB2388102E5CA639A3BC46A58C7587A43D28D22818DC3102A544E74D4B77AC47D27AA2719BE91FF9E04A404AF3E54D653771527868D05
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,..........mz.....pHYs.................sRGB.........gAMA......a...}.IDATx..{..Q.6s....zm.....l0...$...F.h.....J..Bsj.HU...ri.jS!.P..C )..JK.z........(..H)$%I..^.nv.....5...\......v}...{....<..3...oD.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.e.-[.l.k.T.-[.l...._y.....m......v.wi.yK..M...vy.~s.M.....On..y..u........lf..._.7}y.....Z..o......v\>..>...f...s..k.B~...O..oy.s.{.W..rX.}...~.o..M.7..^.{.>a_..........6.7k..N..TS.iMd.6i.e....q:..................c.;v...N_....}...M.v.../....gn....f.k...........Z.k...{.G....O}Mk....N..~5{...q;..w...N....Rs.$.......h....u.~.N.#.9......:..i.m.................{ g......<'.Ogvn*...gf....e.e.-3

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 00:14:38.143071890 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 6, 2024 00:14:38.143071890 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 6, 2024 00:14:38.471232891 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 6, 2024 00:14:46.527481079 CEST	49713	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:46.527512074 CEST	443	49713	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:46.527668953 CEST	49713	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:46.528846979 CEST	49713	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:46.528862953 CEST	443	49713	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:47.332048893 CEST	443	49713	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:47.332155943 CEST	49713	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:47.337743998 CEST	49713	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:47.337755919 CEST	443	49713	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:47.338088036 CEST	443	49713	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:47.339806080 CEST	49713	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:47.339886904 CEST	49713	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:47.339893103 CEST	443	49713	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:47.340054989 CEST	49713	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:47.387418032 CEST	443	49713	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:47.517841101 CEST	443	49713	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:47.517925978 CEST	443	49713	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:47.518049002 CEST	49713	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:47.518466949 CEST	49713	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:47.518482924 CEST	443	49713	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:47.750756025 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 6, 2024 00:14:47.860130072 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 6, 2024 00:14:48.078911066 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 6, 2024 00:14:48.116585016 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:48.116626978 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.116744995 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:48.117048979 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:48.117065907 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.597434998 CEST	49717	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:48.597887993 CEST	49718	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:48.602546930 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:48.602634907 CEST	49717	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:48.602638960 CEST	80	49718	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:48.602701902 CEST	49718	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:48.602791071 CEST	49717	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:48.607537031 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:48.771430016 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.771585941 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:48.774585009 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:48.774597883 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.774878979 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.787089109 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:48.827403069 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.884805918 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.884834051 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.884850025 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.884938002 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:48.884957075 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.885011911 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:48.970436096 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.970499039 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.970685005 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:48.970685005 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:48.970753908 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.970820904 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:48.972079992 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.972121000 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.972161055 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:48.972177029 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:48.972208023 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:48.972229958 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.057101965 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.057127953 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.057295084 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.057324886 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.057374954 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.057899952 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.057915926 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.057971001 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.057979107 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.058018923 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.058823109 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.058840036 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.058892965 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.058898926 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.058943033 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.059626102 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.059647083 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.059701920 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.059710026 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.059753895 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.144150019 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.144217014 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.144331932 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.144371033 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.144399881 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.144428968 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.144839048 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.144879103 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.144929886 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.144942999 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.144973040 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.144990921 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.145503044 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.145543098 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.145584106 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.145596027 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.145629883 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.145649910 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.146265030 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.146306038 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.146343946 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.146357059 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.146384001 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.146408081 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.147089958 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.147128105 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.147164106 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.147176027 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.147202969 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.147228956 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.148071051 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.148108006 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.148147106 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.148159981 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.148189068 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.148210049 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.148215055 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.148247004 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.148279905 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.148392916 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.148392916 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.148413897 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.148439884 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.148456097 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.148458004 CEST	49716	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.148469925 CEST	443	49716	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.201634884 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.201689959 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.201770067 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.203021049 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.203027010 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.203084946 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.203900099 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.203916073 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.204730988 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.204744101 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.205689907 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.205751896 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.205873966 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.205977917 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.205992937 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.206147909 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.206190109 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.206301928 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.207068920 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.207114935 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.207129002 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.207148075 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.207251072 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.207283020 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.207288980 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.223162889 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:49.223192930 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:49.223203897 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:49.223242998 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:49.223261118 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:49.223274946 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:49.223284960 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:49.223295927 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:49.223311901 CEST	49717	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:49.223311901 CEST	49717	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:49.223345995 CEST	49717	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:49.223345995 CEST	49717	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:49.285979986 CEST	49726	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.286001921 CEST	443	49726	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.286058903 CEST	49726	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.300862074 CEST	49727	80	192.168.2.6	18.66.121.138
Oct 6, 2024 00:14:49.301249027 CEST	49726	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.301268101 CEST	443	49726	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.305738926 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:49.305795908 CEST	49727	80	192.168.2.6	18.66.121.138
Oct 6, 2024 00:14:49.305980921 CEST	49727	80	192.168.2.6	18.66.121.138
Oct 6, 2024 00:14:49.311135054 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:49.355830908 CEST	49717	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:49.360697985 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:49.583126068 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:49.631901979 CEST	49717	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:49.636786938 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:49.769485950 CEST	443	49726	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.769932985 CEST	49726	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.769944906 CEST	443	49726	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.771101952 CEST	443	49726	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.771342039 CEST	49726	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.780848026 CEST	49726	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.780934095 CEST	443	49726	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.781716108 CEST	49726	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.781729937 CEST	443	49726	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.800388098 CEST	443	49706	173.222.162.64	192.168.2.6
Oct 6, 2024 00:14:49.800486088 CEST	49706	443	192.168.2.6	173.222.162.64
Oct 6, 2024 00:14:49.829986095 CEST	49726	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.844145060 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.845829010 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.845845938 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.846740961 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.846745968 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.852943897 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.853714943 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.863812923 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.865600109 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.867429972 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:49.878447056 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.878468990 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.879159927 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.879173040 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.879419088 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.879447937 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.880296946 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.880302906 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.881222963 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.881252050 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.882134914 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.882141113 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.883233070 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.883245945 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.884093046 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.884097099 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.897500992 CEST	443	49726	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.897623062 CEST	443	49726	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.897706985 CEST	443	49726	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.897735119 CEST	49726	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.897743940 CEST	443	49726	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.897789955 CEST	49726	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.897808075 CEST	443	49726	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.897944927 CEST	443	49726	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.897995949 CEST	49726	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.907581091 CEST	49717	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:49.909007072 CEST	49726	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.909035921 CEST	443	49726	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.911199093 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:49.911254883 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:49.911313057 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:49.912487030 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:49.912501097 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:49.933079004 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:49.933178902 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:49.933192015 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:49.933206081 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:49.933226109 CEST	49727	80	192.168.2.6	18.66.121.138
Oct 6, 2024 00:14:49.933248043 CEST	49727	80	192.168.2.6	18.66.121.138
Oct 6, 2024 00:14:49.933273077 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:49.933284998 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:49.933300018 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:49.933332920 CEST	49727	80	192.168.2.6	18.66.121.138
Oct 6, 2024 00:14:49.933351994 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:49.933362961 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:49.933376074 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:49.933392048 CEST	49727	80	192.168.2.6	18.66.121.138
Oct 6, 2024 00:14:49.933410883 CEST	49727	80	192.168.2.6	18.66.121.138
Oct 6, 2024 00:14:49.939739943 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:49.948002100 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.948028088 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.948079109 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.948087931 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.948107958 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.948124886 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.948170900 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.967987061 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.968017101 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.968045950 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.968053102 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.971973896 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.972029924 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.972249985 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.972531080 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.972546101 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.978302002 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.978327990 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.978395939 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.978406906 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.978456974 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.978524923 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.978686094 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.978686094 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.978699923 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.978708029 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.980897903 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.980957985 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.981009007 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.982069969 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.982086897 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.982098103 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.982103109 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.982122898 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.982151031 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.982206106 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.982415915 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.982557058 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.982812881 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.983351946 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.983362913 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.983513117 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.983513117 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.983525991 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.983529091 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.984496117 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.984533072 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.984608889 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.984618902 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.984707117 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.984965086 CEST	49727	80	192.168.2.6	18.66.121.138
Oct 6, 2024 00:14:49.985261917 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.985263109 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.985269070 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.985276937 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.988024950 CEST	49732	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.988042116 CEST	443	49732	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.988179922 CEST	49732	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.988385916 CEST	49732	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:49.988399029 CEST	443	49732	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:49.991065025 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.991087914 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.991141081 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.994805098 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.994812965 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.994874954 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.995198011 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.995209932 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.998842001 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:49.998867035 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:49.998917103 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.000287056 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.000299931 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.000860929 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.000869989 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.021641970 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:50.021765947 CEST	80	49727	18.66.121.138	192.168.2.6
Oct 6, 2024 00:14:50.021913052 CEST	49727	80	192.168.2.6	18.66.121.138
Oct 6, 2024 00:14:50.462462902 CEST	443	49732	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:50.505700111 CEST	49732	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:50.541629076 CEST	49732	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:50.541654110 CEST	443	49732	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:50.543231964 CEST	49736	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:50.544775009 CEST	443	49732	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:50.544852972 CEST	49732	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:50.545908928 CEST	49737	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:50.549706936 CEST	80	49736	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:50.549854040 CEST	49736	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:50.552460909 CEST	80	49737	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:50.552577019 CEST	49737	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:50.560298920 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.576742887 CEST	49732	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:50.576904058 CEST	443	49732	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:50.580997944 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.581022978 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.581541061 CEST	49732	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:50.581562042 CEST	443	49732	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:50.581775904 CEST	49736	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:50.584948063 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.585051060 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.585268021 CEST	49738	443	192.168.2.6	142.250.186.132
Oct 6, 2024 00:14:50.585306883 CEST	443	49738	142.250.186.132	192.168.2.6
Oct 6, 2024 00:14:50.585375071 CEST	49738	443	192.168.2.6	142.250.186.132
Oct 6, 2024 00:14:50.585733891 CEST	49738	443	192.168.2.6	142.250.186.132
Oct 6, 2024 00:14:50.585751057 CEST	443	49738	142.250.186.132	192.168.2.6
Oct 6, 2024 00:14:50.588110924 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.588323116 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.588604927 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.588617086 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.589190960 CEST	80	49736	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:50.608962059 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.610239983 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.610260963 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.611016035 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.611021996 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.627065897 CEST	49732	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:50.637799025 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.640824080 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.646275997 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.646310091 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.646996975 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.647005081 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.647507906 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.649349928 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.649370909 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.650315046 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.650340080 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.660852909 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.661880016 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.661894083 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.662893057 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.662900925 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.695108891 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.696434975 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.696472883 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.696928024 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.696935892 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.700263977 CEST	443	49732	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:50.700320959 CEST	443	49732	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:50.700352907 CEST	443	49732	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:50.700392008 CEST	443	49732	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:50.700424910 CEST	49732	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:50.700450897 CEST	443	49732	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:50.700480938 CEST	49732	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:50.700483084 CEST	443	49732	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:50.700527906 CEST	49732	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:50.704282045 CEST	49732	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:14:50.704301119 CEST	443	49732	104.16.152.132	192.168.2.6
Oct 6, 2024 00:14:50.711850882 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.711922884 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.711973906 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.712367058 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.712378025 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.722786903 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.722826004 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.722914934 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.724101067 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.724116087 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.745397091 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.745461941 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.745547056 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.749106884 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.749133110 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.749145985 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.749152899 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.750231028 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.750416040 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.750494003 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.754245043 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.754245043 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.754271984 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.754283905 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.764398098 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.764440060 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.764549971 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.768790007 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.768841982 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.769077063 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.769207954 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.769221067 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.769814968 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.769841909 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.771336079 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.771405935 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.771518946 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.773130894 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.773166895 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.773184061 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.773192883 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.776671886 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.776715040 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.776789904 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.776907921 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.776921988 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.805108070 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.805253029 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.805377960 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.807126999 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.807149887 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.816648960 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.816737890 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.816809893 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.819931030 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:50.819967031 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:50.839912891 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.840064049 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.840130091 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.840150118 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.840178013 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.840226889 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.840260029 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.845658064 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.845768929 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.845797062 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.845819950 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.845863104 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.845870972 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.852361917 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.852447987 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.852473974 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.858313084 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.858402014 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.858424902 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.908184052 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.928323030 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.928844929 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.928947926 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.928962946 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.935283899 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.935319901 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.935374975 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.935388088 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.935431957 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.941369057 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.955584049 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.955741882 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.955810070 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.955826044 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.955873013 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.971589088 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.979473114 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.979521036 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.979551077 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.979578972 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.979646921 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.989533901 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.997014999 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.997041941 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.997082949 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:50.997098923 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:50.997164965 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.002726078 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.008972883 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.009066105 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.009115934 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.009126902 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.009175062 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.014018059 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.014149904 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.014343977 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.014353037 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.039721012 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.039768934 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.039791107 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.039800882 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.039828062 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.039841890 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.040739059 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.040800095 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.040807962 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.043720961 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.043803930 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.043812990 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.048666000 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.048722982 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.048732042 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.053092957 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.053234100 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.053241968 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.056010008 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.056056976 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.056063890 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.060642958 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.060718060 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.060725927 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.065319061 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.065402031 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.065412045 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.071448088 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.071739912 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.071748018 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.078973055 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.079056025 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.079065084 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.082912922 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.082977057 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.082983971 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.086437941 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.086503029 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.086508989 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.091510057 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.091645956 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.091653109 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.098432064 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.098587036 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.098599911 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.103048086 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.103128910 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.103162050 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.107491970 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.107544899 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.107568979 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.109651089 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.109710932 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.109741926 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.114428997 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.114494085 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.114523888 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.118942022 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.119080067 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.119102955 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.120614052 CEST	49744	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:51.120650053 CEST	443	49744	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:51.120718956 CEST	49744	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:51.122242928 CEST	49744	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:51.122260094 CEST	443	49744	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:51.124005079 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.124073982 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.124099016 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.140228987 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.140321016 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.140330076 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.140357018 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.140407085 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.140459061 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.148596048 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.148653030 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.148669004 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.148693085 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.148731947 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.148737907 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.148951054 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.148983955 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.148992062 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.148997068 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.149085045 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.149090052 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.149897099 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.149930954 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.149970055 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.149980068 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.150021076 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.150434971 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.153815985 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.153855085 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.153868914 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.153887033 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.153925896 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.154311895 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.156776905 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.156814098 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.156848907 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.156867027 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.156907082 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.158513069 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.161365986 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.161406040 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.161436081 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.161452055 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.161489964 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.163086891 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.164216995 CEST	80	49736	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:51.164726019 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.164800882 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.164809942 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.165813923 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.165849924 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.165858984 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.165867090 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.165905952 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.167992115 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.168535948 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.168593884 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.169855118 CEST	49729	443	192.168.2.6	142.250.181.228
Oct 6, 2024 00:14:51.169868946 CEST	443	49729	142.250.181.228	192.168.2.6
Oct 6, 2024 00:14:51.210202932 CEST	49736	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:51.277542114 CEST	443	49738	142.250.186.132	192.168.2.6
Oct 6, 2024 00:14:51.277813911 CEST	49738	443	192.168.2.6	142.250.186.132
Oct 6, 2024 00:14:51.277828932 CEST	443	49738	142.250.186.132	192.168.2.6
Oct 6, 2024 00:14:51.281380892 CEST	443	49738	142.250.186.132	192.168.2.6
Oct 6, 2024 00:14:51.281457901 CEST	49738	443	192.168.2.6	142.250.186.132
Oct 6, 2024 00:14:51.281868935 CEST	49738	443	192.168.2.6	142.250.186.132
Oct 6, 2024 00:14:51.282040119 CEST	443	49738	142.250.186.132	192.168.2.6
Oct 6, 2024 00:14:51.308296919 CEST	80	49736	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:51.322180986 CEST	49738	443	192.168.2.6	142.250.186.132
Oct 6, 2024 00:14:51.322192907 CEST	443	49738	142.250.186.132	192.168.2.6
Oct 6, 2024 00:14:51.352386951 CEST	49745	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:51.352432013 CEST	443	49745	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:51.352489948 CEST	49745	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:51.352778912 CEST	49745	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:51.352802992 CEST	443	49745	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:51.354264975 CEST	49736	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:51.365906954 CEST	49738	443	192.168.2.6	142.250.186.132
Oct 6, 2024 00:14:51.422570944 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.461318016 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.462095976 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:51.462120056 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:51.462174892 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:51.463249922 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:51.463263988 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:51.466417074 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.491735935 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.492145061 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.492157936 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.493376017 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.493382931 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.494966030 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.495007992 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.496170044 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.496189117 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.497104883 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.497128963 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.498276949 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.498285055 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.501888990 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.502777100 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.502805948 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.503746033 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.503757000 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.510394096 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.511646032 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.511666059 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.512216091 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.512221098 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.555186033 CEST	49748	80	192.168.2.6	18.239.102.95
Oct 6, 2024 00:14:51.561356068 CEST	80	49748	18.239.102.95	192.168.2.6
Oct 6, 2024 00:14:51.561440945 CEST	49748	80	192.168.2.6	18.239.102.95
Oct 6, 2024 00:14:51.561819077 CEST	49748	80	192.168.2.6	18.239.102.95
Oct 6, 2024 00:14:51.568193913 CEST	80	49748	18.239.102.95	192.168.2.6
Oct 6, 2024 00:14:51.592544079 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.592624903 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.592679024 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.593096018 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.593167067 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.593231916 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.599241972 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.599416971 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.599486113 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.601507902 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.601530075 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.601543903 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.601550102 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.604377985 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.604398966 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.606375933 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.606390953 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.606401920 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.606408119 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.609210968 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.609385967 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.609445095 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.610820055 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.610826969 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.610856056 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.610861063 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.614188910 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.614340067 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.614398003 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.617614985 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.617652893 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.617773056 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.622482061 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.622498035 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.622555971 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.623001099 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.623002052 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.623027086 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.623028994 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.624036074 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.624058962 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.624161005 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.624176979 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.625907898 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.625946045 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.625999928 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.626487017 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.626506090 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.626965046 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.626986980 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.627043962 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.627172947 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.627181053 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.627305984 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.627334118 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.627403975 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.636481047 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:51.636497021 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:51.681406975 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:51.681499004 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:51.681585073 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:51.682127953 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:51.682162046 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:51.820877075 CEST	443	49744	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:51.821002960 CEST	49744	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:51.824912071 CEST	49744	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:51.824930906 CEST	443	49744	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:51.825314999 CEST	443	49744	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:51.876096964 CEST	49744	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:51.972104073 CEST	49744	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:51.989826918 CEST	443	49745	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:51.990282059 CEST	49745	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:51.990308046 CEST	443	49745	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:51.991339922 CEST	443	49745	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:51.991408110 CEST	49745	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:52.019399881 CEST	443	49744	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:52.029849052 CEST	49745	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:52.030246973 CEST	443	49745	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:52.075037003 CEST	49745	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:52.075050116 CEST	443	49745	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:52.095426083 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.101197004 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:52.101221085 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.102334976 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.102404118 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:52.102801085 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:52.102889061 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.103405952 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:52.103414059 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.129486084 CEST	49745	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:52.145467043 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:52.163853884 CEST	443	49744	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:52.164025068 CEST	443	49744	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:52.164077997 CEST	49744	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:52.166191101 CEST	80	49748	18.239.102.95	192.168.2.6
Oct 6, 2024 00:14:52.166205883 CEST	80	49748	18.239.102.95	192.168.2.6
Oct 6, 2024 00:14:52.166220903 CEST	80	49748	18.239.102.95	192.168.2.6
Oct 6, 2024 00:14:52.166279078 CEST	80	49748	18.239.102.95	192.168.2.6
Oct 6, 2024 00:14:52.166290045 CEST	80	49748	18.239.102.95	192.168.2.6
Oct 6, 2024 00:14:52.166290045 CEST	49748	80	192.168.2.6	18.239.102.95
Oct 6, 2024 00:14:52.166304111 CEST	80	49748	18.239.102.95	192.168.2.6
Oct 6, 2024 00:14:52.166321039 CEST	80	49748	18.239.102.95	192.168.2.6
Oct 6, 2024 00:14:52.166352034 CEST	49748	80	192.168.2.6	18.239.102.95
Oct 6, 2024 00:14:52.166352034 CEST	49748	80	192.168.2.6	18.239.102.95
Oct 6, 2024 00:14:52.166362047 CEST	80	49748	18.239.102.95	192.168.2.6
Oct 6, 2024 00:14:52.166374922 CEST	80	49748	18.239.102.95	192.168.2.6
Oct 6, 2024 00:14:52.166436911 CEST	49748	80	192.168.2.6	18.239.102.95
Oct 6, 2024 00:14:52.191128016 CEST	49744	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:52.191143036 CEST	443	49744	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:52.191160917 CEST	49744	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:52.191168070 CEST	443	49744	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:52.254472971 CEST	80	49748	18.239.102.95	192.168.2.6
Oct 6, 2024 00:14:52.254595995 CEST	80	49748	18.239.102.95	192.168.2.6
Oct 6, 2024 00:14:52.254735947 CEST	49748	80	192.168.2.6	18.239.102.95
Oct 6, 2024 00:14:52.274478912 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.280085087 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.285413027 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.285445929 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.285960913 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.285969019 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.286653042 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.286672115 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.287226915 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.287234068 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.288049936 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.288404942 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.288436890 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.289201021 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.289208889 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.297625065 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.297756910 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.298537016 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.298571110 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.299360991 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.299371958 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.299561977 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.299582005 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.300621033 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.300627947 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.347862959 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.358886003 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.358938932 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.358966112 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.358999968 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.359025002 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:52.359040022 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.359055996 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.359083891 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:52.359098911 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:52.364795923 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.364860058 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.364909887 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:52.364923954 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.371242046 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.371315956 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:52.371324062 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.377656937 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.377744913 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:52.377752066 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.377806902 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.377991915 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:52.386017084 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.386075020 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.386154890 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.386673927 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.386745930 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.386955023 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.395889997 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.396050930 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.396207094 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.398489952 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.403603077 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.403675079 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.403737068 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.404586077 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.404616117 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.405930042 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.406002998 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.406033993 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.406152964 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.406297922 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.409805059 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.409939051 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.410569906 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.410588026 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.411457062 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.411458015 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.411493063 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.411518097 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.414309025 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.414326906 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.414341927 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.414347887 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.416157007 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.416179895 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.416213036 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.416219950 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.418020010 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.418030024 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.418987036 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.419018984 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.419054985 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.419061899 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.452610970 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.490794897 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.490838051 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.490926981 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.519634008 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.519666910 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.525716066 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.525830030 CEST	49747	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:52.525835991 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.525862932 CEST	443	49747	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:52.525940895 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.526160955 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.526199102 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.528014898 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.528045893 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.528126955 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.529097080 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.529110909 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.529639959 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.529648066 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.529710054 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.530036926 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.530066967 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.530131102 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.531003952 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.531014919 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.531449080 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:52.531475067 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:52.569567919 CEST	49760	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:52.569596052 CEST	443	49760	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:52.569839001 CEST	49760	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:52.570082903 CEST	49760	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:52.570096016 CEST	443	49760	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:52.633883953 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.633939981 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.633970976 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.634001017 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.634044886 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.634269953 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.634465933 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.639836073 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.639902115 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.639935970 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.640050888 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.640168905 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.640182018 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.646301031 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.646367073 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.646379948 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.652504921 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.652578115 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.652594090 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.699790001 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.726070881 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.726141930 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.726167917 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.726226091 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.726257086 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.726402044 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.729387045 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.735600948 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.735661983 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.735690117 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.741868019 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.741977930 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.742005110 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.748256922 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.748313904 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.748343945 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.754492998 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.754651070 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.754761934 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.754770041 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.754820108 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.760401011 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.766287088 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.766359091 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.766374111 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.772264004 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.772330999 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.772345066 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.778316021 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.778352022 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.778392076 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.778412104 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.778459072 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.784081936 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.784164906 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.784229994 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.784243107 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.818572998 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.818614960 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.818655014 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.818701029 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.818725109 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.818770885 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.819267035 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.819314003 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.819319963 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.819538116 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.819581032 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.819587946 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.821654081 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.823420048 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.823426962 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.827074051 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.829277992 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.829292059 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.832962036 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.833019972 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.833033085 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.843305111 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.843364954 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.843379974 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.844062090 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.844121933 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.844135046 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.849289894 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.849396944 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.849411964 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.854651928 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.857258081 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.857290983 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.859920025 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.859992027 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.860035896 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.864756107 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.864810944 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.864839077 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.869450092 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.870964050 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.870973110 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.873797894 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.877254009 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.877268076 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.877963066 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.878012896 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.878026009 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.882167101 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.885250092 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.885266066 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.886092901 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.886280060 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.886291981 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.890193939 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.890264034 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.890278101 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.893959045 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.894026041 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.894038916 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.897663116 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.897716045 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.897723913 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.901449919 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.901498079 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.901504993 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.903951883 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.903992891 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.904014111 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.904026031 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.904087067 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.910835981 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.911199093 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.911272049 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.911281109 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.911566973 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.911596060 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.911618948 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.911626101 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.911669016 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.914112091 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.915887117 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.916049004 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.916105986 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.916114092 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.918277979 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.918337107 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.918344021 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.918387890 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.920809984 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.923115015 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.923150063 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.923171043 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.923177958 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.923221111 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.925594091 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.927695036 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.927758932 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.927781105 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.927803040 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.929239988 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.935580015 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.935653925 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.935681105 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.935719967 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.935731888 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.935794115 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.936232090 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.937160969 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.937222958 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:52.937235117 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.941582918 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.941952944 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:52.942028999 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:53.108803988 CEST	49754	443	192.168.2.6	172.217.16.132
Oct 6, 2024 00:14:53.108849049 CEST	443	49754	172.217.16.132	192.168.2.6
Oct 6, 2024 00:14:53.163786888 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.164459944 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.164499998 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.164829969 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.164839029 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.170015097 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.170488119 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.170520067 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.171094894 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.171101093 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.182248116 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.182667017 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.182691097 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.183182955 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.183188915 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.196907997 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.197288990 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.197310925 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.197736025 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.197740078 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.209522963 CEST	443	49760	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:53.209608078 CEST	49760	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:53.210963011 CEST	49760	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:53.210968018 CEST	443	49760	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:53.211209059 CEST	443	49760	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:53.212594986 CEST	49760	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:53.255408049 CEST	443	49760	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:53.262820005 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.262970924 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.263050079 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.271199942 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.271289110 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.271342993 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.287640095 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.287725925 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.287800074 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.298254967 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.298403978 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.298460007 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.327434063 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.327457905 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.327486992 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.327493906 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.333343983 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.333364010 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.339690924 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.339726925 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.339741945 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.339749098 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.345201015 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.345213890 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.345223904 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.345231056 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.349442005 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:53.349510908 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:53.349595070 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:53.350563049 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:53.350579023 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:53.362859964 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.362884045 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.362967968 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.364502907 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.364542007 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.364608049 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.366221905 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.366261959 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.366318941 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.367851019 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.367882967 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.367944956 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.368120909 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.368136883 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.368218899 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.368232012 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.368525982 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.368535995 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.368653059 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:53.368674040 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:53.485038042 CEST	443	49760	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:53.485105991 CEST	443	49760	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:53.485153913 CEST	49760	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:53.490833998 CEST	49760	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:53.490854025 CEST	443	49760	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:53.490871906 CEST	49760	443	192.168.2.6	184.28.90.27
Oct 6, 2024 00:14:53.490878105 CEST	443	49760	184.28.90.27	192.168.2.6
Oct 6, 2024 00:14:54.001038074 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.001823902 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.001847029 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.002165079 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.003953934 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.004189014 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.004256964 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.005119085 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.007289886 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.007325888 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.008694887 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.008701086 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.010093927 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.010997057 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.011027098 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.012115002 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.012125015 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.029473066 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.030400038 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.030424118 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.031327963 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.031668901 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.031678915 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.032247066 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.032269001 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.033185005 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.033193111 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.047410965 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.103992939 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.104077101 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.104134083 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.104532957 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.104554892 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.110250950 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.110327959 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.110380888 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.112335920 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.112373114 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.112437963 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.112620115 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.112637997 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.112649918 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.112656116 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.114842892 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.114856958 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.118572950 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.118612051 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.118755102 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.119007111 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.119021893 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.141211987 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.141287088 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.141343117 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.141582966 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.141598940 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.141601086 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.141751051 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.141802073 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.144768953 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.144794941 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.144809961 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.144819021 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.152283907 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.152323961 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.152493954 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.154048920 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.154057980 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.155664921 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.155673027 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.155883074 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.156271935 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.156291962 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.286571980 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.286633968 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.286698103 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.286736965 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.286750078 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.286885977 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.286953926 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.292463064 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.292527914 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.292537928 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.292645931 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.292689085 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.292695999 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.298892021 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.298947096 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.298955917 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.305461884 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.305530071 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.305537939 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.347628117 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.377331972 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.377444029 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.377502918 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.377518892 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.382386923 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.382425070 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.382461071 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.382477999 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.382601023 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.388570070 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.394956112 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.394984007 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.395021915 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.395042896 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.395134926 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.401159048 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.407551050 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.407591105 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.407624006 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.407643080 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.407922983 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.413659096 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.419467926 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.419511080 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.419543028 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.419564009 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.419608116 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.425230980 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.431843042 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.431871891 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.431998968 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.432028055 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.432182074 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.437272072 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.437422991 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.437540054 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.437549114 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.467905998 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.467945099 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.467988968 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.467998028 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.468107939 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.468126059 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.468183041 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.468235970 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.468241930 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.473174095 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.473259926 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.473265886 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.474910975 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.474968910 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.474975109 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.480851889 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.480926037 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.480931997 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.486891031 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.486973047 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.486988068 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.492583990 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.492649078 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.492661953 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.497975111 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.498045921 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.498051882 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.503180027 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.503241062 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.503247023 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.508486986 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.508570910 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.508577108 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.513752937 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.513812065 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.513819933 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.518997908 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.519088984 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.519115925 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.523633957 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.523709059 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.523730040 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.527941942 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.528022051 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.528029919 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.532000065 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.532059908 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.532068014 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.536129951 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.536185980 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.536207914 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.540102005 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.540157080 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.540163994 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.543884039 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.543936968 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.543943882 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.548629045 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.548683882 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.548691988 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.551690102 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.551764011 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.551770926 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.555543900 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.555788994 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.555803061 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.558470011 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.558551073 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.558630943 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.558645010 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.558773994 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.560646057 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.562757015 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.562839031 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.562839031 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.562868118 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.563100100 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.565566063 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.567522049 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.567604065 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.567615032 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.567637920 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.567698956 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.569673061 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.572134972 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.572208881 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.572218895 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.572242975 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.572309971 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.574605942 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.576911926 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.576992035 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.576993942 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.577032089 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.577229977 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.579176903 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.581882000 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.581955910 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.581959009 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.581978083 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.582029104 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.583743095 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.586348057 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.586411953 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.586421967 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.588633060 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.588660955 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.588685036 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.588692904 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.588737965 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.590799093 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.593882084 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.593909979 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.593974113 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.593995094 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.594213963 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.594227076 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.594266891 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.594316959 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.594588041 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.594618082 CEST	443	49761	142.250.185.110	192.168.2.6
Oct 6, 2024 00:14:54.594669104 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.594670057 CEST	49761	443	192.168.2.6	142.250.185.110
Oct 6, 2024 00:14:54.614104986 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:54.614144087 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:54.614232063 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:54.614768028 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:54.614784002 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:54.655241966 CEST	49717	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:54.660113096 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:54.666901112 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.667505026 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.667565107 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.668421030 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.668437958 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.772255898 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.772327900 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.772533894 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.772598028 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.772636890 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.772658110 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.772670031 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.775343895 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.775428057 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.775506020 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.775640965 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.775656939 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.791707039 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.792205095 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.792237997 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.792691946 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.792699099 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.797756910 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.798208952 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.798226118 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.798682928 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.798700094 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.802217007 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.802604914 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.802618027 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.802978039 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.802983999 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.810163021 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.810600996 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.810636997 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.810988903 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.810998917 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.894879103 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.894961119 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.895025969 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.895234108 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.895252943 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.895271063 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.895277977 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.897636890 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.897793055 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.897927999 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.897927999 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.897960901 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.897975922 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.898596048 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.898626089 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.898740053 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.898874998 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.898889065 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.900089025 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.900115967 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.900227070 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.900528908 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.900542974 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.907308102 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.907372952 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.907424927 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.907542944 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.907552004 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.907635927 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.907641888 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.909759045 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.909858942 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.909936905 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.910052061 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.910089970 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.916944027 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.917125940 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.917206049 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.917243958 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.917264938 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.917277098 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.917283058 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.919255018 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.919347048 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:54.919450045 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.919625998 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:54.919661045 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.011821032 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:55.054872036 CEST	49717	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:55.059737921 CEST	49717	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:55.064495087 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:55.069957972 CEST	49777	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.070030928 CEST	443	49777	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.070225000 CEST	49777	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.070599079 CEST	49778	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.070607901 CEST	443	49778	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.070666075 CEST	49778	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.071573973 CEST	49777	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.071588993 CEST	443	49777	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.071846962 CEST	49778	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.071861982 CEST	443	49778	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.077203035 CEST	49736	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:55.082022905 CEST	80	49736	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:55.246161938 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:55.281657934 CEST	80	49717	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:55.293874025 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:55.325881004 CEST	49717	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:55.412580013 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.430713892 CEST	80	49736	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:55.467854023 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.485984087 CEST	49736	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:55.541944981 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.543947935 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.556346893 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.582914114 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.595422983 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.596239090 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.610863924 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.626878977 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.704752922 CEST	443	49778	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.754847050 CEST	49778	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.817794085 CEST	443	49777	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.859369993 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:55.859396935 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:55.859594107 CEST	49777	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.859620094 CEST	443	49777	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.859771013 CEST	49778	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.859776974 CEST	443	49778	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.860059977 CEST	443	49777	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.860074997 CEST	443	49777	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.860116959 CEST	49777	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.860125065 CEST	443	49777	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.860161066 CEST	49777	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.860244036 CEST	443	49778	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.860258102 CEST	443	49778	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.860295057 CEST	49778	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.860301971 CEST	443	49778	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.860342979 CEST	49778	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.860611916 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:55.860678911 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:55.860771894 CEST	443	49777	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.861015081 CEST	443	49778	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.874517918 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:55.875339985 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:55.876414061 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:55.876426935 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:55.885219097 CEST	49778	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.885303974 CEST	49777	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.885309935 CEST	443	49778	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.885373116 CEST	443	49777	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.885608912 CEST	49778	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.885616064 CEST	443	49778	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.885668993 CEST	49777	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.885678053 CEST	443	49777	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:55.917062998 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:55.936089993 CEST	49777	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.936089993 CEST	49778	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:55.956959009 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.956981897 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.957619905 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.957626104 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.957952976 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.957974911 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.958054066 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.958070040 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.958527088 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.958533049 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.958636045 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.958647013 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.958899021 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.958914995 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.959237099 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.959242105 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.959489107 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.959497929 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:55.959942102 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:55.959945917 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.053060055 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.053347111 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.053414106 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.054585934 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.054744959 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.054801941 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.055742979 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.056041002 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.056119919 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.056524038 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.056700945 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.056750059 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.058101892 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.058484077 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.058657885 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.065299034 CEST	443	49778	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:56.065352917 CEST	443	49778	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:56.065407991 CEST	49778	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:56.065983057 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.066054106 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.066133976 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.066152096 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.066162109 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.066210032 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.066217899 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.066433907 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.066493988 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.066500902 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.071997881 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.072120905 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.072128057 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.078388929 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.078443050 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.078449965 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.082222939 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.082222939 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.082283020 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.082309961 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.084640980 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.084781885 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.084789038 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.086956024 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.086980104 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.086993933 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.086999893 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.088769913 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.088784933 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.088855982 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.088862896 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.089127064 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.089137077 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.089147091 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.089150906 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.089230061 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.089240074 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.089250088 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.089255095 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.093923092 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.093980074 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.094091892 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.095235109 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.095268965 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.095325947 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.096566916 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.096610069 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.096661091 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.097259998 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.097289085 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.097832918 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.097848892 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.098577023 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.098597050 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.099225044 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.099237919 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.099287033 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.099457026 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.099466085 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.101994038 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.102010965 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.102072001 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.102958918 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:56.102969885 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:56.103687048 CEST	49778	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:56.103705883 CEST	443	49778	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:56.107628107 CEST	443	49777	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:56.129630089 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.160403013 CEST	49777	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:56.160418034 CEST	443	49777	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:56.161418915 CEST	49777	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:56.161479950 CEST	443	49777	142.250.185.97	192.168.2.6
Oct 6, 2024 00:14:56.161537886 CEST	49777	443	192.168.2.6	142.250.185.97
Oct 6, 2024 00:14:56.176786900 CEST	49736	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:56.336756945 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.336821079 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.336853981 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.336872101 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.336888075 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.336944103 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.336949110 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.337121964 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.337160110 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.337162018 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.337171078 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.337229967 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.337234974 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.337291956 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.337322950 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.337331057 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.337342024 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.337371111 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.337400913 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.337430954 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.337430954 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.337440968 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.337476969 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.337486982 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.337491035 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.337495089 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.337589979 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.337594986 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.339795113 CEST	80	49736	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:56.339807034 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.339880943 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.339894056 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.342119932 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.342159033 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.342192888 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.342226028 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.342248917 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.342248917 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.342261076 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.342328072 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.342333078 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.342855930 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.342884064 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.342906952 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.342912912 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.342936993 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.342952967 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.342957020 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.343008041 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.343565941 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.343631983 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.343679905 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.343688965 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.343697071 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.343734026 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.344347000 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.344419956 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.344501019 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.344506025 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.344511986 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.344681978 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.344686985 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.345280886 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.345315933 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.345331907 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.345339060 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.345411062 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.345416069 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.346081972 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.346124887 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.346132040 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.346138000 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.346273899 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.346277952 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.346929073 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.346963882 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.346999884 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.347002029 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.347007990 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.347052097 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.347057104 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.347103119 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.347718954 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.348251104 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.348283052 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.348303080 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.348311901 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.348320961 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.348426104 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.348709106 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.348773956 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.348778963 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.349107027 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.349150896 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.349179983 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.349188089 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.349324942 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.349332094 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.349936962 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.349977970 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.349989891 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.349997044 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.350063086 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.350367069 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.350784063 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.350812912 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.350923061 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.350931883 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.351066113 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.351108074 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.351167917 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.351198912 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.351241112 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.351248980 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.351381063 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.351898909 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.352406979 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.352456093 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.352469921 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.352741957 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.352780104 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.352818012 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.352823019 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.352884054 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.352884054 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.352894068 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.352946997 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.353039026 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.354321003 CEST	49784	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:56.354337931 CEST	443	49784	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:56.354396105 CEST	49784	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:56.354644060 CEST	49785	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:56.354671001 CEST	443	49785	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:56.354723930 CEST	49785	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:56.354890108 CEST	49784	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:56.354902029 CEST	443	49784	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:56.355045080 CEST	49785	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:56.355057955 CEST	443	49785	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:56.355109930 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.355166912 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.355175018 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.357521057 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.357554913 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.357573986 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.357587099 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.357810974 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.360260010 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.362081051 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.362106085 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.362128973 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.362159014 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.362205029 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.364350080 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.366751909 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.366781950 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.366801023 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.366822004 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.366880894 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.368961096 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.371349096 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.371396065 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.371409893 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.371423960 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.371558905 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.371567011 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.371577978 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.371701956 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.371725082 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.371737957 CEST	443	49771	142.250.185.142	192.168.2.6
Oct 6, 2024 00:14:56.371766090 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.371944904 CEST	49771	443	192.168.2.6	142.250.185.142
Oct 6, 2024 00:14:56.481709003 CEST	49787	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:56.481729031 CEST	443	49787	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:56.481801033 CEST	49787	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:56.482558966 CEST	49787	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:56.482570887 CEST	443	49787	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:56.545960903 CEST	49745	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:56.557121038 CEST	80	49736	75.2.115.196	192.168.2.6
Oct 6, 2024 00:14:56.591403008 CEST	443	49745	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:56.610368013 CEST	49736	80	192.168.2.6	75.2.115.196
Oct 6, 2024 00:14:56.920866966 CEST	443	49745	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:56.920948029 CEST	443	49745	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:56.921001911 CEST	49745	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:56.921665907 CEST	49745	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:56.921681881 CEST	443	49745	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:57.050519943 CEST	49789	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:57.050563097 CEST	443	49789	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:57.050731897 CEST	49789	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:57.050925970 CEST	49789	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:57.050944090 CEST	443	49789	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:57.070333004 CEST	443	49785	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.070580006 CEST	49785	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.070593119 CEST	443	49785	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.071063042 CEST	443	49785	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.071075916 CEST	443	49785	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.071126938 CEST	49785	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.071129084 CEST	443	49784	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.071141005 CEST	443	49785	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.071173906 CEST	49785	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.071194887 CEST	49785	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.071458101 CEST	49784	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.071487904 CEST	443	49784	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.071858883 CEST	443	49785	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.071878910 CEST	443	49784	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.071893930 CEST	443	49784	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.071933985 CEST	49784	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.071942091 CEST	443	49784	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.071975946 CEST	49784	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.071985960 CEST	49784	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.072040081 CEST	49785	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.072096109 CEST	443	49785	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.072202921 CEST	49785	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.072207928 CEST	443	49785	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.072613955 CEST	443	49784	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.072752953 CEST	49784	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.072815895 CEST	443	49784	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.072850943 CEST	49784	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.119219065 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.119402885 CEST	443	49784	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.119802952 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.119820118 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.120389938 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.120395899 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.121829987 CEST	49784	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.121838093 CEST	443	49784	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.121872902 CEST	49785	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.147732973 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.148128986 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.148766041 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.148791075 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.149451017 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.149476051 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.149709940 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.149714947 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.150250912 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.150290966 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.150787115 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.150794983 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.151293039 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.151316881 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.151918888 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.151926041 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.152225971 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.152241945 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.153069019 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.153074980 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.172787905 CEST	49784	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.230742931 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.230818033 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.230876923 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.231117964 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.231143951 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.231158972 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.231165886 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.234453917 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.234505892 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.234569073 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.234704971 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.234720945 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.252403975 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.252486944 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.252546072 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.252782106 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.252804041 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.252815962 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.252821922 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.254100084 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.254164934 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.254223108 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.254443884 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.254461050 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.254472017 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.254498005 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.254503965 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.254554033 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.254606962 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.254703045 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.254718065 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.254750013 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.254755020 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.254795074 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.254868984 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.254930019 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.254930019 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.255183935 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.255189896 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.258095026 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.258122921 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.258173943 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.258209944 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.258213997 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.258354902 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.258497953 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.258511066 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.258601904 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.258618116 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.258884907 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.258908987 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.258990049 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.259079933 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.259092093 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.259846926 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.259860992 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.259927988 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.260040045 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.260054111 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.284331083 CEST	443	49787	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:57.284406900 CEST	49787	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:57.286129951 CEST	49787	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:57.286145926 CEST	443	49787	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:57.286432028 CEST	443	49787	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:57.288453102 CEST	49787	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:57.288633108 CEST	49787	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:57.288647890 CEST	443	49787	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:57.288681030 CEST	49787	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:57.331412077 CEST	443	49787	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:57.340928078 CEST	443	49784	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.341001034 CEST	443	49784	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.341221094 CEST	49784	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.341476917 CEST	443	49785	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.341612101 CEST	443	49785	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.341738939 CEST	49785	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.342319012 CEST	49784	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.342339993 CEST	443	49784	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.344417095 CEST	49785	443	192.168.2.6	142.250.185.225
Oct 6, 2024 00:14:57.344436884 CEST	443	49785	142.250.185.225	192.168.2.6
Oct 6, 2024 00:14:57.459970951 CEST	443	49787	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:57.460347891 CEST	443	49787	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:57.460417986 CEST	49787	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:57.461479902 CEST	49787	443	192.168.2.6	40.113.110.67
Oct 6, 2024 00:14:57.461493969 CEST	443	49787	40.113.110.67	192.168.2.6
Oct 6, 2024 00:14:57.698872089 CEST	443	49789	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:57.699456930 CEST	49789	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:57.699470043 CEST	443	49789	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:57.699853897 CEST	443	49789	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:57.700716019 CEST	49789	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:57.700805902 CEST	443	49789	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:57.701061964 CEST	49789	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:57.747405052 CEST	443	49789	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:57.869668007 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.870176077 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.870213032 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.870790005 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.870798111 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.889528036 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.900211096 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.900239944 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.901633978 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.901643991 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.906044960 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.906968117 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.911226034 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.911243916 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.912189960 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.912195921 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.912447929 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.912462950 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.922527075 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.972649097 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.972722054 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:57.972809076 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.974847078 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:57.993702888 CEST	443	49789	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:57.993825912 CEST	443	49789	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:57.993999958 CEST	49789	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:58.000227928 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.000296116 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.000400066 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.011200905 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.011351109 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.011429071 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.077383041 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.077399969 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.090898037 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.090919971 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.090955973 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.090962887 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.091053009 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.091077089 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.091109037 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.091115952 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.091188908 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.091204882 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.091619015 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.091624022 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.180042982 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.180110931 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.180217028 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.192326069 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.192405939 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.193209887 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.318591118 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.318631887 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.318649054 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.318655968 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.324294090 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.324309111 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.324318886 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.324325085 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.349217892 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.349219084 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.349266052 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.349294901 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.370609045 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.370649099 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.370721102 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.446665049 CEST	49789	443	192.168.2.6	142.250.185.78
Oct 6, 2024 00:14:58.446705103 CEST	443	49789	142.250.185.78	192.168.2.6
Oct 6, 2024 00:14:58.450428963 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.450454950 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.452585936 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.452632904 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.452698946 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.452893019 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.452908993 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.459764957 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.459775925 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.459832907 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.461652040 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.461697102 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.461755037 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.462466002 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.462502956 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.462555885 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.463798046 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.463810921 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.463917017 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.463929892 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:58.464088917 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:58.464112997 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.090384960 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.090881109 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.090904951 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.091347933 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.091355085 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.115839958 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.116122961 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.116338015 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.116354942 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.116636038 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.116782904 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.116789103 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.116853952 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.116877079 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.117137909 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.117149115 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.117213011 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.117217064 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.117552996 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.117558002 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.125173092 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.125595093 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.125621080 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.126065016 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.126070976 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.194586039 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.194750071 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.194828033 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.219178915 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.219178915 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.219227076 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.219258070 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.225116968 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.225157976 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.225296974 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.231678963 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.231689930 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.231882095 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.231952906 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.231996059 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.232171059 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.232187986 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.232203960 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.232209921 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.232346058 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.232403994 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.232449055 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.232762098 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.232830048 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.232868910 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.233498096 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.233515978 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.233530045 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.233536005 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.235347033 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.235414028 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.235451937 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.237277031 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.237291098 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.237304926 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.237309933 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.239831924 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.239840984 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.239852905 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.239856958 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.245301008 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.245326042 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.245374918 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.246049881 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.246061087 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.247255087 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.247277975 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.247320890 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.247502089 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.247512102 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.249373913 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.249406099 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.249504089 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.249701023 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.249711990 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.251478910 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.251487970 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.251535892 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.251686096 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.251693010 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.896779060 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.897444963 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.897471905 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.897864103 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.897870064 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.899580956 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.899982929 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.900002956 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.900377989 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.900384903 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.902280092 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.902637005 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.902654886 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.903062105 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.903075933 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.911971092 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.912519932 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.912552118 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.912995100 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.913000107 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.930665970 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.931212902 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.931241989 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 00:14:59.931621075 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:14:59.931627035 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.003395081 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.003459930 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.003520012 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.003829956 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.003840923 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.003840923 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.003858089 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.003865957 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.003891945 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.005337954 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.005337954 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.005337954 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.006479979 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.006563902 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.007302999 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.007345915 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.007404089 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.007410049 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.007565022 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.007597923 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.007627010 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.007628918 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.007709026 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.007878065 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.007878065 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.007889032 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.007896900 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.007930994 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.007941008 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.010035992 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.010063887 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.010229111 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.010349989 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.010360956 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.019984961 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.020059109 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.020195007 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.020226002 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.020242929 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.020255089 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.020260096 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.022291899 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.022327900 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.022557020 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.022805929 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.022816896 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.038872957 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.039025068 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.039094925 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.039125919 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.039140940 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.039151907 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.039158106 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.041174889 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.041208029 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.041326046 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.041492939 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.041506052 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.318697929 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.318732023 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.645160913 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.646897078 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.658508062 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.673582077 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.673616886 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.676168919 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.676186085 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.676363945 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.676403046 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.677139044 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.677149057 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.677659035 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.677670002 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.678617001 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.678627014 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.685672998 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.686130047 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.704796076 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.704811096 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.705462933 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.705475092 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.705749035 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.705782890 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.706146002 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.706151009 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.770634890 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.770705938 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.770776033 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.771811008 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.771830082 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.772392035 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.772521973 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.772617102 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.773400068 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.773478985 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.773606062 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.774142027 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.774184942 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.774226904 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.774243116 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.784522057 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.784540892 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.784553051 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.784558058 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.802100897 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.802234888 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.802345037 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.808872938 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.808948040 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.809061050 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.840996981 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.841015100 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.935755014 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.935755968 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.935796976 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.935812950 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.994419098 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.994466066 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.994611025 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.995202065 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.995215893 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.996081114 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.996093988 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.996264935 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.996536016 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.996542931 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.997886896 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.997926950 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.997934103 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.997957945 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.998013020 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.998137951 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.998137951 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.998172998 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.998321056 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.998339891 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.999192953 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.999219894 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:00.999279976 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.999484062 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:00.999495029 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.047806025 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.047842979 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:01.047946930 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.048403025 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.048405886 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.048414946 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:01.048449039 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:01.048898935 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.048898935 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.048932076 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:01.297779083 CEST	443	49738	142.250.186.132	192.168.2.6
Oct 6, 2024 00:15:01.297853947 CEST	443	49738	142.250.186.132	192.168.2.6
Oct 6, 2024 00:15:01.297899961 CEST	49738	443	192.168.2.6	142.250.186.132
Oct 6, 2024 00:15:01.670933008 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.672348976 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.685477972 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.686990976 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.687026978 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.687510014 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.687516928 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.687858105 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.687870979 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.688411951 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.688416958 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.688698053 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.688731909 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.689271927 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.689284086 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.700841904 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.701497078 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.701517105 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.701797009 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.701806068 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.701993942 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.702331066 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.702347994 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.702708006 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.702713013 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.801860094 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:01.802220106 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.802252054 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:01.803472996 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:01.803539038 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.804171085 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.804239035 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:01.804375887 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.804388046 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:01.810823917 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.810904980 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.810961008 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.811232090 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.811253071 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.811265945 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.811271906 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.812657118 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.812735081 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.812786102 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.812916994 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.812922955 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.812935114 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.812938929 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.817842960 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.817874908 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.818100929 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.818285942 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.818295002 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.818948984 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.819000006 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.819122076 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.819221020 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.819236994 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.824084997 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.824160099 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.824208975 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.824348927 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.824367046 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.824379921 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.824384928 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.826829910 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.826873064 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.826935053 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.827115059 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.827127934 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.837321997 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:01.837690115 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.837707996 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:01.838778973 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:01.839010000 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.839466095 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.839565039 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:01.844007015 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.844075918 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.844122887 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.844777107 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.844777107 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.844798088 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.844808102 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.846014023 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.846081018 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.846124887 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.846235991 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.846250057 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.846261978 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.846266985 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.849067926 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.849102020 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.849251032 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.849431992 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.849442959 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.849539995 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.849540949 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.849558115 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.849637985 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:01.849657059 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:01.859471083 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.892427921 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:01.892445087 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:01.938894033 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.476109982 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.476330042 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.476368904 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.476394892 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.476399899 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.476419926 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.476444006 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.477024078 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.477083921 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.477091074 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.477247000 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.477307081 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.477313042 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.481168032 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.481239080 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.481256962 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.481278896 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.481398106 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.497328997 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.507890940 CEST	49738	443	192.168.2.6	142.250.186.132
Oct 6, 2024 00:15:02.507905006 CEST	443	49738	142.250.186.132	192.168.2.6
Oct 6, 2024 00:15:02.508296967 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.509571075 CEST	49825	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.509622097 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.509718895 CEST	49825	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.510078907 CEST	49825	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.510109901 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.510674000 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.510699987 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.510895967 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.511013031 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.511029959 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.511428118 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.511464119 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.511513948 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.511671066 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.511686087 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.512445927 CEST	49828	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.512489080 CEST	443	49828	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.512573004 CEST	49828	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.512892962 CEST	49828	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.512904882 CEST	443	49828	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.513540030 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.515753984 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.520173073 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.520190954 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.520831108 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.520837069 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.521342993 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.521387100 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.522150040 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.522159100 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.522532940 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.522547960 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.523106098 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.523113012 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.528836012 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.529512882 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.529531002 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.530692101 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.530698061 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.531244040 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.531860113 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.531877995 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.532850027 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.532857895 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.555408955 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.562688112 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.563045979 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.563102007 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.563118935 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.563841105 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.563894987 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.563900948 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.564027071 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.564058065 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.564083099 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.564089060 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.564168930 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.564174891 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.564861059 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.564891100 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.564919949 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.564925909 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.564985991 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.565380096 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.565464020 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.565495014 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.565512896 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.565520048 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.565789938 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.566112041 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.566179037 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.566215992 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.566260099 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.566263914 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.566270113 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.566358089 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.567637920 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.567758083 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.567764044 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.610908031 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.615638018 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.615710020 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.615912914 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.616070032 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.616070032 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.616090059 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.616099119 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.618426085 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.618491888 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.618609905 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.618702888 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.618726015 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.618735075 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.618742943 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.619788885 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.619821072 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.619923115 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.620198011 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.620212078 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.620578051 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.620657921 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.620716095 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.620820999 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.620836973 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.620856047 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.620862961 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.622464895 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.622517109 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.622735023 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.622967005 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.622983932 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.623130083 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.623158932 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.623234987 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.623341084 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.623353004 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.626806021 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.626866102 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.626899958 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.626933098 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.626962900 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.626986027 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.626998901 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.627010107 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.627360106 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.627368927 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.628613949 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.628705978 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.628720045 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.631937981 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.632023096 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.632045031 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.632059097 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.632082939 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.632184029 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.632409096 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.632479906 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.632886887 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.633822918 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.633850098 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.633948088 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.633953094 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.636384964 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.636395931 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.636452913 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.636467934 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.642126083 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.642185926 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.642311096 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.643719912 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.643742085 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.645162106 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.645193100 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.645306110 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.645458937 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:02.645471096 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:02.649714947 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.649789095 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.649822950 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.649852037 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.649885893 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.650532007 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.652138948 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.652223110 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.652273893 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.652334929 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.652343988 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.652554035 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.652609110 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.652611971 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.652621984 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.652667046 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.652667999 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.652677059 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.652724028 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.652967930 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.653017998 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.653079987 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.653126955 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.653480053 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.653534889 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.653717041 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.653774977 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.653841019 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.653877020 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.653891087 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.653896093 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.653923035 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.654683113 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.654736996 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.654742002 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.654774904 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.654810905 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.654829025 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.654834986 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.654881001 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.673901081 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.673914909 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.719005108 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.719044924 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.719335079 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.719347000 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.719851017 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.719914913 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.719919920 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.720264912 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.720293999 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.720336914 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.720336914 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.720341921 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.721076965 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.721131086 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.721144915 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.721836090 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.721873045 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.721920013 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.721925020 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.721976042 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.722600937 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.722655058 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.722740889 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.722755909 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.723442078 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.723505974 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.723510981 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.724183083 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.724210978 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.724234104 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.724239111 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.724701881 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.724906921 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.736447096 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.736490965 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.736517906 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.736543894 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.736557007 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.736756086 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.738899946 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.738960981 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.739027023 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.739075899 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.739082098 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.739134073 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.739177942 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.739604950 CEST	49819	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.739622116 CEST	443	49819	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.740119934 CEST	49835	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.740163088 CEST	443	49835	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.740241051 CEST	49835	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.740885019 CEST	49835	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.740900993 CEST	443	49835	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.768888950 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.768903971 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.811338902 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.811378956 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.811414003 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.811418056 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.811429977 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.811494112 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.811497927 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.811505079 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.811574936 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.811582088 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.811635971 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.811844110 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.811852932 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.811907053 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.812452078 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.812460899 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.812517881 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.812519073 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.812527895 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.812577009 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.812604904 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.812628031 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.813380957 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.813422918 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.813433886 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.813438892 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.813476086 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.813491106 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.813491106 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.813498020 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.813528061 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.813558102 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.814228058 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.814279079 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.814311981 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.814356089 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.814419031 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.814419031 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.814428091 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.815177917 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.815252066 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.815262079 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.815301895 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.816292048 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.816410065 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.903537989 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.903631926 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.903666973 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.903676987 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.903676987 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.903686047 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.903708935 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.903780937 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.903829098 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.904465914 CEST	49818	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.904485941 CEST	443	49818	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.904973030 CEST	49836	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.905010939 CEST	443	49836	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.905080080 CEST	49836	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.910850048 CEST	49836	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.910872936 CEST	443	49836	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.966679096 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.966902018 CEST	443	49828	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.984422922 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.991638899 CEST	49828	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.991663933 CEST	443	49828	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.991888046 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.991909981 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.992331028 CEST	49825	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.992345095 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.992758036 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.993041992 CEST	443	49828	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.993102074 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.993105888 CEST	49828	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.993153095 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.993937016 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.996208906 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.996225119 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.996567011 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.997556925 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.997627974 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:02.999145031 CEST	49828	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:02.999243021 CEST	443	49828	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.000488043 CEST	49825	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.000564098 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.003453016 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.003523111 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.003988028 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.003998995 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.004040003 CEST	49828	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.004051924 CEST	443	49828	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.004220009 CEST	49825	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.004369974 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.051405907 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.051417112 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.055994987 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.056077003 CEST	49828	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.119545937 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.119587898 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.119617939 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.119642973 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.119667053 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.119669914 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.119688988 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.119714975 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.119730949 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.120084047 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.120131969 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.120163918 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.120172024 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.120177031 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.121236086 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.121634960 CEST	443	49828	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.121679068 CEST	443	49828	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.121772051 CEST	443	49828	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.121824026 CEST	49828	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.121884108 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.121953011 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.121989965 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.122034073 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.122051954 CEST	49825	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.122065067 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.122102976 CEST	49825	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.122533083 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.122567892 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.122587919 CEST	49825	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.122595072 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.122908115 CEST	49825	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.122916937 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.124197960 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.126646042 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.126682997 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.126703024 CEST	49825	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.126709938 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.127120972 CEST	49825	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.141973019 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.142021894 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.142064095 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.142093897 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.142110109 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.142117023 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.142148018 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.142179012 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.142188072 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.142188072 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.142193079 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.142374039 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.142379045 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.142602921 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.142697096 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.142703056 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.167902946 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.167931080 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.183903933 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.183928013 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.203221083 CEST	443	49835	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.206408978 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.206442118 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.206465960 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.206562996 CEST	443	49827	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.206563950 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.206563950 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.206621885 CEST	49827	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.212261915 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.212335110 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.212419033 CEST	443	49825	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.212447882 CEST	49825	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.212532997 CEST	49825	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.232076883 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.234025955 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.234101057 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.234142065 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.234169960 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.234185934 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.234203100 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.234234095 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.234246969 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.234263897 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.234615088 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.234622002 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.235264063 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.247891903 CEST	49835	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.430146933 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.430221081 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.430259943 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.430291891 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.430322886 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.430360079 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.430382967 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.430392981 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.430404902 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.430438995 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.430438995 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.430457115 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.430502892 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.430535078 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.430546999 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.430553913 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.430993080 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.431042910 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.431051016 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.431107044 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.433190107 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.433252096 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.433298111 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.433331013 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.433351040 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.433361053 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.433382034 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.433619976 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.433636904 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.433670998 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.433712959 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.433713913 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.433729887 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.433756113 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.434441090 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.434497118 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.434504986 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.434561968 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.435086012 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.435133934 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.435365915 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.436045885 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.436095953 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.437741995 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.437796116 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.437803984 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.437814951 CEST	443	49836	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.437889099 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.438194036 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.438231945 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.438245058 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.438251019 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.438268900 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.439066887 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.439121962 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.439141989 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.439150095 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.439167023 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.439565897 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.439726114 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.439882040 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.440013885 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.440088034 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.440116882 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.440124989 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.440140963 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.441400051 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.441433907 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.441462040 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.441469908 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.441488981 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.442364931 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.442435980 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.442436934 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.442450047 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.442497969 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.443489075 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.443547010 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.443562031 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.443571091 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.443588972 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.444422960 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.444575071 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.444588900 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.444782972 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.444838047 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.444845915 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.445574999 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.445650101 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.445664883 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.445699930 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.445765972 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.445772886 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.446547031 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.446613073 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.446619987 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.446630955 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.446767092 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.447500944 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.447547913 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.447594881 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.447594881 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.447604895 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.448476076 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.448532104 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.448538065 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.448549032 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.448627949 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.448698044 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.448771000 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.448812962 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.448812962 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.448822975 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.449399948 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.449446917 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.449453115 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.449464083 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.449579954 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.449585915 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.450542927 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.450583935 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.450632095 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.450632095 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.450643063 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.450712919 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.450746059 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.450758934 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.450764894 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.450783014 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.465123892 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.465163946 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.465213060 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.465239048 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.465260029 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.487929106 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.488023996 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.488027096 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.488027096 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.489243984 CEST	49836	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.489243984 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.511215925 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.511363029 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.511379957 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.511420965 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.511461020 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.511473894 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.511492014 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.511497021 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.511563063 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.511563063 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.511868954 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.511885881 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.511966944 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.511975050 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.512351036 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.512372017 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.512413025 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.512422085 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.512473106 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.512921095 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.512942076 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.512988091 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.512995958 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.513021946 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.513181925 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.513430119 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.513447046 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.513518095 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.513525009 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.513900042 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.514002085 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.514018059 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.514064074 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.514071941 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.514082909 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.514101982 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.514441013 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.514456987 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.514511108 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.514517069 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.517268896 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.596569061 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.597619057 CEST	49835	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.597650051 CEST	443	49835	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.598763943 CEST	443	49835	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.598833084 CEST	49835	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.601480007 CEST	49836	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.601504087 CEST	443	49836	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.602704048 CEST	443	49836	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.602791071 CEST	49836	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.603075981 CEST	49835	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.603190899 CEST	443	49835	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.604559898 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.604633093 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.604665041 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.604676008 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.604716063 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.605259895 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.605304956 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.605420113 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.605420113 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.605429888 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.605472088 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.605645895 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.605654001 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.605700970 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.605811119 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.605856895 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.605906010 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.605912924 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.606096029 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.606156111 CEST	49836	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.606281042 CEST	443	49836	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.606337070 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.606383085 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.606390953 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.606421947 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.606447935 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.606889963 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.606930017 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.606976032 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.606987953 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.607017994 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.607286930 CEST	49835	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.607304096 CEST	443	49835	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.607372046 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.607439995 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.607448101 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.607469082 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.607481956 CEST	49836	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.607492924 CEST	443	49836	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.607518911 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.607530117 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.607651949 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.607691050 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.607837915 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.607837915 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.607847929 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.609350920 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.609359026 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.610515118 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.610522985 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.615307093 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.615318060 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.616702080 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.616708040 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.617647886 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.617659092 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.618511915 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.618515968 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.618880987 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.618887901 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.619446039 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.619451046 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.619791031 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.619796991 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.621273041 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 6, 2024 00:15:03.621279001 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 6, 2024 00:15:03.650088072 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.650144100 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.650377035 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.650377035 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.650398016 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.661900997 CEST	49835	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.661912918 CEST	49836	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.692904949 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.697555065 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.697587967 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.697690964 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.697715998 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.697752953 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.697761059 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.697803974 CEST	443	49826	104.16.152.132	192.168.2.6
Oct 6, 2024 00:15:03.697850943 CEST	49826	443	192.168.2.6	104.16.152.132
Oct 6, 2024 00:15:03.697850943 CEST	49826	443	192.168.2.6	104.16.152.132

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 00:14:48.303922892 CEST	192.168.2.6	1.1.1.1	0x352d	Standard query (0)	ofinovardweb.cstrikehost.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:48.304168940 CEST	192.168.2.6	1.1.1.1	0xe12	Standard query (0)	ofinovardweb.cstrikehost.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:49.275444984 CEST	192.168.2.6	1.1.1.1	0x9586	Standard query (0)	www.dynadot.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.276103020 CEST	192.168.2.6	1.1.1.1	0x5480	Standard query (0)	www.dynadot.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:49.279417038 CEST	192.168.2.6	1.1.1.1	0x8e91	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.279788017 CEST	192.168.2.6	1.1.1.1	0x1ca9	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Oct 6, 2024 00:14:49.824343920 CEST	192.168.2.6	1.1.1.1	0x726a	Standard query (0)	ofinovardweb.cstrikehost.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.824559927 CEST	192.168.2.6	1.1.1.1	0x34d0	Standard query (0)	ofinovardweb.cstrikehost.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:49.889606953 CEST	192.168.2.6	1.1.1.1	0xfd43	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.890034914 CEST	192.168.2.6	1.1.1.1	0xb279	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:49.901361942 CEST	192.168.2.6	1.1.1.1	0x3fef	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.901590109 CEST	192.168.2.6	1.1.1.1	0x9651	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:49.977515936 CEST	192.168.2.6	1.1.1.1	0x39e2	Standard query (0)	www.dynadot.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.977741957 CEST	192.168.2.6	1.1.1.1	0xc3eb	Standard query (0)	www.dynadot.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:50.546504021 CEST	192.168.2.6	1.1.1.1	0xe72a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:50.575469971 CEST	192.168.2.6	1.1.1.1	0xf58d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:50.886976004 CEST	192.168.2.6	1.1.1.1	0x45fc	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:50.900197983 CEST	192.168.2.6	1.1.1.1	0xa2e9	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 6, 2024 00:14:51.442372084 CEST	192.168.2.6	1.1.1.1	0x152d	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:51.443337917 CEST	192.168.2.6	1.1.1.1	0x2060	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 6, 2024 00:14:51.524755001 CEST	192.168.2.6	1.1.1.1	0xedef	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:51.525058985 CEST	192.168.2.6	1.1.1.1	0xbd08	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Oct 6, 2024 00:14:51.671485901 CEST	192.168.2.6	1.1.1.1	0xa27c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:51.672559023 CEST	192.168.2.6	1.1.1.1	0x4549	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:54.606034994 CEST	192.168.2.6	1.1.1.1	0x955b	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:54.606525898 CEST	192.168.2.6	1.1.1.1	0xceb0	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 6, 2024 00:14:55.060988903 CEST	192.168.2.6	1.1.1.1	0x178e	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:55.061960936 CEST	192.168.2.6	1.1.1.1	0x6f7e	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:56.177812099 CEST	192.168.2.6	1.1.1.1	0x4e42	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:56.178050995 CEST	192.168.2.6	1.1.1.1	0xac24	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Oct 6, 2024 00:15:01.036304951 CEST	192.168.2.6	1.1.1.1	0xa0fe	Standard query (0)	www.dynadot.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:01.036581039 CEST	192.168.2.6	1.1.1.1	0x3db7	Standard query (0)	www.dynadot.com	65	IN (0x0001)	false
Oct 6, 2024 00:15:06.206804037 CEST	192.168.2.6	1.1.1.1	0x5f55	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:06.207606077 CEST	192.168.2.6	1.1.1.1	0xf192	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 6, 2024 00:15:06.210304022 CEST	192.168.2.6	1.1.1.1	0x8e5b	Standard query (0)	cdn.mouseflow.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:06.210637093 CEST	192.168.2.6	1.1.1.1	0x869d	Standard query (0)	cdn.mouseflow.com	65	IN (0x0001)	false
Oct 6, 2024 00:15:09.223001957 CEST	192.168.2.6	1.1.1.1	0x2bd7	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:09.223562002 CEST	192.168.2.6	1.1.1.1	0xb6d8	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 6, 2024 00:15:09.719111919 CEST	192.168.2.6	1.1.1.1	0x244a	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:09.719345093 CEST	192.168.2.6	1.1.1.1	0xac58	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 00:15:09.965779066 CEST	192.168.2.6	1.1.1.1	0x6560	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:09.966069937 CEST	192.168.2.6	1.1.1.1	0x7891	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 00:15:11.990818977 CEST	192.168.2.6	1.1.1.1	0x3c5	Standard query (0)	cdn.mouseflow.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:11.990959883 CEST	192.168.2.6	1.1.1.1	0xbfc7	Standard query (0)	cdn.mouseflow.com	65	IN (0x0001)	false
Oct 6, 2024 00:15:11.992189884 CEST	192.168.2.6	1.1.1.1	0x7e37	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:11.992342949 CEST	192.168.2.6	1.1.1.1	0x8889	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 6, 2024 00:15:13.804742098 CEST	192.168.2.6	1.1.1.1	0x960e	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:13.804898977 CEST	192.168.2.6	1.1.1.1	0xd1a5	Standard query (0)	widget.trustpilot.com	65	IN (0x0001)	false
Oct 6, 2024 00:15:22.272667885 CEST	192.168.2.6	1.1.1.1	0x1915	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:22.272876024 CEST	192.168.2.6	1.1.1.1	0xbdbe	Standard query (0)	widget.trustpilot.com	65	IN (0x0001)	false
Oct 6, 2024 00:15:42.387814045 CEST	192.168.2.6	1.1.1.1	0x4131	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:42.388303041 CEST	192.168.2.6	1.1.1.1	0x8ac	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 00:15:52.402317047 CEST	192.168.2.6	1.1.1.1	0x4927	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:52.402496099 CEST	192.168.2.6	1.1.1.1	0x96c	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 6, 2024 00:15:52.518778086 CEST	192.168.2.6	1.1.1.1	0xdc2e	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:52.519270897 CEST	192.168.2.6	1.1.1.1	0x5d	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 6, 2024 00:14:48.581928968 CEST	1.1.1.1	192.168.2.6	0x352d	No error (0)	ofinovardweb.cstrikehost.com		75.2.115.196	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.282779932 CEST	1.1.1.1	192.168.2.6	0x9586	No error (0)	www.dynadot.com		104.16.152.132	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.282779932 CEST	1.1.1.1	192.168.2.6	0x9586	No error (0)	www.dynadot.com		104.16.153.132	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.284786940 CEST	1.1.1.1	192.168.2.6	0x5480	No error (0)	www.dynadot.com			65	IN (0x0001)	false
Oct 6, 2024 00:14:49.286664009 CEST	1.1.1.1	192.168.2.6	0x8e91	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.286664009 CEST	1.1.1.1	192.168.2.6	0x8e91	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.286664009 CEST	1.1.1.1	192.168.2.6	0x8e91	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.286664009 CEST	1.1.1.1	192.168.2.6	0x8e91	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.897778988 CEST	1.1.1.1	192.168.2.6	0xfd43	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.898133039 CEST	1.1.1.1	192.168.2.6	0xb279	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 00:14:49.909902096 CEST	1.1.1.1	192.168.2.6	0x3fef	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.909914017 CEST	1.1.1.1	192.168.2.6	0x9651	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 00:14:49.987178087 CEST	1.1.1.1	192.168.2.6	0x39e2	No error (0)	www.dynadot.com		104.16.152.132	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.987178087 CEST	1.1.1.1	192.168.2.6	0x39e2	No error (0)	www.dynadot.com		104.16.153.132	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:49.987303019 CEST	1.1.1.1	192.168.2.6	0xc3eb	No error (0)	www.dynadot.com			65	IN (0x0001)	false
Oct 6, 2024 00:14:50.332516909 CEST	1.1.1.1	192.168.2.6	0x726a	No error (0)	ofinovardweb.cstrikehost.com		75.2.115.196	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:50.554724932 CEST	1.1.1.1	192.168.2.6	0xe72a	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:50.584203959 CEST	1.1.1.1	192.168.2.6	0xf58d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 00:14:50.895354033 CEST	1.1.1.1	192.168.2.6	0x45fc	No error (0)	syndicatedsearch.goog		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:51.451208115 CEST	1.1.1.1	192.168.2.6	0x152d	No error (0)	syndicatedsearch.goog		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:51.536812067 CEST	1.1.1.1	192.168.2.6	0xedef	No error (0)	d38psrni17bvxu.cloudfront.net		18.239.102.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:51.536812067 CEST	1.1.1.1	192.168.2.6	0xedef	No error (0)	d38psrni17bvxu.cloudfront.net		18.239.102.108	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:51.536812067 CEST	1.1.1.1	192.168.2.6	0xedef	No error (0)	d38psrni17bvxu.cloudfront.net		18.239.102.197	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:51.536812067 CEST	1.1.1.1	192.168.2.6	0xedef	No error (0)	d38psrni17bvxu.cloudfront.net		18.239.102.57	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:51.679797888 CEST	1.1.1.1	192.168.2.6	0xa27c	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:51.680475950 CEST	1.1.1.1	192.168.2.6	0x4549	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 00:14:54.613121986 CEST	1.1.1.1	192.168.2.6	0x955b	No error (0)	syndicatedsearch.goog		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:55.067694902 CEST	1.1.1.1	192.168.2.6	0x178e	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:55.067694902 CEST	1.1.1.1	192.168.2.6	0x178e	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.97	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:55.068871975 CEST	1.1.1.1	192.168.2.6	0x6f7e	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:56.342041969 CEST	1.1.1.1	192.168.2.6	0x4e42	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:56.342041969 CEST	1.1.1.1	192.168.2.6	0x4e42	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.225	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:56.353763103 CEST	1.1.1.1	192.168.2.6	0xac24	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:58.769288063 CEST	1.1.1.1	192.168.2.6	0xb7a9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:58.769288063 CEST	1.1.1.1	192.168.2.6	0xb7a9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:59.779398918 CEST	1.1.1.1	192.168.2.6	0x52bd	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:59.779398918 CEST	1.1.1.1	192.168.2.6	0x52bd	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:01.044866085 CEST	1.1.1.1	192.168.2.6	0xa0fe	No error (0)	www.dynadot.com		104.16.152.132	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:01.044866085 CEST	1.1.1.1	192.168.2.6	0xa0fe	No error (0)	www.dynadot.com		104.16.153.132	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:01.046632051 CEST	1.1.1.1	192.168.2.6	0x3db7	No error (0)	www.dynadot.com			65	IN (0x0001)	false
Oct 6, 2024 00:15:06.216202974 CEST	1.1.1.1	192.168.2.6	0x5f55	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:15:06.216202974 CEST	1.1.1.1	192.168.2.6	0x5f55	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:06.217411995 CEST	1.1.1.1	192.168.2.6	0xf192	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:15:06.217411995 CEST	1.1.1.1	192.168.2.6	0xf192	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 6, 2024 00:15:06.217411995 CEST	1.1.1.1	192.168.2.6	0xf192	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 6, 2024 00:15:06.220101118 CEST	1.1.1.1	192.168.2.6	0x8e5b	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:15:06.220690966 CEST	1.1.1.1	192.168.2.6	0x869d	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:15:09.232187986 CEST	1.1.1.1	192.168.2.6	0x2bd7	No error (0)	analytics.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:09.232589960 CEST	1.1.1.1	192.168.2.6	0xb6d8	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:15:09.727351904 CEST	1.1.1.1	192.168.2.6	0x244a	No error (0)	stats.g.doubleclick.net		66.102.1.155	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:09.727351904 CEST	1.1.1.1	192.168.2.6	0x244a	No error (0)	stats.g.doubleclick.net		66.102.1.154	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:09.727351904 CEST	1.1.1.1	192.168.2.6	0x244a	No error (0)	stats.g.doubleclick.net		66.102.1.157	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:09.727351904 CEST	1.1.1.1	192.168.2.6	0x244a	No error (0)	stats.g.doubleclick.net		66.102.1.156	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:09.974087954 CEST	1.1.1.1	192.168.2.6	0x6560	No error (0)	td.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:11.998776913 CEST	1.1.1.1	192.168.2.6	0xbfc7	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:15:11.998905897 CEST	1.1.1.1	192.168.2.6	0x3c5	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:15:11.998940945 CEST	1.1.1.1	192.168.2.6	0x7e37	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:15:11.998940945 CEST	1.1.1.1	192.168.2.6	0x7e37	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:11.999135971 CEST	1.1.1.1	192.168.2.6	0x8889	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:15:11.999135971 CEST	1.1.1.1	192.168.2.6	0x8889	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 6, 2024 00:15:11.999135971 CEST	1.1.1.1	192.168.2.6	0x8889	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 6, 2024 00:15:13.811660051 CEST	1.1.1.1	192.168.2.6	0x960e	No error (0)	widget.trustpilot.com		54.192.137.4	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:13.811660051 CEST	1.1.1.1	192.168.2.6	0x960e	No error (0)	widget.trustpilot.com		54.192.137.11	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:13.811660051 CEST	1.1.1.1	192.168.2.6	0x960e	No error (0)	widget.trustpilot.com		54.192.137.125	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:13.811660051 CEST	1.1.1.1	192.168.2.6	0x960e	No error (0)	widget.trustpilot.com		54.192.137.49	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:22.279736996 CEST	1.1.1.1	192.168.2.6	0x1915	No error (0)	widget.trustpilot.com		52.222.236.94	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:22.279736996 CEST	1.1.1.1	192.168.2.6	0x1915	No error (0)	widget.trustpilot.com		52.222.236.71	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:22.279736996 CEST	1.1.1.1	192.168.2.6	0x1915	No error (0)	widget.trustpilot.com		52.222.236.107	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:22.279736996 CEST	1.1.1.1	192.168.2.6	0x1915	No error (0)	widget.trustpilot.com		52.222.236.60	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:42.394992113 CEST	1.1.1.1	192.168.2.6	0x8ac	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 00:15:42.395109892 CEST	1.1.1.1	192.168.2.6	0x4131	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:43.240825891 CEST	1.1.1.1	192.168.2.6	0x77cf	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:43.240825891 CEST	1.1.1.1	192.168.2.6	0x77cf	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:52.409009933 CEST	1.1.1.1	192.168.2.6	0x4927	No error (0)	syndicatedsearch.goog		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:52.525473118 CEST	1.1.1.1	192.168.2.6	0xdc2e	No error (0)	syndicatedsearch.goog		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:59.584326982 CEST	1.1.1.1	192.168.2.6	0x6daf	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:59.584326982 CEST	1.1.1.1	192.168.2.6	0x6daf	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49717	75.2.115.196	80	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 6, 2024 00:14:48.602791071 CEST	443	OUT	GET / HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 6, 2024 00:14:49.223162889 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:14:49 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_gIPEqQ5TYa13gQ68lENsetx1yc/0Nn2KZU09H426DtjQgYyiVySdvbPgY7t45yciH7/W9Quyws3FW9mJLlRDFQ== X-Domain: cstrikehost.com X-Pcrew-Blocked-Reason: X-Pcrew-Ip-Organization: CenturyLink X-Subdomain: ofinovardweb Transfer-Encoding: chunked Data Raw: 63 32 36 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5b 79 77 da c8 96 ff fb f9 53 54 c8 79 01 4f b3 88 cd 0b 36 ce c3 c6 89 71 07 bc e1 d8 38 27 93 23 a4 02 04 42 a2 25 61 c0 fd fc dd e7 77 ab 4a 42 60 9c 4e de e9 9e 3e 73 c6 4e 8c 54 cb bd b7 6e dd bd 8a c3 37 f5 8b 93 76 e7 f2 94 0d 82 b1 7d b4 75 48 1f cc d4 03 3d a3 9b 5d db 35 46 23 be a8 26 9a 1f 66 b3 fa 55 e7 fc 57 f7 a1 31 78 34 5a b5 ab d3 e3 e3 ab 5a fd 66 56 9b dd d4 ce 8f 6b 9f 7e 9b d6 3f 9c b6 ef af 1d ed cc d3 ca bd db cb dd d3 f3 f6 ee ee bc e3 5c 8e af bb 93 e6 a2 f4 38 da fb b5 63 9d 39 a3 d6 84 9b ce f0 a2 d6 3a 37 f4 fb fa bd f1 eb d5 79 4b 73 ee 7f 7d 38 ff b4 db 36 ac f3 fa 5e cd 3d bb ff 35 5f de 3b a9 cd 4e 6b b5 ab 6a f5 5b bf 71 79 fa db 55 b9 dd d1 f3 c5 fe d5 ce 9e 7d da f2 79 30 cf 2f 8c 9c d6 72 0a bf 3e dc 6a fb 67 a5 c2 4e 3d 18 5e f5 3b 0b eb f3 e2 c6 7c ec 5e f6 3b bb 41 a9 bc 30 ac b3 dd dc dd fe d5 74 31 f3 8b 1f ee f6 c7 e7 9f ec eb fa 07 00 4e b0 f9 d8 76 fc 6a 62 10 04 93 4a 2e 37 9b cd b2 b3 62 d6 f5 fa b9 fc fe [TRUNCATED] Data Ascii: c26[ywSTyO6q8'#B%awJB`N>sNTn7v}uH=]5F#&fUW1x4ZZfVk~?\8c9:7yKs}86^=5_;Nkj[qyU}y0/r>jgN=^;\|^;A0t1NvjbJ.7b~nNH0[ww!G[?c`\0c5q
Oct 6, 2024 00:14:49.223192930 CEST	224	IN	Data Raw: e2 3a 01 77 82 4c 7b 31 e1 09 66 c8 b7 6a 22 e0 f3 20 47 90 0e 98 31 d0 3d 50 5e 9d 06 bd cc 5e 22 17 07 e4 e8 63 5e 4d 3c 5a 7c 36 71 bd 20 36 7d 66 99 c1 a0 6a f2 47 cb e0 19 f1 92 66 96 63 05 96 6e 67 7c 43 b7 79 35 9f 66 fe c0 b3 9c 51 26 70 Data Ascii: :wL{1fj" G1=P^^"c^M<Z\|6q 6}fjGfcng\|Cy5fQ&p3=+:n;~Y#>p kl^MJJituccVS\,M\|4kyXvA.1sp}f3.lCon^
Oct 6, 2024 00:14:49.223203897 CEST	1236	IN	Data Raw: 0b e2 d5 b4 fc 89 ad 2f 2a 58 b6 6d 39 3c 23 24 f3 60 eb 79 6b 2b 46 64 fe 4f 22 32 ff 57 12 79 f6 27 11 79 f6 e7 13 e9 5b 01 07 77 47 44 e1 44 37 4d cb e9 67 3c b5 0d 3b b4 0d c4 6e 9f db 36 f7 ae f5 00 bd 3e d3 2b 34 21 fd b2 f9 d1 22 68 e6 86 Data Ascii: /Xm9<#$`yk+FdO"2Wy'y[wGDD7Mg<;n6>+4!"hXpdLnNp1\|0Duo9irZDZk#,jh&_@"PEP2zk^(V@'%yi)3d2nZS$}i!4}
Oct 6, 2024 00:14:49.223242998 CEST	1236	IN	Data Raw: 07 4d 3f 39 1e 5d de 9c b7 30 6e a6 d7 1b 9a 89 be 9b fa f1 0e e8 50 74 9f 4f bb 85 b2 dd b0 f6 7e b9 3c 3b 1e 60 7e ff 01 b8 da ed db e9 45 bd df 6f 9d 94 e6 cd d1 6c 8e 1a 41 b1 65 d5 e6 cd f1 2c 68 2d 4a a5 8b 93 5a f1 d3 b0 5f 6a 63 4c 73 78 Data Ascii: M?9]0nPtO~<;`~EolAe,h-JZ_jcLsx7>n}ph~\|DJ0'CZf5i=2zx?{md+MO`%]wAXT-R;]/[C+WEJBS6`i^dbjZZ.V2M"#SZ
Oct 6, 2024 00:14:49.223261118 CEST	1236	IN	Data Raw: a2 dc c5 1f 11 69 39 52 92 17 81 c2 96 77 8b 85 dd fd f8 42 85 5c c4 c7 b5 e1 02 81 36 49 39 62 32 ce 6e c4 0f 42 a3 61 2f be 6b 06 0d 0a 63 31 35 0d 0a 8e 6c 1e 30 cb af 99 53 78 64 b1 f7 07 a4 af e2 87 ba 22 95 6e c1 c1 f8 d5 2f 5f 57 bb a7 8e Data Ascii: i9RwB\6I9b2nBa/kc15l0Sxd"n/_W=-6Q&mcqQ?-WIb\|:k=zkngB5n[p$?[w\|5vky7'c54fA=Bdf@_D5,N(s&{8}0yf\|S
Oct 6, 2024 00:14:49.223274946 CEST	672	IN	Data Raw: 62 39 58 c8 8b 36 6c 4f bc 8d 26 bf 04 19 ce fe 63 69 ff 4f d9 10 51 fe 8e 28 78 4d 7a e3 94 2a 9a 7e 56 93 b6 85 80 7d c9 e3 f4 22 bf ff 35 8b 1c 9d cf 2f 7a 29 e4 82 3e 6f 40 f5 5e a2 d8 26 29 c8 e4 49 40 36 b8 3b e5 cd c0 da 0d 9d 42 62 05 42 Data Ascii: b9X6lO&ciOQ(xMz~V}"5/z)>o@^&)I@6;BbBJ2n~J(yM`D:u}BEX<I5iac[1uK[mT=$YxJY1b5BRFNwS8{mN<9ZP
Oct 6, 2024 00:14:49.223284960 CEST	1236	IN	Data Raw: 15 26 a2 28 9d ee 40 71 6f e8 c3 8f 1c 21 18 8c 68 97 ab 15 fc 27 49 a0 93 cd 2a 8e 0c 55 42 84 2b fb 38 92 38 b5 71 df 1e a1 65 12 bd b8 10 81 bf 1b 93 24 79 ea 8e a2 53 d4 2f 4e 84 00 2f 89 0b 74 f1 76 79 3e b4 da e1 19 78 07 ed c2 5e 7d 93 d1 Data Ascii: &(@qo!h'I*UB+88qe$yS/N/tvy>x^}vF]Nue) D<!3f%80qc;V6{i_cS{j!jN(:].tdLm6=%IGL<M-P
Oct 6, 2024 00:14:49.223295927 CEST	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0
Oct 6, 2024 00:14:49.355830908 CEST	514	OUT	GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjQ4OS4wODgyOmEwNzlhMjRjNWI5ZWUwN2YzNmI3NTcyMDcxYjkzZWUwNGJlMDkzNThmNWZhMmJkYWRkMzIxZTNkYzRmMjVmMzc6NjcwMWJhNTkxNTg2MA%3D%3D HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ofinovardweb.cstrikehost.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 6, 2024 00:14:49.583126068 CEST	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:14:49 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 6, 2024 00:14:49.631901979 CEST	392	OUT	GET /ls.php?t=6701ba59&token=20a9dcb4f1b840cc657e23ba927e43c8236a9f0c HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ofinovardweb.cstrikehost.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 6, 2024 00:14:49.867429972 CEST	856	IN	HTTP/1.1 201 Created Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Charset: utf-8 Content-Type: text/javascript;charset=UTF-8 Date: Sat, 05 Oct 2024 22:14:49 GMT Server: Caddy Server: nginx X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_asQ0HxBhlEeDGQ0SsL/X5ys9Za65nLRYZs1bhuzRbYyCNST+4sgwIXHqWyv87YgQB160XqNo0LiLch1Nl9ibCg== Transfer-Encoding: chunked Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Oct 6, 2024 00:14:54.655241966 CEST	633	OUT	GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjQ4OS4wODgyOmEwNzlhMjRjNWI5ZWUwN2YzNmI3NTcyMDcxYjkzZWUwNGJlMDkzNThmNWZhMmJkYWRkMzIxZTNkYzRmMjVmMzc6NjcwMWJhNTkxNTg2MA%3D%3D HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ofinovardweb.cstrikehost.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:14:55.011821032 CEST	601	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:14:54 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 6, 2024 00:14:55.059737921 CEST	500	OUT	GET /favicon.ico HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ofinovardweb.cstrikehost.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:14:55.281657934 CEST	221	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 0 Content-Type: image/x-icon Date: Sat, 05 Oct 2024 22:14:55 GMT Etag: "66e18132-0" Last-Modified: Wed, 11 Sep 2024 11:38:26 GMT Server: Caddy Server: nginx
Oct 6, 2024 00:15:39.555016994 CEST	1135	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Signal+Relief+Patch&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&pcsa=false&nb=0 HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:39.988744020 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:39 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_LPWWbQZmm1SBXe59oL6Z645CgRnrpf5tewRKGd55y7kgElVZZ5et6MFNY310TunKVNOynlRviVw0iIiEfKm/4Q== X-Domain: cstrikehost.com X-Pcrew-Blocked-Reason: X-Pcrew-Ip-Organization: CenturyLink X-Subdomain: ofinovardweb Transfer-Encoding: chunked Data Raw: 37 37 36 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5b 69 77 da 48 97 fe fc fa 57 54 c8 79 0d 9e 66 91 58 6c bc e0 0c 36 5e 13 20 76 f0 82 73 32 39 42 2a 40 20 24 5a 12 06 dc af ff fb 3c b7 4a 12 62 71 ba d3 a7 7b fa c3 d8 89 91 6a b9 75 f7 7b eb 56 71 f4 ae d6 3c 6d b5 3f 9f b1 be 3f b2 8e b7 8e e8 83 19 9a af 65 34 a3 63 39 fa 70 c8 e7 95 44 fd 7c 3a ad dd b4 af 3f 3a 4f 57 fd 67 bd 51 bd 39 3b 39 b9 a9 d6 be 4c ab d3 2f d5 eb 93 ea a7 5f 27 b5 f3 b3 d6 e3 ad ad 5c ba 4a a9 7b f7 79 ef ec ba b5 b7 37 6b db 9f 47 b7 9d 71 7d 5e 7c 1e 96 3f b6 cd 4b 7b d8 18 73 c3 1e 34 ab 8d 6b 5d 7b ac 3d ea 1f 6f ae 1b 8a fd f8 f1 e9 fa d3 5e 4b 37 af 6b e5 aa 73 f9 f8 51 2d 95 4f ab d3 b3 6a f5 a6 52 f9 fe e9 f3 c3 43 e7 e6 69 34 52 bf 9c 3c f2 d2 be f3 69 f7 69 b7 58 3a ed dd da ee b8 5b f2 f9 f4 f6 e3 85 51 2a cd f7 86 bd 33 eb fe e9 a9 c4 fd dd fa 79 a3 5d 50 95 d6 c4 fe 78 df 68 ce 6d eb f6 d9 bc 9f 2a e6 95 79 d6 fd 38 ca 15 01 38 c1 66 23 cb f6 2a 89 be ef 8f 0f 72 b9 e9 74 9a 9d 16 b2 8e db cb a9 fb fb fb b9 [TRUNCATED] Data Ascii: 776[iwHWTyfXl6^ vs29B@ $Z<Jbq{ju{Vq<m??e4c9pD\|:?:OWgQ9;9L/_'\J{y7kGq}^\|?K{s4k]{=o^K7ksQ-OjRCi4R<iiX:[Q3y]Pxhmy88f#rt#,UNfo1q8c
Oct 6, 2024 00:15:39.988765001 CEST	1236	IN	Data Raw: dc f6 33 ad f9 98 27 98 2e df 2a 09 9f cf fc 1c 41 3a 64 7a 5f 73 3d ee 57 26 7e 37 53 4e e4 e2 80 6c 6d c4 2b 89 67 93 4f c7 8e eb c7 a6 4f 4d c3 ef 57 0c fe 6c ea 3c 23 5e d2 cc b4 4d df d4 ac 8c a7 6b 16 af a8 69 e6 f5 5d d3 1e 66 7c 27 d3 35 Data Ascii: 3'.*A:dz_s=W&~7SNlm+gOOMWl<#^Mki]f\|'5D}9}3:fAg#nZ%.f5~\|Uo[h:8`J%s9P{m{$[ =ks?{98M0\|5`w%h;`ja<[x5Lolin6<z
Oct 6, 2024 00:15:39.988778114 CEST	306	IN	Data Raw: 5a 3c e0 80 48 38 32 48 fb 46 48 9c e2 69 47 e4 5b 59 98 3d 10 84 78 bc 15 d6 40 cb bd 86 6c b7 9c 9e 13 30 3d 5c 2a 48 02 69 ee 12 4e 11 13 16 e6 08 ef f2 3c 0d d1 17 01 8a 51 b2 b7 b4 82 d4 82 28 a1 5e 16 b7 76 b0 c9 dd b2 f7 8a 22 54 9f d0 0c Data Ascii: Z<H82HFHiG[Y=x@l0=\HiN<Q(^v"TVWJX\|<a%Bcl0\|;Wdsc;J").GR <6;DKuDYoF)ai1T/;]-1xbg`.:{{U!i?]Ifa[z.!
Oct 6, 2024 00:15:39.988846064 CEST	1236	IN	Data Raw: 66 36 37 0d 0a a6 c7 0c 49 13 9e e0 67 4c 0f 99 86 a4 ec 67 79 76 7c d4 39 8e 71 e3 28 d7 39 3e 02 02 59 f6 c0 3b 44 28 02 21 9c 34 18 e3 38 76 f6 28 37 46 55 25 07 77 78 bc b5 25 bc 62 e0 05 c3 f0 86 a2 8b 14 1d 30 27 a7 b9 dc 9d ff 71 77 21 d6 Data Ascii: f67IgLgyv\|9q(9>Y;D(!48v(7FU%wx%b0'qw!MPd^XN%^8A'@9Dmxc#ASZn=(=EveZn9vh"j9"Yg9H);+iSg1QTJY2xS
Oct 6, 2024 00:15:40.054047108 CEST	1206	OUT	GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjUzOS44NTA5Ojk1OTA5Zjc0MGUyNjRmMTllNzA5NTAzYzRhMDJiOGRlM2MzZjA1NzZjNjM1MWU2OTRiNWU2NzM3NTFjNjE4OWY6NjcwMWJhOGJjZmJjYw%3D%3D HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Signal+Relief+Patch&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:40.284754038 CEST	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:40 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 6, 2024 00:15:40.585447073 CEST	1084	OUT	GET /ls.php?t=6701ba8b&token=576733c2046d1d1966bdbc5c07b84aba5c830319 HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Signal+Relief+Patch&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:40.892986059 CEST	856	IN	HTTP/1.1 201 Created Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Charset: utf-8 Content-Type: text/javascript;charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:40 GMT Server: Caddy Server: nginx X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_mXCbDntpZ7FtcXb/X5mPFbSvEm/cfD6EGrYDMbT1zZSYS1mCS2x/JvDevFqD8NNdlok+n53j/VM4BNbKkNROaw== Transfer-Encoding: chunked Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Oct 6, 2024 00:15:42.103434086 CEST	1225	OUT	GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjUzOS44NTA5Ojk1OTA5Zjc0MGUyNjRmMTllNzA5NTAzYzRhMDJiOGRlM2MzZjA1NzZjNjM1MWU2OTRiNWU2NzM3NTFjNjE4OWY6NjcwMWJhOGJjZmJjYw%3D%3D HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Signal+Relief+Patch&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj7BUvmIYyI18qX3NS-PFFdnyBfcnqJK91yZofikf83fPEMLADG0-pfwfRNXe0VP9OzljWLvFJTDAkc2_4g3kkm44PEZQYlFLWGKg9iZF-1HtWwMN64Yzw-bpXIANspefstMntuzYGQsmHwQE&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:42.335114002 CEST	601	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:42 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 6, 2024 00:15:46.795356035 CEST	1140	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Casino+Online+Real+Money&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p&pcsa=false&nb=0 HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:47.049410105 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:46 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_OehJS2Y1GmnaRtqCPLY+enTO+EYEo/EUiiu899KgnRqNg1F1QhdItvss7T9Udy3v6/C5OVKZQp0Lo0G3Fvbkdw== X-Domain: cstrikehost.com X-Pcrew-Blocked-Reason: X-Pcrew-Ip-Organization: CenturyLink X-Subdomain: ofinovardweb Transfer-Encoding: chunked Data Raw: 63 32 36 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5b 7b 73 da c8 96 ff fb fa 53 74 48 5d 0b 6f 40 08 30 36 7e c8 b9 d8 60 c7 4e c0 71 82 93 e0 54 36 25 a4 06 04 42 62 24 61 c0 73 fd dd f7 77 ba 25 21 30 ce 4c 6e 4d 76 6a 6b ed c4 48 fd 38 af 3e af 3e dd 1c bf a8 5f 9f b5 3b ef 1b 6c 10 8e 9d 93 ad 63 fa 60 96 11 1a 79 c3 ea 3a 9e 39 1a f1 85 9e 69 9e cf 66 f5 9b ce d5 5b ef ee 72 70 6f b6 6a 37 8d d3 d3 9b 5a fd e3 ac 36 fb 58 bb 3a ad bd fb 6d 5a 3f 6f b4 bf 7c 70 b5 37 be 56 e9 dd be df 6f 5c b5 f7 f7 e7 1d f7 fd f8 43 77 d2 5c ec de 8f aa 6f 3b f6 1b 77 d4 9a 70 cb 1d 5e d7 5a 57 a6 f1 a5 fe c5 7c 7b 73 d5 d2 dc 2f 6f ef ae de ed b7 4d fb aa 5e ad 79 6f be bc 2d 56 aa 67 b5 59 a3 56 bb d1 f5 ef d7 7c 70 f5 b1 d4 29 5e 8c 5d e3 43 f8 db d9 fb 77 9d 57 dc 6d 5f bf 6a 74 1a 5e a1 71 6b db d3 ea c1 c1 db be fb e1 b7 56 bf 78 5e bc 19 58 97 e1 7d 10 ec b7 0f 6e ad 45 f9 7e af 70 56 b9 fe f4 f6 ee 66 a2 bd f3 b4 8b f2 f9 7d 77 64 cd 74 3d c3 e6 63 c7 0d f4 cc 20 0c 27 87 85 c2 6c 36 53 67 65 d5 f3 fb 85 [TRUNCATED] Data Ascii: c26[{sStH]o@06~`NqT6%Bb$asw%!0LnMvjkH8>>_;lc`y:9if[rpoj7Z6X:mZ?o\|p7Vo\Cw\o;wp^ZW\|{s/oM^yo-VgYV\|p)^]CwWm_jt^qkVx^X}nE~pVf}wdt=c 'l6SgeAaN0pz7-1.oS^
Oct 6, 2024 00:15:47.274435043 CEST	1211	OUT	GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjU0Ni45MjQ5OmE2MjJkOTlmZjE1YjEwZTQ3NDM4ZjI4NDM4ZThjNDcyNWM4OWFlZmFiYTY5NDZkYTczZTk3OGQ3NTA1ZTczOTc6NjcwMWJhOTJlMWNjNw%3D%3D HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Casino+Online+Real+Money&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:47.624742985 CEST	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:47 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 6, 2024 00:15:47.764519930 CEST	1089	OUT	GET /ls.php?t=6701ba92&token=d0780dbd51096fc9cfd139f58a8cb808d162be33 HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Casino+Online+Real+Money&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:48.010323048 CEST	856	IN	HTTP/1.1 201 Created Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Charset: utf-8 Content-Type: text/javascript;charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:47 GMT Server: Caddy Server: nginx X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_CbQYhBR2seWIX/u9wdz/8OFnvAwId5+B4YKBNM1YTH21HPwrXI4GyV7tix1szycO644htcpzGn0SXhx3iPeSuA== Transfer-Encoding: chunked Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Oct 6, 2024 00:15:49.931252003 CEST	1230	OUT	GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjU0Ni45MjQ5OmE2MjJkOTlmZjE1YjEwZTQ3NDM4ZjI4NDM4ZThjNDcyNWM4OWFlZmFiYTY5NDZkYTczZTk3OGQ3NTA1ZTczOTc6NjcwMWJhOTJlMWNjNw%3D%3D HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Casino+Online+Real+Money&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03EnABlLqpj-QJYhydN_4QWFwpz8nbEV9vp7Sozl8B2wbRG13XUldi6NuuXXuUKejsyq3s0li3NsPy8OC2PXfLa--WeGGA7lKSHbqRgzxo3eyd_RlxhcNbpByJivTCW3Jnla9MtfjKOxd10k3DZiXZrY9p&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:50.285831928 CEST	601	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:50 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 6, 2024 00:15:51.720901012 CEST	1131	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Halo+Smart+Fence&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&pcsa=false&nb=0 HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:51.986712933 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:51 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_C37vidHrt4mkP85tGha3hAmQGzAfdSRaFdJVu/0+KbZyjBKV/Vw+76rFHUPCByjzOlUS2T6QhDEFdFpw73WG1w== X-Domain: cstrikehost.com X-Pcrew-Blocked-Reason: X-Pcrew-Ip-Organization: CenturyLink X-Subdomain: ofinovardweb Transfer-Encoding: chunked Data Raw: 37 37 36 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5b 79 73 da 48 9b ff fb f5 a7 e8 90 5a 83 37 20 c4 65 e3 43 ce 62 e3 23 4e c0 76 8c ed d8 a9 6c 4a 48 0d 08 84 c4 48 c2 80 e7 f5 77 df df d3 2d 09 71 38 93 4c cd ec d4 d6 da 65 23 f5 f1 5c fd 5c fd 74 73 f0 a6 7e 79 dc 7a b8 3a 61 bd 60 68 1f 6e 1c d0 07 33 f5 40 cf e9 66 db 76 8d c1 80 cf b4 54 e3 74 32 a9 5f 3f 5c 7c 74 1f 3f f4 9e 8c 66 ed fa e4 e8 e8 ba 56 bf 99 d4 26 37 b5 8b a3 da a7 df c6 f5 d3 93 d6 97 cf 8e 7a ee a9 95 ce ed d5 ce c9 45 6b 67 67 fa e0 5c 0d 3f b7 47 8d 59 f9 69 50 fd f8 60 9d 3b 83 e6 88 9b 4e ff b2 d6 bc 30 f4 2f f5 2f c6 c7 eb 8b a6 ea 7c f9 f8 78 f1 69 a7 65 58 17 f5 6a cd 3d ff f2 b1 50 a9 1e d7 26 27 b5 da b5 a6 7d 3f 2e ed 3c 59 e6 b9 17 94 87 83 ab 6a 25 38 eb e9 a5 5e 6d 78 7d f6 5c eb 98 37 9f f5 53 f3 e2 6e 9c 57 df 7d 6c 3f ce fa 47 1f ef f2 77 93 77 3b db de e9 f9 ed d5 f1 d1 ac ff 7c 69 df de 14 5b db d7 bd fa c9 a9 79 3a 9a ec 94 ee cf 0a 13 4d 4b b1 e9 d0 76 7c 2d d5 0b 82 d1 5e 3e 3f 99 4c 94 49 49 71 bd 6e be [TRUNCATED] Data Ascii: 776[ysHZ7 eCb#NvlJHHw-q8Le#\\ts~yz:a`hn3@fvTt2_?\\|t?fV&7zEkgg\?GYiP`;N0//\|xieXj=P&'}?.<Yj%8^mx}\7SnW}l?Gww;\|i[y:MKv\|-^>?LIIqn<RN$up`F9z
Oct 6, 2024 00:15:52.035809040 CEST	1194	OUT	GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjU1MS44NTU6MGI4ZWYyOTcxNDc2ZGE0NDc5MjNiODZiOTRhOWUxNDU3ZWQ0MDkxMjg1ZWMwMDgxNThmOTNlYzFmNDljMjRiNTo2NzAxYmE5N2QwYzAz HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Halo+Smart+Fence&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:52.265786886 CEST	594	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:52 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a Data Ascii: 14
Oct 6, 2024 00:15:52.396599054 CEST	1080	OUT	GET /ls.php?t=6701ba97&token=5e5103d4fe9070980f0937520d54ca580c1fb183 HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Halo+Smart+Fence&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:52.753911972 CEST	856	IN	HTTP/1.1 201 Created Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Charset: utf-8 Content-Type: text/javascript;charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:52 GMT Server: Caddy Server: nginx X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_PYpoY08m+5hZJhXQy7pXn//LDYGOfLN5Nx8VlXHtCBYZVvW74oDVvTtaXFMPpN1+zRQicDK/jG3fc+Pmb+/WnA== Transfer-Encoding: chunked Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Oct 6, 2024 00:15:53.938201904 CEST	1213	OUT	GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjU1MS44NTU6MGI4ZWYyOTcxNDc2ZGE0NDc5MjNiODZiOTRhOWUxNDU3ZWQ0MDkxMjg1ZWMwMDgxNThmOTNlYzFmNDljMjRiNTo2NzAxYmE5N2QwYzAz HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Halo+Smart+Fence&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03Em8BlLqpjxgYHCoZUG2d2N75cy7Bwer6InTv9D2nbOzz4fyj3-iyNPB_GD-wPcS71lrp2-kc5GP44AjfBC-XPU0P6n-5ToSU4LIf1pZQ6vvsturXjmm4X3TPeSla2hEbo3kQyjGlBYqZCsO8bvVu3Io&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:54.173805952 CEST	601	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:54 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49727	18.66.121.138	80	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 6, 2024 00:14:49.305980921 CEST	441	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ofinovardweb.cstrikehost.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 6, 2024 00:14:49.933079004 CEST	442	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Sat, 05 Oct 2024 11:04:53 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 598a1f878f2efc16baaf47787ffe82d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: aYcgMYKKF1frNiFE12GgScZBf7TEZNlBHcjbSOqI9LL0_TSrKRxsLQ== Age: 40196
Oct 6, 2024 00:14:49.933178902 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Oct 6, 2024 00:14:49.933192015 CEST	224	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q
Oct 6, 2024 00:14:49.933206081 CEST	1236	IN	Data Raw: 7e b2 47 16 ee f0 4e 44 24 86 f6 90 b8 c3 3b 11 91 10 da c3 e2 0e ef 44 44 22 68 0f 8d 3b bc 13 11 09 a0 3d 3c ee f0 4e 44 94 9d f6 18 b8 c3 3b 11 51 a3 22 38 1c 05 77 78 27 22 ca 4a 7b 2c dc e1 9d 88 28 23 ed f1 70 87 77 22 a2 6c b4 c7 c4 1d de Data Ascii: ~GND$;DD"h;=<ND;Q"8wx'"J{,(#pw"l2wx'"B{l(qw"wx'"JJ{*(!pw"d NDnwx'"h7;MD&qw"2+;MD&qw"v;A
Oct 6, 2024 00:14:49.933273077 CEST	1236	IN	Data Raw: d9 70 8f c4 3b b8 57 c4 db 7b c4 31 99 7c b8 e7 a2 3d 23 ee 51 78 07 f7 aa b8 ac 4a 7d 71 2d 35 09 ee bb bf b8 2d 9f b0 19 71 8f c0 3b b8 57 c6 81 77 e2 bb 3d 03 ee bb 77 9e c8 e9 6b 56 dc 83 f3 0e ee 95 bd 0b 66 b4 be 77 59 15 d1 71 cf 4c 7b 76 Data Ascii: p;W{1\|=#QxJ}q-5-q;Ww=wkVfwYqL{vU)~{v}7Gw=-h{{1F,E.`{_s1W&Bh{ s.vA=hn5wQS;}mwbNI(.v;S
Oct 6, 2024 00:14:49.933284998 CEST	1236	IN	Data Raw: ab d7 99 71 8f c0 7b 2d da cd e2 ce fb 1d 24 ab 4f 4f 16 8b 7b 97 f7 4b 1a 68 8f 85 7b 60 de 6b d2 6e 17 77 0e bc 93 a4 6e 9f 2c 19 f7 d0 bc 47 a2 3d 1e ee 1d de 7f 95 9a 76 c3 b8 73 24 92 e4 f4 ce 64 e1 b8 ef 08 f8 1a 5f 34 da 63 e2 7e f0 e0 37 Data Ascii: q{-$OO{Kh{`knwn,G=vs$d_4c~7v;aCH{\v;$=*qoGLpo{d#?+l19G=oipq=ipv~;$!;wP>?xApo7
Oct 6, 2024 00:14:49.933300018 CEST	672	IN	Data Raw: 20 53 1f f7 0e ef df 7f 4b 26 ed 3d de ff c4 32 ee 5c 4b 25 15 5d b0 8c 7b 26 da 6b bd c6 37 82 f6 91 b8 8f 3c f8 9e 8f f6 aa 91 91 13 d8 4e 84 ee 81 70 cf 48 fb c8 cd f7 91 b4 d7 c0 7d d8 c9 c8 c3 79 69 ef e7 dd 0e ee 5c 4b 25 35 5d 67 13 f7 dc Data Ascii: SK&=2\K%]{&k7<NpH}yi\K%5]gF]>&O`;2\|;l'BK: W-q:X{k5'#7aikg#6pg)v}dZcR;
Oct 6, 2024 00:14:49.933351994 CEST	1236	IN	Data Raw: c2 3d 01 ef de b4 77 fb e0 cc 48 dc 5b d1 1e 9d f7 e1 b4 6b c2 1d dd a9 98 b6 db c0 3d 32 ef ad 68 af e4 7d 3d ee 67 da d2 de e3 fd ed 4c b4 ab c2 9d 7d 77 c2 76 65 b8 77 78 3f 2e 95 f6 0a de d7 e2 7e e6 83 73 61 5a 78 3b 0b ed aa 70 e7 db 9d d8 Data Ascii: =wH[k=2h}=gL}wvewx?.~saZx;pQO{wt'lW{w7dwt'l{`w]N}.=vq{{KiW;d->;qbfv=*=
Oct 6, 2024 00:14:49.933362961 CEST	1116	IN	Data Raw: bf e7 31 94 f6 11 b8 77 79 3f 2b 8f f6 c1 bc cf 61 3b 11 ba 07 c5 3d 31 ed b5 79 1f 41 fb 48 dc 6b f1 9e 9e f6 41 bc 2b c0 9d 91 03 c4 be bb 22 dc 33 d0 5e 8b f7 91 b4 d7 c0 7d 24 ef e3 fb 73 d5 cf bb 7c dc b7 b1 c6 a9 d4 6e d4 87 7b 26 da 47 f2 Data Ascii: 1wy?+a;=1yAHkA+"3^}$s\|n{&G^Z*rSi{->.w)6W~v>DwW~v6q>Dw)f]ky;H8_]?$wFzQ6h:S
Oct 6, 2024 00:14:49.933376074 CEST	1236	IN	Data Raw: b3 e0 3e 98 f7 96 b4 cb c4 1d dd 89 2a 7a 73 d1 1c ee 03 79 cf 41 7b 26 dc ab 79 6f 4d bb 50 dc d1 9d 48 85 ed ed 71 af e4 3d 0f ed d9 70 ef e7 3d 00 ed 52 71 47 77 a2 0d c9 5c a9 0b 21 14 1a 8f f1 cc 92 2a dc d7 f3 1e 84 76 b1 b8 a3 3b 91 02 db Data Ascii: >zsyA{&yoMPHq=p=RqGw\!v;\|g}@=3KKcw]0N$pxK{v:w?aE-I?tn[G;2D\|=zGDwB{fw'`sHGV/1w
Oct 6, 2024 00:14:49.939739943 CEST	652	IN	Data Raw: 15 ef ce 10 ed 31 71 47 77 22 19 fd e7 74 4e dc 15 f1 ee 0c d1 1e 15 77 0e cd 10 49 e8 ab d3 99 71 ef f0 2e f7 35 be 27 ab 70 37 40 7b 5c dc f9 78 27 32 bc 25 d3 00 77 25 bc 3b 43 b4 c7 c6 9d 6f 77 22 cb b6 d7 c7 7d 4a f2 63 ab 4f ae c5 dd 08 ed Data Ascii: 1qGw"tNwIq.5'p7@{\x'2%w%;Cow"}JcOqGw&wxw3Gw;?1Np3D{K](3>'`qbG"qD6mG&pGw"O#wgTQ:-w59C'R\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49736	75.2.115.196	80	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 6, 2024 00:14:50.581775904 CEST	467	OUT	GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjQ4OS4wODgyOmEwNzlhMjRjNWI5ZWUwN2YzNmI3NTcyMDcxYjkzZWUwNGJlMDkzNThmNWZhMmJkYWRkMzIxZTNkYzRmMjVmMzc6NjcwMWJhNTkxNTg2MA%3D%3D HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 6, 2024 00:14:51.164216995 CEST	594	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:14:51 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a Data Ascii: 14
Oct 6, 2024 00:14:51.308296919 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 6, 2024 00:14:55.077203035 CEST	586	OUT	GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjQ4OS4wODgyOmEwNzlhMjRjNWI5ZWUwN2YzNmI3NTcyMDcxYjkzZWUwNGJlMDkzNThmNWZhMmJkYWRkMzIxZTNkYzRmMjVmMzc6NjcwMWJhNTkxNTg2MA%3D%3D HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:14:55.430713892 CEST	601	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:14:55 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 6, 2024 00:14:56.176786900 CEST	392	OUT	GET /favicon.ico HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:14:56.557121038 CEST	221	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 0 Content-Type: image/x-icon Date: Sat, 05 Oct 2024 22:14:56 GMT Etag: "66e18132-0" Last-Modified: Wed, 11 Sep 2024 11:38:26 GMT Server: Caddy Server: nginx
Oct 6, 2024 00:15:40.790615082 CEST	567	OUT	GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjUzOS44NTA5Ojk1OTA5Zjc0MGUyNjRmMTllNzA5NTAzYzRhMDJiOGRlM2MzZjA1NzZjNjM1MWU2OTRiNWU2NzM3NTFjNjE4OWY6NjcwMWJhOGJjZmJjYw%3D%3D HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:41.234812975 CEST	594	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:41 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a Data Ascii: 14
Oct 6, 2024 00:15:41.323190928 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 6, 2024 00:15:42.344130039 CEST	586	OUT	GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjUzOS44NTA5Ojk1OTA5Zjc0MGUyNjRmMTllNzA5NTAzYzRhMDJiOGRlM2MzZjA1NzZjNjM1MWU2OTRiNWU2NzM3NTFjNjE4OWY6NjcwMWJhOGJjZmJjYw%3D%3D HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:42.696271896 CEST	601	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:42 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 6, 2024 00:15:48.475399971 CEST	567	OUT	GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjU0Ni45MjQ5OmE2MjJkOTlmZjE1YjEwZTQ3NDM4ZjI4NDM4ZThjNDcyNWM4OWFlZmFiYTY5NDZkYTczZTk3OGQ3NTA1ZTczOTc6NjcwMWJhOTJlMWNjNw%3D%3D HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:48.849751949 CEST	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:48 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 6, 2024 00:15:50.389869928 CEST	586	OUT	GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjU0Ni45MjQ5OmE2MjJkOTlmZjE1YjEwZTQ3NDM4ZjI4NDM4ZThjNDcyNWM4OWFlZmFiYTY5NDZkYTczZTk3OGQ3NTA1ZTczOTc6NjcwMWJhOTJlMWNjNw%3D%3D HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:50.672228098 CEST	601	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:50 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 6, 2024 00:15:52.396277905 CEST	559	OUT	GET /track.php?domain=cstrikehost.com&toggle=browserjs&uid=MTcyODE2NjU1MS44NTU6MGI4ZWYyOTcxNDc2ZGE0NDc5MjNiODZiOTRhOWUxNDU3ZWQ0MDkxMjg1ZWMwMDgxNThmOTNlYzFmNDljMjRiNTo2NzAxYmE5N2QwYzAz HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:52.622407913 CEST	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:52 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 6, 2024 00:15:55.527918100 CEST	578	OUT	GET /track.php?domain=cstrikehost.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyODE2NjU1MS44NTU6MGI4ZWYyOTcxNDc2ZGE0NDc5MjNiODZiOTRhOWUxNDU3ZWQ0MDkxMjg1ZWMwMDgxNThmOTNlYzFmNDljMjRiNTo2NzAxYmE5N2QwYzAz HTTP/1.1 Host: ofinovardweb.cstrikehost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=e088a5f8d1e2e868:T=1728166492:RT=1728166492:S=ALNI_MYqpitExTGm97HJ7tOsio4WBCNQCg
Oct 6, 2024 00:15:55.857393980 CEST	601	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Sat, 05 Oct 2024 22:15:55 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49748	18.239.102.95	80	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 6, 2024 00:14:51.561819077 CEST	333	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 6, 2024 00:14:52.166191101 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Sat, 05 Oct 2024 11:04:53 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 7cbec639ed3557aac04425ec5a5f177a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: LFdYDwAM1vsQ7RqrTzK_RaMktBEwexJOV-NMswockAPgHVrqm2nRPg== Age: 40199 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff ff ff 63 64 74 49 4b 5e 49 4b 5d 49 4b 5c 30 33 49 48 4b 5f 61 63 73 63 65 75 62 64 74 63 65 74 15 19 30 3d 40 53 48 4b 5d 49 4c 5d 48 4b 5c 4d 50 62 4e 51 62 4f 52 63 12 17 2e 14 19 30 22 26 3b 28 2c 40 2b 2f 42 30 34 49 2e 32 46 2f 33 47 2d 31 44 30 34 48 2e 32 45 30 34 47 31 35 48 32 36 49 35 39 4c 38 3c 50 36 3a 4d 39 3d 51 37 3b 4e 3a 3e 52 3a 3e 51 3b 3f 52 3c 40 53 49 4c 5c 62 65 75 61 64 74 62 65 74 63 66 74 62 65 73 13 18 2d 15 1a 30 1b 20 35 1c 21 36 1d 22 37 1e 23 38 1d 22 36 1f 24 39 20 25 3a 21 26 3b 22 27 3c 22 27 3b 24 29 3e 23 28 3c 25 2a 3f 24 29 3d 26 2b 40 25 2a 3e 27 2c 41 26 2b 3f 28 2d 42 29 2e 43 28 2d 41 29 2e 42 2a 2f 43 2b 30 44 2c 31 45 30 35 49 31 35 47 3c 40 52 3d 41 53 49 4d 5f 48 4c 5d 4b 4f 60 48 4c 5c 4d 51 62 61 65 75 11 17 [TRUNCATED] Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8"6$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.-/.0/.0/11234 5!6#8$9%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.0!5"6#7$8%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs-.01 4!5"6#7$8 '< ';*0B.4F06H06G-0!5 (< (;
Oct 6, 2024 00:14:52.166205883 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 15 de 74 00 00 00 b1 74 52 4e 53 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ttRNS\
Oct 6, 2024 00:14:52.166220903 CEST	1236	IN	Data Raw: 68 6f 86 3b bc 13 11 b4 e7 ea e5 53 8d b8 6e 86 bb 74 de ff ea 9a 92 62 21 52 fc 8a 5a 52 7f 28 9a f6 6d 0d b1 6e 8a bb 6c de 37 ef 2d a9 af 20 0f c5 ee 2b 45 2d a9 cd 86 68 f7 c1 5d 32 ef 65 e1 be 77 2f f6 50 e4 ef f6 bd e0 ae 94 76 3f dc e5 f2 Data Ascii: ho;Sntb!RZR(mnl7- +E-h]2ew/Pv?^NQ+m=}y1Tm{O}q{y;aaioD}Abvwyc2qoG{[;37HD^pM{{e^&x'KP!hKP
Oct 6, 2024 00:14:52.166279078 CEST	1236	IN	Data Raw: bb 52 de cb c5 9d 6b a9 14 ac 6b c0 dd 00 ed 43 70 3f 78 f0 9b bf 52 c7 fb 66 6c 27 42 f7 a0 b8 bf ac 93 f6 a1 b8 2b e4 bd 54 dc e1 88 c2 06 ee 57 69 df a6 94 f6 11 b8 ab e3 bd 4c dc ef c4 22 0a dd 9d e0 ae 9c f6 91 b8 2b e3 7d 33 b6 13 a1 7b 20 Data Ascii: RkkCp?xRfl'B+TWiL"+}3{ U^R{s-nnk~!-ov"to'^w5ov"tokpgEgen}w3rvG}_w49@LiP../k.!.K:?<
Oct 6, 2024 00:14:52.166290045 CEST	1236	IN	Data Raw: bb fc b4 07 e4 7d 82 ef 76 a2 e0 3d 0a ee cd f6 da 8f af e7 ed 70 41 b8 6f a4 3d 18 ef 13 d8 4e 84 ee 39 71 bf 65 b6 82 b7 c3 85 e0 fe cb 63 d5 05 e0 7d 02 db 89 d0 3d 1f ee 37 cd 0e e0 ed 70 01 b8 0f a2 3d 08 ef 65 e0 0e 35 c4 3f ab 8a c4 fd a6 Data Ascii: }v=pAo=N9qec}=7p=e5?q};(KxwhI`{+(uho}J.Z'IZpM{poB{7{EmiOMi8$t{sS<6ruq_
Oct 6, 2024 00:14:52.166304111 CEST	1236	IN	Data Raw: f7 46 b4 27 e7 bd 9a 76 25 b8 9f fc 1f 56 3a 95 d6 8d 27 d5 e2 9e 98 f7 b7 17 1b d2 3b 90 77 17 86 f6 a4 bc 1f 7f 7e 76 56 33 ee 7c bb 13 df ed 9a 70 4f c8 fb db 0b 1e f4 0e e0 dd 85 a2 3d 19 ef 83 69 57 83 3b 1b ef c4 76 bb 2a dc 13 f1 ee 45 7b Data Ascii: F'v%V:';w~vV3\|pO=iW;v*E{3p=hW;=wH[k=2h}=gL}wvewx?.~saZx;pQO{wt'lW{w7dwt'l{`w
Oct 6, 2024 00:14:52.166321039 CEST	1236	IN	Data Raw: b4 8f e6 7d 0e db 89 e4 65 02 f7 b8 b4 f7 78 f7 1b 19 b9 7f ac 5a f1 01 b8 7b f1 1e 9f f6 51 bc 2b c1 9d 91 03 54 58 2f aa c7 3d 3e ed 9e bc f7 2e a3 36 c3 bd 31 ef 69 68 1f ce bb 0e dc d9 6e a7 e2 fa 48 37 ee 69 68 6f ce fb d9 c1 b4 0f c5 bd 11 Data Ascii: }exZ{Q+TX/=>.61ihnH7ihoh{`\J1wy?+a;=1yAHkA+"3^}$s\|n{&G^Z*rSi{->.w)6
Oct 6, 2024 00:14:52.166362047 CEST	1236	IN	Data Raw: 79 cf 41 7b 26 dc ab 79 6f 4d bb 50 dc d1 9d 48 85 ed ed 71 af e4 3d 0f ed d9 70 ef e7 3d 00 ed 52 71 47 77 a2 0d c9 5c a9 0b 21 14 1a 8f f1 cc 92 2a dc d7 f3 1e 84 76 b1 b8 a3 3b 91 02 db c3 e0 be 8e f7 7c b4 67 c5 7d 95 f7 40 b4 cb c5 1d dd 89 Data Ascii: yA{&yoMPHq=p=RqGw\!*v;\|g}@=3KKcw]0N$pxK{v:w?aE-I?tn[G;2D\|=zGDwB{fw'`sHGV/1w?.>"t{
Oct 6, 2024 00:14:52.166374922 CEST	633	IN	Data Raw: 0c d1 1e 15 77 0e cd 10 49 e8 ab d3 99 71 ef f0 2e f7 35 be 27 ab 70 37 40 7b 5c dc f9 78 27 32 bc 25 d3 00 77 25 bc 3b 43 b4 c7 c6 9d 6f 77 22 cb b6 d7 c7 7d 4a f2 63 ab 4f ae c5 dd 08 ed b1 71 47 77 a2 bc bd 26 06 77 d1 13 81 9f fc 78 05 77 33 Data Ascii: wIq.5'p7@{\x'2%w%;Cow"}JcOqGw&wxw3Gw;?1Np3D{K](3>'`qbG"qD6mG&pGw"O#wgTQ:-w59C'R\|wfm])q
Oct 6, 2024 00:14:52.254472971 CEST	1236	IN	Data Raw: ee ef a5 a7 3d 32 ee d8 4e 64 5b f7 23 e9 cd 8a c8 7b 24 dc e3 0d 7e cc 86 3b b6 13 19 d7 fd 48 0e b5 a2 f1 ee 0c d1 1e 17 77 56 15 91 71 dd 8f e4 71 2b 12 ef ce 10 ed 51 71 67 4d 11 c9 c8 1c ee 91 9e 6b 72 86 68 8f 88 3b 23 07 88 c4 74 ad 39 dc Data Ascii: =2Nd[#{$~;HwVqq+QqgMkrh;#t9wl'e{G=&vf+HghJ=7ay{Q3J"*B}JBG5 c8"]6{(>#;BwF1=8NT8{b&#h;
Oct 6, 2024 00:14:52.254595995 CEST	59	IN	Data Raw: 11 b8 13 11 11 b8 13 11 81 3b 11 11 81 3b 11 11 81 3b 11 11 81 3b 11 11 81 3b 11 11 b8 f3 13 10 11 d9 eb ff 05 18 00 7f b6 1d fa 08 34 f3 8d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ;;;;;4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49718	75.2.115.196	80	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 6, 2024 00:15:33.616687059 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49737	75.2.115.196	80	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 6, 2024 00:15:35.609450102 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49713	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:47 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 31 6b 69 6f 30 47 41 47 63 45 57 49 39 51 4c 56 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 31 65 37 62 30 30 64 32 35 38 39 36 34 38 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 1kio0GAGcEWI9QLV.1Context: d1e7b00d2589648f
2024-10-05 22:14:47 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-05 22:14:47 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 31 6b 69 6f 30 47 41 47 63 45 57 49 39 51 4c 56 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 31 65 37 62 30 30 64 32 35 38 39 36 34 38 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 58 45 6e 39 66 4d 54 56 31 48 4f 6b 36 78 5a 54 34 63 69 4f 74 44 64 41 52 42 4d 77 35 50 31 67 42 55 46 44 32 42 72 39 67 64 6b 6b 33 4f 44 32 67 4f 59 6b 6c 36 6d 70 4d 58 6e 57 54 70 45 39 73 4d 73 4d 74 57 39 53 54 67 76 76 2b 42 39 55 4c 55 66 45 37 76 34 41 67 31 39 6d 78 6a 2b 70 4d 43 70 69 67 69 4e 45 63 67 4a 57 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 1kio0GAGcEWI9QLV.2Context: d1e7b00d2589648f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaXEn9fMTV1HOk6xZT4ciOtDdARBMw5P1gBUFD2Br9gdkk3OD2gOYkl6mpMXnWTpE9sMsMtW9STgvv+B9ULUfE7v4Ag19mxj+pMCpigiNEcgJW
2024-10-05 22:14:47 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 31 6b 69 6f 30 47 41 47 63 45 57 49 39 51 4c 56 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 31 65 37 62 30 30 64 32 35 38 39 36 34 38 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 1kio0GAGcEWI9QLV.3Context: d1e7b00d2589648f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-05 22:14:47 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-05 22:14:47 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 43 36 67 36 6a 54 48 50 30 30 53 37 4d 75 79 75 66 44 32 4f 2b 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: C6g6jTHP00S7MuyufD2O+A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:48 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:48 UTC	540	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:48 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221448Z-1657d5bbd48xlwdx82gahegw40000000016g00000000pfy2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:48 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-05 22:14:48 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-05 22:14:48 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-05 22:14:49 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-05 22:14:49 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-05 22:14:49 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-05 22:14:49 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-05 22:14:49 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-05 22:14:49 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-05 22:14:49 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49726	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:49 UTC	627	OUT	GET /tr/mainsite2023/navbar-logo-dark-2023.png HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ofinovardweb.cstrikehost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:49 UTC	449	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:49 GMT Content-Type: image/png Content-Length: 4843 Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: public, max-age=1209600 Expires: Sat, 19 Oct 2024 22:14:49 GMT ETag: 1727814749088 CF-Cache-Status: HIT Age: 351728 Accept-Ranges: bytes Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c451795441f2-EWR
2024-10-05 22:14:49 UTC	920	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 22 00 00 00 44 08 06 00 00 00 25 64 38 45 00 00 12 b2 49 44 41 54 78 5e ed 5d 6b 92 1b b7 11 5e ed ca 55 ca b3 c8 95 55 89 aa f2 83 fe eb 5f f2 0d b8 bb ce c3 29 57 c5 f9 e1 df 71 4e 20 e5 04 d2 09 22 9d c0 ab 13 c4 39 81 75 03 e9 06 e2 0d b4 37 60 d2 8d c1 90 33 00 ba fb c3 3c 38 c3 25 58 c5 92 76 1e 40 a3 1f 1f fa 01 80 67 67 c7 f0 59 ac d7 e7 97 37 cf 2f 96 d7 3f 9d 5f 5e 6f 2e 2e af ef e8 fb 3f ff bd a3 6b 1f aa 7b 37 cf cf e8 d9 63 18 52 a1 b1 70 a0 70 e0 18 38 b0 58 2f 08 60 5e 06 a0 53 83 8f f5 ef 86 df 25 50 5a 1d c3 50 0b 8d 85 03 85 03 73 e3 40 3f 00 8a 00 ca 03 d2 62 6e c3 2c f4 14 0e 14 0e cc 91 03 03 03 50 23 74 63 70 da 3c 2c 21 db 1c a5 5e 68 2a 1c 98 09 07 c6 05 a0 96 87 e4 bc a3 f2 Data Ascii: PNGIHDR"D%d8EIDATx^]k^UU_)WqN "9u7`3<8%Xv@ggY7/?_^o..?k{7cRpp8X/`^S%PZPs@?bn,P#tcp<,!^h*
2024-10-05 22:14:49 UTC	1369	IN	Data Raw: 0a cb be 63 f2 9d db 0e fb 63 59 8c fd 69 f7 29 f6 77 10 20 1a 69 fc 07 a9 9a 35 e5 04 6d 26 e5 04 71 d7 73 88 1a bf 5b f6 19 01 49 1f 1d b1 ce 27 ea d3 76 d6 bb 6e 41 28 ff 3e 9b 3b 9b 29 5c 93 75 e7 42 d4 44 8e 2d 0b 88 b8 34 aa 7d 73 79 c9 13 81 de de 7a c7 03 8e aa ad e7 9b 0c 5b b9 e7 79 7d da 2d 79 d1 a9 13 3b f9 da 6d 8a 27 59 7c f7 46 57 a7 03 84 be dc 24 e8 ee 91 1c 06 49 13 34 fb cd 90 f9 28 40 e4 79 4d 91 c1 9b f3 c7 2e 3a 08 f5 af 1e 3f df fb c9 f1 1c 01 e7 84 cc 2d 7b 63 99 46 3a 95 25 d0 e0 61 77 64 87 bc 36 27 f4 6e fa fc cd 1e d6 aa 0b ad fe 58 5a ad ef db 2e ed e6 be 93 79 3e 77 eb 57 47 54 1e 07 1e 91 09 fc 99 1e 14 87 ad 4a ff 5b 32 dc dd f6 18 64 36 74 7c ab 94 f7 0b 93 d6 b6 6e 7d cc ae c8 7a 23 01 0c 43 d4 0f 1a df 7b d2 bd ec 89 b0 Data Ascii: ccYi)w i5m&qs[I'vnA(>;)\uBD-4}syz[y}-y;m'Y\|FW$I4(@yM.:?-{cF:%awd6'nXZ.y>wWGTJ[2d6t\|n}z#C{
2024-10-05 22:14:49 UTC	1369	IN	Data Raw: f7 6b e8 71 1b 88 b0 70 d0 f4 c4 6a 3a 20 6f 30 e4 e1 be 5c 2f 3a 07 ce 1b ca f8 00 80 d8 5a cc 5a 37 0d e8 00 0e 44 b9 20 c4 82 ab 95 da 98 c1 b1 03 c8 74 43 10 99 dd 34 1e 06 20 0e 6d 92 79 88 0c 81 64 3f 6a 84 44 44 17 96 27 ab 3b b6 80 4d 01 22 2b 3c 93 ca f8 04 7e da 09 7b a2 57 01 28 a1 bc 21 3a 60 34 62 08 d9 b2 49 bd b0 df 73 f5 ac b1 fd 46 d3 b1 b6 41 db e1 20 e7 25 71 10 a8 81 4d cb 53 05 40 84 f0 9d 6c 03 f2 c8 32 00 85 79 14 b5 09 d0 82 01 11 81 d0 4b 65 36 6c 09 88 8d 2a 5c 57 60 2b bf 52 7e f7 5c c8 a1 21 a4 75 32 00 f2 b4 9b 1e 4c 46 58 56 2b 85 ea f6 2b 40 c4 ef 13 7f 36 21 8f 1a 7f 47 a0 08 e4 07 22 e5 cb 50 5e 4c 09 a9 c1 c1 81 a8 f2 1a 9e f1 1e 27 57 2d e2 fd 6d ca 9e 2b 85 67 2d 50 79 fa f4 5b 2a e4 dc fc 5d 79 9e ab b4 c9 50 b6 e6 5b Data Ascii: kqpj: o0\/:ZZ7D tC4 myd?jDD';M"+<~{W(!:`4bIsFA %qMS@l2yKe6l\W`+R~\!u2LFXV++@6!G"P^L'W-m+g-Py[]yP[
2024-10-05 22:14:49 UTC	1185	IN	Data Raw: 7a 0c 5e 51 93 f7 a4 88 1c 82 61 e0 d3 04 e1 0c 20 82 dc f7 36 c0 27 13 92 92 cc 01 25 4c e7 07 12 0d 02 86 bd 6d be 06 7a 04 0c 06 d5 8a fe 86 f1 65 81 40 62 35 31 d3 91 d1 ff 0e ec 59 e6 5e ee d1 04 a0 d8 65 9c 23 aa 19 81 85 96 79 7d c5 13 be 78 fa 02 93 01 e8 40 dd 7f f5 3b 7e a4 bf c4 83 8f bc 29 52 22 6c 3e 40 94 01 40 2d 6f 23 a1 e0 87 bc 84 cc 2e 0a ff 25 b9 b4 af 67 00 51 07 63 81 c3 32 50 09 47 03 22 ee 9f 93 c6 ae d0 21 eb 34 c6 53 fd fd a4 47 c4 fd 03 e0 39 44 ff 32 10 11 0d f0 e1 6a fa 18 45 3a cd 94 02 b2 9c 21 ee 7b cb cb ff c5 59 78 f2 1c 51 17 00 6a 0c b2 eb 42 cc c1 c0 8a dc d7 be 86 e1 df 97 8d 2b 03 88 6a 63 25 43 95 db 6b 2a 09 98 dc ac f9 05 cc 86 a3 02 91 db 09 bf 58 eb 3b e1 63 23 88 8d 4e af ee 8a 40 54 57 af 86 90 39 17 6f 44 40 Data Ascii: z^Qa 6'%Lmze@b51Y^e#y}x@;~)R"l>@@-o#.%gQc2PG"!4SG9D2jE:!{YxQjB+jc%Ck*X;c#N@TW9oD@

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:49 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:49 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221449Z-1657d5bbd48t66tjar5xuq22r800000000yg00000000su7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:49 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:49 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:49 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c59bb0f9-701e-0097-2d01-17b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221449Z-1657d5bbd48vlsxxpe15ac3q7n0000000150000000001vz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:49 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:49 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:49 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:49 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221449Z-1657d5bbd48f7nlxc7n5fnfzh000000000m000000000payv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:49 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:49 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:49 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b27588a3-a01e-003d-6001-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221449Z-1657d5bbd48xlwdx82gahegw40000000019000000000dmsv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:49 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:49 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:49 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221449Z-1657d5bbd48tnj6wmberkg2xy8000000015g00000000cx13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:49 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49732	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:50 UTC	380	OUT	GET /tr/mainsite2023/navbar-logo-dark-2023.png HTTP/1.1 Host: www.dynadot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:50 UTC	449	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:50 GMT Content-Type: image/png Content-Length: 4843 Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: public, max-age=1209600 Expires: Sat, 19 Oct 2024 22:14:50 GMT ETag: 1727814749088 CF-Cache-Status: HIT Age: 351729 Accept-Ranges: bytes Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4567c858c9c-EWR
2024-10-05 22:14:50 UTC	920	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 22 00 00 00 44 08 06 00 00 00 25 64 38 45 00 00 12 b2 49 44 41 54 78 5e ed 5d 6b 92 1b b7 11 5e ed ca 55 ca b3 c8 95 55 89 aa f2 83 fe eb 5f f2 0d b8 bb ce c3 29 57 c5 f9 e1 df 71 4e 20 e5 04 d2 09 22 9d c0 ab 13 c4 39 81 75 03 e9 06 e2 0d b4 37 60 d2 8d c1 90 33 00 ba fb c3 3c 38 c3 25 58 c5 92 76 1e 40 a3 1f 1f fa 01 80 67 67 c7 f0 59 ac d7 e7 97 37 cf 2f 96 d7 3f 9d 5f 5e 6f 2e 2e af ef e8 fb 3f ff bd a3 6b 1f aa 7b 37 cf cf e8 d9 63 18 52 a1 b1 70 a0 70 e0 18 38 b0 58 2f 08 60 5e 06 a0 53 83 8f f5 ef 86 df 25 50 5a 1d c3 50 0b 8d 85 03 85 03 73 e3 40 3f 00 8a 00 ca 03 d2 62 6e c3 2c f4 14 0e 14 0e cc 91 03 03 03 50 23 74 63 70 da 3c 2c 21 db 1c a5 5e 68 2a 1c 98 09 07 c6 05 a0 96 87 e4 bc a3 f2 Data Ascii: PNGIHDR"D%d8EIDATx^]k^UU_)WqN "9u7`3<8%Xv@ggY7/?_^o..?k{7cRpp8X/`^S%PZPs@?bn,P#tcp<,!^h*
2024-10-05 22:14:50 UTC	1369	IN	Data Raw: 0a cb be 63 f2 9d db 0e fb 63 59 8c fd 69 f7 29 f6 77 10 20 1a 69 fc 07 a9 9a 35 e5 04 6d 26 e5 04 71 d7 73 88 1a bf 5b f6 19 01 49 1f 1d b1 ce 27 ea d3 76 d6 bb 6e 41 28 ff 3e 9b 3b 9b 29 5c 93 75 e7 42 d4 44 8e 2d 0b 88 b8 34 aa 7d 73 79 c9 13 81 de de 7a c7 03 8e aa ad e7 9b 0c 5b b9 e7 79 7d da 2d 79 d1 a9 13 3b f9 da 6d 8a 27 59 7c f7 46 57 a7 03 84 be dc 24 e8 ee 91 1c 06 49 13 34 fb cd 90 f9 28 40 e4 79 4d 91 c1 9b f3 c7 2e 3a 08 f5 af 1e 3f df fb c9 f1 1c 01 e7 84 cc 2d 7b 63 99 46 3a 95 25 d0 e0 61 77 64 87 bc 36 27 f4 6e fa fc cd 1e d6 aa 0b ad fe 58 5a ad ef db 2e ed e6 be 93 79 3e 77 eb 57 47 54 1e 07 1e 91 09 fc 99 1e 14 87 ad 4a ff 5b 32 dc dd f6 18 64 36 74 7c ab 94 f7 0b 93 d6 b6 6e 7d cc ae c8 7a 23 01 0c 43 d4 0f 1a df 7b d2 bd ec 89 b0 Data Ascii: ccYi)w i5m&qs[I'vnA(>;)\uBD-4}syz[y}-y;m'Y\|FW$I4(@yM.:?-{cF:%awd6'nXZ.y>wWGTJ[2d6t\|n}z#C{
2024-10-05 22:14:50 UTC	1369	IN	Data Raw: f7 6b e8 71 1b 88 b0 70 d0 f4 c4 6a 3a 20 6f 30 e4 e1 be 5c 2f 3a 07 ce 1b ca f8 00 80 d8 5a cc 5a 37 0d e8 00 0e 44 b9 20 c4 82 ab 95 da 98 c1 b1 03 c8 74 43 10 99 dd 34 1e 06 20 0e 6d 92 79 88 0c 81 64 3f 6a 84 44 44 17 96 27 ab 3b b6 80 4d 01 22 2b 3c 93 ca f8 04 7e da 09 7b a2 57 01 28 a1 bc 21 3a 60 34 62 08 d9 b2 49 bd b0 df 73 f5 ac b1 fd 46 d3 b1 b6 41 db e1 20 e7 25 71 10 a8 81 4d cb 53 05 40 84 f0 9d 6c 03 f2 c8 32 00 85 79 14 b5 09 d0 82 01 11 81 d0 4b 65 36 6c 09 88 8d 2a 5c 57 60 2b bf 52 7e f7 5c c8 a1 21 a4 75 32 00 f2 b4 9b 1e 4c 46 58 56 2b 85 ea f6 2b 40 c4 ef 13 7f 36 21 8f 1a 7f 47 a0 08 e4 07 22 e5 cb 50 5e 4c 09 a9 c1 c1 81 a8 f2 1a 9e f1 1e 27 57 2d e2 fd 6d ca 9e 2b 85 67 2d 50 79 fa f4 5b 2a e4 dc fc 5d 79 9e ab b4 c9 50 b6 e6 5b Data Ascii: kqpj: o0\/:ZZ7D tC4 myd?jDD';M"+<~{W(!:`4bIsFA %qMS@l2yKe6l\W`+R~\!u2LFXV++@6!G"P^L'W-m+g-Py[]yP[
2024-10-05 22:14:50 UTC	1185	IN	Data Raw: 7a 0c 5e 51 93 f7 a4 88 1c 82 61 e0 d3 04 e1 0c 20 82 dc f7 36 c0 27 13 92 92 cc 01 25 4c e7 07 12 0d 02 86 bd 6d be 06 7a 04 0c 06 d5 8a fe 86 f1 65 81 40 62 35 31 d3 91 d1 ff 0e ec 59 e6 5e ee d1 04 a0 d8 65 9c 23 aa 19 81 85 96 79 7d c5 13 be 78 fa 02 93 01 e8 40 dd 7f f5 3b 7e a4 bf c4 83 8f bc 29 52 22 6c 3e 40 94 01 40 2d 6f 23 a1 e0 87 bc 84 cc 2e 0a ff 25 b9 b4 af 67 00 51 07 63 81 c3 32 50 09 47 03 22 ee 9f 93 c6 ae d0 21 eb 34 c6 53 fd fd a4 47 c4 fd 03 e0 39 44 ff 32 10 11 0d f0 e1 6a fa 18 45 3a cd 94 02 b2 9c 21 ee 7b cb cb ff c5 59 78 f2 1c 51 17 00 6a 0c b2 eb 42 cc c1 c0 8a dc d7 be 86 e1 df 97 8d 2b 03 88 6a 63 25 43 95 db 6b 2a 09 98 dc ac f9 05 cc 86 a3 02 91 db 09 bf 58 eb 3b e1 63 23 88 8d 4e af ee 8a 40 54 57 af 86 90 39 17 6f 44 40 Data Ascii: z^Qa 6'%Lmze@b51Y^e#y}x@;~)R"l>@@-o#.%gQc2PG"!4SG9D2jE:!{YxQjB+jc%Ck*X;c#N@TW9oD@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49729	142.250.181.228	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:50 UTC	436	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ofinovardweb.cstrikehost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:50 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153126 Date: Sat, 05 Oct 2024 22:14:50 GMT Expires: Sat, 05 Oct 2024 22:14:50 GMT Cache-Control: private, max-age=3600 ETag: "11047609977268978252" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-05 22:14:50 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 34 36 35 30 35 35 37 35 37 31 34 36 35 32 30 33 39 34 39 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 34 33 31 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,173
2024-10-05 22:14:50 UTC	1390	IN	Data Raw: 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 Data Ascii: useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyx
2024-10-05 22:14:50 UTC	1390	IN	Data Raw: 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 Data Ascii: lue:g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8C
2024-10-05 22:14:50 UTC	1390	IN	Data Raw: 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b Data Ascii: TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);
2024-10-05 22:14:50 UTC	1390	IN	Data Raw: 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 64 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 Data Ascii: ;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Md(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Md(g)};b.prototype.bd=function(g){this.de(2,g)};b.prototyp
2024-10-05 22:14:50 UTC	1390	IN	Data Raw: 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 Data Ascii: {m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Wa);break;case 2:h(l.Wa);break;default:throw Err
2024-10-05 22:14:50 UTC	1390	IN	Data Raw: 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b Data Ascii: ll\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k
2024-10-05 22:14:50 UTC	1390	IN	Data Raw: 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c Data Ascii: rn{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|
2024-10-05 22:14:50 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 Data Ascii: ction(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototy
2024-10-05 22:14:50 UTC	1390	IN	Data Raw: 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 Data Ascii: h;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}retu

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:50 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:50 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221450Z-1657d5bbd48cpbzgkvtewk0wu0000000017000000000738e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:50 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:50 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:50 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221450Z-1657d5bbd4824mj9d6vp65b6n4000000019000000000ey1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:50 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:50 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:50 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:50 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221450Z-1657d5bbd487nf59mzf5b3gk8n00000000sg00000000738g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:50 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:50 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:50 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221450Z-1657d5bbd48vlsxxpe15ac3q7n00000000xg00000000tf5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:50 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:50 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:50 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221450Z-1657d5bbd48p2j6x2quer0q028000000016000000000qsae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:50 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:51 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221451Z-1657d5bbd48qjg85buwfdynm5w000000011g00000000uwte x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:51 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221451Z-1657d5bbd48xdq5dkwwugdpzr0000000019g00000000rpvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:51 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:51 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:51 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221451Z-1657d5bbd48cpbzgkvtewk0wu0000000016g000000008pf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:51 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:51 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:51 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:51 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221451Z-1657d5bbd482krtfgrg72dfbtn00000000u000000000dg75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:51 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:51 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:51 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221451Z-1657d5bbd487nf59mzf5b3gk8n00000000q000000000ewtw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-05 22:14:52 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=66621 Date: Sat, 05 Oct 2024 22:14:52 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49747	142.250.185.110	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:52 UTC	1751	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fofinovardweb.cstrikehost.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExNTR8YTRlZDMyZGM0ZmU0NjU3ZTY3ODY2MzU3MmRiYWNkZTA1MTE0NjA0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2595154941770008&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301542%2C17301266%2C72717107&format=r3%7Cs&nocache=8101728166490148&num=0&output=afd_ads&domain_name=ofinovardweb.cstrikehost.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1728166490151&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=855&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://ofinovardweb.cstrikehost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:52 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sat, 05 Oct 2024 22:14:52 GMT Expires: Sat, 05 Oct 2024 22:14:52 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-bydkZuCK8O2yMCmv6vbKAg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-05 22:14:52 UTC	583	IN	Data Raw: 33 61 36 33 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 3a63<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 7d 2e 73 69 31 32 38 7b 68 65 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 64 69 76 3e 64 69 76 2e 73 69 31 32 38 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 73 69 31 33 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 30 31 63 33 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e Data Ascii: er-radius:15px;height:30px;width:1px;}.si128{height:1px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}div>div.si128:last-child{display:none;}.si133{background-color:#101c36;border-radius:2px;font-size:12px;lin
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 77 72 61 70 3b 22 20 64 61 74 61 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 31 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 5f 20 73 69 31 33 33 20 73 70 61 6e 22 3e 52 65 6c 61 74 65 64 20 73 65 61 72 63 68 65 73 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 31 22 20 63 6c 61 73 73 3d 22 69 Data Ascii: wrap;" data-ad-container="1"><div class="i_ div rssAttrContainer" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><span class="p_ si133 span">Related searches</span></div><div id="e1" class="i
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 36 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 Data Ascii: center;"><div class="i_ div si69" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:center; -webkit-box-pack:center; -webkit-justify-content:center; justify-content:center;-ms-flex-a
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 6f 66 69 6e 6f 76 61 72 64 77 65 62 2e 63 73 74 72 69 6b 65 68 6f 73 74 2e 63 6f 6d 2f 3f 74 73 3d 66 45 4e 73 5a 57 46 75 55 47 56 77 63 47 56 79 62 57 6c 75 64 45 4a 73 59 57 4e 72 66 48 77 31 59 32 55 34 4e 48 78 69 64 57 4e 72 5a 58 51 77 4d 54 45 73 59 6e 56 6a 61 32 56 30 4d 44 67 34 4c 47 4a 31 59 32 74 6c 64 44 41 34 4f 58 78 38 66 48 78 38 66 44 59 33 4d 44 46 69 59 54 55 35 4d 54 55 34 4d 47 56 38 66 48 77 78 4e 7a 49 34 4d 54 59 32 4e 44 67 35 4c 6a 45 78 4e Data Ascii: -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a href="http://ofinovardweb.cstrikehost.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MDFiYTU5MTU4MGV8fHwxNzI4MTY2NDg5LjExN
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 64 69 76 20 71 5f 20 73 69 31 30 32 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 66 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f Data Ascii: s:center; align-items:center;"><div class="i_ div" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div aria-hidden="true" tabindex="-1" class="div q_ si102"><img src="https://afs.googleuserco
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 30 4d 6e 78 38 66 48 78 38 4d 58 78 38 4d 48 77 77 66 48 78 38 66 44 46 38 66 48 78 38 66 44 42 38 4d 48 78 38 66 48 78 38 66 48 78 38 66 48 77 77 66 44 42 38 66 44 42 38 66 48 77 77 66 44 42 38 56 7a 45 77 50 58 78 38 4d 58 78 58 4d 54 41 39 66 44 49 77 59 54 6c 6b 59 32 49 30 5a 6a 46 69 4f 44 51 77 59 32 4d 32 4e 54 64 6c 4d 6a 4e 69 59 54 6b 79 4e 32 55 30 4d 32 4d 34 4d 6a 4d 32 59 54 6c 6d 4d 47 4e 38 4d 48 78 6b 63 43 31 30 5a 57 46 74 61 57 35 30 5a 58 4a 75 5a 58 51 77 4f 56 38 7a 63 47 68 38 4d 48 77 77 66 48 78 38 26 61 6d 70 3b 71 75 65 72 79 3d 43 61 73 69 6e 6f 2b 4f 6e 6c 69 6e 65 2b 52 65 61 6c 2b 4d 6f 6e 65 79 26 61 6d 70 3b 61 66 64 54 6f 6b 65 6e 3d 43 68 4d 49 71 65 53 46 37 36 48 34 69 41 4d 56 69 59 4c 39 42 78 32 65 57 68 30 33 45 Data Ascii: 0Mnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTlkY2I0ZjFiODQwY2M2NTdlMjNiYTkyN2U0M2M4MjM2YTlmMGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Casino+Online+Real+Money&afdToken=ChMIqeSF76H4iAMViYL9Bx2eWh03E

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:52 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:52 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:52 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221452Z-1657d5bbd482lxwq1dp2t1zwkc00000000wg000000006cz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:52 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:52 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:52 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221452Z-1657d5bbd48t66tjar5xuq22r8000000011g00000000dgd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:52 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:52 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:52 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:52 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221452Z-1657d5bbd48qjg85buwfdynm5w000000012000000000t19d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:52 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:52 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:52 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221452Z-1657d5bbd48xlwdx82gahegw40000000019g000000009zdr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:52 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:52 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:52 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221452Z-1657d5bbd48q6t9vvmrkd293mg00000000zg00000000ndst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49754	172.217.16.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:52 UTC	456	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:52 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153126 Date: Sat, 05 Oct 2024 22:14:52 GMT Expires: Sat, 05 Oct 2024 22:14:52 GMT Cache-Control: private, max-age=3600 ETag: "3685458029142961612" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-05 22:14:52 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 34 36 35 30 35 35 37 35 37 31 34 36 35 32 30 33 39 34 39 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 33 31 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301431,173
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 Data Ascii: seServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxp
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c Data Ascii: ue:g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8Cl
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 Data Ascii: TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 64 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Md(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Md(g)};b.prototype.bd=function(g){this.de(2,g)};b.prototype
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f Data Ascii: m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Wa);break;case 2:h(l.Wa);break;default:throw Erro
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d Data Ascii: l\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 Data Ascii: n{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|t
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 Data Ascii: tion(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototyp
2024-10-05 22:14:52 UTC	1390	IN	Data Raw: 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 Data Ascii: ;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}retur

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:53 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221453Z-1657d5bbd48vlsxxpe15ac3q7n00000000zg00000000mqgs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:53 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221453Z-1657d5bbd48qjg85buwfdynm5w0000000170000000007627 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:53 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:53 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221453Z-1657d5bbd48xsz2nuzq4vfrzg800000001200000000009us x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:53 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:53 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221453Z-1657d5bbd48762wn1qw4s5sd3000000000zg000000008g36 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:53 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49760	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:53 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-05 22:14:53 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=66695 Date: Sat, 05 Oct 2024 22:14:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-05 22:14:53 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49761	142.250.185.110	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:54 UTC	555	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:54 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153123 Date: Sat, 05 Oct 2024 22:14:54 GMT Expires: Sat, 05 Oct 2024 22:14:54 GMT Cache-Control: private, max-age=3600 ETag: "1059720730736110469" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-05 22:14:54 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 34 36 35 30 35 35 37 35 37 31 34 36 35 32 30 33 39 34 39 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301
2024-10-05 22:14:54 UTC	1390	IN	Data Raw: 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 Data Ascii: ServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi
2024-10-05 22:14:54 UTC	1390	IN	Data Raw: 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 Data Ascii: g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8Clamp
2024-10-05 22:14:54 UTC	1390	IN	Data Raw: 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f Data Ascii: eError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&O
2024-10-05 22:14:54 UTC	1390	IN	Data Raw: 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 64 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 64 Data Ascii: ak a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Md(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Md(g)};b.prototype.bd=function(g){this.de(2,g)};b.prototype.Md
2024-10-05 22:14:54 UTC	1390	IN	Data Raw: 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 Data Ascii: )}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Wa);break;case 2:h(l.Wa);break;default:throw Error("
2024-10-05 22:14:54 UTC	1390	IN	Data Raw: 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a Data Ascii: l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Obj
2024-10-05 22:14:54 UTC	1390	IN	Data Raw: 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 Data Ascii: d:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|type
2024-10-05 22:14:54 UTC	1390	IN	Data Raw: 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 Data Ascii: n(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.e
2024-10-05 22:14:54 UTC	1390	IN	Data Raw: 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 Data Ascii: 0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}return b

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:54 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221454Z-1657d5bbd48xdq5dkwwugdpzr000000001c000000000frxc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:54 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:54 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:54 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221454Z-1657d5bbd48f7nlxc7n5fnfzh000000000u00000000033p0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:54 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:54 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:54 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221454Z-1657d5bbd48t66tjar5xuq22r80000000140000000004v95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:54 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:54 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:54 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:54 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221454Z-1657d5bbd482krtfgrg72dfbtn00000000ug00000000b762 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:54 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:54 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:54 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221454Z-1657d5bbd48tqvfc1ysmtbdrg000000000xg00000000egfz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:54 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:54 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:54 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 7c825ef0-601e-0001-5f02-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221454Z-1657d5bbd482tlqpvyz9e93p540000000190000000000e8y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:54 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:54 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221454Z-1657d5bbd48xsz2nuzq4vfrzg800000000z000000000ak8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:54 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:54 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221454Z-1657d5bbd48vhs7r2p1ky7cs5w00000001f0000000004z8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:54 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:54 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:54 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:54 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 10df1352-f01e-00aa-105a-178521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221454Z-1657d5bbd48sdh4cyzadbb374800000000y000000000b1g8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:54 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49771	142.250.185.142	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:55 UTC	373	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:56 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153123 Date: Sat, 05 Oct 2024 22:14:55 GMT Expires: Sat, 05 Oct 2024 22:14:55 GMT Cache-Control: private, max-age=3600 ETag: "7840449131937660732" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-05 22:14:56 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 34 36 35 30 35 35 37 35 37 31 34 36 35 32 30 33 39 34 39 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301
2024-10-05 22:14:56 UTC	1390	IN	Data Raw: 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 Data Ascii: ServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi
2024-10-05 22:14:56 UTC	1390	IN	Data Raw: 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 Data Ascii: g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8Clamp
2024-10-05 22:14:56 UTC	1390	IN	Data Raw: 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f Data Ascii: eError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&O
2024-10-05 22:14:56 UTC	1390	IN	Data Raw: 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 64 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 64 Data Ascii: ak a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Md(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Md(g)};b.prototype.bd=function(g){this.de(2,g)};b.prototype.Md
2024-10-05 22:14:56 UTC	1390	IN	Data Raw: 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 Data Ascii: )}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Wa);break;case 2:h(l.Wa);break;default:throw Error("
2024-10-05 22:14:56 UTC	1390	IN	Data Raw: 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a Data Ascii: l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Obj
2024-10-05 22:14:56 UTC	1390	IN	Data Raw: 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 Data Ascii: d:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|type
2024-10-05 22:14:56 UTC	1390	IN	Data Raw: 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 Data Ascii: n(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.e
2024-10-05 22:14:56 UTC	1390	IN	Data Raw: 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 Data Ascii: 0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}return b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49778	142.250.185.97	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:55 UTC	728	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:56 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 05 Oct 2024 12:39:17 GMT Expires: Sun, 06 Oct 2024 11:39:17 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 34538 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-05 22:14:56 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49777	142.250.185.97	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:55 UTC	729	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:56 UTC	788	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 Date: Sat, 05 Oct 2024 22:14:56 GMT Expires: Sun, 06 Oct 2024 21:14:56 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-05 22:14:56 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:55 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:55 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221455Z-1657d5bbd48q6t9vvmrkd293mg000000010000000000krye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:56 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:55 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221455Z-1657d5bbd48qjg85buwfdynm5w000000013000000000qecy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:56 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:55 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:56 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:55 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221455Z-1657d5bbd48t66tjar5xuq22r800000000y000000000vkue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:56 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:55 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:55 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 92e59db7-001e-002b-6700-1799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221455Z-1657d5bbd48xlwdx82gahegw4000000001ag000000007n2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:56 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:55 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:55 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221455Z-1657d5bbd48xdq5dkwwugdpzr000000001e0000000008hc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:56 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49745	142.250.185.78	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:56 UTC	893	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=fnfje1nnfmam&aqid=XLoBZ6WVDrmujuwPsavasAY&psid=7840396037&pbt=bs&adbx=375&adby=178&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=681010707&csala=12%7C0%7C2152%7C1063%7C416&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ofinovardweb.cstrikehost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:56 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-zoE63bR2yR_Ivk8PiM1Btg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sat, 05 Oct 2024 22:14:56 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49785	142.250.185.225	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:57 UTC	487	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:57 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 05 Oct 2024 12:39:17 GMT Expires: Sun, 06 Oct 2024 11:39:17 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 34540 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-05 22:14:57 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49784	142.250.185.225	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:57 UTC	488	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:57 UTC	796	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 05 Oct 2024 22:14:56 GMT Expires: Sun, 06 Oct 2024 21:14:56 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-05 22:14:57 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:57 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:57 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 7709e3c3-b01e-0097-5e02-174f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221457Z-1657d5bbd48jwrqbupe3ktsx9w00000001cg000000000zcm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:57 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:57 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:57 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:57 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1be548a6-001e-00a2-4166-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221457Z-1657d5bbd48sqtlf1huhzuwq7000000000tg00000000emav x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:57 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:57 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:57 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 53f69819-801e-0048-7802-17f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221457Z-1657d5bbd48brl8we3nu8cxwgn00000001cg00000000cmmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:57 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:57 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:57 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221457Z-1657d5bbd48cpbzgkvtewk0wu0000000012000000000te37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:57 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:57 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:57 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:57 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5e879109-c01e-00a2-3e73-172327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221457Z-1657d5bbd482krtfgrg72dfbtn00000000x0000000005fkm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:57 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49787	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:57 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4e 6c 63 75 71 33 38 6b 69 55 4b 4e 61 49 45 63 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 31 31 34 33 36 35 65 35 34 35 64 62 63 31 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Nlcuq38kiUKNaIEc.1Context: f114365e545dbc1b
2024-10-05 22:14:57 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-05 22:14:57 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4e 6c 63 75 71 33 38 6b 69 55 4b 4e 61 49 45 63 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 31 31 34 33 36 35 65 35 34 35 64 62 63 31 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 58 45 6e 39 66 4d 54 56 31 48 4f 6b 36 78 5a 54 34 63 69 4f 74 44 64 41 52 42 4d 77 35 50 31 67 42 55 46 44 32 42 72 39 67 64 6b 6b 33 4f 44 32 67 4f 59 6b 6c 36 6d 70 4d 58 6e 57 54 70 45 39 73 4d 73 4d 74 57 39 53 54 67 76 76 2b 42 39 55 4c 55 66 45 37 76 34 41 67 31 39 6d 78 6a 2b 70 4d 43 70 69 67 69 4e 45 63 67 4a 57 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Nlcuq38kiUKNaIEc.2Context: f114365e545dbc1b<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaXEn9fMTV1HOk6xZT4ciOtDdARBMw5P1gBUFD2Br9gdkk3OD2gOYkl6mpMXnWTpE9sMsMtW9STgvv+B9ULUfE7v4Ag19mxj+pMCpigiNEcgJW
2024-10-05 22:14:57 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4e 6c 63 75 71 33 38 6b 69 55 4b 4e 61 49 45 63 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 31 31 34 33 36 35 65 35 34 35 64 62 63 31 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Nlcuq38kiUKNaIEc.3Context: f114365e545dbc1b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-05 22:14:57 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-05 22:14:57 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 54 62 55 72 67 76 6d 6d 4b 45 57 4d 54 64 2f 7a 61 5a 58 4a 6a 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: TbUrgvmmKEWMTd/zaZXJjw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49789	142.250.185.78	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:57 UTC	893	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=p8d4nmqdogi7&aqid=XLoBZ6WVDrmujuwPsavasAY&psid=7840396037&pbt=bv&adbx=375&adby=178&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=681010707&csala=12%7C0%7C2152%7C1063%7C416&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ofinovardweb.cstrikehost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:57 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-YwsGGFMRrLTvcUTpDLfoRQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sat, 05 Oct 2024 22:14:57 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:57 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:57 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221457Z-1657d5bbd48tqvfc1ysmtbdrg000000000z0000000009nsg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:57 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:57 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:57 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221457Z-1657d5bbd48wd55zet5pcra0cg00000000y000000000s3h7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:57 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:57 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:58 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:57 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221457Z-1657d5bbd48sqtlf1huhzuwq7000000000ug00000000axy6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:58 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:58 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:58 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:58 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221458Z-1657d5bbd48f7nlxc7n5fnfzh000000000tg000000004c33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:58 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:58 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 04801829-801e-00ac-6301-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221458Z-1657d5bbd48t66tjar5xuq22r800000000z000000000r6fk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:59 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:59 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:59 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221459Z-1657d5bbd48lknvp09v995n79000000000pg00000000hdpf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:59 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:59 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:59 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221459Z-1657d5bbd482lxwq1dp2t1zwkc00000000wg000000006d8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:14:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:59 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:59 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:59 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221459Z-1657d5bbd48dfrdj7px744zp8s00000000r000000000sa19 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:59 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:59 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221459Z-1657d5bbd48wd55zet5pcra0cg000000013g000000007rqs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:59 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 938e68e0-901e-0029-0160-17274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221459Z-1657d5bbd48lknvp09v995n79000000000ng00000000p2py x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:59 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221459Z-1657d5bbd48tqvfc1ysmtbdrg00000000110000000003ay9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:59 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:14:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:59 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221459Z-1657d5bbd48qjg85buwfdynm5w000000016g0000000099x0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:14:59 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:59 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:59 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221459Z-1657d5bbd48tzspvqynhg14aes000000018g00000000ubmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:00 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:59 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:00 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221459Z-1657d5bbd482lxwq1dp2t1zwkc00000000xg000000002tk9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:15:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:59 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:59 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221459Z-1657d5bbd48t66tjar5xuq22r8000000012000000000cmsb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:00 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:00 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:00 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221500Z-1657d5bbd482tlqpvyz9e93p54000000016g000000007x9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:00 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:00 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221500Z-1657d5bbd48qjg85buwfdynm5w000000016000000000aegh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:00 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:00 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221500Z-1657d5bbd48tqvfc1ysmtbdrg000000000v000000000rqw8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:00 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:00 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:00 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:00 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221500Z-1657d5bbd48sqtlf1huhzuwq7000000000sg00000000hsr1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:15:00 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:00 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:00 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221500Z-1657d5bbd48t66tjar5xuq22r8000000013g000000006utm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:00 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:01 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:01 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 821e4157-c01e-0014-3301-17a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221501Z-1657d5bbd48qjg85buwfdynm5w000000017g000000006daz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:01 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:01 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:01 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221501Z-1657d5bbd48jwrqbupe3ktsx9w00000001bg0000000047g9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:01 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:01 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:01 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: bfab55ab-401e-0015-6202-170e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221501Z-1657d5bbd48tzspvqynhg14aes00000001bg00000000fq5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:01 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:01 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221501Z-1657d5bbd48sqtlf1huhzuwq7000000000tg00000000emne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:01 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:01 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221501Z-1657d5bbd48tnj6wmberkg2xy8000000016000000000aedg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:01 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49819	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:01 UTC	638	OUT	GET / HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:15:02 UTC	873	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:02 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: private, no-cache, no-store, max-age=0 Expires: Mon, 01 Jan 1990 0:00:00 GMT Set-Cookie: session_id=1095218721;Path=/;Expires=Sat, 05 Oct 2024 22:45:02 GMT;Secure;HttpOnly Set-Cookie: welcome_page=7k9H9LQ6S7P7N9A;Path=/;Expires=Sat, 30 Nov 2024 22:15:02 GMT;Secure;HttpOnly Set-Cookie: glbl_curr=0;Path=/;Secure;HttpOnly Set-Cookie: glbl_curr=0;Path=/;Secure;HttpOnly Set-Cookie: glbl_curr=0;Path=/;Secure;HttpOnly Set-Cookie: glbl_curr=0;Path=/;Secure;HttpOnly Set-Cookie: language_id=0;Path=/;Secure;HttpOnly CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c49cec5d41ec-EWR
2024-10-05 22:15:02 UTC	496	IN	Data Raw: 37 63 33 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 Data Ascii: 7c35<!DOCTYPE html><html xmlns:og="http://ogp.me/ns#"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1, max
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 20 44 79 6e 61 64 6f 74 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 42 75 79 20 61 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 61 74 20 44 79 6e 61 64 6f 74 21 20 47 65 74 20 69 6e 64 75 73 74 72 79 20 6c 6f 77 20 70 72 69 63 65 73 2c 20 32 34 2f 37 20 73 75 70 70 6f 72 74 2c 20 61 6e 64 20 70 6f 77 65 72 66 75 6c 20 66 72 65 65 20 74 6f 6f 6c 73 2e 20 42 75 69 6c 64 20 79 6f 75 72 20 6f 6e 6c 69 6e 65 20 73 75 63 63 65 73 73 20 74 6f 64 61 79 21 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 79 6e 61 64 6f 74 2e 63 6f 6d 2f 22 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 Data Ascii: Dynadot</title><meta name="description" content="Buy a domain name at Dynadot! Get industry low prices, 24/7 support, and powerful free tools. Build your online success today!"><link href="https://www.dynadot.com/" rel="canonical"><meta property="og:type
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 40 69 6d 70 6f 72 74 20 22 2f 74 72 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3b 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 74 79 6c 65 22 20 68 72 65 66 3d 22 2f 74 72 2f 31 37 32 37 38 31 34 37 34 34 32 34 34 6d 61 69 6e 2d 63 6f 6d 70 61 74 2e 63 73 73 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 40 69 6d 70 6f 72 74 20 22 2f 74 72 2f 31 37 32 37 38 31 34 37 34 34 32 34 34 6d 61 69 6e 2d 63 6f 6d 70 61 74 2e 63 73 73 22 3b 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 74 79 6c 65 22 20 68 72 65 66 3d 22 2f 74 Data Ascii: css" media="all">@import "/tr/bootstrap.min.css";</style><link rel="preload" as="style" href="/tr/1727814744244main-compat.css"><style type="text/css" media="all">@import "/tr/1727814744244main-compat.css";</style><link rel="preload" as="style" href="/t
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 40 69 6d 70 6f 72 74 20 22 2f 74 72 2f 31 37 32 37 38 31 34 37 34 34 32 34 34 63 72 6f 70 70 65 72 2e 63 73 73 22 3b 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 48 54 4d 4c 20 7b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 7d 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 39 66 39 66 62 3b 20 64 69 72 65 63 74 69 6f 6e 3a 20 6c 74 72 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 2c 20 22 48 65 6c 76 65 Data Ascii: t/css" media="all">@import "/tr/1727814744244cropper.css";</style><style type="text/css">...HTML {height: 100%;}body {background-color: #f9f9fb; direction: ltr; padding: 0 !important; margin: 0 !important; height: 100%; font-family: 'Open Sans', "Helve
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 77 6e 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 7d 2e 62 74 6e 2e 62 74 6e 2d 34 62 62 65 65 63 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 42 42 45 45 43 3b 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 34 42 42 45 45 43 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 7d 2e 62 74 6e 2e 62 74 6e 2d 34 62 62 65 65 63 3a 68 6f 76 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 41 45 46 39 3b 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 30 30 41 45 46 39 3b 20 63 6f 6c 6f 72 3a Data Ascii: wn {margin: 0; padding: 0; list-style-type: none; overflow: hidden; height: auto;}.btn.btn-4bbeec {background-color: #4BBEEC; border-color: #4BBEEC; color: #fff;outline: none;}.btn.btn-4bbeec:hover {background-color: #00AEF9; border-color: #00AEF9; color:
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 73 20 2d 2d 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 47 2d 53 30 4c 33 42 5a 53 4c 59 42 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 47 2d 53 30 4c 33 42 5a 53 4c 59 42 27 29 3b 3c 2f 73 63 72 69 70 74 3e Data Ascii: s --><script async src="https://www.googletagmanager.com/gtag/js?id=G-S0L3BZSLYB"></script><script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-S0L3BZSLYB');</script>
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 38 27 29 3b 0a 66 62 71 28 27 69 6e 69 74 27 2c 20 27 36 35 35 33 34 38 38 30 39 36 33 39 36 37 36 27 29 3b 0a 66 62 71 28 27 69 6e 69 74 27 2c 20 27 38 32 37 32 37 39 39 38 36 30 37 38 30 30 34 27 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 6e 6f 73 63 72 69 70 74 3e 3c 69 6d 67 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 0a 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 74 72 3f 69 64 3d 31 30 31 33 32 39 38 30 39 32 36 34 38 31 38 30 26 65 76 3d 50 61 67 65 56 69 65 77 26 6e 6f 73 63 72 69 70 74 3d 31 22 0a 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 Data Ascii: 8');fbq('init', '655348809639676');fbq('init', '827279986078004');</script><noscript><img height="1" width="1" style="display:none"src="https://www.facebook.com/tr?id=1013298092648180&ev=PageView&noscript=1"/></noscript><script type="text/javascript
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 4f 66 45 6d 70 6c 6f 79 65 65 73 22 3a 7b 22 6d 69 6e 76 61 6c 75 65 22 3a 22 35 31 22 2c 22 6d 61 78 76 61 6c 75 65 22 3a 22 32 30 30 22 2c 22 40 74 79 70 65 22 3a 22 51 75 61 6e 74 69 74 61 74 69 76 65 56 61 6c 75 65 22 7d 2c 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 74 79 70 65 22 3a 22 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 7d 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 3e 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 79 6e 61 64 6f 74 2e 63 6f 6d 22 2c 22 70 6f 74 65 6e 74 69 61 6c 41 63 74 69 6f 6e 22 3a 7b 22 74 61 72 67 65 74 22 3a 7b 22 75 72 6c 54 65 6d 70 6c 61 74 65 22 3a 22 68 74 74 70 Data Ascii: OfEmployees":{"minvalue":"51","maxvalue":"200","@type":"QuantitativeValue"},"@context":"http://schema.org","@type":"Organization"}</script><script type="application/ld+json">{"url":"https://www.dynadot.com","potentialAction":{"target":{"urlTemplate":"http
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 69 67 6e 3a 20 63 65 6e 74 65 72 3b 7d 2e 61 6c 65 72 74 2d 70 72 6f 6d 6f 74 65 2d 76 32 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 63 6c 65 61 72 20 7b 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 7d 2e 61 6c 65 72 74 2d 70 72 6f 6d 6f 74 65 2d 76 32 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 63 6c 65 61 72 20 69 20 7b 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 7d 2e 61 6c 65 72 74 2d 70 72 6f 6d 6f 74 65 2d 76 32 20 3e 20 64 69 76 20 20 7b 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 66 6c 65 78 3a 20 31 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 7d 2e 61 6c 65 72 74 2d 70 72 6f 6d 6f 74 65 2d 76 32 20 3e 20 64 69 76 20 3e 20 23 61 6c 65 72 74 73 2d 6d 73 67 20 7b 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 33 70 78 3b 66 6c Data Ascii: ign: center;}.alert-promote-v2 .btn-primary-clear {color: #FFF;}.alert-promote-v2 .btn-primary-clear i {color: #FFF;}.alert-promote-v2 > div {display: flex; flex: 1; align-items: center;}.alert-promote-v2 > div > #alerts-msg {padding: 9px 13px;fl
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 2c 20 32 34 37 2c 20 30 2e 31 29 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 7d 2e 61 6c 65 72 74 2d 70 72 6f 6d 6f 74 65 2d 76 32 20 3e 20 64 69 76 20 3e 20 73 70 61 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 6c 69 73 74 20 2e 69 74 65 6d 73 70 61 63 65 2d 74 6f 70 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 7d 2e 61 6c 65 72 74 2d 70 72 6f 6d 6f 74 65 2d 76 32 20 3e 20 64 69 76 20 3e 20 73 70 61 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 6c 69 73 74 20 3e 20 6c 69 20 3e 20 61 20 20 7b 63 6f 6c 6f 72 3a 20 23 46 42 46 44 46 46 3b 7d 2e 61 6c 65 72 74 2d 70 72 6f 6d 6f 74 65 2d 76 32 20 3e 20 64 69 76 20 3e 20 73 70 61 6e 3a 6e 74 68 2d 63 Data Ascii: , 247, 0.1); border-radius: 6px;}.alert-promote-v2 > div > span:nth-child(2) .dropdown-menu-list .itemspace-top {margin: 0;}.alert-promote-v2 > div > span:nth-child(2) .dropdown-menu-list > li > a {color: #FBFDFF;}.alert-promote-v2 > div > span:nth-c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49818	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:02 UTC	638	OUT	GET /tr/bootstrap.min.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:02 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:02 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:02 GMT CF-Cache-Status: HIT Age: 351749 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4a10b200ca6-EWR
2024-10-05 22:15:02 UTC	941	IN	Data Raw: 37 64 66 32 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 34 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 32 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 Data Ascii: 7df2/! Bootstrap v3.3.4 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.2 \| MIT License \| git.io/normalize */html{font-family:sans
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 31 65 6d 20 34 30 70 78 7d 68 72 7b 68 65 69 67 68 74 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 70 72 65 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 Data Ascii: (:root){overflow:hidden}figure{margin:1em 40px}hr{height:0;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,tex
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 72 63 2f 63 73 73 2f 6d 61 69 6e 2e 63 73 73 20 2a 2f 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 61 2c 61 3a 76 69 73 69 74 65 64 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 61 5b 68 72 65 66 5d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 28 22 20 61 74 74 72 28 68 72 65 66 Data Ascii: rc/css/main.css /@media print{,:after,:before{color:#000!important;text-shadow:none!important;background:0 0!important;-webkit-box-shadow:none!important;box-shadow:none!important}a,a:visited{text-decoration:underline}a[href]:after{content:" (" attr(href
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 31 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6c 79 70 68 69 63 6f 6e 73 20 48 61 6c 66 6c 69 6e 67 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 61 73 74 65 72 69 73 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 32 61 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 75 73 3a 62 65 Data Ascii: ition:relative;top:1px;display:inline-block;font-family:'Glyphicons Halflings';font-style:normal;font-weight:400;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.glyphicon-asterisk:before{content:"\2a"}.glyphicon-plus:be
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 65 6e 74 3a 22 5c 65 30 32 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 64 6f 77 6e 6c 6f 61 64 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 6e 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 61 79 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: ent:"\e023"}.glyphicon-road:before{content:"\e024"}.glyphicon-download-alt:before{content:"\e025"}.glyphicon-download:before{content:"\e026"}.glyphicon-upload:before{content:"\e027"}.glyphicon-inbox:before{content:"\e028"}.glyphicon-play-circle:before{con
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 6e 64 65 6e 74 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 6e 64 65 6e 74 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 61 63 65 74 69 6d 65 2d 76 69 64 65 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 69 63 74 75 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 36 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 61 70 2d 6d 61 72 6b 65 72 3a 62 65 66 6f 72 65 7b 63 Data Ascii: "}.glyphicon-list:before{content:"\e056"}.glyphicon-indent-left:before{content:"\e057"}.glyphicon-indent-right:before{content:"\e058"}.glyphicon-facetime-video:before{content:"\e059"}.glyphicon-picture:before{content:"\e060"}.glyphicon-map-marker:before{c
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 61 6e 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 39 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 39 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 61 72 72 6f 77 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 39 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 39 33 22 7d 2e 67 6c Data Ascii: ircle:before{content:"\e088"}.glyphicon-ok-circle:before{content:"\e089"}.glyphicon-ban-circle:before{content:"\e090"}.glyphicon-arrow-left:before{content:"\e091"}.glyphicon-arrow-right:before{content:"\e092"}.glyphicon-arrow-up:before{content:"\e093"}.gl
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 62 75 6c 6c 68 6f 72 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 32 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 32 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 65 72 74 69 66 69 63 61 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 32 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 75 6d 62 73 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 32 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 75 6d 62 73 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 32 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 61 6e 64 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 32 37 22 7d 2e 67 6c Data Ascii: bullhorn:before{content:"\e122"}.glyphicon-bell:before{content:"\e123"}.glyphicon-certificate:before{content:"\e124"}.glyphicon-thumbs-up:before{content:"\e125"}.glyphicon-thumbs-down:before{content:"\e126"}.glyphicon-hand-right:before{content:"\e127"}.gl
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 68 69 63 6f 6e 2d 73 6f 72 74 2d 62 79 2d 6f 72 64 65 72 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 72 74 2d 62 79 2d 61 74 74 72 69 62 75 74 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 72 74 2d 62 79 2d 61 74 74 72 69 62 75 74 65 73 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 75 6e 63 68 65 63 6b 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 78 70 61 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f Data Ascii: hicon-sort-by-order-alt:before{content:"\e154"}.glyphicon-sort-by-attributes:before{content:"\e155"}.glyphicon-sort-by-attributes-alt:before{content:"\e156"}.glyphicon-unchecked:before{content:"\e157"}.glyphicon-expand:before{content:"\e158"}.glyphicon-co
2024-10-05 22:15:02 UTC	1369	IN	Data Raw: 6f 6e 2d 73 74 61 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 64 2d 76 69 64 65 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 64 2d 76 69 64 65 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 75 62 74 69 74 6c 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 75 6e 64 2d 73 74 65 72 65 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 75 6e 64 2d 64 6f 6c 62 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 39 30 22 7d Data Ascii: on-stats:before{content:"\e185"}.glyphicon-sd-video:before{content:"\e186"}.glyphicon-hd-video:before{content:"\e187"}.glyphicon-subtitles:before{content:"\e188"}.glyphicon-sound-stereo:before{content:"\e189"}.glyphicon-sound-dolby:before{content:"\e190"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:02 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221502Z-1657d5bbd482tlqpvyz9e93p54000000014000000000g7sq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:02 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:02 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221502Z-1657d5bbd48sdh4cyzadbb3748000000010g000000002y7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:02 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:02 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 3c7823fd-401e-0015-0c60-170e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221502Z-1657d5bbd48xsz2nuzq4vfrzg800000000y000000000en0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:02 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:02 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb96d6a-f01e-003f-17e5-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221502Z-1657d5bbd48vhs7r2p1ky7cs5w00000001c000000000f37t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:02 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:02 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 2f576d96-401e-0047-3902-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221502Z-1657d5bbd48f7nlxc7n5fnfzh000000000r000000000cz8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49827	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:03 UTC	649	OUT	GET /tr/1727814744244main-compat.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:03 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:03 GMT CF-Cache-Status: HIT Age: 225407 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4a4281a4322-EWR
2024-10-05 22:15:03 UTC	941	IN	Data Raw: 34 64 63 35 0d 0a 2f 2a 54 4f 44 4f 20 6d 6f 76 65 20 74 68 65 73 65 20 63 73 73 20 74 6f 20 74 65 6d 70 6c 61 74 65 20 73 79 74 6c 65 20 28 29 3b 2a 2f 0a 2e 70 61 67 65 2d 74 6f 70 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 78 3a 20 63 65 6e 74 65 72 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 79 3a 20 74 6f 70 3b 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 7d 0a 0a 2e 70 61 67 65 2d 74 6f 70 2d 74 69 74 6c 65 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 09 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 63 61 70 69 74 61 6c 69 7a 65 3b Data Ascii: 4dc5/TODO move these css to template sytle ();/.page-top-container {padding-top: 10px;padding-bottom: 10px;background-position-x: center;background-position-y: top;color: #FFF;}.page-top-title {color: #fff;text-transform: capitalize;
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 34 32 30 35 36 3b 0a 7d 0a 0a 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 2d 73 65 63 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 36 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 36 35 70 78 3b 0a 7d 0a 0a 2e 68 65 61 64 69 6e 67 2d 6e 6f 72 6d 61 6c 69 7a 65 64 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 32 30 70 78 3b 0a 7d 0a 0a 64 69 76 2e 70 61 67 65 2d 74 6f 70 2d 74 69 74 6c 65 2d 63 61 70 74 69 6c 69 7a 65 20 7b 0a 09 Data Ascii: {background-color: #F42056;}.page-content-section-container {height: auto;padding-top: 65px;padding-bottom: 65px;}.heading-normalized-container {height: auto;padding-top: 100px;padding-bottom: 120px;}div.page-top-title-captilize {
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 0a 64 69 76 23 63 61 72 74 2d 77 72 61 70 70 65 72 20 68 33 20 7b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 09 63 6f 6c 6f 72 3a 20 23 35 35 35 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 36 70 78 3b 0a 7d 0a 0a 64 69 76 23 63 61 72 74 2d 77 72 61 70 70 65 72 20 74 61 62 6c 65 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 20 33 30 33 70 78 3b 0a 7d 0a 0a 64 69 76 23 63 61 72 74 2d 77 72 61 70 70 65 72 20 2e 62 Data Ascii: height: auto;clear: both;}div#cart-wrapper h3 {padding-top: 0;font-size: 20px;font-weight: bold;color: #555;margin: 0;padding-bottom: 26px;}div#cart-wrapper table {padding: 0;width: 100%;min-width: 303px;}div#cart-wrapper .b
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 67 68 74 3a 20 34 30 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 64 69 76 2e 61 6c 65 72 74 2d 62 61 72 20 2e 61 6c 65 72 74 2d 62 61 72 2d 69 6e 6e 65 72 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 20 36 30 30 70 78 3b 0a 7d 0a 0a 64 69 76 2e 61 6c 65 72 74 2d 62 61 72 2d 69 6e 6e 65 72 20 61 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 09 74 65 Data Ascii: ght: 40px;margin: 0 auto;padding: 0;font-size: 15px;font-weight: 300;color: #FFFFFF;position: relative;overflow: hidden;}div.alert-bar .alert-bar-inner {max-width: 100%;min-width: 600px;}div.alert-bar-inner a {color: #FFFFFF;te
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 30 70 78 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 77 69 64 74 68 3a 20 31 32 30 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 32 61 35 65 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 61 2e 62 75 74 74 6f 6e 2d 72 65 64 2d 62 6f 64 65 72 65 64 3a 68 6f 76 65 72 2c 20 64 69 76 2e 62 75 74 74 6f 6e 2d 72 65 64 2d 62 6f 64 65 72 65 64 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 32 61 35 65 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 61 Data Ascii: 0px;text-decoration: none;width: 120px;text-align: center;text-transform: uppercase;color: #ff2a5e;cursor: pointer;}a.button-red-bodered:hover, div.button-red-bodered:hover {color: #fff;background-color: #ff2a5e;font-weight: 400;}a
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 09 77 69 64 74 68 3a 20 37 34 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 37 34 70 78 3b 0a 7d 0a 0a 2e 70 68 6f 74 6f 2d 6f 70 61 63 69 74 79 20 7b 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 38 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 6e 67 2d 62 69 6e 64 69 6e 67 20 7b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 38 70 78 3b 0a 7d 0a 0a 2e 66 69 6c 65 69 6e 70 75 74 2d 62 75 74 74 6f 6e 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 66 69 6c 65 69 6e 70 75 74 2d 62 Data Ascii: der-radius: 3px;width: 74px;height: 74px;}.photo-opacity {opacity: 0.8 !important;z-index: 0 !important;}.ng-binding {padding-top: 18px;}.fileinput-button {position: relative;overflow: hidden;display: inline-block;}.fileinput-b
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 64 20 7b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 20 34 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 68 65 69 67 68 74 3a 20 32 36 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 42 41 35 44 38 30 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 64 72 6f 70 6d 65 6e 75 2d 64 61 74 61 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4f 70 65 6e 20 53 61 6e 73 22 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 66 6f 6e 74 2d Data Ascii: d {border-radius: 3px;min-width: 40px !important;height: 26px;color: #FFF;font-size: 14px;background-color: #BA5D80;width: 100% !important;}.dropmenu-data {font-family: "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;font-
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 6e 65 2d 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 7d 0a 0a 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2d 64 6f 6d 61 69 6e 2d 6d 73 67 3e 73 70 61 6e 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 7d 0a 0a 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2d 6f 72 64 65 72 2d 6d 73 67 3e 73 70 61 6e 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 7d 0a 0a 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 61 3a 68 6f 76 65 72 20 7b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 61 3a 6c 69 6e 6b 20 7b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f Data Ascii: ne-height: 60px;}.notifications-domain-msg>span {color: #FFF;line-height: 60px;}.notifications-order-msg>span {color: #FFF;line-height: 60px;}.dropdown-menu a:hover {text-decoration: none;}.dropdown-menu a:link {text-decoration: no
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 72 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 37 38 42 44 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0a 7d 0a 0a 2e 76 69 65 77 2d 62 75 74 74 6f 6e 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 3a 68 6f 76 65 72 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 35 46 36 46 37 3b 0a 7d 0a 0a 2e 76 69 65 77 2d 62 75 74 74 6f 6e 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 3a 61 63 74 69 76 65 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 36 65 36 65 36 3b 0a 7d 0a 0a 2e 76 69 65 77 2d 62 75 74 74 6f 6e 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 3e 61 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 37 38 42 44 3b 0a 7d 0a 0a 2f 2a 20 Data Ascii: r;font-size: 14px;color: #0078BD;border-radius: 3px;height: 38px;}.view-button-notification:hover {background: #F5F6F7;}.view-button-notification:active {background: #e6e6e6;}.view-button-notification>a:hover {color: #0078BD;}/*
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 09 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 20 73 65 70 61 72 61 74 65 3b 0a 09 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 20 36 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 74 61 62 6c 65 2d 73 68 6f 70 70 69 6e 67 63 61 72 64 2d 69 74 65 6d 73 20 7b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 35 70 78 3b 0a 7d 0a 0a 2e 74 61 62 6c 65 2d 73 68 6f 70 70 69 6e 67 63 61 72 64 2d 76 61 6c 75 65 20 7b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 32 35 70 78 3b 0a 7d 0a 0a 2e 74 61 62 6c 65 2d 73 68 6f 70 70 69 6e 67 63 61 72 64 2d 73 75 62 74 6f 74 61 6c 20 7b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 35 70 78 3b 0a 7d 0a 0a 2e 74 61 62 6c 65 2d 73 68 6f 70 70 69 6e 67 63 61 72 64 2d 74 6f 74 61 6c 20 7b 0a Data Ascii: border-collapse: separate;border-spacing: 6px;width: 100%;}.table-shoppingcard-items {padding-left: 25px;}.table-shoppingcard-value {padding-right: 25px;}.table-shoppingcard-subtotal {padding-left: 25px;}.table-shoppingcard-total {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49828	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:03 UTC	647	OUT	GET /tr/general-font-param2023.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:03 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:03 GMT CF-Cache-Status: HIT Age: 351750 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4a41b01c42a-EWR
2024-10-05 22:15:03 UTC	941	IN	Data Raw: 39 64 31 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 0a 2e 73 77 61 6e 73 65 61 2d 68 31 20 7b 20 2f 2a 20 48 31 20 2d 20 53 77 61 6e 73 65 61 20 42 6f 6c 64 20 2d 20 37 32 20 2a 2f 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 77 61 6e 73 65 61 2d 62 6f 6c 64 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 32 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 37 34 70 78 3b 0a 20 20 20 20 2f 2a 20 69 64 65 6e 74 69 63 61 6c 20 74 6f 20 62 6f 78 20 68 65 69 67 68 74 2c 20 6f 72 20 31 30 33 25 20 2a 2f 0a 20 20 20 20 6c 65 74 74 65 72 Data Ascii: 9d1@charset "UTF-8";.swansea-h1 { /* H1 - Swansea Bold - 72 / font-family: 'Swansea-bold', sans-serif; font-style: normal; font-weight: 700; font-size: 72px; line-height: 74px; / identical to box height, or 103% */ letter
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 69 64 65 6e 74 69 63 61 6c 20 74 6f 20 62 6f 78 20 68 65 69 67 68 74 2c 20 6f 72 20 31 31 35 25 20 2a 2f 0a 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 30 2e 30 31 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2e 73 77 61 6e 73 65 61 2d 68 35 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 77 61 6e 73 65 61 2d 62 6f 6c 64 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 32 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0a 20 20 20 20 2f 2a 20 69 64 65 6e 74 69 63 61 6c 20 74 Data Ascii: identical to box height, or 115% / letter-spacing: -0.01em; color: #000000;}.swansea-h5 { font-family: 'Swansea-bold', sans-serif; font-style: normal; font-weight: 700; font-size: 32px; line-height: 38px; / identical t
2024-10-05 22:15:03 UTC	210	IN	Data Raw: 67 75 6c 61 72 20 2d 20 31 34 20 2a 2f 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 77 69 74 7a 65 72 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 20 20 20 20 2f 2a 20 69 64 65 6e 74 69 63 61 6c 20 74 6f 20 62 6f 78 20 68 65 69 67 68 74 2c 20 6f 72 20 31 35 37 25 20 2a 2f 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0d 0a Data Ascii: gular - 14 / font-family: 'Switzer', sans-serif; font-style: normal; font-weight: 400; font-size: 14px; line-height: 22px; / identical to box height, or 157% */ color: #000000;}
2024-10-05 22:15:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49825	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:03 UTC	655	OUT	GET /tr/1727814744244responsive-compat.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:03 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:03 GMT CF-Cache-Status: HIT Age: 351750 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4a429197cae-EWR
2024-10-05 22:15:03 UTC	941	IN	Data Raw: 34 35 31 62 0d 0a 40 6d 65 64 69 61 20 28 20 6d 61 78 2d 77 69 64 74 68 20 3a 20 35 34 39 70 78 29 20 7b 0a 09 2f 2a 20 6d 61 69 6e 20 73 69 74 65 20 63 73 73 2a 2f 0a 09 68 32 20 7b 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 09 09 2f 2a 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 2a 2f 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 38 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 30 3b 0a 09 09 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b 0a 09 7d 0a 09 68 33 20 7b 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 09 09 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 09 09 66 Data Ascii: 451b@media ( max-width : 549px) {/* main site css/h2 {font-weight: 100;/text-transform: uppercase;*/font-size: 28px;padding: 10px 0;margin: 10px 0;letter-spacing: 1px;}h3 {font-weight: 100;text-transform: uppercase;f
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 72 69 67 68 74 3a 20 30 3b 0a 09 7d 0a 09 2e 70 61 67 65 2d 62 6f 74 74 6f 6d 2d 6d 65 6e 75 2d 64 72 6f 70 64 6f 77 6e 20 7b 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 7d 0a 09 75 6c 2e 6e 61 76 69 67 61 74 69 6f 6e 20 7b 0a 09 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 09 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 09 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 09 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 09 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 09 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a Data Ascii: right: 0;}.page-bottom-menu-dropdown {text-align: center;}ul.navigation {list-style: none;padding: 0;margin: 0;width: 100%;-moz-user-select: none;-webkit-user-select: none;-ms-user-select: none;-khtml-user-select: none;
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 69 6e 67 3a 20 34 70 78 20 35 70 78 20 37 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 09 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2e 62 75 6c 6c 65 74 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 7d 0a 09 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2e 62 75 6c 6c 65 74 2d 72 69 67 68 74 3a 61 66 74 65 72 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 7d 0a 09 2e 74 6f 70 62 61 72 2d 66 75 6e 63 74 69 6f 6e 2d 64 72 6f 70 64 6f 77 6e 3e 6c 69 3e 61 20 7b 0a 09 09 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 35 70 78 20 35 70 78 20 32 31 70 78 3b 0a 09 7d 0a 09 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 69 74 65 6d 73 2d 75 73 64 3e 6c 69 3e 61 20 7b 0a 09 09 70 61 64 64 69 6e Data Ascii: ing: 4px 5px 7px !important;}.dropdown-menu.bullet-right:before {display: none;}.dropdown-menu.bullet-right:after {display: none;}.topbar-function-dropdown>li>a {padding: 5px 15px 5px 21px;}.dropdown-menu-items-usd>li>a {paddin
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 64 20 23 44 41 45 33 45 39 3b 0a 09 7d 0a 09 2e 62 75 6c 6c 65 74 2d 72 69 67 68 74 3e 6c 69 3e 61 20 7b 0a 09 09 70 61 64 64 69 6e 67 3a 20 32 70 78 20 31 35 70 78 20 32 70 78 20 32 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 09 2e 73 69 74 65 2d 66 75 6e 63 74 69 6f 6e 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 09 2e 73 69 74 65 2d 66 75 6e 63 74 69 6f 6e 2d 64 72 6f 70 64 6f 77 6e 20 7b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 62 65 65 66 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 09 2e 73 69 74 65 2d 66 75 6e 63 74 69 6f 6e 2d 64 72 6f 70 64 6f 77 6e 3e 6c 69 20 7b 0a 09 09 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 09 7d 0a 09 2e Data Ascii: d #DAE3E9;}.bullet-right>li>a {padding: 2px 15px 2px 25px !important;}.site-function {padding-left: 15px !important;}.site-function-dropdown {background-color: #ebeef0 !important;}.site-function-dropdown>li {height: 60px;}.
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 38 70 78 3b 0a 09 7d 0a 09 2f 2a 61 6c 65 72 74 20 62 61 72 2a 2f 0a 09 2e 61 6c 65 72 74 2d 70 72 6f 6d 6f 74 65 20 7b 0a 09 09 70 61 64 64 69 6e 67 3a 20 31 35 70 78 3b 0a 09 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0a 09 7d 0a 09 2e 61 6c 65 72 74 2d 73 69 74 65 2d 6d 61 69 6e 74 65 6e 61 6e 63 65 20 7b 0a 09 09 70 61 64 64 69 6e 67 3a 20 31 35 70 78 3b 0a 09 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0a 09 7d 0a 09 2e 63 6c 6f 73 65 2d 61 6c 65 72 74 2d 73 69 74 65 2d 62 61 72 20 7b 0a 09 09 74 6f 70 3a 20 2d 31 70 78 3b 0a 09 09 72 69 67 68 74 3a 20 2d 33 70 78 3b 0a 09 7d 0a 09 2e 61 6c 65 72 74 2d 73 69 74 65 2d 6d 61 Data Ascii: dding-right: 10px;padding-top: 8px;}/alert bar/.alert-promote {padding: 15px;margin-left: 20px;}.alert-site-maintenance {padding: 15px;margin-left: 20px;}.close-alert-site-bar {top: -1px;right: -3px;}.alert-site-ma
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 77 6e 20 7b 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 7d 0a 09 75 6c 2e 6e 61 76 69 67 61 74 69 6f 6e 20 7b 0a 09 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 09 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 09 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 09 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 09 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 09 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 09 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 7d 0a 09 75 6c 2e 73 75 62 6e 61 76 3e 6c 69 3e Data Ascii: wn {text-align: center;}ul.navigation {list-style: none;padding: 0;margin: 0;width: 100%;-moz-user-select: none;-webkit-user-select: none;-ms-user-select: none;-khtml-user-select: none;user-select: none;}ul.subnav>li>
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 35 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 36 70 78 20 31 32 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 37 35 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 36 70 78 20 31 32 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 37 35 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 74 6f 70 3a 20 33 30 70 78 Data Ascii: position: absolute !important;background-color: #fff !important;border: 1px solid rgba(0, 0, 0, .15) !important;-webkit-box-shadow: 0 6px 12px rgba(0, 0, 0, .175) !important;box-shadow: 0 6px 12px rgba(0, 0, 0, .175) !important;top: 30px
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 6e 3e 6c 69 3e 61 20 7b 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 36 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 63 6f 6c 6f 72 3a 20 23 33 33 33 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 09 2e 73 69 74 65 2d 66 75 6e 63 74 69 6f 6e 2d 64 72 6f 70 64 6f 77 6e 3e 6c 69 3e 61 3a 68 6f 76 65 72 20 7b 0a 09 09 63 6f 6c 6f 72 3a 20 23 46 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 37 32 43 33 35 3b 0a 09 7d 0a 09 2e 73 69 74 65 2d 66 75 6e 63 74 69 6f 6e 2d 69 74 65 6d 73 2d 62 75 74 74 6f 6d 20 7b 0a 09 09 6d 61 72 67 69 6e 2d 62 6f 74 Data Ascii: n>li>a {font-size: 14px;line-height: 60px !important;padding-left: 23px !important;color: #333 !important;}.site-function-dropdown>li>a:hover {color: #FFF !important;background: #272C35;}.site-function-items-buttom {margin-bot
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 30 3b 0a 09 09 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b 0a 09 7d 0a 09 68 34 20 7b 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 09 09 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 3a 20 38 70 78 20 30 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 38 70 78 20 30 3b 0a 09 09 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b 0a 09 7d 0a 09 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 09 6d 61 Data Ascii: form: uppercase;font-size: 20px;padding: 10px 0;margin: 10px 0;letter-spacing: 1px;}h4 {font-weight: 100;text-transform: uppercase;font-size: 14px;padding: 8px 0;margin: 8px 0;letter-spacing: 1px;}.page-content {ma
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 3a 20 32 31 30 70 78 3b 0a 09 7d 0a 09 2e 66 61 2d 75 73 65 72 2d 6d 65 73 73 61 67 65 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 09 2e 6e 61 76 62 61 72 20 7b 0a 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 70 78 3b 0a 09 7d 0a 09 2e 73 75 62 2d 6e 61 76 62 61 72 20 7b 0a 09 09 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 09 7d 0a 09 61 2e 6e 61 76 62 61 72 2d 6c 6f 67 6f 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 09 68 65 69 67 68 74 3a 20 30 3b 0a 09 09 77 69 64 74 68 3a 20 31 31 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 3a 20 31 32 70 78 20 30 3b 0a 09 7d 0a 09 61 2e 6e 61 76 62 61 72 2d 6c 6f 67 6f 3e 69 6d 67 20 7b 0a 09 09 68 65 69 67 68 74 3a 20 Data Ascii: -left: 210px;}.fa-user-message {display: none !important;}.navbar {border-radius: 0px;}.sub-navbar {height: 60px;}a.navbar-logo {display: block;height: 0;width: 110px;padding: 12px 0;}a.navbar-logo>img {height:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49826	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:03 UTC	646	OUT	GET /fontawesome6/css/all.min.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:03 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:03 GMT CF-Cache-Status: HIT Age: 351750 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4a43a039e1a-EWR
2024-10-05 22:15:03 UTC	941	IN	Data Raw: 37 64 66 32 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 50 72 6f 20 36 2e 31 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 28 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 32 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 2d 66 61 6d 69 6c 79 2c 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 Data Ascii: 7df2/! Font Awesome Pro 6.1.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license (Commercial License) * Copyright 2022 Fonticons, Inc. */.fa{font-family:var(--fa-style-family,"Font Awesome 6 Pro");font-weight:v
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2e 30 35 33 35 37 65 6d 7d 2e 66 61 2d 6c 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 30 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 30 37 35 65 6d 7d 2e 66 61 2d 78 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 30 34 31 36 37 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 31 32 35 65 6d 7d 2e 66 61 2d 32 78 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 30 33 31 32 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 31 38 37 35 65 6d 7d 2e 66 61 2d 66 77 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 2e 32 Data Ascii: rtical-align:.05357em}.fa-lg{font-size:1.25em;line-height:.05em;vertical-align:-.075em}.fa-xl{font-size:1.5em;line-height:.04167em;vertical-align:-.125em}.fa-2xl{font-size:2em;line-height:.03125em;vertical-align:-.1875em}.fa-fw{text-align:center;width:1.2
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 65 61 73 65 2d 69 6e 2d 6f 75 74 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 65 61 73 65 2d 69 6e 2d 6f 75 74 29 7d 2e 66 61 2d 62 6f 75 6e 63 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 6f 75 6e 63 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 6f 75 6e 63 65 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 Data Ascii: ebkit-animation-timing-function:var(--fa-animation-timing,ease-in-out);animation-timing-function:var(--fa-animation-timing,ease-in-out)}.fa-bounce{-webkit-animation-name:fa-bounce;animation-name:fa-bounce;-webkit-animation-delay:var(--fa-animation-delay,0
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 7d 2e 66 61 2d 62 65 61 74 2d 66 61 64 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 2d Data Ascii: ction:var(--fa-animation-direction,normal);animation-direction:var(--fa-animation-direction,normal);-webkit-animation-duration:var(--fa-animation-duration,1s);animation-duration:var(--fa-animation-duration,1s)}.fa-beat-fade{-webkit-animation-name:fa-beat-
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 Data Ascii: on:var(--fa-animation-duration,1s);animation-duration:var(--fa-animation-duration,1s);-webkit-animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-iteration-count:var(--fa-animation-iteration-count,infinite);-webkit-animation-t
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 73 Data Ascii: on-duration:var(--fa-animation-duration,1s);-webkit-animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-iteration-count:var(--fa-animation-iteration-count,infinite);-webkit-animation-timing-function:var(--fa-animation-timing,s
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6a 75 6d 70 2d 73 63 61 6c 65 2d 78 2c 2e 39 29 2c 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6a 75 6d 70 2d 73 63 61 6c 65 2d 79 2c 31 2e 31 29 29 20 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 68 65 69 67 68 74 2c 2d 2e 35 65 6d 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6a 75 6d 70 2d 73 63 61 6c 65 2d 78 2c 2e 39 29 2c 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6a 75 6d 70 2d 73 63 61 6c 65 2d 79 2c 31 2e 31 29 29 20 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 68 65 69 67 68 74 2c 2d 2e 35 65 6d 29 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f Data Ascii: var(--fa-bounce-jump-scale-x,.9),var(--fa-bounce-jump-scale-y,1.1)) translateY(var(--fa-bounce-height,-.5em));transform:scale(var(--fa-bounce-jump-scale-x,.9),var(--fa-bounce-jump-scale-y,1.1)) translateY(var(--fa-bounce-height,-.5em))}50%{-webkit-transfo
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 61 6c 65 2d 78 2c 31 2e 30 35 29 2c 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6c 61 6e 64 2d 73 63 61 6c 65 2d 79 2c 2e 39 35 29 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6c 61 6e 64 2d 73 63 61 6c 65 2d 78 2c 31 2e 30 35 29 2c 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6c 61 6e 64 2d 73 63 61 6c 65 2d 79 2c 2e 39 35 29 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 35 37 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 72 65 62 6f 75 6e 64 2c 2d 2e 31 32 35 65 6d 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 Data Ascii: ale-x,1.05),var(--fa-bounce-land-scale-y,.95)) translateY(0);transform:scale(var(--fa-bounce-land-scale-x,1.05),var(--fa-bounce-land-scale-y,.95)) translateY(0)}57%{-webkit-transform:scale(1) translateY(var(--fa-bounce-rebound,-.125em));transform:scale(1)
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 66 61 2d 66 6c 69 70 2d 78 2c 30 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 79 2c 31 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 7a 2c 30 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 61 6e 67 6c 65 2c 2d 31 38 30 64 65 67 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 33 64 28 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 78 2c 30 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 79 2c 31 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 7a 2c 30 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 61 6e 67 6c 65 2c 2d 31 38 30 64 65 67 29 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 68 61 6b 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 35 64 65 67 29 3b 74 72 61 Data Ascii: fa-flip-x,0),var(--fa-flip-y,1),var(--fa-flip-z,0),var(--fa-flip-angle,-180deg));transform:rotate3d(var(--fa-flip-x,0),var(--fa-flip-y,1),var(--fa-flip-z,0),var(--fa-flip-angle,-180deg))}}@-webkit-keyframes fa-shake{0%{-webkit-transform:rotate(-15deg);tra
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 Data Ascii: pin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49835	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:03 UTC	651	OUT	GET /fontawesome6/css/v4-shims.min.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:03 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:03 GMT CF-Cache-Status: HIT Age: 351750 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4a7eca78ce8-EWR
2024-10-05 22:15:03 UTC	941	IN	Data Raw: 36 35 64 31 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 50 72 6f 20 36 2e 31 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 28 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 32 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 2e 66 61 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 Data Ascii: 65d1/! Font Awesome Pro 6.1.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license (Commercial License) * Copyright 2022 Fonticons, Inc. */.fa.fa-glass:before{content:"\f000"}.fa.fa-envelope-o{font-family:"Font A
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6f 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 38 22 7d 2e 66 61 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6f 2d 75 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6f 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 62 22 7d 2e 66 61 2e 66 61 2d 70 6c 61 79 2d 63 69 72 63 6c 65 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 70 6c 61 79 2d 63 69 72 63 6c 65 2d 6f 3a Data Ascii: rrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-arrow-circle-o-up:before{content:"\f35b"}.fa.fa-play-circle-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-play-circle-o:
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 74 69 6d 65 73 2d 63 69 72 63 6c 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 37 22 7d 2e 66 61 2e 66 61 2d 63 68 65 63 6b 2d 63 69 72 63 6c 65 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 63 68 65 63 6b 2d 63 69 72 63 6c 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 38 22 7d 2e 66 61 2e 66 61 2d 6d 61 69 6c 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 34 22 7d 2e 66 61 2e 66 61 2d 65 78 70 61 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: Pro";font-weight:400}.fa.fa-times-circle-o:before{content:"\f057"}.fa.fa-check-circle-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-check-circle-o:before{content:"\f058"}.fa.fa-mail-forward:before{content:"\f064"}.fa.fa-expand:before{content:"
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 6c 65 6d 6f 6e 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 6c 65 6d 6f 6e 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 34 22 7d 2e 66 61 2e 66 61 2d 73 71 75 61 72 65 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2e Data Ascii: mily:"Font Awesome 6 Brands";font-weight:400}.fa.fa-lemon-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-lemon-o:before{content:"\f094"}.fa.fa-square-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-square-o:before{content:"\f0c8"}.fa.
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 2e 66 61 2e 66 61 2d 61 72 72 6f 77 73 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 31 65 22 7d 2e 66 61 2e 66 61 2d 67 72 6f 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 30 22 7d 2e 66 61 2e 66 61 2d 63 68 61 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 31 22 7d 2e 66 61 2e 66 61 2d 63 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 34 22 7d 2e 66 61 2e 66 61 2d 66 69 6c 65 73 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 66 69 6c 65 73 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 35 22 7d 2e 66 61 2e 66 61 Data Ascii: .fa.fa-arrows-alt:before{content:"\f31e"}.fa.fa-group:before{content:"\f0c0"}.fa.fa-chain:before{content:"\f0c1"}.fa.fa-cut:before{content:"\f0c4"}.fa.fa-files-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-files-o:before{content:"\f0c5"}.fa.fa
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 74 3a 22 5c 66 30 65 37 22 7d 2e 66 61 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 36 32 22 7d 2e 66 61 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2e 66 61 2d 63 6c 6f 75 Data Ascii: t:"\f0e7"}.fa.fa-clipboard:before{content:"\f0ea"}.fa.fa-lightbulb-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-lightbulb-o:before{content:"\f0eb"}.fa.fa-exchange:before{content:"\f362"}.fa.fa-cloud-download:before{content:"\f0ed"}.fa.fa-clou
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 38 22 7d 2e 66 61 2e 66 61 2d 66 72 6f 77 6e 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 66 72 6f 77 6e 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 39 22 7d 2e 66 61 2e 66 61 2d 6d 65 68 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 6d 65 68 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 61 22 7d 2e 66 61 2e 66 61 2d 6b 65 79 62 6f 61 72 64 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 Data Ascii: e{content:"\f118"}.fa.fa-frown-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-frown-o:before{content:"\f119"}.fa.fa-meh-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-meh-o:before{content:"\f11a"}.fa.fa-keyboard-o{font-family:"Font A
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 62 22 7d 2e 66 61 2e 66 61 2d 65 78 74 65 72 6e 61 6c 2d 6c 69 6e 6b 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 36 30 22 7d 2e 66 61 2e 66 61 2d 63 6f 6d 70 61 73 73 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 6f 2d 64 6f 77 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 6f 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b Data Ascii: square:before{content:"\f14b"}.fa.fa-external-link-square:before{content:"\f360"}.fa.fa-compass{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-caret-square-o-down{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-caret-square-o-down:before{
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 31 35 61 22 7d 2e 66 61 2e 66 61 2d 66 69 6c 65 2d 74 65 78 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 63 22 7d 2e 66 61 2e 66 61 2d 73 6f 72 74 2d 61 6c 70 68 61 2d 61 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 64 22 7d 2e 66 61 2e 66 61 2d 73 6f 72 74 2d 61 6c 70 68 61 2d 64 65 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 38 31 22 7d 2e 66 61 2e 66 61 2d 73 6f 72 74 2d 61 6d 6f 75 6e 74 2d 61 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 38 34 22 7d 2e 66 61 2e 66 61 2d 73 6f 72 74 2d 61 6d 6f 75 6e 74 2d 64 65 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 30 22 7d 2e 66 61 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 61 73 63 3a 62 65 Data Ascii: 15a"}.fa.fa-file-text:before{content:"\f15c"}.fa.fa-sort-alpha-asc:before{content:"\f15d"}.fa.fa-sort-alpha-desc:before{content:"\f881"}.fa.fa-sort-amount-asc:before{content:"\f884"}.fa.fa-sort-amount-desc:before{content:"\f160"}.fa.fa-sort-numeric-asc:be
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 20 36 20 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 6d 6f 6f 6e 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 38 36 22 7d 2e 66 61 2e 66 61 2d 70 61 67 65 6c 69 6e 65 73 2c 2e 66 61 2e 66 61 2d 72 65 6e 72 65 6e 2c 2e 66 61 2e 66 61 2d 73 74 61 63 6b 2d 65 78 63 68 61 6e 67 65 2c 2e 66 61 2e 66 61 2d 76 6b 2c 2e 66 61 2e 66 61 2d 77 65 69 62 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6f 2d 72 69 67 68 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 3b 66 6f 6e 74 2d Data Ascii: 6 Pro";font-weight:400}.fa.fa-moon-o:before{content:"\f186"}.fa.fa-pagelines,.fa.fa-renren,.fa.fa-stack-exchange,.fa.fa-vk,.fa.fa-weibo{font-family:"Font Awesome 6 Brands";font-weight:400}.fa.fa-arrow-circle-o-right{font-family:"Font Awesome 6 Pro";font-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49836	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:03 UTC	641	OUT	GET /switzer/css/switzer.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:03 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:03 GMT CF-Cache-Status: HIT Age: 351750 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4a7e8c30fa8-EWR
2024-10-05 22:15:03 UTC	941	IN	Data Raw: 31 64 65 32 0d 0a 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 46 6f 6e 74 20 46 61 6d 69 6c 79 3a 20 53 77 69 74 7a 65 72 0a 20 2a 20 44 65 73 69 67 6e 65 64 20 62 79 3a 20 4a c3 a9 72 c3 a9 6d 69 65 20 48 6f 72 6e 75 73 0a 20 2a 20 55 52 4c 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 6f 6e 74 73 68 61 72 65 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 73 77 69 74 7a 65 72 0a 20 2a 20 c2 a9 20 32 30 32 32 20 49 6e 64 69 61 6e 20 54 79 70 65 20 46 6f 75 6e 64 72 79 0a 20 2a 0a 20 2a 20 46 6f 6e 74 20 53 74 79 6c 65 73 3a 0a 20 2a 20 53 77 69 74 7a 65 72 20 56 61 72 69 61 62 6c 65 28 56 61 72 69 61 62 6c 65 20 66 6f 6e 74 29 0a 20 2a 20 53 77 69 74 7a 65 72 20 56 61 72 69 61 62 6c 65 20 49 74 61 6c 69 63 28 56 61 72 69 61 62 6c 65 20 66 6f 6e 74 Data Ascii: 1de2/** * @license * * Font Family: Switzer * Designed by: Jrmie Hornus * URL: https://www.fontshare.com/fonts/switzer * 2022 Indian Type Foundry * * Font Styles: * Switzer Variable(Variable font) * Switzer Variable Italic(Variable font
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 73 77 69 74 7a 65 72 2f 66 6f 6e 74 73 2f 53 77 69 74 7a 65 72 2d 56 61 72 69 61 62 6c 65 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 73 77 69 74 7a 65 72 2f 66 6f 6e 74 73 2f 53 77 69 74 7a 65 72 2d 56 61 72 69 61 62 6c 65 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0a 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 20 39 30 30 3b 0a 20 20 20 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 0a 2f 2a 2a 0a 2a 20 54 68 69 73 20 69 73 20 61 20 76 61 72 69 Data Ascii: ('woff2'), url('/switzer/fonts/Switzer-Variable.woff') format('woff'), url('/switzer/fonts/Switzer-Variable.ttf') format('truetype'); font-weight: 100 900; font-display: swap; font-style: normal;}/*** This is a vari
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 7d 0a 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 77 69 74 7a 65 72 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 73 77 69 74 7a 65 72 2f 66 6f 6e 74 73 2f 53 77 69 74 7a 65 72 2d 45 78 74 72 61 6c 69 67 68 74 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 73 77 69 74 7a 65 72 2f 66 6f 6e 74 73 2f 53 77 69 74 7a 65 72 2d 45 78 74 72 61 6c 69 67 68 74 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 73 77 69 74 7a 65 72 2f 66 6f 6e 74 73 2f 53 77 69 74 7a 65 72 2d 45 78 74 72 61 6c 69 67 68 74 Data Ascii: font-style: italic;}@font-face { font-family: 'Switzer'; src: url('/switzer/fonts/Switzer-Extralight.woff2') format('woff2'), url('/switzer/fonts/Switzer-Extralight.woff') format('woff'), url('/switzer/fonts/Switzer-Extralight
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 7d 0a 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 77 69 74 7a 65 72 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 73 77 69 74 7a 65 72 2f 66 6f 6e 74 73 2f 53 77 69 74 7a 65 72 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 73 77 69 74 7a 65 72 2f 66 6f 6e 74 73 2f 53 77 69 74 7a 65 72 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 73 77 69 74 7a 65 72 2f 66 6f 6e 74 73 2f 53 77 69 74 7a 65 72 2d 52 65 67 75 6c 61 72 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0a 20 20 20 20 20 20 20 66 6f Data Ascii: }@font-face { font-family: 'Switzer'; src: url('/switzer/fonts/Switzer-Regular.woff2') format('woff2'), url('/switzer/fonts/Switzer-Regular.woff') format('woff'), url('/switzer/fonts/Switzer-Regular.ttf') format('truetype'); fo
2024-10-05 22:15:03 UTC	1369	IN	Data Raw: 7a 65 72 2f 66 6f 6e 74 73 2f 53 77 69 74 7a 65 72 2d 53 65 6d 69 62 6f 6c 64 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 73 77 69 74 7a 65 72 2f 66 6f 6e 74 73 2f 53 77 69 74 7a 65 72 2d 53 65 6d 69 62 6f 6c 64 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 73 77 69 74 7a 65 72 2f 66 6f 6e 74 73 2f 53 77 69 74 7a 65 72 2d 53 65 6d 69 62 6f 6c 64 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0a 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 20 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 74 Data Ascii: zer/fonts/Switzer-Semibold.woff2') format('woff2'), url('/switzer/fonts/Switzer-Semibold.woff') format('woff'), url('/switzer/fonts/Switzer-Semibold.ttf') format('truetype'); font-weight: 600; font-display: swap; font-st
2024-10-05 22:15:03 UTC	1241	IN	Data Raw: 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 73 77 69 74 7a 65 72 2f 66 6f 6e 74 73 2f 53 77 69 74 7a 65 72 2d 45 78 74 72 61 62 6f 6c 64 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 73 77 69 74 7a 65 72 2f 66 6f 6e 74 73 2f 53 77 69 74 7a 65 72 2d 45 78 74 72 61 62 6f 6c 64 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0a 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 38 30 30 3b 0a 20 20 20 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d Data Ascii: at('woff2'), url('/switzer/fonts/Switzer-Extrabold.woff') format('woff'), url('/switzer/fonts/Switzer-Extrabold.ttf') format('truetype'); font-weight: 800; font-display: swap; font-style: normal;}@font-face { font-
2024-10-05 22:15:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:03 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:03 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5ff6bd9-301e-005d-3af2-16e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221503Z-1657d5bbd48xlwdx82gahegw4000000001a0000000008rh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:03 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:03 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:03 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221503Z-1657d5bbd48xdq5dkwwugdpzr000000001cg00000000ds18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:03 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:03 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:03 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0607cd43-401e-0078-1b00-174d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221503Z-1657d5bbd48vlsxxpe15ac3q7n000000013000000000761g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:03 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:03 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:03 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221503Z-1657d5bbd48f7nlxc7n5fnfzh000000000p000000000myg9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:15:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:03 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:03 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0c165d1d-a01e-000d-7dfe-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221503Z-1657d5bbd48t66tjar5xuq22r8000000015000000000299d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:03 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49837	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	641	OUT	GET /swansea/css/swansea.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:04 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:04 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:04 GMT CF-Cache-Status: HIT Age: 351751 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4abeb9b438c-EWR
2024-10-05 22:15:04 UTC	781	IN	Data Raw: 33 30 36 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 73 77 61 6e 73 65 61 27 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 73 77 61 6e 73 65 61 2f 66 6f 6e 74 73 2f 53 77 61 6e 73 65 61 2d 71 33 70 64 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 20 39 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 73 77 61 6e 73 65 61 2d 62 6f 6c 64 27 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 73 77 61 Data Ascii: 306@font-face { font-family: 'swansea'; src: url('/swansea/fonts/Swansea-q3pd.ttf') format('truetype'); font-weight: 100 900; font-display: swap; font-style: normal;}@font-face { font-family: 'swansea-bold'; src: url('/swa
2024-10-05 22:15:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49838	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	644	OUT	GET /proxima_nova/css/fonts.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:04 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:04 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:04 GMT CF-Cache-Status: HIT Age: 351750 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4ac3850438b-EWR
2024-10-05 22:15:04 UTC	941	IN	Data Raw: 37 64 66 32 0d 0a 2f 2a 0a 20 2a 20 54 68 65 20 54 79 70 65 6b 69 74 20 73 65 72 76 69 63 65 20 75 73 65 64 20 74 6f 20 64 65 6c 69 76 65 72 20 74 68 69 73 20 66 6f 6e 74 20 6f 72 20 66 6f 6e 74 73 20 66 6f 72 20 75 73 65 20 6f 6e 20 77 65 62 73 69 74 65 73 0a 20 2a 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 41 64 6f 62 65 20 61 6e 64 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 73 65 20 54 65 72 6d 73 20 6f 66 20 55 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2f 65 75 6c 61 73 2f 74 6f 75 5f 74 79 70 65 6b 69 74 2e 20 46 6f 72 20 66 6f 6e 74 20 6c 69 63 65 6e 73 65 0a 20 2a 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 74 68 65 20 6c 69 73 74 20 62 65 6c 6f 77 2e 0a 20 2a Data Ascii: 7df2/* * The Typekit service used to deliver this font or fonts for use on websites * is provided by Adobe and is subject to these Terms of Use * http://www.adobe.com/products/eulas/tou_typekit. For font license * information, see the list below. *
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 73 65 36 34 2c 64 30 39 47 4d 67 41 42 41 41 41 41 41 47 4e 55 41 42 41 41 41 41 41 42 44 37 51 41 41 47 4c 77 41 41 45 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 47 59 45 49 50 30 5a 47 56 45 30 63 47 6c 59 62 32 41 49 63 6e 6a 59 47 59 41 43 48 42 68 45 49 43 6f 4c 63 5a 49 4b 50 47 41 75 48 61 41 41 42 4e 67 49 6b 41 34 39 4d 42 43 41 46 68 78 38 48 6f 45 73 62 35 2b 4d 48 42 73 63 43 2f 6e 55 6e 4b 46 56 7a 33 2b 72 38 67 41 72 6c 74 69 4e 75 52 78 58 75 5a 2f 43 4b 41 6d 34 4d 50 57 77 63 41 39 68 36 44 35 7a 39 2f 35 2b 51 6f 4d 59 59 50 70 67 48 34 4b 7a 61 31 67 43 45 51 55 52 6d 6f 56 37 64 33 51 74 31 64 31 5a 2b 71 6a 4f 36 39 36 6d 31 46 6d 74 56 58 48 65 55 51 66 33 6f 39 68 44 75 4e 32 4b 79 58 53 Data Ascii: se64,d09GMgABAAAAAGNUABAAAAABD7QAAGLwAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGYEIP0ZGVE0cGlYb2AIcnjYGYACHBhEICoLcZIKPGAuHaAABNgIkA49MBCAFhx8HoEsb5+MHBscC/nUnKFVz3+r8gArltiNuRxXuZ/CKAm4MPWwcA9h6D5z9/5+QoMYYPpgH4Kza1gCEQURmoV7d3Qt1d1Z+qjO696m1FmtVXHeUQf3o9hDuN2KyXS
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 77 51 59 41 44 4c 6a 38 52 55 30 41 34 4e 70 54 65 35 76 38 6c 32 39 39 2f 2b 68 54 43 45 41 4a 77 43 45 62 6f 55 42 5a 42 36 32 33 48 6d 56 44 41 44 42 45 41 69 51 4b 73 32 45 35 2b 53 47 31 61 42 79 32 75 51 6d 6b 4c 58 32 42 61 41 41 45 41 4d 4b 6e 67 6f 6e 6d 5a 39 72 72 32 35 74 79 75 4b 48 2f 2b 50 2f 47 4c 34 4d 57 43 65 64 59 39 4c 39 73 2f 47 78 61 66 53 61 32 6e 74 6c 66 67 6a 5a 66 33 7a 5a 75 35 47 72 54 75 65 6c 56 74 67 61 6a 76 6d 47 2f 62 6a 6f 61 6d 46 66 6d 35 74 50 65 52 4e 6a 74 70 4d 52 58 76 38 71 36 41 59 2b 77 4e 69 7a 39 67 7a 79 4b 37 36 54 73 2b 66 56 58 43 34 75 6d 67 39 39 6a 70 44 58 75 52 4f 58 48 38 34 54 58 47 6e 2f 57 34 49 6c 4d 4a 64 41 41 50 2b 6f 57 6a 67 74 77 7a 76 6e 78 33 2f 5a 51 2b 54 62 6c 6f 4f 32 73 36 66 39 Data Ascii: wQYADLj8RU0A4NpTe5v8l299/+hTCEAJwCEboUBZB623HmVDADBEAiQKs2E5+SG1aBy2uQmkLX2BaAAEAMKngonmZ9rr25tyuKH/+P/GL4MWCedY9L9s/GxafSa2ntlfgjZf3zZu5GrTuelVtgajvmG/bjoamFfm5tPeRNjtpMRXv8q6AY+wNiz9gzyK76Ts+fVXC4umg99jpDXuROXH84TXGn/W4IlMJdAAP+oWjgtwzvnx3/ZQ+TbloO2s6f9
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 6e 34 62 6a 54 55 42 4d 64 45 55 51 76 39 57 31 4e 33 61 52 63 5a 75 77 39 69 50 4f 49 68 7a 43 44 70 4d 34 56 68 57 63 66 4d 38 55 67 43 42 4c 6a 4d 49 39 51 31 4d 2f 51 4e 54 35 57 67 66 38 38 31 57 4d 67 4e 77 42 78 42 34 75 78 64 41 78 79 52 41 32 42 7a 2f 56 74 78 68 66 47 6a 79 47 42 32 47 4a 4d 66 71 48 4f 73 6d 6c 74 6b 4d 63 41 73 47 2f 4a 69 6a 49 46 4c 78 6f 65 47 37 55 34 55 57 2b 79 55 62 38 7a 68 41 46 58 50 55 44 6c 63 69 79 50 33 64 78 58 42 75 4f 54 35 74 68 39 30 57 5a 6f 64 6f 42 52 44 6d 37 54 70 66 65 30 50 51 6a 2f 32 4b 33 51 46 43 42 2b 32 39 38 48 59 4d 69 6c 37 72 79 6d 36 51 6e 61 61 2f 54 75 55 31 32 34 4f 66 4d 78 63 41 55 38 52 68 30 58 77 4b 42 62 31 63 34 33 63 6c 51 53 67 56 4f 54 4c 61 65 4c 46 72 59 35 74 72 76 35 32 46 Data Ascii: n4bjTUBMdEUQv9W1N3aRcZuw9iPOIhzCDpM4VhWcfM8UgCBLjMI9Q1M/QNT5Wgf881WMgNwBxB4uxdAxyRA2Bz/VtxhfGjyGB2GJMfqHOsmltkMcAsG/JijIFLxoeG7U4UW+yUb8zhAFXPUDlciyP3dxXBuOT5th90WZodoBRDm7Tpfe0PQj/2K3QFCB+298HYMil7rym6Qnaa/TuU124OfMxcAU8Rh0XwKBb1c43clQSgVOTLaeLFrY5trv52F
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 48 49 77 32 6d 4b 6c 30 2f 68 62 34 49 43 6f 6d 61 55 6d 6c 4e 70 51 61 30 6c 51 52 74 45 47 63 46 4d 6c 46 6b 70 4d 64 73 38 6c 46 58 55 31 71 42 63 67 71 36 68 58 45 39 5a 4e 39 30 69 75 4e 33 5a 37 72 69 58 37 77 4d 39 49 48 67 49 50 55 49 38 6f 66 59 55 65 70 61 71 76 50 43 53 34 45 30 71 65 4f 63 39 39 49 48 67 34 35 70 55 69 41 53 59 41 6f 4e 51 63 49 33 47 65 55 78 6d 45 36 68 79 41 70 59 62 36 4a 6f 47 74 70 61 42 36 64 2f 41 4e 44 41 49 44 51 35 38 51 30 35 6a 6e 78 54 63 6a 51 30 72 6e 39 41 49 41 74 76 49 49 44 53 6d 66 6f 79 72 2f 4e 5a 4a 31 63 42 71 43 45 4c 72 41 32 6c 7a 41 68 48 5a 47 42 77 46 48 51 46 48 79 55 44 56 71 36 47 6d 4a 64 46 52 38 38 54 79 5a 68 55 4c 78 53 4d 53 55 42 4a 70 4a 61 47 6c 70 67 5a 2f 71 63 65 6b 50 70 4d 63 4a Data Ascii: HIw2mKl0/hb4IComaUmlNpQa0lQRtEGcFMlFkpMds8lFXU1qBcgq6hXE9ZN90iuN3Z7riX7wM9IHgIPUI8ofYUepaqvPCS4E0qeOc99IHg45pUiASYAoNQcI3GeUxmE6hyApYb6JoGtpaB6d/ANDAIDQ58Q05jnxTcjQ0rn9AIAtvIIDSmfoyr/NZJ1cBqCELrA2lzAhHZGBwFHQFHyUDVq6GmJdFR88TyZhULxSMSUBJpJaGlpgZ/qcekPpMcJ
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 75 31 38 42 47 34 6b 37 6d 7a 73 4c 47 78 64 32 36 33 2b 4a 59 47 6d 42 45 68 59 69 49 47 6c 47 78 46 43 37 64 71 34 4d 43 6d 46 6f 6a 54 5a 70 6f 55 55 49 46 53 55 34 73 6c 4e 64 52 53 61 35 63 59 4a 53 6b 48 56 6d 4c 36 47 6c 64 43 6e 4b 4f 72 4b 52 37 38 6c 76 56 48 55 64 55 6c 42 46 4e 38 4e 53 53 52 59 72 38 49 43 6b 34 51 42 45 68 4a 51 32 45 56 7a 58 75 67 61 42 44 4b 33 45 4a 59 69 6b 57 46 44 63 61 72 42 49 74 4e 61 4d 66 45 4c 72 57 75 71 42 51 78 38 56 67 63 71 6e 5a 35 72 49 72 5a 46 63 6a 62 30 70 71 69 64 76 70 72 6d 36 36 54 52 5a 4d 57 56 57 4b 2b 43 6b 4a 55 79 52 51 53 54 62 6a 6e 45 67 42 51 69 58 6c 72 4b 32 65 61 36 30 73 6e 6f 64 66 65 6b 58 57 7a 35 54 77 78 74 74 63 51 6d 74 58 37 78 56 6b 48 34 4b 4c 6a 2f 45 42 6a 77 46 65 51 38 Data Ascii: u18BG4k7mzsLGxd263+JYGmBEhYiIGlGxFC7dq4MCmFojTZpoUUIFSU4slNdRSa5cYJSkHVmL6GldCnKOrKR78lvVHUdUlBFN8NSSRYr8ICk4QBEhJQ2EVzXugaBDK3EJYikWFDcarBItNaMfELrWuqBQx8VgcqnZ5rIrZFcjb0pqidvprm66TRZMWVWK+CkJUyRQSTbjnEgBQiXlrK2ea60snodfekXWz5TwxttcQmtX7xVkH4KLj/EBjwFeQ8
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 78 2f 49 32 67 35 46 69 6e 32 4f 5a 5a 5a 57 74 6b 35 6d 46 6c 70 66 5a 71 52 56 56 56 56 6b 31 41 32 35 75 71 2b 31 32 32 6d 32 50 6f 77 31 47 75 35 36 79 53 73 66 76 78 65 62 50 74 54 6e 61 63 71 51 62 6b 49 64 50 49 50 52 4e 43 65 72 32 75 6c 78 36 6a 31 4d 56 41 6f 7a 45 6b 41 4a 77 32 2b 37 73 64 6b 38 6d 41 55 48 6f 78 78 54 2b 57 31 51 57 68 36 50 6e 5a 79 37 68 54 39 64 71 68 7a 76 53 73 55 35 30 73 6a 31 36 36 61 35 48 63 38 32 33 76 77 4d 64 37 46 42 48 45 51 77 4f 42 30 43 6b 68 44 52 30 71 4c 53 63 37 53 56 4d 62 5a 53 66 66 76 2f 74 53 6c 65 37 33 73 31 75 64 61 72 54 6e 65 6c 73 35 7a 72 66 68 53 35 32 71 63 74 64 2b 34 41 38 2b 73 6f 49 72 79 55 74 55 2f 66 64 76 6a 6d 63 76 4e 39 44 70 63 45 5a 41 65 4e 63 64 56 36 62 7a 67 6d 37 38 74 55 Data Ascii: x/I2g5Fin2OZZZWtk5mFlpfZqRVVVVk1A25uq+122m2Pow1Gu56ySsfvxebPtTnacqQbkIdPIPRNCer2ulx6j1MVAozEkAJw2+7sdk8mAUHoxxT+W1QWh6PnZy7hT9dqhzvSsU50sj166a5Hc823vwMd7FBHEQwOB0CkhDR0qLSc7SVMbZSffv/tSle73s1udarTnels5zrfhS52qctd+4A8+soIryUtU/fdvjmcvN9DpcEZAeNcdV6bzgm78tU
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 5a 76 54 43 63 43 6d 6e 66 6d 4f 4f 4f 32 38 69 36 36 37 36 34 6e 58 33 76 76 6f 4f 36 63 6c 49 52 52 72 37 78 65 7a 79 54 5a 58 33 47 47 42 37 48 51 2b 39 46 30 68 2b 78 33 31 50 71 70 65 33 54 70 31 61 4e 65 6d 56 62 4e 58 55 76 6c 2b 33 37 37 33 66 2f 70 58 7a 36 2f 75 65 37 38 33 2f 39 58 38 5a 33 4e 6a 73 32 35 2b 31 45 7a 78 41 51 41 45 41 4a 42 67 34 74 6e 45 38 4e 59 56 68 74 76 39 57 69 78 53 72 45 53 70 39 6a 72 6f 71 4a 50 4f 75 75 69 71 6d 2b 35 36 2b 45 2b 5a 63 68 56 36 36 71 57 33 50 76 72 71 70 37 38 42 37 78 4e 7a 6e 37 65 61 65 66 72 54 70 54 56 61 59 49 63 41 41 49 43 2f 65 67 47 34 68 41 6a 45 49 33 43 45 49 6d 32 69 61 54 7a 46 73 58 6c 4e 4e 68 34 38 65 66 48 6d 38 32 34 30 39 37 65 5a 49 4d 46 76 53 4f 38 49 45 2f 36 57 64 4b 30 59 Data Ascii: ZvTCcCmnfmOOO28i66764nX3vvoO6clIRRr7xezyTZX3GGB7HQ+9F0h+x31Pqpe3Tp1aNemVbNXUvl+3773f/pXz6/ue783/9X8Z3Njs25+1EzxAQAEAJBg4tnE8NYVhtv9WixSrESp9jroqJPOuuiqm+56+E+ZchV66qW3Pvrqp78B7xNzn7eaefrTpTVaYIcAAIC/egG4hAjEI3CEIm2iaTzFsXlNNh48efHm824097eZIMFvSO8IE/6WdK0Y
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 4e 4b 5a 44 65 37 62 55 5a 47 7a 68 37 53 32 54 51 36 75 7a 43 61 39 4a 70 55 72 41 49 4d 2f 6d 56 61 6b 74 6d 2f 75 35 66 57 72 57 6c 42 41 73 6d 6f 4d 6d 32 66 53 36 63 2f 78 7a 2f 54 74 52 45 2b 72 63 57 52 4b 43 39 6d 50 46 6f 72 48 38 66 4e 73 46 4f 68 74 56 41 6c 57 6a 70 74 58 43 39 77 45 2f 6b 71 45 36 6b 72 6b 73 6f 58 4a 6f 32 48 7a 55 59 41 71 32 71 4f 71 58 72 65 6f 58 67 72 78 44 71 35 76 4a 70 70 69 34 6b 54 66 6e 59 44 59 43 78 66 58 6b 56 71 69 6a 4c 54 4f 6c 73 31 36 6c 47 4e 6f 61 61 36 59 36 6f 48 47 6c 68 54 71 4e 47 30 5a 45 4f 77 6e 70 72 61 61 39 47 48 79 44 39 57 7a 4d 54 46 6b 46 46 47 54 58 62 53 5a 72 52 46 31 71 51 59 6b 71 6f 58 65 75 52 74 52 4b 46 6a 4b 5a 42 42 51 30 69 6b 61 62 6e 67 55 2f 4e 37 53 50 74 67 67 51 77 44 51 Data Ascii: NKZDe7bUZGzh7S2TQ6uzCa9JpUrAIM/mVaktm/u5fWrWlBAsmoMm2fS6c/xz/TtRE+rcWRKC9mPForH8fNsFOhtVAlWjptXC9wE/kqE6krksoXJo2HzUYAq2qOqXreoXgrxDq5vJppi4kTfnYDYCxfXkVqijLTOls16lGNoaa6Y6oHGlhTqNG0ZEOwnpraa9GHyD9WzMTFkFFGTXbSZrRF1qQYkqoXeuRtRKFjKZBBQ0ikabngU/N7SPtggQwDQ
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 75 61 32 54 4d 5a 32 53 38 54 53 5a 54 46 73 61 7a 72 42 67 66 38 59 32 67 75 57 73 77 31 68 59 7a 43 77 62 50 57 6b 48 64 4b 59 53 39 68 72 72 54 6d 4b 41 6d 6c 2f 64 42 4b 6f 2b 61 54 4b 63 77 77 62 37 45 45 59 59 56 7a 7a 4b 49 62 4d 64 68 70 34 72 4d 76 4c 74 77 69 32 59 30 43 58 74 37 2f 68 4d 67 6e 59 6e 31 37 33 43 75 4c 4c 2f 57 4c 76 39 35 72 50 4e 47 63 46 62 33 77 63 69 43 30 56 47 63 44 63 35 41 45 62 49 75 37 6d 55 6e 49 48 2b 59 66 4f 5a 43 62 77 4c 51 51 34 44 59 56 49 6a 48 6a 6f 50 63 33 36 39 56 38 77 52 7a 4c 2b 33 52 30 72 69 6f 30 6c 51 65 77 68 68 4c 4f 59 6e 76 4a 6d 44 41 45 7a 66 30 72 78 4a 63 64 4d 58 4c 32 74 57 5a 67 6f 5a 66 52 75 2b 32 45 37 4e 4c 45 68 64 4c 76 72 58 61 6e 50 32 36 6b 75 66 34 5a 6d 52 5a 56 32 61 71 48 4c Data Ascii: ua2TMZ2S8TSZTFsazrBgf8Y2guWsw1hYzCwbPWkHdKYS9hrrTmKAml/dBKo+aTKcwwb7EEYYVzzKIbMdhp4rMvLtwi2Y0CXt7/hMgnYn173CuLL/WLv95rPNGcFb3wciC0VGcDc5AEbIu7mUnIH+YfOZCbwLQQ4DYVIjHjoPc369V8wRzL+3R0rio0lQewhhLOYnvJmDAEzf0rxJcdMXL2tWZgoZfRu+2E7NLEhdLvrXanP26kuf4ZmRZV2aqHL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49839	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	645	OUT	GET /tr/1727814744244cropper.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:04 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:04 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:04 GMT CF-Cache-Status: HIT Age: 351751 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4ac3d37420d-EWR
2024-10-05 22:15:04 UTC	941	IN	Data Raw: 31 33 34 37 0d 0a 2f 2a 21 0a 20 2a 20 43 72 6f 70 70 65 72 20 76 34 2e 30 2e 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 65 6e 67 79 75 61 6e 63 68 65 6e 2f 63 72 6f 70 70 65 72 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 2d 32 30 31 38 20 43 68 65 6e 20 46 65 6e 67 79 75 61 6e 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 34 2d 30 31 54 30 36 3a 32 36 3a 33 32 2e 34 31 37 5a 0a 20 2a 2f 0a 0a 2e 63 72 6f 70 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 64 69 72 65 63 74 69 6f 6e 3a 20 6c 74 72 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b 0a 20 20 6c 69 6e 65 2d 68 65 Data Ascii: 1347/! Cropper v4.0.0 * https://github.com/fengyuanchen/cropper * * Copyright (c) 2014-2018 Chen Fengyuan * Released under the MIT license * * Date: 2018-04-01T06:26:32.417Z */.cropper-container { direction: ltr; font-size: 0; line-he
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 65 6e 3b 0a 7d 0a 0a 2e 63 72 6f 70 70 65 72 2d 64 72 61 67 2d 62 6f 78 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 7d 0a 0a 2e 63 72 6f 70 70 65 72 2d 6d 6f 64 61 6c 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 2e 35 3b 0a 7d 0a 0a 2e 63 72 6f 70 70 65 72 2d 76 69 65 77 2d 62 6f 78 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 35 31 2c 20 31 35 33 2c 20 32 35 35 2c 20 30 2e 37 35 29 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 33 39 66 3b 0a Data Ascii: en;}.cropper-drag-box { background-color: #fff; opacity: 0;}.cropper-modal { background-color: #000; opacity: .5;}.cropper-view-box { display: block; height: 100%; outline-color: rgba(51, 153, 255, 0.75); outline: 1px solid #39f;
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 2c 0a 2e 63 72 6f 70 70 65 72 2d 6c 69 6e 65 2c 0a 2e 63 72 6f 70 70 65 72 2d 70 6f 69 6e 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 2e 31 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 63 72 6f 70 70 65 72 2d 66 61 63 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 7d 0a 0a 2e 63 72 6f 70 70 65 72 2d 6c 69 6e 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 39 66 3b 0a 7d 0a 0a 2e 63 72 6f 70 70 65 72 2d 6c 69 6e 65 2e 6c 69 6e 65 2d 65 20 Data Ascii: ,.cropper-line,.cropper-point { display: block; height: 100%; opacity: .1; position: absolute; width: 100%;}.cropper-face { background-color: #fff; left: 0; top: 0;}.cropper-line { background-color: #39f;}.cropper-line.line-e
2024-10-05 22:15:04 UTC	1264	IN	Data Raw: 74 3a 20 32 30 70 78 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 72 69 67 68 74 3a 20 2d 33 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 2e 63 72 6f 70 70 65 72 2d 70 6f 69 6e 74 2e 70 6f 69 6e 74 2d 73 65 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 35 70 78 3b 0a 20 20 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 20 7b 0a 20 20 2e 63 72 6f 70 70 65 72 2d 70 6f 69 6e 74 2e 70 6f 69 6e 74 2d 73 65 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 70 78 3b 0a 20 20 7d 0a 7d 0a 0a 40 6d 65 Data Ascii: t: 20px; opacity: 1; right: -3px; width: 20px;}@media (min-width: 768px) { .cropper-point.point-se { height: 15px; width: 15px; }}@media (min-width: 992px) { .cropper-point.point-se { height: 10px; width: 10px; }}@me
2024-10-05 22:15:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49840	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	633	OUT	GET /sr/megaMenu.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:04 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:04 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:04 GMT CF-Cache-Status: HIT Age: 351751 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4ac5cf519d3-EWR
2024-10-05 22:15:04 UTC	941	IN	Data Raw: 37 64 66 33 0d 0a 2e 6d 65 67 61 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 75 6c 20 7b 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 77 69 74 7a 65 72 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 30 2e 35 73 3b 0a 7d 0a 0a 64 69 76 2e 68 65 61 64 2d 61 63 63 6f 75 6e 74 2d 6d 65 6e 75 2d 73 69 67 6e 6f 75 74 3e 6c 69 20 7b Data Ascii: 7df3.mega-menu-container ul { list-style: none;}button { font-family: "Switzer", sans-serif; font-style: normal; font-weight: 400; font-size: 14px; line-height: 18px; transition: 0.5s;}div.head-account-menu-signout>li {
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 6e 20 64 65 66 61 75 6c 74 20 64 61 72 6b 20 2a 2f 0a 2e 62 74 6e 2d 64 65 66 61 75 6c 74 2d 64 61 72 6b 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 33 70 78 3b 0a 20 20 20 20 67 61 70 3a 20 35 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 36 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a Data Ascii: n default dark */.btn-default-dark { display: inline-flex; flex-direction: row; align-items: center; justify-content: center; line-height: 1; padding: 9px 13px; gap: 5px; width: auto; height: 36px; color: #FFFFFF;
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 2e 62 74 6e 2d 64 65 66 61 75 6c 74 2d 64 61 72 6b 5b 64 69 73 61 62 6c 65 64 5d 3a 66 6f 63 75 73 2c 20 2e 62 74 6e 2d 64 65 66 61 75 6c 74 2d 64 61 72 6b 5b 64 69 73 61 62 6c 65 64 5d 3a 68 6f 76 65 72 2c 20 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 64 65 66 61 75 6c 74 2d 64 61 72 6b 2c 20 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 64 65 66 61 75 6c 74 2d 64 61 72 6b 2e 61 63 74 69 76 65 2c 20 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 64 65 66 61 75 6c 74 2d 64 61 72 6b 2e 66 6f 63 75 73 2c 20 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 64 65 66 61 75 6c 74 2d 64 61 72 6b 3a 61 63 74 69 76 65 2c 20 66 69 65 6c 64 73 65 74 5b 64 69 73 61 Data Ascii: .btn-default-dark[disabled]:focus, .btn-default-dark[disabled]:hover, fieldset[disabled] .btn-default-dark, fieldset[disabled] .btn-default-dark.active, fieldset[disabled] .btn-default-dark.focus, fieldset[disabled] .btn-default-dark:active, fieldset[disa
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 65 74 74 69 6e 67 2e 64 69 73 61 62 6c 65 64 2e 66 6f 63 75 73 2c 20 2e 62 74 6e 2d 73 65 74 74 69 6e 67 2e 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 20 2e 62 74 6e 2d 73 65 74 74 69 6e 67 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 20 2e 62 74 6e 2d 73 65 74 74 69 6e 67 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 2d 73 65 74 74 69 6e 67 5b 64 69 73 61 62 6c 65 64 5d 2c 20 2e 62 74 6e 2d 73 65 74 74 69 6e 67 5b 64 69 73 61 62 6c 65 64 5d 2e 61 63 74 69 76 65 2c 20 2e 62 74 6e 2d 73 65 74 74 69 6e 67 5b 64 69 73 61 62 6c 65 64 5d 2e 66 6f 63 75 73 2c 20 2e 62 74 6e 2d 73 65 74 74 69 6e 67 5b 64 69 73 61 62 6c 65 64 5d 3a 61 63 74 69 76 65 2c 20 2e 62 74 6e 2d 73 65 74 74 69 6e 67 5b 64 69 73 61 62 6c 65 64 5d 3a 66 6f 63 75 73 Data Ascii: etting.disabled.focus, .btn-setting.disabled:active, .btn-setting.disabled:focus, .btn-setting.disabled:hover, .btn-setting[disabled], .btn-setting[disabled].active, .btn-setting[disabled].focus, .btn-setting[disabled]:active, .btn-setting[disabled]:focus
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 7a 65 3a 20 63 6f 76 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 2e 73 75 62 2d 6e 61 76 62 61 72 2d 6e 61 6d 65 2d 6d 65 73 73 61 67 65 20 2e 62 61 64 67 65 2d 76 32 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 73 75 62 2d 6e 61 76 62 61 72 2d 6e 61 6d 65 2d 6d 65 73 73 61 67 65 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 33 31 32 34 32 3b 0a 7d 0a 0a 2e 73 75 62 2d 6e 61 76 62 61 72 2d 6e 61 6d 65 2d 6d 65 73 73 61 67 65 20 61 3a 68 6f 76 65 72 2c 20 2e 73 75 Data Ascii: ze: cover; font-style: normal; font-size: 16px; font-weight: 400;}.sub-navbar-name-message .badge-v2 { width: fit-content; min-width: auto;}.sub-navbar-name-message a { color: #031242;}.sub-navbar-name-message a:hover, .su
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 6f 70 70 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 74 6f 70 3a 20 35 70 78 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 7d 0a 0a 2e 73 75 62 2d 6e 61 76 62 61 72 2d 6e 61 6d 65 2d 6d 65 73 73 61 67 65 20 75 6c 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f Data Ascii: opper { position: absolute; width: 100px; height: 100px; border-radius: 50%; left: 0; top: 5px; opacity: 0;}.sub-navbar-name-message ul { width: 100%; display: inline-flex; align-items: center; list-style: no
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 3b 0a 0a 7d 0a 2e 73 75 62 2d 6e 61 76 62 61 72 2d 6e 61 6d 65 2d 6d 65 73 73 61 67 65 20 2e 68 65 61 64 2d 69 6e 66 6f 20 2e 70 75 6c 6c 2d 72 69 67 68 74 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 67 61 70 3a 20 35 70 78 3b 0a 20 20 20 20 2f 2a 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 32 70 78 3b 2a 2f 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 2c 20 31 38 2c 20 Data Ascii: position: absolute; left: 0; z-index: -1;}.sub-navbar-name-message .head-info .pull-right { display: flex; flex-direction: column; height: 100%; gap: 5px; /min-height: 102px;/ font-size: 14px; color: rgba(3, 18,
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 2e 68 65 61 64 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 2e 68 65 61 64 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 6c 61 62 65 6c 20 6c 69 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 67 61 70 3a 20 31 30 70 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 73 75 62 2d 6e 61 76 62 61 72 2d 6e 61 6d 65 2d 6d 65 73 73 61 67 65 20 2e 68 65 61 64 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 2e 68 65 61 64 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 6c 61 62 65 6c 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 73 75 62 2d 6e 61 76 62 61 72 2d 6e 61 6d 65 2d 6d 65 73 73 61 67 65 20 2e 68 65 61 64 2d 6e Data Ascii: .head-notification .head-notification-label li { display: flex; gap: 10px; align-items: center;}.sub-navbar-name-message .head-notification .head-notification-label::-webkit-scrollbar { display: none;}.sub-navbar-name-message .head-n
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 65 77 2d 6e 61 76 62 61 72 2d 73 63 72 6f 6c 6c 20 2e 6e 61 6d 65 2d 6d 65 73 73 61 67 65 20 23 68 65 61 64 5f 73 69 64 65 5f 62 61 72 5f 61 63 63 6f 75 6e 74 20 2e 74 6f 70 20 3e 20 73 70 61 6e 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 77 6e 20 7b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 20 30 73 0a 7d 0a 0a 23 6d 65 67 61 2d 74 6f 67 67 6c 65 2d 62 74 6e 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 73 75 62 2d 6e 61 76 62 61 72 2d 6e 61 6d 65 2d 6d 65 73 73 61 67 65 20 2e 68 65 61 64 2d 72 65 74 75 72 6e 2d 62 74 6e 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 7d 0a 0a 2e 73 75 62 2d 6e 61 76 62 61 Data Ascii: ew-navbar-scroll .name-message #head_side_bar_account .top > span.fa-angle-down { transition: all 0.5s ease 0s}#mega-toggle-btn { display: none;}.sub-navbar-name-message .head-return-btn { padding-top: 0; height: 100px;}.sub-navba
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 6c 20 3e 20 64 69 76 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 32 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 23 69 64 2d 6e 61 6d 65 2d 6d 65 73 73 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 23 75 73 65 72 5f 64 72 6f 70 64 6f 77 6e 5f 61 76 61 74 61 72 5f 75 70 6c 6f 61 64 65 72 5f 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 35 30 70 78 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 35 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 23 6d 65 67 61 2d 74 6f 67 67 6c 65 2d 62 74 6e 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 Data Ascii: l > div { height: auto; padding: 15px 20px; } #id-name-message { display: none; } #user_dropdown_avatar_uploader_button { width: 50px; height: 50px; } #mega-toggle-btn { display: i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49843	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	636	OUT	GET /1_13_32_footer.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:04 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:04 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:04 GMT CF-Cache-Status: HIT Age: 351751 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4ac5911c358-EWR
2024-10-05 22:15:04 UTC	941	IN	Data Raw: 31 37 63 38 0d 0a 2f 2a 20 42 61 73 65 20 72 75 6c 65 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 73 2e 20 2a 2f 0a 0a 2f 2a 20 4c 61 79 6f 75 74 20 72 75 6c 65 73 2e 20 44 65 66 69 6e 69 74 69 6f 6e 73 20 74 68 61 74 20 64 69 76 69 64 65 20 74 68 65 20 70 61 67 65 20 69 6e 74 6f 20 73 65 63 74 69 6f 6e 73 2e 20 2a 2f 0a 23 73 6f 63 69 61 6c 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 38 70 78 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 32 38 70 78 20 30 20 32 38 70 78 20 30 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 33 33 33 3b 0a 09 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 30 3b 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 30 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 Data Ascii: 17c8/* Base rules. The defaults. // Layout rules. Definitions that divide the page into sections. */#social {margin: 0 0 28px 0;padding: 28px 0 28px 0;text-align: center;border: 1px solid #333;border-right: 0;border-left: 0;overflow:
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 38 70 78 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 23 70 61 72 74 6e 65 72 73 20 69 6d 67 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 66 6f 6f 74 65 72 5f 73 70 72 69 74 65 2e 70 6e 67 29 3b 0a 7d 0a 0a 23 70 61 72 74 6e 65 72 73 20 2e 69 63 61 6e 6e 20 69 6d 67 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 32 30 70 78 3b 0a 09 77 69 64 74 68 3a 20 35 31 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 35 32 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 38 30 70 78 20 2d 36 33 70 78 3b 0a 7d 0a 0a 23 70 61 72 74 6e 65 72 73 20 2e 64 6f 6d 61 69 6e 69 6e 67 20 69 6d 67 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 Data Ascii: 8px 0;padding: 0;text-align: center;}#partners img {background-image: url(footer_sprite.png);}#partners .icann img {margin: 0 0 0 20px;width: 51px;height: 52px;background-position: -80px -63px;}#partners .domaining img {margin: 0
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 6e 2d 74 6f 70 3a 20 33 36 70 78 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 6e 65 77 2d 66 6f 6f 74 65 72 2d 72 65 73 70 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 0a 2e 6e 65 77 2d 66 6f 6f 74 65 72 2d 72 65 73 70 20 2e 64 72 61 77 2d 6c 69 6e 65 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 36 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 35 30 70 78 3b 0a Data Ascii: n-top: 36px;overflow: hidden;text-align: center;}.new-footer-resp:before {content: '';display: inline-block;height: 100%;vertical-align: middle;}.new-footer-resp .draw-line {display: inline-block; margin: 0 60px; height: 50px;
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 7d 0a 2f 2a 20 6e 65 77 20 66 6f 6f 74 65 72 20 65 6e 64 20 2a 2f 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 09 23 70 61 72 74 6e 65 72 73 20 7b 0a 09 09 77 69 64 74 68 3a 20 32 37 38 70 78 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 09 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 38 70 78 3b 0a 09 7d 0a 09 23 70 61 72 74 6e 65 72 73 20 2e 69 63 61 6e 6e 20 69 6d 67 20 7b 0a 09 09 6d 61 72 67 69 6e 3a 20 Data Ascii: n: absolute; top: 0; bottom: 0; left: 0; right: 0; margin: auto;}/* new footer end */@media screen and (max-width: 768px) {#partners {width: 278px;margin: 0 auto;margin-bottom: 18px;}#partners .icann img {margin:
2024-10-05 22:15:04 UTC	1048	IN	Data Raw: 63 6f 70 79 72 69 67 68 74 2d 72 65 73 70 20 7b 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 7d 0a 0a 09 2e 66 6f 6f 74 65 72 2d 61 70 70 2d 6c 69 6e 6b 20 7b 0a 09 09 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 09 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 20 6d 69 6e 2d 77 69 64 74 68 20 3a 20 37 36 38 70 78 29 20 7b 0a 09 2e 70 72 69 76 61 63 79 5f 6e 6f 74 69 63 65 5f 73 65 63 74 69 6f 6e 20 7b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 33 31 32 34 32 3b 0a 09 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 09 09 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 33 30 70 78 3b 0a 09 Data Ascii: copyright-resp {text-align: center;}.footer-app-link {float: none;margin-bottom: 15px;text-align: center;}}@media ( min-width : 768px) {.privacy_notice_section {background-color: #031242;display: flex;padding: 20px 30px;
2024-10-05 22:15:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	49844	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	650	OUT	GET /tc/1727814744245css/selectV2.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:04 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:04 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:04 GMT CF-Cache-Status: HIT Age: 351751 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4ac8b97c332-EWR
2024-10-05 22:15:04 UTC	941	IN	Data Raw: 31 31 62 36 0d 0a 2e 6e 69 63 65 2d 73 65 6c 65 63 74 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 65 38 65 38 65 38 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 2f 2a 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 2a 2f 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 67 72 Data Ascii: 11b6.nice-select { -webkit-tap-highlight-color: transparent; background-color: #fff; border-radius: 5px; border: solid 1px #e8e8e8; box-sizing: border-box; clear: both; cursor: pointer; /display: block;/ display: gr
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 73 65 6c 65 63 74 2e 6f 70 65 6e 2c 20 2e 6e 69 63 65 2d 73 65 6c 65 63 74 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 44 33 44 42 45 32 3b 0a 7d 0a 0a 2e 6e 69 63 65 2d 73 65 6c 65 63 74 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 2f 2a 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 20 2a 2f 0a 20 20 20 20 2f 2a 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 20 2a 2f 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 46 6f 6e 74 41 77 65 73 6f 6d 65 3b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 37 22 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 Data Ascii: select.open, .nice-select:focus { border-color: #D3DBE2;}.nice-select:after { /border-bottom: 2px solid #999; / /* border-right: 2px solid #999; */ font-family: FontAwesome; content: "\f107"; display: flex; align-items: ce
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 6e 69 63 65 2d 73 65 6c 65 63 74 2e 77 69 64 65 20 2e 6c 69 73 74 20 7b 0a 20 20 20 20 6c 65 66 74 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 6e 69 63 65 2d 73 65 6c 65 63 74 2e 72 69 67 68 74 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 0a 2e 6e 69 63 65 2d 73 65 6c 65 63 74 2e 72 69 67 68 74 20 2e 6c 69 73 74 20 7b 0a 20 20 20 20 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0a 7d 0a 0a 2e 6e 69 63 65 2d 73 65 6c 65 63 74 2e 73 6d 61 6c 6c 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 Data Ascii: width: 100%;}.nice-select.wide .list { left: 0 !important; right: 0 !important;}.nice-select.right { float: right;}.nice-select.right .list { left: auto; right: 0;}.nice-select.small { font-size: 12px; height:
2024-10-05 22:15:04 UTC	863	IN	Data Raw: 63 74 20 75 6c 20 3e 20 6c 69 20 2e 67 72 6f 75 70 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0a 7d 0a 0a 2e 6e 69 63 65 2d 73 65 6c 65 63 74 20 2e 6f 70 74 69 6f 6e 20 7b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f Data Ascii: ct ul > li .group { display: flex; align-items: center; padding: 0 10px; color: #999; font-weight: 700; cursor: default;}.nice-select .option { cursor: pointer; font-weight: 400; line-height: 40px; list-style: no
2024-10-05 22:15:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:04 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:04 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 33b4d0ae-a01e-0032-35ff-161949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221504Z-1657d5bbd48cpbzgkvtewk0wu00000000160000000009vua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:15:04 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:04 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 960edd56-701e-005c-4100-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221504Z-1657d5bbd48sqtlf1huhzuwq7000000000sg00000000hsvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:04 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:04 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221504Z-1657d5bbd482krtfgrg72dfbtn00000000r000000000t3kp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:04 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:04 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:04 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 0480ed94-801e-00ac-5102-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221504Z-1657d5bbd48sdh4cyzadbb374800000000ug00000000qe7r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:15:04 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:04 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:04 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: b738acd5-401e-0067-1502-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221504Z-1657d5bbd48t66tjar5xuq22r8000000014g0000000042fv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:15:04 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49849	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	660	OUT	GET /sr/navigation_bar_transparent_dark2023.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:04 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:04 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:04 GMT CF-Cache-Status: HIT Age: 351751 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4afdaae43b9-EWR
2024-10-05 22:15:04 UTC	941	IN	Data Raw: 37 64 66 33 0d 0a 2e 61 63 63 6f 75 6e 74 2d 6d 65 6e 75 2d 61 76 61 74 61 72 2d 70 68 6f 74 6f 20 7b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 30 70 78 3b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 34 39 2e 39 38 64 65 67 2c 20 23 46 42 44 30 35 31 20 31 33 2e 33 32 25 2c 20 23 43 42 45 30 41 45 20 35 34 2e 31 34 25 2c 20 23 37 42 43 37 46 39 20 38 39 2e 34 31 25 29 3b 0a 09 77 69 64 74 68 3a 20 31 31 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 31 30 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 70 78 3b 0a Data Ascii: 7df3.account-menu-avatar-photo {margin-right: 30px;float: left;display: inline-block;background: linear-gradient(149.98deg, #FBD051 13.32%, #CBE0AE 54.14%, #7BC7F9 89.41%);width: 110px;height: 110px;border-radius: 100px;margin-top: 1px;
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 20 2e 66 61 2d 61 6e 67 6c 65 2d 72 69 67 68 74 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 7d 0a 0a 2e 73 75 70 70 6f 72 74 2d 6f 70 74 69 6f 6e 2d 63 68 61 74 2d 6f 6e 6c 69 6e 65 20 7b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 09 6d 61 72 67 69 6e 3a 20 75 6e 73 65 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 6e 73 65 74 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 75 6e 73 65 74 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 75 6e 73 65 74 3b 0a 09 77 69 64 74 68 3a 20 75 6e 73 65 74 3b 0a 09 68 65 69 67 68 74 3a 20 75 6e 73 65 74 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 2e 73 75 70 70 6f 72 74 2d 6f 70 74 69 6f 6e 2d 63 68 61 74 2d 6f 6e 6c 69 6e 65 3a 68 6f 76 Data Ascii: .fa-angle-right {margin-left: 10px;}.support-option-chat-online {cursor: pointer;margin: unset;background: unset;padding-left: unset;font-size: unset;width: unset;height: unset;border-radius: unset;}.support-option-chat-online:hov
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 6e 2d 6c 65 66 74 3a 20 34 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 34 30 70 78 3b 0a 7d 0a 0a 2e 74 6f 70 2d 61 63 63 6f 75 6e 74 2d 6d 65 6e 75 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 68 65 69 67 68 74 3a 20 33 32 37 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 42 46 44 46 46 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 7d 0a 0a 2e 74 6f 70 2d 61 63 63 6f 75 6e 74 2d 6d 65 6e 75 20 2e 63 6f 6c 2d 6d 64 2d 34 20 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 32 32 32 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 33 2c 20 31 38 2c 20 36 36 2c 20 30 2e 32 Data Ascii: n-left: 40px;margin-right: 40px;}.top-account-menu {display: none;height: 327px;background-color: #FBFDFF;background-size: cover;}.top-account-menu .col-md-4 {margin-top: 50px;height: 222px;border-right: 1px solid rgba(3, 18, 66, 0.2
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 61 6e 74 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 0a 2e 74 6f 70 2d 61 63 63 6f 75 6e 74 2d 6d 65 6e 75 2d 73 75 62 74 69 74 6c 65 20 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 70 78 3b 0a 7d 0a 0a 2e 74 6f 70 2d 61 63 63 6f 75 6e 74 2d 6d 65 6e 75 2d 73 75 62 74 69 74 6c 65 20 69 20 7b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 41 37 42 31 43 32 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 63 6f 75 6e 74 2d 73 70 61 6e 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 39 36 46 37 3b 0a 09 63 6f 6c 6f 72 3a 20 23 46 42 46 44 46 46 3b 0a 09 77 69 64 Data Ascii: ant;text-decoration: none !important;}.top-account-menu-subtitle {margin-top: 8px;}.top-account-menu-subtitle i {margin-right: 10px;color: #A7B1C2;font-weight: 400;}.notification-count-span {background: #0096F7;color: #FBFDFF;wid
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 75 69 63 6b 2d 6c 69 6e 6b 73 2c 20 2e 6e 61 76 2d 73 69 64 65 2d 72 65 74 75 72 6e 2d 6d 61 69 6e 2d 6d 65 6e 75 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 34 30 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 31 35 30 2c 20 32 34 37 2c 20 30 2e 32 29 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 37 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 39 36 46 37 3b 0a 09 70 61 64 64 69 6e 67 3a 20 35 70 78 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 2e 6e Data Ascii: uick-links, .nav-side-return-main-menu {margin-left: 40px;margin-right: 40px;text-align: center;margin-top: 40px;background: rgba(0, 150, 247, 0.2);border-radius: 37px;color: #0096F7;padding: 5px;cursor: pointer;font-weight: 400;}.n
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 65 72 2d 69 6e 66 6f 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 33 31 32 34 32 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 7d 0a 0a 2e 74 61 62 6c 65 2d 73 68 6f 70 70 69 6e 67 63 61 72 64 2d 69 74 65 6d 73 2c 20 2e 74 61 62 6c 65 2d 73 68 6f 70 70 69 6e 67 63 61 72 64 2d 76 61 6c 75 65 2c 20 2e 74 61 62 6c 65 2d 73 68 6f 70 70 69 6e 67 63 61 72 64 2d 73 75 62 74 6f 74 61 6c 2c 20 2e 74 61 62 6c 65 2d 73 68 6f 70 70 69 6e 67 63 61 72 64 2d 74 6f 74 61 6c 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 33 31 32 34 32 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 7d 0a 0a 2e 76 69 65 77 2d 63 61 72 64 2d 69 74 65 6d 20 2e 76 69 Data Ascii: er-info {color: #031242;font-weight: 600;font-size: 16px;}.table-shoppingcard-items, .table-shoppingcard-value, .table-shoppingcard-subtotal, .table-shoppingcard-total {color: #031242;font-weight: 400;font-size: 16px;}.view-card-item .vi
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 2c 20 2e 6e 61 76 2d 73 69 64 65 2d 61 63 63 6f 75 6e 74 2d 73 75 62 6d 65 6e 75 2d 62 61 63 6b 20 7b 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 34 3b 0a 09 63 6f 6c 6f 72 3a 20 23 46 42 46 44 46 46 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 35 70 78 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 2e 6e 61 76 2d 73 69 64 65 2d 6d 65 6e 75 2d 62 61 63 6b 3e 69 2c 20 2e 6e 61 76 2d 73 69 64 65 2d 61 63 63 6f 75 6e 74 2d 73 75 62 6d 65 6e 75 2d 62 61 63 6b 3e 69 20 7b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 Data Ascii: , .nav-side-account-submenu-back {opacity: 0.4;color: #FBFDFF;font-weight: 400;font-size: 16px;line-height: 24px;margin-left: 30px;margin-top: 45px;cursor: pointer;}.nav-side-menu-back>i, .nav-side-account-submenu-back>i {margin-right
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 0a 09 63 6f 6c 6f 72 3a 20 23 46 42 46 44 46 46 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 30 70 78 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 2e 6e 61 76 2d 73 69 64 65 2d 63 61 72 74 20 73 70 61 6e 2c 20 2e 6e 61 76 2d 73 69 64 65 2d 6c 6f 67 69 6e 20 73 70 61 6e 20 7b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 7d 0a 0a 2e 6e 61 76 2d 73 69 64 65 2d 63 61 72 74 20 73 70 61 6e 20 61 2c 20 2e 6e 61 76 2d 73 69 64 65 2d 6c 6f 67 69 6e 20 73 70 61 6e 20 61 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 46 42 46 44 46 46 3b 0a 7d 0a 0a 2e 6e 61 76 2d Data Ascii: color: #FBFDFF;margin-left: 40px;margin-top: 60px;cursor: pointer;}.nav-side-cart span, .nav-side-login span {font-weight: 400;font-size: 16px;line-height: 24px;}.nav-side-cart span a, .nav-side-login span a {color: #FBFDFF;}.nav-
2024-10-05 22:15:04 UTC	1369	IN	Data Raw: 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 33 2c 20 31 38 2c 20 36 36 2c 20 30 2e 32 29 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 77 69 64 74 68 3a 20 36 35 25 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 32 30 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 32 38 70 78 3b 0a 09 74 65 78 74 2d 69 6e 64 65 6e 74 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 0a 2e 6e 65 77 73 6c 65 74 74 65 72 2d 73 69 67 6e 2d 75 70 2d 73 75 62 6d 69 74 2d 62 6f 74 74 6f 6d 20 7b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 Data Ascii: n-top: 10px;box-sizing: border-box;border: 1px solid rgba(3, 18, 66, 0.2);border-radius: 30px;width: 65%;max-width: 200px;height: 28px;text-indent: 10px;background-color: transparent;}.newsletter-sign-up-submit-bottom {box-sizing: bor
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 62 6f 74 74 6f 6d 2d 64 6f 6d 61 69 6e 73 2d 6d 65 6e 75 2d 6c 65 66 74 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 68 65 69 67 68 74 3a 20 33 32 30 70 78 3b 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 33 2c 20 31 38 2c 20 36 36 2c 20 30 2e 31 29 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0a 7d 0a 0a 2e 62 6f 74 74 6f 6d 2d 64 6f 6d 61 69 6e 73 2d 6d 65 6e 75 2d 74 69 74 6c 65 20 7b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 34 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 30 33 31 32 34 32 3b 0a 7d 0a 0a 2e 62 6f 74 74 6f 6d 2d 61 66 74 65 72 6d 61 72 6b 65 74 2d 6d 65 Data Ascii: bottom-domains-menu-left {float: left;height: 320px;border-left: 1px solid rgba(3, 18, 66, 0.1);padding-left: 20px;}.bottom-domains-menu-title {font-weight: 600;font-size: 14px;line-height: 14px;color: #031242;}.bottom-aftermarket-me

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49851	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	639	OUT	GET /sr/chatbot_bubble.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:05 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:04 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:04 GMT CF-Cache-Status: HIT Age: 351751 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4b01d55c44f-EWR
2024-10-05 22:15:05 UTC	941	IN	Data Raw: 37 64 66 33 0d 0a 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 35 70 78 3b 0a 7d 0a 0a 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 65 6d 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 35 30 2c 20 35 30 2c 20 35 30 2c 20 2e 33 29 3b 0a 7d 0a 0a 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 72 61 63 6b 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 65 6d 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 35 30 2c 20 35 30 2c 20 35 30 2c 20 2e Data Ascii: 7df3::-webkit-scrollbar { width: 6px; height: 5px;}::-webkit-scrollbar-thumb { border-radius: 1em; background-color: rgba(50, 50, 50, .3);}::-webkit-scrollbar-track { border-radius: 1em; background-color: rgba(50, 50, 50, .
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 2e 74 72 75 73 74 70 69 6c 6f 74 2d 74 68 61 6e 6b 73 2d 64 69 76 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 31 33 34 35 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 53 77 69 74 7a 65 72 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 37 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 74 72 75 73 74 70 69 6c 6f 74 2d 64 Data Ascii: cursor: pointer;}.trustpilot-thanks-div { color: #001345; text-align: center; font-family: Switzer, sans-serif; font-size: 14px; font-style: normal; font-weight: 600; max-width: 270px; margin: 0 auto;}.trustpilot-d
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 36 30 70 78 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 7d 0a 0a 23 63 62 2d 66 69 78 65 64 2d 62 75 62 2d 69 6d 67 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 36 35 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 33 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 32 70 78 3b 0a 7d 0a 0a 23 63 62 2d 66 69 78 65 64 2d 63 6c 6f 73 65 2d 62 75 62 2d 69 6d 67 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 77 69 64 Data Ascii: idth: 60px; z-index: 99; border-radius: 50%;}#cb-fixed-bub-img { overflow: hidden; width: 65px; height: 60px; margin-left: -3px; margin-top: -2px;}#cb-fixed-close-bub-img { display: none; overflow: hidden; wid
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 3b 0a 7d 0a 0a 2e 63 68 61 74 62 6f 74 2d 6d 6f 64 61 6c 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 61 72 65 61 20 69 6d 67 20 7b 0a 20 20 20 20 69 6d 61 67 65 2d 72 65 6e 64 65 72 69 6e 67 3a 20 61 75 74 6f 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 34 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 36 70 78 3b 0a 7d 0a 0a 23 63 62 2d 66 69 78 65 64 2d 62 6f 78 2d 6d 6f 64 61 6c 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 Data Ascii: ;}.chatbot-modal-notification-area img { image-rendering: auto; height: 20px; margin-top: -4px; margin-right: 6px;}#cb-fixed-box-modal { display: none; position: absolute; height: 100%; width: 100%; background: rg
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 6d 6f 64 61 6c 2d 62 74 6e 20 62 75 74 74 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 20 31 70 78 20 30 20 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 61 37 62 31 63 32 33 33 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 33 31 32 34 32 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 20 30 20 30 20 34 70 78 3b 0a 7d 0a 0a 23 63 62 2d 66 69 78 65 64 2d 62 6f 78 2d 6d 6f 64 61 6c 20 23 6d 6f 64 61 6c 2d 62 74 6e 20 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e Data Ascii: modal-btn button:first-child { border-width: 0 1px 0 0; border-style: solid; border-color: #a7b1c233; color: #031242; border-radius: 0 0 0 4px;}#cb-fixed-box-modal #modal-btn button:last-child { margin-left: 1px; border: non
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 31 36 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 23 63 62 2d 66 69 78 65 64 2d 62 6f 78 2d 73 69 67 6e 6f 75 74 2d 6d 6f 64 61 6c 20 62 75 74 74 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 20 31 70 78 20 30 20 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 61 37 62 31 63 32 33 33 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 33 31 32 34 32 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 20 30 20 30 20 34 70 78 3b 0a 7d 0a 0a 23 63 62 2d 66 69 78 65 64 2d 62 6f 78 2d 73 69 67 6e 6f 75 74 2d 6d Data Ascii: 16px; font-weight: 600; width: 50%;}#cb-fixed-box-signout-modal button:first-child { border-width: 0 1px 0 0; border-style: solid; border-color: #a7b1c233; color: #031242; border-radius: 0 0 0 4px;}#cb-fixed-box-signout-m
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 64 74 68 3a 20 31 37 39 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 32 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 7d 0a 0a 23 63 62 2d 66 69 78 65 64 2d 62 6f 78 2d 74 72 61 6e 73 6c 61 74 65 2d 6d 6f 64 61 6c 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 36 29 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 3b 0a 7d 0a 0a 23 63 62 2d 66 69 78 Data Ascii: dth: 179px; margin-left: 10px; margin-top: 12px; line-height: 20px;}#cb-fixed-box-translate-modal { display: none; position: absolute; height: 100%; width: 100%; background: rgba(0, 0, 0, 0.6); z-index: 9;}#cb-fix
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 20 2e 74 72 61 6e 73 6c 61 74 65 4d 6f 64 61 6c 2d 63 68 65 63 6b 2d 61 72 65 61 20 73 70 61 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 7d 0a 0a 23 63 62 2d 66 69 78 65 64 2d 62 6f 78 2d 74 72 61 6e 73 6c 61 74 65 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 23 63 62 5f 74 72 61 6e 73 6c 61 74 65 5f 61 63 63 65 70 74 5f 62 74 6e 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 39 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 34 70 78 20 31 32 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 32 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 43 42 46 39 33 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c Data Ascii: .translateModal-check-area span { font-weight: 600;}#cb-fixed-box-translate-modal-content #cb_translate_accept_btn { margin-top: 19px; padding: 4px 12px; width: 100%; height: 32px; background-color: #3CBF93; border: 1px sol
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 38 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 39 35 30 35 36 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0a 7d 0a 0a 23 63 62 2d 66 69 78 65 64 2d 62 6f 78 20 23 63 62 2d 66 69 78 65 64 2d 62 6f 78 2d 65 64 20 2e 74 69 74 6c 65 2d 68 32 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 37 33 2c 20 38 30 2c 20 38 36 2c 20 30 2e 36 29 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 7d 0a 0a 23 63 62 2d 66 69 78 65 64 2d 62 6f 78 20 23 63 62 2d 66 69 78 65 64 2d 62 6f 78 2d 65 64 20 2e 65 6d 61 69 6c 2d 63 68 61 74 2d 72 65 63 6f 72 64 20 7b 0a 20 20 20 20 Data Ascii: 8px; font-weight: 600; color: #495056; margin-bottom: 5px;}#cb-fixed-box #cb-fixed-box-ed .title-h2 { font-weight: 400; color: rgba(73, 80, 86, 0.6); line-height: 20px;}#cb-fixed-box #cb-fixed-box-ed .email-chat-record {
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 69 6e 2d 74 6f 70 3a 20 31 36 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 33 30 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 33 31 32 34 32 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 7d 0a 0a 0a 23 63 62 2d 66 69 78 65 64 2d 62 6f 78 20 23 63 62 2d 66 69 78 65 64 2d 62 6f 78 2d 65 64 20 2e 64 6f 77 6e 6c 6f 61 64 2d 72 65 63 6f 72 64 2d 72 65 6d 69 6e 64 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: in-top: 16px; width: 300px; height: 40px; background: #031242; border-radius: 40px; border: none; font-size: 14px; color: #FFFFFF;}#cb-fixed-box #cb-fixed-box-ed .download-record-remind { display: none; font-weight:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49850	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	634	OUT	GET /sr/home_2023.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:05 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:05 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:05 GMT CF-Cache-Status: HIT Age: 351752 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4b05d9219f7-EWR
2024-10-05 22:15:05 UTC	941	IN	Data Raw: 31 64 39 63 0d 0a 2f 2a 20 42 61 73 69 63 20 43 53 53 20 2a 2f 0a 62 6f 64 79 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 53 77 69 74 7a 65 72 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 2e 68 31 2c 20 2e 68 32 2c 20 2e 68 33 2c 20 2e 68 34 2c 20 2e 68 35 2c 20 2e 68 36 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 70 72 6f 78 69 6d 61 2d 6e 6f 76 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 2c 20 69 6e Data Ascii: 1d9c/* Basic CSS */body {font-family: Switzer, sans-serif;font-weight: 500;font-style: normal;}.h1, .h2, .h3, .h4, .h5, .h6, h1, h2, h3, h4, h5, h6 {font-family: proxima-nova, sans-serif;font-weight: 600;font-style: normal;}button, in
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 0a 09 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 75 6e 73 65 74 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 7d 0a 0a 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 73 70 61 6e 2e 73 75 62 74 69 74 6c 65 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 0a 09 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 75 6e 73 65 Data Ascii: color: #fff;margin-bottom: 15px;line-height: 1.2;letter-spacing: unset;font-weight: 600;}.carousel-content-container span.subtitle {display: block;font-size: 32px;color: #fff;margin-bottom: 15px;line-height: 1.2;letter-spacing: unse
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 23 32 39 33 34 34 32 2c 20 23 37 36 39 31 44 32 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 23 32 39 33 34 34 32 2c 20 23 37 36 39 31 44 32 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 23 32 39 33 34 34 32 2c 20 23 37 36 39 31 44 32 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 23 32 39 33 34 34 32 2c 20 23 37 36 39 31 44 32 29 3b 0a 7d 0a 0a 2e 77 62 2d 62 6c 6f 63 6b 2d 63 6f 6e 74 61 69 6e 65 72 3e 69 6d 67 20 7b 0a 09 77 69 64 74 68 3a 20 31 32 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 30 70 78 Data Ascii: : -webkit-linear-gradient(#293442, #7691D2);background: -o-linear-gradient(#293442, #7691D2);background: -moz-linear-gradient(#293442, #7691D2);background: linear-gradient(#293442, #7691D2);}.wb-block-container>img {width: 120px;height: 120px
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 7a 65 3a 20 32 30 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 35 39 35 61 39 30 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 09 70 61 Data Ascii: ze: 20px;display: block;text-align: center;color: #fff;font-weight: 300;}.contact-item-container {margin-left: 10px;margin-right: 10px;background-color: #fff;font-size: 16px;color: #595a90;text-align: center;padding-top: 10px;pa
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 68 3a 20 37 30 25 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 35 70 78 3b 0a 7d 0a 0a 75 6c 2e 64 6f 6d 61 69 6e 2d 6d 61 72 6b 65 74 2d 6c 69 73 74 20 73 70 61 6e 2e 70 72 69 63 65 20 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 09 77 69 64 74 68 3a 20 32 38 25 3b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 35 70 78 3b 0a 7d 0a 0a 75 6c 2e 64 6f 6d 61 69 6e 2d 6d 61 72 6b 65 74 2d 6c 69 73 74 20 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 61 2e 76 69 65 77 2d 6d 6f 72 65 2d 6c 69 6e 6b 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 Data Ascii: h: 70%;text-align: left;padding-left: 5px;}ul.domain-market-list span.price {text-align: right;width: 28%;padding-right: 5px;}ul.domain-market-list li:last-child {border-bottom: none;}a.view-more-link {display: block;text-align: r
2024-10-05 22:15:05 UTC	1171	IN	Data Raw: 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 35 30 70 78 3b 0a 7d 0a 0a 2e 68 6f 6d 65 2d 65 76 65 6e 74 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 35 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 35 30 70 78 3b 0a 7d 0a 0a 2e 68 6f 6d 65 2d 65 76 65 6e 74 2d 63 6f 6e 74 65 6e 74 20 2e 74 69 74 6c 65 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 32 37 33 31 33 65 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 7d 0a 0a 2e 68 6f 6d 65 2d 65 76 65 6e 74 2d 63 6f 6e 74 65 6e 74 20 2e 74 65 78 74 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 Data Ascii: padding-top: 50px;padding-bottom: 50px;}.home-event-content {padding-left: 50px;padding-right: 50px;}.home-event-content .title {color: #27313e;font-size: 18px;display: block;font-weight: 600;}.home-event-content .text {color: #
2024-10-05 22:15:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49852	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	645	OUT	GET /sr/home_responsive_2023.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:05 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:05 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:05 GMT CF-Cache-Status: HIT Age: 351752 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4b06dd743c7-EWR
2024-10-05 22:15:05 UTC	941	IN	Data Raw: 37 64 66 33 0d 0a 2e 68 6f 6d 65 2d 74 6f 70 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 30 30 25 20 31 30 30 25 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2f 73 72 2f 6d 61 69 6e 73 69 74 65 32 30 32 33 2f 68 6f 6d 65 2f 68 65 61 64 65 72 5f 62 67 2e 6a 70 67 29 3b 0a 7d 0a 0a 2e 68 6f 6d 65 2d 74 6f 70 2d 62 6f 78 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 35 30 70 78 3b 0a 7d 0a 0a 2e 68 65 61 64 2d 74 69 74 6c 65 20 7b 0a 20 20 20 20 66 6f 6e Data Ascii: 7df3.home-top-container { background-size: 100% 100%; background-color: #000; padding: 0; background-image: url(/sr/mainsite2023/home/header_bg.jpg);}.home-top-box { margin: 0 auto; padding-top: 150px;}.head-title { fon
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 77 69 74 7a 65 72 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 45 41 34 33 33 37 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 68 6f 6d 65 2d 73 65 61 72 63 68 2d 72 65 73 75 6c 74 2d 65 72 72 6f 72 20 2e 66 61 2d 74 69 6d 65 73 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d Data Ascii: font-family: 'Switzer'; font-style: normal; font-weight: 400; font-size: 16px; color: #EA4337; display: flex; align-items: center;}.home-search-result-error .fa-times { font-style: normal; font-weight: 400; font-
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0a 7d 0a 0a 2e 72 65 67 69 73 74 65 72 2d 61 6e 64 2d 74 72 61 6e 73 66 65 72 2d 74 65 78 74 20 73 70 61 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 77 69 74 7a 65 72 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 2c 20 31 38 2c 20 36 36 2c 20 30 2e 34 29 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 Data Ascii: margin-left: 20px;}.register-and-transfer-text span { font-family: 'Switzer'; font-style: normal; font-weight: 500; font-size: 15px; line-height: 22px; color: rgba(3, 18, 66, 0.4); cursor: pointer; display: inline-b
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 74 2d 61 75 74 6f 66 69 6c 6c 3a 61 63 74 69 76 65 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 31 31 31 31 31 31 73 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 63 6f 6c 6f 72 20 31 31 31 31 31 73 20 65 61 73 65 2d 6f 75 74 2c 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 31 31 31 31 31 31 73 20 65 61 73 65 2d 6f 75 74 3b 0a 7d 0a 0a 69 6e 70 75 74 5b 74 79 70 65 3d 27 74 65 78 74 27 5d 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 72 65 67 69 73 74 65 72 2d 61 6e 64 2d 74 72 61 6e 73 66 65 72 2d 69 6e 70 75 74 20 69 6e 70 75 74 5b 74 79 70 Data Ascii: t-autofill:active { -webkit-transition-delay: 111111s; -webkit-transition: color 11111s ease-out, background-color 111111s ease-out;}input[type='text']:focus { border: none; outline-style: none;}.register-and-transfer-input input[typ
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 0a 0a 2e 72 65 67 69 73 74 65 72 2d 61 6e 64 2d 74 72 61 6e 73 66 65 72 2d 62 75 6c 6b 2d 74 65 78 74 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 77 69 74 7a 65 72 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 0a 2e 72 65 67 69 73 74 65 72 2d 61 6e 64 2d 74 72 61 6e 73 66 65 72 2d 62 75 6c 6b 2d 74 65 78 74 20 2e 66 61 2d 61 6e 67 6c 65 2d 72 69 67 Data Ascii: .register-and-transfer-bulk-text { font-family: 'Switzer'; font-style: normal; font-weight: 400 !important; font-size: 14px !important; line-height: 22px !important; float: right;}.register-and-transfer-bulk-text .fa-angle-rig
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 61 6e 61 67 65 2d 74 65 78 74 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 77 69 74 7a 65 72 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 32 70 78 3b 0a 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 30 2e 30 31 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 46 42 46 44 46 46 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 35 70 78 3b 0a 7d 0a 0a 2e 6c 65 61 72 6e 2d 6d 6f 72 65 2d 74 65 78 74 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 77 69 74 7a 65 72 27 3b 0a 20 20 20 Data Ascii: anage-text { font-family: 'Switzer'; font-style: normal; font-weight: 500; font-size: 24px; line-height: 32px; letter-spacing: -0.01em; color: #FBFDFF; margin-top: 25px;}.learn-more-text { font-family: 'Switzer';
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 36 37 2e 34 32 64 65 67 2c 20 23 45 31 43 36 46 44 20 39 2e 31 32 25 2c 20 23 44 32 38 45 46 37 20 39 34 2e 39 32 25 29 3b 0a 7d 0a 0a 2e 63 6f 6c 6f 72 2d 69 63 6f 6e 32 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 37 38 2e 34 31 64 65 67 2c 20 23 36 37 42 45 46 37 20 31 30 2e 35 31 25 2c 20 23 45 32 45 46 46 46 20 31 30 32 2e 37 37 25 29 3b 0a 7d 0a 0a 2e 63 6f 6c 6f 72 2d 69 63 6f 6e 33 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 33 31 34 2e 31 31 64 65 67 2c 20 23 45 46 44 34 36 41 20 31 32 2e 31 33 25 2c 20 23 36 46 42 46 45 38 20 38 33 2e 33 34 25 Data Ascii: ackground: linear-gradient(167.42deg, #E1C6FD 9.12%, #D28EF7 94.92%);}.color-icon2 { background: linear-gradient(78.41deg, #67BEF7 10.51%, #E2EFFF 102.77%);}.color-icon3 { background: linear-gradient(314.11deg, #EFD46A 12.13%, #6FBFE8 83.34%
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 3a 20 27 73 77 61 6e 73 65 61 2d 62 6f 6c 64 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 32 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 30 2e 30 31 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 33 31 32 34 32 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 74 72 75 73 74 65 64 2d 74 6f 2d 6d 61 6e 61 67 65 2d 74 69 74 6c 65 20 2e 70 61 72 74 34 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 Data Ascii: : 'swansea-bold'; font-style: normal; font-weight: 700; font-size: 32px; line-height: 38px; text-align: center; letter-spacing: -0.01em; color: #031242; display: inline-block;}.trusted-to-manage-title .part4 { font-f
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 34 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 33 31 32 34 32 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 45 42 46 33 46 46 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 35 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 34 35 70 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e Data Ascii: padding: 10px 24px; background: #031242; border-radius: 60px; border: none; font-weight: 400; font-size: 18px; line-height: 24px; color: #EBF3FF; cursor: pointer; margin-top: 15px; height: 45px; display: inlin
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 42 46 33 46 46 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 34 70 78 20 32 34 70 78 20 30 70 78 20 30 70 78 3b 0a 7d 0a 0a 2e 66 69 6e 64 2d 61 6e 64 2d 6d 61 6e 61 67 65 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 33 30 30 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 Data Ascii: display: flex; padding-left: 10px; padding-right: 10px; background-color: #EBF3FF; border-radius: 24px 24px 0px 0px;}.find-and-manage-content { max-width: 1300px; width: 100%; display: inline-flex; justify-content: spa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49853	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:04 UTC	643	OUT	GET /sr/home_search_result.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:05 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:05 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:05 GMT CF-Cache-Status: HIT Age: 351752 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4b0bb6e8c84-EWR
2024-10-05 22:15:05 UTC	941	IN	Data Raw: 36 64 33 36 0d 0a 0a 2e 73 6b 65 6c 65 74 6f 6e 2d 6c 6f 61 64 65 72 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 34 32 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 23 45 30 45 30 45 30 20 30 25 2c 20 23 46 42 46 42 46 42 20 35 30 25 2c 20 23 45 30 45 30 45 30 20 31 30 30 25 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 32 30 30 25 20 31 30 30 25 3b 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 6c 6f 61 64 69 6e 67 20 31 2e 35 73 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 7d 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 69 6e Data Ascii: 6d36.skeleton-loader { width: 242px; height: 18px; background: linear-gradient(90deg, #E0E0E0 0%, #FBFBFB 50%, #E0E0E0 100%); background-size: 200% 100%; animation: loading 1.5s infinite; border-radius: 5px;}@keyframes loadin
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 32 30 70 78 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 2e 64 6f 6d 61 69 6e 2d 73 65 61 72 63 68 2d 61 69 2d 77 72 61 70 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 70 78 3b 0a 7d 0a 0a 2e 64 6f 6d 61 69 6e 2d 73 65 61 72 63 68 2d 61 69 2d 77 72 61 70 20 2e 72 65 73 75 6c 74 2d 63 6f 75 6e 74 2d 77 72 61 70 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 Data Ascii: 20px; cursor: pointer;}.domain-search-ai-wrap { display: flex; align-items: center; justify-content: space-between; padding: 10px 0px;}.domain-search-ai-wrap .result-count-wrap { color: #000; font-size: 14px; font-wei
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 65 70 65 61 74 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2e 34 73 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 61 69 2d 73 77 69 74 63 68 2d 63 6f 6e 74 61 69 6e 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 3a 63 68 65 63 6b 65 64 20 2b 20 2e 61 69 2d 73 77 69 74 63 68 2d 73 6c 69 64 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 23 46 37 45 37 46 46 20 30 25 2c 20 23 41 44 36 44 46 46 20 31 30 30 25 29 3b 0a 7d 0a 0a Data Ascii: epeat; text-align: center; background-position: center; transition: .4s; border-radius: 50%;}.ai-switch-container input[type="checkbox"]:checked + .ai-switch-slider { background: linear-gradient(90deg, #F7E7FF 0%, #AD6DFF 100%);}
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 67 61 70 3a 20 31 30 70 78 3b 0a 7d 0a 0a 2e 73 65 61 72 63 68 2d 72 6f 77 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 33 2c 20 31 38 2c 20 36 36 2c 20 30 2e 31 29 3b 0a 20 20 20 20 67 61 70 3a 20 32 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 32 30 70 78 3b 0a 7d 0a 0a 2e 73 65 65 2d 6d 6f 72 65 2d 61 72 72 6f 77 20 7b 0a 20 20 20 20 6c 65 66 74 3a 20 30 Data Ascii: gn-items: center; gap: 10px;}.search-row { display: flex; align-items: center; border-top: 1px solid transparent; border-bottom: 1px solid rgba(3, 18, 66, 0.1); gap: 20px; padding: 15px 20px;}.see-more-arrow { left: 0
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 33 31 32 34 32 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 35 70 78 3b 0a 7d 0a 0a 2e 73 65 61 72 63 68 2d 61 64 64 2d 74 6f 2d 77 61 74 63 68 6c 69 73 74 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 Data Ascii: nt-style: normal; font-weight: 400; font-size: 17px; line-height: 22px; display: flex; color: #031242; margin-top: 25px;}.search-add-to-watchlist { width: 20px; height: 20px; display: inline-flex; cursor: pointer
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 53 61 66 61 72 69 20 61 6e 64 20 43 68 72 6f 6d 65 20 2a 2f 0a 7d 0a 0a 2e 73 65 61 72 63 68 2d 63 6f 75 70 6f 6e 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 2c 20 31 38 2c 20 36 36 2c 20 30 2e 35 29 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 73 65 61 72 63 68 2d 63 6f 75 70 6f 6e 20 2e 66 61 2d 73 63 69 73 73 6f 72 73 20 7b 0a 20 20 20 20 66 6f 6e 74 2d Data Ascii: Safari and Chrome */}.search-coupon { display: inline-flex; color: rgba(3, 18, 66, 0.5); cursor: pointer; font-style: normal; font-size: 14px; font-weight: 400; align-items: center;}.search-coupon .fa-scissors { font-
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 44 42 38 39 46 46 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 7d 0a 0a 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 74 61 67 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 77 69 74 7a 65 72 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 35 34 20 31 36 31 20 31 38 30 29 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 28 31 35 34 20 31 36 31 20 31 38 30 29 3b 0a 20 Data Ascii: color: #DB89FF; font-size: 12px;}.custom-content-tag { font-family: 'Switzer'; font-style: normal; font-weight: 500; font-size: 12px; line-height: 20px; color: rgb(154 161 180); border: 1px solid rgb(154 161 180);
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 6c 6f 72 3a 20 23 44 38 33 45 33 45 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 73 65 61 72 63 68 2d 72 65 6d 6f 76 65 20 2e 66 61 2d 74 69 6d 65 73 2c 20 2e 62 75 6e 64 6c 65 2d 72 65 6d 6f 76 65 2d 63 61 72 74 20 2e 66 61 2d 74 69 6d 65 73 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 35 70 78 3b 0a 7d 0a 0a 2e 73 65 61 72 63 68 2d 6c 6f 61 64 69 6e 67 20 7b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 39 36 46 37 3b 0a Data Ascii: lor: #D83E3E; cursor: pointer; display: flex; align-items: center; justify-content: center;}.search-remove .fa-times, .bundle-remove-cart .fa-times { padding-right: 5px;}.search-loading { cursor: pointer; color: #0096F7;
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 69 67 68 74 3a 20 33 34 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 75 6e 73 65 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 35 70 78 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 53 77 69 74 7a 65 72 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 2e 61 69 2d 73 65 61 72 63 68 2d 6c 69 6e 6b 20 73 70 61 6e 2c 20 2e 61 69 2d 73 65 61 72 63 68 2d 6c 69 6e 6b 20 69 7b 0a 20 20 20 20 63 6f 6c Data Ascii: ight: 34px; border-radius: 60px; border: unset; margin-top: 15px; cursor: pointer; font-size: 16px; font-family: Switzer, sans-serif; font-style: normal; font-weight: 400;}.ai-search-link span, .ai-search-link i{ col
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 33 31 32 34 32 3b 0a 7d 0a 0a 2e 73 65 61 72 63 68 2d 70 6c 61 63 65 2d 62 69 64 20 3e 20 73 70 61 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 39 36 46 37 3b 0a 7d 0a 0a 2e 73 65 61 72 63 68 2d 70 6c 61 63 65 2d 62 69 64 20 2e 66 61 2d 69 6e 66 6f 2d 63 69 72 63 6c 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a Data Ascii: font-size: 14px; display: flex; flex-direction: column; color: #031242;}.search-place-bid > span:first-child { color: #0096F7;}.search-place-bid .fa-info-circle { font-style: normal; font-weight: 400; font-size: 14px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49859	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:05 UTC	656	OUT	GET /domain/1727814740291make-offer-new.css HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:05 UTC	428	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:05 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:05 GMT CF-Cache-Status: HIT Age: 351752 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4b1c862187d-EWR
2024-10-05 22:15:05 UTC	941	IN	Data Raw: 31 31 36 35 0d 0a 2e 6d 61 6b 65 2d 6f 66 66 65 72 2d 74 69 74 6c 65 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 31 33 43 35 30 3b 0a 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 7d 0a 0a 2e 6d 61 6b 65 2d 6f 66 66 65 72 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 39 30 25 3b 0a 20 20 20 20 Data Ascii: 1165.make-offer-title { margin-top: 10px; font-size: 18px; color: #313C50; letter-spacing: 0; font-weight: 600;}.make-offer-description { margin-left: auto; margin-right: auto; font-size: 16px; max-width: 90%;
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 34 33 70 78 3b 0a 7d 0a 0a 2e 62 74 6e 2e 62 74 6e 2d 31 38 63 34 38 35 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 38 63 34 38 35 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 31 38 63 34 38 35 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 35 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 34 35 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 35 70 78 3b 0a 7d 0a 0a 64 69 76 2e 64 6f 6e 75 74 73 Data Ascii: text-align: center; margin-top: 10px; line-height: 43px;}.btn.btn-18c485 { background-color: #18c485; border: 1px solid #18c485; color: #fff; outline: none; width: 45%; height: 45px; margin: 0px 5px;}div.donuts
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 65 72 2d 64 6f 6d 61 69 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 32 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 33 31 32 34 32 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 7d 0a 0a 2e 6d 6f 64 61 6c 2d 68 65 61 64 65 72 2d 74 6f 70 2d 64 6f 6d 61 69 6e 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 41 37 42 31 43 32 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 7d 0a 0a 2e 6d 6f 64 61 6c 2d 68 65 61 64 65 72 2d 74 6f 70 2d 64 6f 6d 61 69 6e 20 64 69 76 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 31 33 43 35 30 3b 0a 20 20 20 20 6c 65 74 74 65 72 2d 73 Data Ascii: er-domain { font-size: 22px; color: #031242; font-weight: 600;}.modal-header-top-domain { border-bottom: 1px solid #A7B1C2; margin-bottom: 10px;}.modal-header-top-domain div { font-size: 16px; color: #313C50; letter-s
2024-10-05 22:15:05 UTC	782	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 30 33 31 32 34 32 2c 20 23 30 33 31 32 34 32 29 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 65 62 66 2d 33 2d 66 66 2c 20 23 45 42 46 33 46 46 29 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6d 6f 64 61 6c 2d 62 6f 64 79 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 37 32 30 70 78 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 Data Ascii: ckground: var(--031242, #031242); color: var(--ebf-3-ff, #EBF3FF); font-size: 16px; line-height: 24px; border: none; outline: none;}.modal-body { width: 100%; position: relative; max-width: 720px; overflow: hidden;
2024-10-05 22:15:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:05 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:05 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:05 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221505Z-1657d5bbd48sqtlf1huhzuwq7000000000q000000000uurr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:15:05 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:05 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:05 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:05 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cb759915-201e-003f-5f03-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221505Z-1657d5bbd48f7nlxc7n5fnfzh000000000mg00000000pk3u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:15:05 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:05 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:05 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: db28c537-d01e-0065-47fe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221505Z-1657d5bbd48q6t9vvmrkd293mg00000001400000000052xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:05 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:05 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:05 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 84e7aa3f-c01e-008e-74ff-167381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221505Z-1657d5bbd48q6t9vvmrkd293mg000000013g0000000070wm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:05 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:05 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:05 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:05 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b6c21a8e-c01e-008e-115a-177381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221505Z-1657d5bbd48lknvp09v995n79000000000r000000000cn35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:15:05 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49860	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:05 UTC	626	OUT	GET /tr/jquery-3.6.3.min.js HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:05 UTC	444	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:05 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:05 GMT CF-Cache-Status: HIT Age: 351752 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4b488cf1831-EWR
2024-10-05 22:15:05 UTC	925	IN	Data Raw: 37 64 65 32 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 33 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7de2/! jQuery v3.6.3 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6e 5b 6f 2e 63 61 6c 6c 28 65 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 65 7d 76 61 72 20 66 3d 22 33 2e 36 2e 33 22 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 45 2e 66 6e 2e 69 6e 69 74 28 65 2c 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 76 Data Ascii: te(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var f="3.6.3",E=function(e,t){return new E.fn.init(e,t)};function p(e){v
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 6d 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 26 28 61 3d 74 68 69 73 2c 73 2d 2d 29 3b 73 3c 75 3b 73 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 72 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 74 26 26 61 21 3d 3d 72 26 26 28 6c 26 26 72 26 26 28 45 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 72 29 7c 7c 28 69 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 29 3f 28 6e 3d 61 5b 74 5d 2c 6f 3d 69 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 5b 5d 3a 69 7c 7c 45 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 6e 29 3f 6e Data Ascii: uments[s]\|\|{},s++),"object"==typeof a\|\|m(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(E.isPlainObject(r)\|\|(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i\|\|E.isPlainObject(n)?n
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 6f 20 69 6e 20 65 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 72 65 74 75 72 6e 20 67 28 61 29 7d 2c 67 75 69 64 3a 31 2c 73 75 70 70 6f 72 74 3a 76 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 45 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 45 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 5b 22 5b 6f 62 6a 65 63 74 Data Ascii: o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support:v}),"function"==typeof Symbol&&(E.fn[Symbol.iterator]=t[Symbol.iterator]),E.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 57 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 46 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4d 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4d 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4d 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4d 2b 22 2a 5c 5c 29 7c 29 22 2c 22 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 52 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 Data Ascii: new RegExp("^"+W),PSEUDO:new RegExp("^"+F),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\$"+M+"(even\|odd\|(([+-]\|)(\\d)n\|)"+M+"(?:([+-]\|)"+M+"(\\d+)\|))"+M+"*\$\|)","i"),bool:new RegExp("^(?:"+R+")$","i"),needsContext:new RegExp
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 65 29 2c 65 3d 65 7c 7c 43 2c 53 29 29 7b 69 66 28 31 31 21 3d 3d 70 26 26 28 75 3d 5a 2e 65 78 65 63 28 74 29 29 29 69 66 28 69 3d 75 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 70 29 7b 69 66 28 21 28 61 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 61 2e 69 64 3d 3d 3d 69 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 61 29 2c 6e 7d 65 6c 73 65 20 69 66 28 66 26 26 28 61 3d 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 26 26 76 28 65 2c 61 29 26 26 61 2e 69 64 3d 3d 3d 69 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 61 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 75 5b 32 5d 29 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 Data Ascii: e),e=e\|\|C,S)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.getElementById(i)))return n;if(a.id===i)return n.push(a),n}else if(f&&(a=f.getElementById(i))&&v(e,a)&&a.id===i)return n.push(a),n}else{if(u[2])return H.apply(n,e.getElementsByTagName(t)
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 65 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 74 7c 7c 22 62 75 Data Ascii: Index;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.type===t}}function he(n){return function(e){var t=e.nodeName.toLowerCase();return("input"===t\|\|"bu
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 6c 65 63 74 6f 72 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 53 53 2e 73 75 70 70 6f 72 74 73 28 22 73 65 6c 65 63 74 6f 72 28 2a 29 22 29 26 26 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 69 73 28 3a 6a 71 66 61 6b 65 29 22 29 26 26 21 43 53 53 2e 73 75 70 70 6f 72 74 73 28 22 73 65 6c 65 63 74 6f 72 28 3a 69 73 28 2a 2c 3a 6a 71 66 61 6b 65 29 29 22 29 7d 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: lector=ce(function(){return CSS.supports("selector()")&&C.querySelectorAll(":is(:jqfake)")&&!CSS.supports("selector(:is(,:jqfake))")}),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 67 4e 61 6d 65 28 65 29 3b 69 66 28 22 2a 22 3d 3d 3d 65 29 7b 77 68 69 6c 65 28 6e 3d 6f 5b 69 2b 2b 5d 29 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 6f 7d 2c 62 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 53 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 79 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c Data Ascii: gName(e);if("*"===e){while(n=o[i++])1===n.nodeType&&r.push(n);return r}return o},b.find.CLASS=d.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&S)return t.getElementsByClassName(e)},s=[],y=[],(d.qsa=K.test(C.querySel
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 2c 3a 78 22 29 2c 79 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 2c 28 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 4b 2e 74 65 73 74 28 63 3d 61 2e 6d 61 74 63 68 65 73 7c 7c 61 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 2e 64 69 73 63 6f 6e 6e 65 63 Data Ascii: ll(":disabled").length&&y.push(":enabled",":disabled"),e.querySelectorAll(",:x"),y.push(",.:")})),(d.matchesSelector=K.test(c=a.matches\|\|a.webkitMatchesSelector\|\|a.mozMatchesSelector\|\|a.oMatchesSelector\|\|a.msMatchesSelector))&&ce(function(e){d.disconnec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49861	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:05 UTC	674	OUT	GET /account/script/1727814741572cp.yubico.js HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dynadot.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:05 UTC	444	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:05 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:05 GMT CF-Cache-Status: HIT Age: 351752 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4b49ede42a3-EWR
2024-10-05 22:15:05 UTC	925	IN	Data Raw: 31 64 65 61 0d 0a 69 6d 70 6f 72 74 20 2a 20 61 73 20 77 65 62 61 75 74 68 6e 4a 73 6f 6e 20 66 72 6f 6d 20 22 2e 2f 77 65 62 61 75 74 68 6e 2d 6a 73 6f 6e 2e 6a 73 22 3b 0a 0a 6c 65 74 20 63 65 72 65 6d 6f 6e 79 53 74 61 74 65 20 3d 20 7b 7d 3b 0a 0a 69 66 20 28 24 2e 44 79 6e 61 43 50 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 24 2e 44 79 6e 61 43 50 20 3d 20 7b 7d 3b 0a 7d 0a 24 2e 44 79 6e 61 43 50 2e 59 75 62 69 63 6f 20 3d 20 7b 7d 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 72 65 6a 65 63 74 65 64 28 65 72 72 29 20 7b 0a 20 20 20 20 24 28 27 23 79 75 62 69 63 6f 2d 73 69 6e 67 69 6e 2d 65 72 72 6f 72 2d 6d 73 67 27 29 2e 73 68 6f 77 28 29 3b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 73 65 74 49 6e 74 65 72 76 61 6c 28 72 65 74 72 79 41 75 Data Ascii: 1deaimport * as webauthnJson from "./webauthn-json.js";let ceremonyState = {};if ($.DynaCP === undefined) { $.DynaCP = {};}$.DynaCP.Yubico = {};function rejected(err) { $('#yubico-singin-error-msg').show(); window.setInterval(retryAu
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 65 6e 74 69 61 6c 43 72 65 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 7d 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 52 65 73 70 6f 6e 73 65 28 75 72 6c 2c 20 72 65 71 75 65 73 74 2c 20 72 65 73 70 6f 6e 73 65 2c 20 63 6f 6d 6d 61 6e 64 2c 20 63 6f 64 65 2c 20 75 6e 6c 6f 63 6b 2c 20 73 69 67 6e 69 6e 5f 64 6f 6e 65 2c 20 6f 66 66 65 72 5f 69 64 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 62 6f 64 79 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 72 65 71 75 65 73 74 49 64 3a 20 72 65 71 75 65 73 74 2e 72 65 71 75 65 73 74 49 64 2c 0a 20 20 20 20 20 20 20 20 63 72 65 64 65 6e 74 69 61 6c 3a 20 72 65 73 70 6f 6e 73 65 2c 0a 20 20 20 20 7d 3b 0a 20 20 20 20 69 66 20 28 63 6f 6d 6d 61 6e 64 20 3d 3d 3d 20 27 72 65 67 69 73 74 65 72 5f 66 69 6e 69 73 68 27 Data Ascii: entialCreationOptions});}function submitResponse(url, request, response, command, code, unlock, signin_done, offer_id) { const body = { requestId: request.requestId, credential: response, }; if (command === 'register_finish'
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 27 50 4f 53 54 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 3a 20 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 70 3a 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 6f 64 79 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6d 6d 61 6e 64 3a 20 63 6f 6d 6d 61 6e 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 63 75 72 69 74 79 5f 70 69 6e 3a 20 75 6e 6c 6f 63 6b 5b 27 73 65 63 75 72 69 74 Data Ascii: } else { return fetch(url, { method: 'POST', body: new URLSearchParams({ resp: JSON.stringify(body), command: command, security_pin: unlock['securit
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 0a 7d 0a 0a 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 66 69 6e 69 73 68 43 65 72 65 6d 6f 6e 79 28 72 65 73 70 6f 6e 73 65 2c 20 63 6f 6d 6d 61 6e 64 2c 20 75 72 6c 2c 20 63 6f 64 65 2c 20 75 6e 6c 6f 63 6b 2c 20 73 69 67 6e 69 6e 5f 64 6f 6e 65 2c 20 6f 66 66 65 72 5f 69 64 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 72 65 71 75 65 73 74 20 3d 20 63 65 72 65 6d 6f 6e 79 53 74 61 74 65 2e 72 65 71 75 65 73 74 3b 0a 20 20 20 20 63 6f 6e 73 74 20 64 61 74 61 20 3d 20 61 77 61 69 74 20 73 75 62 6d 69 74 52 65 73 70 6f 6e 73 65 28 75 72 6c 2c 20 72 65 71 75 65 73 74 2c 20 72 65 73 70 6f 6e 73 65 2c 20 63 6f 6d 6d 61 6e 64 2c 20 63 6f 64 65 2c 20 75 6e 6c 6f 63 6b 2c 20 73 69 67 6e 69 6e 5f 64 6f 6e 65 2c 20 6f 66 66 65 72 5f 69 64 29 3b 0a 20 20 20 20 72 65 Data Ascii: }async function finishCeremony(response, command, url, code, unlock, signin_done, offer_id) { const request = ceremonyState.request; const data = await submitResponse(url, request, response, command, code, unlock, signin_done, offer_id); re
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 75 65 73 74 55 6e 6c 6f 63 6b 28 75 72 6c 2c 20 64 61 74 61 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 64 79 3a 20 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6d 6d 61 6e 64 3a 20 27 61 75 74 68 65 6e 74 69 63 61 74 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 63 75 72 69 74 79 5f 70 69 6e 3a 20 64 61 74 61 5b 27 73 65 63 75 72 69 74 79 5f 70 69 6e 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 5f 6e 61 6d 65 3a 20 64 61 74 61 5b 27 66 6f 72 6d 5f 6e 61 6d 65 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 75 6e 6c 6f 63 6b 2d 61 63 63 6f 75 6e 74 27 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: uestUnlock(url, data) { return fetch(url, { body: new URLSearchParams({ command: 'authenticate', security_pin: data['security_pin'], form_name: data['form_name'], 'unlock-account': 1,
2024-10-05 22:15:05 UTC	1265	IN	Data Raw: 65 6e 74 69 63 61 74 65 5f 66 69 6e 69 73 68 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 3a 20 75 72 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 64 65 3a 20 63 6f 64 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 69 67 6e 69 6e 5f 64 6f 6e 65 3a 20 73 69 67 6e 69 6e 5f 64 6f 6e 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 66 66 65 72 5f 69 64 3a 20 6f 66 66 65 72 5f 69 64 2c 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 61 74 61 2e 63 6f 64 65 20 3d 3d 3d 20 27 30 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 64 61 74 61 2e 75 72 6c 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 Data Ascii: enticate_finish', url: url, code: code, signin_done: signin_done, offer_id: offer_id, }); if (data.code === '0') { window.location.href = data.url; } else { $(
2024-10-05 22:15:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49862	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:05 UTC	713	OUT	GET /sr/mainsite2023/home/expiring-domain-outlook.webp HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:05 UTC	465	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:05 GMT Content-Type: application/octet-stream Content-Length: 12386 Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: public, max-age=1209600 Expires: Sat, 19 Oct 2024 22:15:05 GMT ETag: 1727814739708 CF-Cache-Status: HIT Age: 351751 Accept-Ranges: bytes Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4b4ce9b8c39-EWR
2024-10-05 22:15:05 UTC	904	IN	Data Raw: 52 49 46 46 5a 30 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 bd 02 00 7d 02 00 41 4c 50 48 c6 00 00 00 01 6f 60 20 6d db e4 6a e0 af 83 cf d1 23 22 a2 cf d2 ab 03 80 15 d9 b6 ab e8 48 40 c2 95 84 04 24 20 21 2b 01 19 48 c8 39 cd 55 34 69 ff 75 44 ff 27 a0 aa 06 cb 57 8f f5 ae aa 3d 7b 8f d6 aa 67 6b d8 c3 75 09 57 7b 87 6b dc c3 75 4e d7 35 5d cf 74 bd d3 d5 f9 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff 28 e3 95 ae 67 ba ee e9 3a a5 6b 92 ae f6 0e 57 5d d3 35 4a 57 ad d3 d5 1e e1 aa 36 7f 67 63 fb ad 37 56 50 38 20 58 2f 00 00 d0 09 01 9d 01 2a be 02 7e 02 3e Data Ascii: RIFFZ0WEBPVP8X}ALPHo` mj#"H@$ !+H9U4iuD'W={gkuW{kuN5]t(g:kW]5JW6gc7VP8 X/*~>
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 6b 65 fc 96 0a 57 1f 5c a3 ea 96 0a 58 29 60 a5 82 96 0a 58 29 60 a5 82 96 0a 58 02 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 dd 11 e1 46 e0 ec 9b 9a 68 16 34 b6 eb 2b eb 11 5a d4 4e ee 01 27 4b aa 27 40 ab 3b 0a a8 92 d5 70 d3 3e 11 07 9a 01 66 bf f4 9e 11 93 1b 85 c9 76 ce 25 0e ce 12 84 20 33 d3 5c 15 88 5f d9 a2 43 b1 64 03 48 80 4c 24 90 5b 69 e7 93 7a aa 35 e1 14 f2 89 52 0a 50 b2 96 3b 6a a9 98 8b 15 53 33 e7 60 2e 57 5b 4c 9c 65 7a cc ba cc f0 99 47 48 7e c6 de 17 47 0f 74 0d f8 45 98 96 65 b9 a9 8c ab c3 cc 93 ae bb 3d 50 a4 e7 ca e1 c4 c1 76 21 34 8c a4 28 c8 da 99 fa 37 31 cb f0 c0 7d 4c 4f 37 fa 25 81 d9 c3 58 80 93 81 d0 05 55 f3 be 90 23 95 98 71 1c 9f 1c a4 02 Data Ascii: keW\X)`X)`X3333333Fh4+ZN'K'@;p>fv% 3\_CdHL$[iz5RP;jS3`.W[LezGH~GtEe=Pv!4(71}LO7%XU#q
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: db 94 5c 58 15 a5 15 b3 b1 e8 2b aa e1 9f b9 8b 29 0f 5c f0 23 6d 94 3c 9c 82 e6 ba ee 03 d4 c6 65 75 5c 34 cf ad 1c 82 ba ae 22 a5 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 2f 00 00 fe ff b6 9e 91 d8 a8 98 00 00 b1 0f 60 00 00 3e 5c a3 b5 92 45 95 8a 05 4a 48 12 60 ee 8e be 48 03 d5 bf f0 dc 78 b9 ba e5 3f 64 f7 66 51 05 76 c1 10 6d a5 6c d7 2a 37 4f f1 59 d0 23 c6 ad f5 19 8e 5c 29 ad ec c2 48 27 72 88 a5 98 6a ee c7 55 43 94 33 2a 26 0b c8 64 04 7d 16 ba 05 00 f5 a6 59 c2 42 a8 a9 93 0e 1c 5a 2c dd a9 cb 39 07 1c 7a bb 69 05 27 d8 6a 27 db 69 bd a9 75 8f 68 ec 6c 9c a4 38 6b c1 e4 e1 f8 b9 91 37 e7 e1 ea 34 df 3f 81 Data Ascii: \X+)\#m<eu\4"3333333333/`>\EJH`Hx?dfQvml7OY#\)H'rjUC3&d}YBZ,9zi'j'iuhl8k74?
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: e8 30 4f ba 4d 21 85 ed a5 fa 21 bc 0b bc 4c 4c cc 6c d8 40 61 15 3d d3 85 4e a3 21 e1 d7 07 90 70 07 45 92 f1 5c c0 c0 7d af f8 bc 00 cf 00 03 d7 f8 1f 31 a8 03 fd c6 1e a7 c8 7d ce 1a fb f5 95 3c 02 f9 e0 14 6d 6f e5 b7 91 d0 0e 5e b7 99 73 b4 46 74 48 46 6b 93 11 95 c6 77 a4 45 eb 81 c5 0b 8e 99 61 1c 35 5e 87 8e 42 a0 cd f4 64 98 57 22 a5 5d 33 4b 10 85 1a 6e 37 43 da 92 9f 2f 77 da 95 83 b6 eb e9 f6 46 f1 91 c5 72 e2 57 79 cb 88 47 7f 74 d4 60 99 9d 86 04 98 a0 52 a3 2a 7a 04 63 15 3a d3 91 91 c4 8e c8 9e 26 77 b2 f4 80 50 d8 3a 85 cb 23 e0 c3 25 e8 d5 02 6d 02 8c bd 78 ff ef 85 e3 26 fe 28 49 49 7e 22 4a 7b 14 b4 4c ab e0 1d 49 95 97 92 f6 d3 22 8e 88 5f ac 23 ec c1 88 09 02 fa 6d 9a f5 1a a3 11 63 5f 8f d5 e6 95 e7 8b 99 75 aa fb d2 66 1c 3f 04 f6 Data Ascii: 0OM!!LLl@a=N!pE\}1}<mo^sFtHFkwEa5^BdW"]3Kn7C/wFrWyGt`R*zc:&wP:#%mx&(II~"J{LI"_#mc_uf?
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 0b 98 dd 17 da ed 30 1c 2b 23 99 c4 51 e1 00 15 90 07 4d 97 5a 5f 67 7a be 7c 8c cf 3f 33 67 f8 8b 76 d5 17 93 df 88 15 d4 96 17 da 9e bf aa 1e 83 46 62 df ae 27 ab b4 d9 09 14 8e 0a 18 4c df 9d 2b d1 08 ee d0 f6 0c 1a 2d 9b de 6b 38 bf 89 fa 97 f7 67 a6 3f 49 ce fe 35 44 03 a8 32 44 08 59 d9 23 0f a0 5c e8 de af b5 5d 44 eb d3 92 14 c9 da ba 5f 40 99 eb 8f 33 20 b8 ae cf f3 24 23 84 57 48 b2 7d 43 42 ee 17 46 8b 31 17 9a 71 9d 76 f0 ba 99 d9 f1 99 59 61 d9 9e de 97 5f bc 00 a8 a4 e6 7e b7 1b 01 e1 71 8b 5f 09 eb bf 85 f3 26 dc 6f c5 d8 28 a0 1d 38 c9 23 8c 46 26 00 a0 7c 92 f1 b8 aa 18 06 63 49 57 df b9 63 12 30 73 f7 70 eb 91 89 cb ea e3 59 50 82 47 8b cb 33 8f 59 3a 3a 3d 08 13 0b 31 af 63 bb d7 54 dc 8f 44 6c b3 23 df d1 2f eb 60 c6 b7 a5 84 e4 ef 04 Data Ascii: 0+#QMZ_gz\|?3gvFb'L+-k8g?I5D2DY#\]D_@3 $#WH}CBF1qvYa_~q_&o(8#F&\|cIWc0spYPG3Y::=1cTDl#/`
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: ac e2 99 78 21 a5 86 99 b7 3f 0e 31 66 bc e0 d1 65 a7 f9 89 5f 91 e1 9a 72 7a 18 62 5d 19 00 b5 4f dd b1 c8 2e 9a c9 61 c3 e4 ab b2 9b d9 eb 18 ec 4b 36 5d 00 ca 83 21 69 76 a0 84 cb 8b 1f 5f 23 be 97 1a 62 83 34 92 d6 27 2a a7 d2 a0 ac 9f c3 f8 7b 70 25 8c 8b 27 78 db 19 c7 cc 7c 4e 37 f6 65 e7 6d ec ee 8b f5 d9 82 0c cb dc 00 42 36 49 9a 1a 4a 19 10 4a bc ee e1 9a bf cf f1 77 b1 ba a5 c0 2e 2c 3c f2 62 7b 71 a9 73 c3 46 c2 d6 e3 ea 54 07 2a 91 78 26 b4 c4 3e f9 51 90 bf c3 27 7f cb 35 54 91 f9 22 2c 92 d9 ce 21 fb aa 87 ad 62 37 b9 96 76 38 2e 6b cf d4 c4 80 50 3d c1 cd 8a 06 3a 6e b3 35 ff e0 68 41 c5 d4 fc b3 20 f9 f9 21 c1 a1 f2 7b 91 80 eb 70 d7 62 1d 29 07 09 50 34 79 24 3f 5e d5 11 4b 3f 87 e9 09 50 d3 d4 4a c3 61 16 e3 7d 77 10 05 09 55 d1 72 54 Data Ascii: x!?1fe_rzb]O.aK6]!iv_#b4'{p%'x\|N7emB6IJJw.,<b{qsFTx&>Q'5T",!b7v8.kP=:n5hA !{pb)P4y$?^K?PJa}wUrT
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: fa 0f 1a fe 64 81 03 9c 70 14 ef 02 f9 2e bf be eb 76 f7 02 b9 72 60 22 5b db bf d2 4c 6f 36 cc 26 ea 89 6a 27 f4 97 ae 68 ae 65 79 4d 94 06 a5 c5 b8 3d a3 04 87 6a d0 b3 0f c2 29 ae d9 6e b3 1b 4f 38 80 cf 81 b1 ab 04 4d 77 51 2c 81 a2 2a 05 cd 3a 70 4a 35 b7 a9 2a bc 28 67 35 00 42 20 06 a8 0f 5b e8 86 ba 84 66 9e 61 53 03 6f 01 9f fd 5c 83 17 cb f5 88 80 50 09 fc 80 04 22 ed ac cb c6 7f f6 06 c5 03 fa f9 ab 81 ff 40 b4 02 a7 66 3c e3 da 11 10 c0 5e 4c 18 fd d0 23 a1 9d 1e f1 76 f8 6a ec 00 29 79 63 da 26 60 8d 6d 8b ae 82 2b 55 10 46 ec 61 7e f3 44 8c 19 df f9 2b 52 7e fc 11 84 ba 31 9d 29 f2 5f e6 aa 8c 3a 65 7a 18 13 6b 48 54 42 bb 1a b3 b7 14 a0 e7 ce e8 e6 a9 f8 ff 11 c8 4b f1 17 01 4e 6b 79 81 16 73 e4 de 6e 3f e8 14 ac 0c ab f1 81 8e 51 cd 6c 5a Data Ascii: dp.vr`"[Lo6&j'heyM=j)nO8MwQ,:pJ5(g5B [faSo\P"@f<^L#vj)yc&`m+UFa~D+R~1)_:ezkHTBKNkysn?QlZ
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 29 77 0d d9 a9 33 a4 d6 cb ed 86 b5 43 9e 50 ea e5 84 36 b7 5f ce 5e 99 cc f3 80 15 f1 60 c1 dd aa 98 05 9e 11 6b 8d e8 78 24 19 c3 79 e0 1f aa 8f 5e 51 d9 0b 64 8a ae 6e 32 d0 40 df 79 f4 1b 11 64 29 b6 fe a0 8f fb e5 c0 2b b4 6d 44 b2 6d 68 92 b2 2d f5 09 82 ee 22 3f ca 4f 95 89 fa 1d f6 04 f3 71 9a a9 10 14 f4 9e 12 44 ca 0d b1 e3 cd 84 04 69 db 21 20 db e6 d6 28 8e e6 b5 a4 c4 c7 fb c8 7d 43 dc 1e 6d 30 d6 17 9b a5 4a 27 57 08 85 9d 57 45 3d 1e 7a f2 05 80 b4 c0 3d 87 d7 50 d7 30 70 18 b1 fa 84 eb 83 af 3a c7 bd f3 d8 53 40 9a 6f 04 c7 31 86 68 28 d8 03 ba b7 4e 06 c7 50 5f 0f bd 63 cb e6 f9 18 92 1b eb 06 ab bc 83 81 9f 3c f3 fb 1c 6a d0 36 9a c7 0d 81 35 00 b9 64 c3 42 15 25 10 29 26 79 d4 2d 75 bc 1b 74 54 d0 a4 b9 4f c9 e6 2f 47 86 43 5e ec f2 ed Data Ascii: )w3CP6_^`kx$y^Qdn2@yd)+mDmh-"?OqDi! (}Cm0J'WWE=z=P0p:S@o1h(NP_c<j65dB%)&y-utTO/GC^
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 30 a8 98 d4 0f b4 d5 cb 61 7f 94 11 f4 39 66 02 41 72 41 55 8e 49 7e c2 6e 96 65 03 23 0b 8b 1f 61 02 a5 6c e7 3f ee ad 13 62 6b f7 3a c3 ff cf bc c2 08 1c a8 a1 f0 d1 c1 4f 0b 2b 1a ef 34 e2 bc 52 08 f5 e7 6e 0d 83 91 7f a8 01 2e 90 c4 ec 8c ee 6e 0a ac da 07 ad 48 a2 bc c0 26 71 d7 53 d8 ce b0 89 91 1e b0 90 02 c2 e9 06 c1 14 dd 34 3c 11 13 2e eb 00 f4 19 a7 ce 54 fd b8 79 6c 00 48 8c 5a a6 e0 aa 10 44 c2 5d ba a2 3d e9 fb a0 b7 56 1b 0b a7 b5 7e 06 22 c9 c8 01 dd 28 41 d8 1c 82 c0 dc 2c 4a 6f 0c 4a 2a ff 9c 43 21 da 87 ab f3 de 6e e3 e9 4c a9 ce bf 23 69 67 5c 8b de 77 a3 f9 68 11 4b 7b 75 89 fc 49 e0 a7 0f 6d cb 38 41 c4 d9 54 3a 22 b6 7f 48 bc 07 8d 19 42 b6 a4 af f5 5a ea a2 f6 70 6f cb e5 eb c8 09 3a 1e c7 4b b5 bb da ec c4 5b 87 88 50 7b 3b e8 f5 Data Ascii: 0a9fArAUI~ne#al?bk:O+4Rn.nH&qS4<.TylHZD]=V~"(A,JoJ*C!nL#ig\whK{uIm8AT:"HBZpo:K[P{;
2024-10-05 22:15:05 UTC	530	IN	Data Raw: 9c a5 f7 c0 58 05 49 05 d2 62 cc ae 32 01 72 2d 73 04 8a 37 f5 ce 6f 90 b7 77 1d 5f b1 84 cc a6 7b e7 e7 b5 6c 8a b1 5e 5b c4 ad d3 f3 66 7e 72 2a ba e3 ad 6a 58 4f 94 b8 1a a2 ef 41 44 3c 8e d0 cc 47 c4 f9 3b 43 31 1f 13 e4 87 da b0 ec 05 cb ba af c0 c0 c0 c0 c0 c0 c0 c0 ba db 20 0b 1e 33 73 03 54 ac a9 97 7e bd 47 28 1c 7d 01 d4 8a cd d3 6d 65 c9 d2 00 ff 42 e8 86 1e 96 18 c6 08 87 d7 83 63 57 d8 3a 99 ae cb f5 17 23 e3 cd 37 d0 c3 3f a5 a2 f2 59 4e 21 4a 39 af e4 f3 8f fe 41 3b 3c 45 93 81 bc 46 49 99 00 5f 49 73 57 dc 52 8b 18 94 ea 40 85 5e cd c6 ea 94 f3 3d 21 a0 c5 6a 12 54 dc d2 66 a1 57 5c 8f 26 4d 27 43 21 8d 0d 74 b3 8d f7 b9 a5 01 3b c0 73 7d 71 88 4f 33 9a d7 8d 21 10 86 d5 de eb 9a cd 19 56 b5 af 36 a6 d8 b4 95 cd c6 57 cb e2 0c 1c ec 1e bd Data Ascii: XIb2r-s7ow_{l^[f~r*jXOAD<G;C1 3sT~G(}meBcW:#7?YN!J9A;<EFI_IsWR@^=!jTfW\&M'C!t;s}qO3!V6W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49863	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:05 UTC	705	OUT	GET /sr/mainsite2023/home/make-bulk-edits.webp HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:05 UTC	465	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:05 GMT Content-Type: application/octet-stream Content-Length: 39386 Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: public, max-age=1209600 Expires: Sat, 19 Oct 2024 22:15:05 GMT ETag: 1727814739709 CF-Cache-Status: HIT Age: 351751 Accept-Ranges: bytes Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4b509eb15a3-EWR
2024-10-05 22:15:05 UTC	904	IN	Data Raw: 52 49 46 46 d2 99 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 b1 04 00 67 03 00 41 4c 50 48 44 02 00 00 01 1c a3 6d db b8 ff 1f de 6d 74 24 22 26 40 9b 59 e4 67 bb e1 2a ac d8 b6 eb 36 07 c2 85 70 21 08 82 20 04 41 5a 06 29 03 19 41 6d 06 16 83 30 b0 19 d4 0c 24 06 12 83 7b fb c8 3b f9 3c 33 8d 88 09 00 0a c4 df 7f 14 11 01 fe 2a bb c3 cc 45 a7 21 ca 5d 24 ad 4e 49 bf de f4 56 9a 9d 98 ce 7a 93 d4 9d 9a 5a ba 4e 37 a7 a7 45 af 08 dd 09 6a 09 17 85 ee 14 b5 85 0b b4 3b 49 6d 7a 46 aa d3 d4 22 a7 b2 13 d5 cf 13 c1 99 aa c5 3f 95 aa f8 02 20 3a 57 b5 08 64 b2 e2 0b c4 d9 6a 93 1d 5d b1 38 d1 15 1f 57 be 72 ac 7c a5 38 5f 6d 84 c5 fe fd e7 bf ff fe fb ef bf ff fe fb ef bf ff fe fb ef bf ff fe fb ef bf ff fe fb ef bf ff fe fb ef bf ff fe fb ef bf ff Data Ascii: RIFFWEBPVP8XgALPHDmmt$"&@Yg6p! AZ)Am0${;<3E!]$NIVzZN7Ej;ImzF"? :Wdj]8Wr\|8_m
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 7f f1 3f bc 7a ad fc 8f ec af e2 3f b1 7e e0 7f 88 fa 55 f7 0d fd eb f6 63 fc 27 b1 ff b6 ff 19 fe e3 f3 0f fb af c8 17 e4 1f ca 7f c7 ff 69 fd c9 ff 21 f3 cf d8 8f 0c 7b 89 fe eb d4 17 d7 7f a9 7f a5 ff 0b fb c9 fe 4b e4 57 ee 7f de 7f 89 f6 03 ec 67 fc 3f f0 ff 00 1f c9 bf a8 7f b2 fe ff ee 37 fe 6f 1a af c5 ff bd ff c5 fe 4b e0 07 f9 6f f6 8f fc 5f e2 bf d7 fe ee 7d 47 ff 87 ff bb fc f7 fb 1f dc 2f 79 7f 4a ff ea ff 31 f0 1d fc d7 fb 6f fd bf f0 fe da df ff fd cf 7e e6 7f ff f7 35 fd a1 ff fe 06 96 32 b9 08 0f 5b 1b d8 4b ee 71 37 97 8e cd 79 fc 7d 70 c0 0b a8 51 3e 1a 3e 6d 5c eb 44 a7 bc b9 27 47 51 43 dd 03 f6 d5 92 cf 90 f2 7b cf b4 7c d9 bf d3 b1 81 48 60 a2 b5 5c eb 44 a7 bc fb 44 33 3e 87 e8 02 e3 f3 87 51 06 e1 81 4c e0 48 96 bb 11 2f 0a 0c 16 Data Ascii: ?z?~Uc'i!{KWg?7oKo_}G/yJ1o~52[Kq7y}pQ>>m\D'GQC{\|H`\DD3>QLH/
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 69 7b a6 87 d3 b0 09 0c d4 46 d5 33 8e d1 19 8d af 27 93 45 8e 03 5e b6 9f e4 64 e2 7f 0a 32 2a bb e2 94 56 ab 9d 68 94 f7 9f 68 f9 b5 73 ad 12 9e f3 ed 1e 13 73 b5 a4 46 04 dd da eb 31 7a 0c 3f 1d 65 3c 5d bf 58 bd 8a a9 ae 36 6e 94 0b 74 a5 22 c7 34 ca ae 60 64 48 7e ab bd 4c 14 4e 70 22 a5 37 68 f6 fd 9e d1 f8 e9 c5 a6 93 4c c6 04 73 e8 b6 a7 6e 71 26 a5 5d 45 96 dd 00 12 65 04 f7 76 c0 6d 89 86 e7 c2 b4 d3 f6 0e db 72 8c b5 6d 82 08 ba d6 f4 9c 85 e4 18 05 8d 63 57 43 07 0d d6 b4 4a 7b cf b4 7c da b9 d6 89 4f 79 f6 8f 9b 57 3a ce 83 38 6a f7 66 ec ac 11 96 21 0d 5e 53 de 7d af 9c 05 60 7b 7d a4 23 59 ab 9d 68 94 f7 9f 68 f9 b5 73 ad 12 9e f3 ed 1f 36 ab fd 66 f2 3c 70 58 cb e3 7f 99 3e 2c d3 52 af f1 fa e1 15 f7 fd 70 8a fb fe b8 45 7d ff 5c 22 be ff Data Ascii: i{F3'E^d2*VhhssF1z?e<]X6nt"4`dH~LNp"7hLsnq&]EevmrmcWCJ{\|OyW:8jf!^S}`{}#Yhhs6f<pX>,RpE}\"
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 7e 2c 29 32 16 4a c7 b4 98 ba 57 c6 1d fd 8d ef 6c d7 46 f3 85 9f 36 49 c8 8d 8c 0e 3a ff 06 20 46 09 ed 34 bc a3 0b 08 e9 ab 0a 87 ad 2d 12 61 a3 41 32 e1 5e 99 12 f3 42 c7 35 3f 4f 03 6a 2e 7b 9d 45 d6 b3 3d ce 44 9b 2b c2 dd 28 60 61 3a 13 c8 9b 24 cc 0f 23 d9 bb e4 a0 73 e8 cc c1 1c d5 13 53 db 43 b3 37 1e 21 29 3c bf 52 df b2 de 5a 25 a3 3c b1 4a 4f d7 4f fc 92 49 3f a6 08 67 7a 8f 78 4a ed ee 5c 63 b4 92 e5 51 d4 0c 2f c7 65 66 a6 83 99 2d cf c2 26 0d 53 5a 73 bc a1 7b 79 52 0c 66 e5 cf 83 a2 98 e9 7b 8b 13 78 e4 ec 03 2b ec 25 1f 15 8f 09 7a 10 89 d2 f2 62 4f e1 e8 3b 84 bc 84 e0 97 7c a1 76 da 61 0c 65 1c b1 e3 82 b1 e1 f7 12 6c 03 ff 95 5d f1 1d 36 72 ed 5b 4f 16 70 a5 98 1c 25 d8 27 9e 8d a0 53 7c 9b 40 05 14 61 ab d5 7c 97 b1 88 7a a9 d3 8f 42 Data Ascii: ~,)2JWlF6I: F4-aA2^B5?Oj.{E=D+(`a:$#sSC7!)<RZ%<JOOI?gzxJ\cQ/ef-&SZs{yRf{x+%zbO;\|vael]6r[Op%'S\|@a\|zB
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: a2 4a 3f b3 56 fe 0f a9 01 c0 90 5e 40 2d 55 20 69 d2 4c 10 13 a9 52 cb 2d e0 4b 1c 15 8e c0 88 93 70 dc 80 72 8d 23 d2 e3 e0 9a a0 db 25 06 06 26 a9 6a cf ab 0e 58 1b 3e 1d 6f d1 e9 a8 3f 03 18 90 1c a8 d0 36 33 18 f6 aa 9d 81 b1 3f 44 68 66 29 a2 1a 0e 25 59 69 68 94 f7 9f 68 f9 b4 6b 78 da 49 23 6d 9d be 40 42 d2 e2 e7 59 d6 2d e3 69 3a b0 30 51 5a ae 75 a2 53 e0 01 e5 36 ad 72 69 5f ee 4b c1 5b 89 6a b9 d6 89 4f 79 f6 8f 9a 7e 1d 57 01 04 27 b7 cb 8a de 8f ac e8 82 dc 32 f0 92 de 5b ff 3f 5c a3 cd a2 af 06 6a 9c ee 3f 02 6f ae 51 e6 d1 57 83 35 4e 77 1f 81 37 d7 28 f3 68 ab c1 9a a7 3b 8e 97 f3 eb 94 79 b4 55 e0 cd 53 9d c7 e0 4d f5 ca 3c da 2a f0 66 a9 ce e0 eb a5 f5 d2 ca b3 55 21 b4 f1 8c b4 f7 9c 04 08 ad e7 f8 29 78 51 21 92 a1 78 31 86 63 8e dc Data Ascii: J?V^@-U iLR-Kpr#%&jX>o?63?Dhf)%YihhkxI#m@BY-i:0QZuS6ri_K[jOy~W'2[?\j?oQW5Nw7(h;yUSM<*fU!)xQ!x1c
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 3e 95 68 c4 7e 60 91 a6 79 e3 fc 77 4b 35 58 e1 fe d3 98 26 94 26 35 9c 0c 8e f4 82 91 9c 3a 79 02 26 1c 16 f1 24 cf 42 84 94 57 91 e3 f8 f6 d6 fa 25 5c 33 ed 91 b8 06 a5 4f e5 1c 7f 68 cb fc 41 fa 83 17 e6 ff 0a 2c 2f 02 48 b4 f1 5a ad a3 e9 6f c9 ca 31 16 dc bf 31 2a 71 d4 97 46 a9 a1 ff 75 84 8c 61 cf 58 17 a0 9f 16 2b af 13 49 76 08 b0 57 6a 34 75 0c 5a 10 04 69 ec 7d a5 07 7a 50 16 2f d1 8b dd 4d cf 0d c6 25 d3 38 44 47 fc bb 08 af 33 0a ed 34 a6 a6 27 8e dd cc e6 76 a5 f8 d9 3c ee e4 38 24 71 3f 6e 64 9c 4c c8 7d 50 18 97 a7 54 2b ef 7e aa 6c e4 e2 69 13 ef 22 af e4 87 f7 92 20 ba dd be 22 c0 71 77 dc 49 47 d7 28 b4 68 d2 48 d5 fd 87 5c 81 98 c8 1f 2e b6 aa 69 64 15 d3 02 8a 2e 1a be 9e 18 d1 e5 b5 ac d0 7e b6 4a b4 bf 63 74 18 e8 a4 a3 06 92 ad 81 Data Ascii: >h~`ywK5X&&5:y&$BW%\3OhA,/HZo11*qFuaX+IvWj4uZi}zP/M%8DG34'v<8$q?ndL}PT+~li" "qwIG(hH\.id.~Jct
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 27 0c 87 b7 3e c4 75 c2 4d 1b 2d 72 ab 1f 63 55 24 e7 c6 ec 45 40 48 4c 21 56 7b 50 4f f1 5a 5b 2b 50 72 f4 9f e2 05 33 d4 66 9d 86 b5 18 98 c3 b9 bb 33 8a 62 f5 71 50 4d b6 62 4b f2 21 02 64 b9 03 3f 8c 69 0f c1 81 60 60 31 6d 52 78 e6 41 d0 61 0e 6f 99 48 a1 46 d0 93 e5 fc 6b 72 35 5a 2c d9 cc 3e 88 36 94 f6 c6 20 a7 80 b1 92 d9 71 9f 0c ed c4 2b 37 84 58 e4 a7 64 7e 84 98 02 26 45 e0 fc bc c4 5c a4 fa a4 3c f8 3e 18 f6 5b c4 c4 cd 8c a0 c7 20 dd c8 2d 04 bd 24 e6 63 7d 20 9e 7e ae 54 f9 fe 59 d0 c7 66 1d fb f4 2f 4d 27 33 58 c3 14 10 f9 88 98 1f 5f b0 3e f4 ce 48 31 39 47 68 d2 f6 2e 58 c8 31 f4 87 5b 9d bf 34 a0 32 4f ae a6 ad c7 30 d9 a8 c8 09 8c 8f 1e 07 bd c4 46 76 00 70 ac d2 8d 23 6b ec 1c 09 2f 97 2e 64 5f 75 54 d6 0b fc f2 34 a8 a1 b0 f1 cb 3e Data Ascii: '>uM-rcU$E@HL!V{POZ[+Pr3f3bqPMbK!d?i``1mRxAaoHFkr5Z,>6 q+7Xd~&E\<>[ -$c} ~TYf/M'3X_>H19Gh.X1[42O0Fvp#k/.d_uT4>
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: b7 ce 33 7b af 85 19 4f dd 0d 68 f0 89 60 1e b3 ca 94 9b 7e eb 92 f9 47 e2 db 00 49 57 9b 03 41 e0 80 9c 90 34 61 c6 24 f9 34 0f 4c c9 a5 01 44 a2 f3 8c c7 b9 c6 0d 40 60 de 79 19 c2 42 8a 58 26 a8 c5 35 2a ee 01 e0 35 40 27 14 96 1f 88 e2 9a 05 9c ba ff 82 76 3f 93 6b 22 14 c7 f9 d9 9e 0e 1f 01 23 e9 e9 3f 99 cb 5b 7f bb 34 11 60 19 50 1a 3b 99 66 9d 90 4b 10 35 a8 66 4a 8e f7 dc ee ed fb 7c 57 d7 26 7a 62 42 5d c1 a9 8c e9 7c d2 7c 3c 63 59 0a f1 5f e9 9b ba cc d9 bf b9 cb 82 4b df 98 49 cc 58 5a a4 4f ff f2 ef ab 89 d6 09 52 d6 b3 94 c6 55 7c f5 bb 96 89 56 83 b2 5b f1 a7 9c 44 c1 27 b0 f1 7b ae 65 91 2f 17 44 bb 7a e3 82 da 62 2e d9 65 17 6a 58 af 62 14 28 b3 41 4f 81 89 a5 12 0b 32 2e 2b 0d b8 b2 c2 63 80 6c 78 78 da d9 46 b4 4b 1a 49 cb a1 53 b8 2e Data Ascii: 3{Oh`~GIWA4a$4LD@`yBX&5*5@'v?k"#?[4`P;fK5fJ\|W&zbB]\|\|<cY_KIXZORU\|V[D'{e/Dzb.ejXb(AO2.+clxxFKIS.
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: a8 67 90 5f a8 56 f4 6d 0a 24 bb 93 1f 03 65 6e 48 a0 9e 43 87 55 87 45 55 95 48 63 b7 3c 44 29 17 b9 25 c9 06 ba 7d 76 fa 53 00 18 d8 dd d3 99 bc 8f f9 c5 d7 8c 67 b4 83 36 3e 94 76 16 f9 bb 44 9d ba d4 49 a1 53 40 b3 74 64 1d aa 10 da d7 19 e6 a6 16 9c 74 7b c8 a8 b4 2f 63 a6 65 d8 ca 03 b0 eb 9f 46 72 ae 04 75 bb 98 0a 6d da 25 44 b0 f8 a9 5a 7b 62 10 7a 10 f4 f8 5c 2f 61 71 a4 08 72 63 71 4e 74 28 23 67 a4 76 92 7d 70 55 57 75 13 c8 73 a4 25 cb cf 6e 8c c9 0c 41 a3 88 e5 f5 87 c2 3b 35 1c 01 7a 17 30 f0 af cf 29 75 43 5d 3c 8f 8b c8 ec ab 32 be 7d a8 4d f0 f3 5c 00 6e 1f 63 c0 75 43 94 88 a3 89 a6 23 21 23 52 1b 54 3d 19 f6 ec 52 86 f6 79 2c ff 35 0e 84 5a 7d f9 a8 fe 62 f3 85 30 4e 91 69 cb 8c ee 6b 78 db 0a f5 0a 9a 67 d5 80 66 27 db 03 62 39 52 93 Data Ascii: g_Vm$enHCUEUHc<D)%}vSg6>vDIS@tdt{/ceFrum%DZ{bz\/aqrcqNt(#gv}pUWus%nA;5z0)uC]<2}M\ncuC#!#RT=Ry,5Z}b0Nikxgf'b9R
2024-10-05 22:15:05 UTC	1369	IN	Data Raw: 01 0c 95 e9 48 27 b8 dc 6a 47 ab 16 50 d1 58 5b 5a 72 e8 ea fb eb 5d ad 92 c4 f7 a6 ba 8a 96 ce 35 ba 02 2c 16 8d a0 c9 f9 c8 e5 cd 66 1b ed 77 92 3e ed d5 ac 56 51 82 33 84 50 31 e8 c1 16 e6 9e 50 c1 04 b1 5e 36 cc 8e 43 4d ee 72 b0 dd 2b b9 9d cf ef 1e 1f a0 02 88 fe a0 39 77 fa 03 bd 99 4e ad 3b 61 78 8b 45 fc 9e aa a9 0a 34 80 ca 01 58 75 90 5f 18 f2 7c 3a cb 09 6e e3 d5 a1 04 3b 03 8e db 8d f8 49 81 05 74 c8 3a d1 ad 74 84 b8 26 0f 9b 98 ed 54 74 83 2e 98 28 34 85 38 d1 a5 7a 5d d8 d7 d2 64 bc b7 be f6 56 18 d6 02 39 01 4b 2c af 0d 42 25 12 15 a3 35 36 fd 1e b6 82 f6 58 d4 5e 77 42 3c cc 34 f4 56 4c 11 4a a9 b9 f3 98 33 9e 2f 40 e7 49 77 31 bc 24 f7 09 be 3e d3 25 38 56 f1 1d 79 c8 a8 e9 39 54 fd 04 db 8c 4a 40 ea 20 56 9e b0 d8 3a cc b0 c2 c8 40 a3 Data Ascii: H'jGPX[Zr]5,fw>VQ3P1P^6CMr+9wN;axE4Xu_\|:n;It:t&Tt.(48z]dV9K,B%56X^wB<4VLJ3/@Iw1$>%8Vy9TJ@ V:@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	49869	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:06 UTC	468	OUT	GET /account/script/1727814741572cp.yubico.js HTTP/1.1 Host: www.dynadot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:06 UTC	444	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:06 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:06 GMT CF-Cache-Status: HIT Age: 351486 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4b88e44de9a-EWR
2024-10-05 22:15:06 UTC	925	IN	Data Raw: 31 64 65 61 0d 0a 69 6d 70 6f 72 74 20 2a 20 61 73 20 77 65 62 61 75 74 68 6e 4a 73 6f 6e 20 66 72 6f 6d 20 22 2e 2f 77 65 62 61 75 74 68 6e 2d 6a 73 6f 6e 2e 6a 73 22 3b 0a 0a 6c 65 74 20 63 65 72 65 6d 6f 6e 79 53 74 61 74 65 20 3d 20 7b 7d 3b 0a 0a 69 66 20 28 24 2e 44 79 6e 61 43 50 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 24 2e 44 79 6e 61 43 50 20 3d 20 7b 7d 3b 0a 7d 0a 24 2e 44 79 6e 61 43 50 2e 59 75 62 69 63 6f 20 3d 20 7b 7d 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 72 65 6a 65 63 74 65 64 28 65 72 72 29 20 7b 0a 20 20 20 20 24 28 27 23 79 75 62 69 63 6f 2d 73 69 6e 67 69 6e 2d 65 72 72 6f 72 2d 6d 73 67 27 29 2e 73 68 6f 77 28 29 3b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 73 65 74 49 6e 74 65 72 76 61 6c 28 72 65 74 72 79 41 75 Data Ascii: 1deaimport * as webauthnJson from "./webauthn-json.js";let ceremonyState = {};if ($.DynaCP === undefined) { $.DynaCP = {};}$.DynaCP.Yubico = {};function rejected(err) { $('#yubico-singin-error-msg').show(); window.setInterval(retryAu
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 65 6e 74 69 61 6c 43 72 65 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 7d 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 52 65 73 70 6f 6e 73 65 28 75 72 6c 2c 20 72 65 71 75 65 73 74 2c 20 72 65 73 70 6f 6e 73 65 2c 20 63 6f 6d 6d 61 6e 64 2c 20 63 6f 64 65 2c 20 75 6e 6c 6f 63 6b 2c 20 73 69 67 6e 69 6e 5f 64 6f 6e 65 2c 20 6f 66 66 65 72 5f 69 64 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 62 6f 64 79 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 72 65 71 75 65 73 74 49 64 3a 20 72 65 71 75 65 73 74 2e 72 65 71 75 65 73 74 49 64 2c 0a 20 20 20 20 20 20 20 20 63 72 65 64 65 6e 74 69 61 6c 3a 20 72 65 73 70 6f 6e 73 65 2c 0a 20 20 20 20 7d 3b 0a 20 20 20 20 69 66 20 28 63 6f 6d 6d 61 6e 64 20 3d 3d 3d 20 27 72 65 67 69 73 74 65 72 5f 66 69 6e 69 73 68 27 Data Ascii: entialCreationOptions});}function submitResponse(url, request, response, command, code, unlock, signin_done, offer_id) { const body = { requestId: request.requestId, credential: response, }; if (command === 'register_finish'
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 27 50 4f 53 54 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 3a 20 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 70 3a 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 6f 64 79 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6d 6d 61 6e 64 3a 20 63 6f 6d 6d 61 6e 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 63 75 72 69 74 79 5f 70 69 6e 3a 20 75 6e 6c 6f 63 6b 5b 27 73 65 63 75 72 69 74 Data Ascii: } else { return fetch(url, { method: 'POST', body: new URLSearchParams({ resp: JSON.stringify(body), command: command, security_pin: unlock['securit
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 0a 7d 0a 0a 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 66 69 6e 69 73 68 43 65 72 65 6d 6f 6e 79 28 72 65 73 70 6f 6e 73 65 2c 20 63 6f 6d 6d 61 6e 64 2c 20 75 72 6c 2c 20 63 6f 64 65 2c 20 75 6e 6c 6f 63 6b 2c 20 73 69 67 6e 69 6e 5f 64 6f 6e 65 2c 20 6f 66 66 65 72 5f 69 64 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 72 65 71 75 65 73 74 20 3d 20 63 65 72 65 6d 6f 6e 79 53 74 61 74 65 2e 72 65 71 75 65 73 74 3b 0a 20 20 20 20 63 6f 6e 73 74 20 64 61 74 61 20 3d 20 61 77 61 69 74 20 73 75 62 6d 69 74 52 65 73 70 6f 6e 73 65 28 75 72 6c 2c 20 72 65 71 75 65 73 74 2c 20 72 65 73 70 6f 6e 73 65 2c 20 63 6f 6d 6d 61 6e 64 2c 20 63 6f 64 65 2c 20 75 6e 6c 6f 63 6b 2c 20 73 69 67 6e 69 6e 5f 64 6f 6e 65 2c 20 6f 66 66 65 72 5f 69 64 29 3b 0a 20 20 20 20 72 65 Data Ascii: }async function finishCeremony(response, command, url, code, unlock, signin_done, offer_id) { const request = ceremonyState.request; const data = await submitResponse(url, request, response, command, code, unlock, signin_done, offer_id); re
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 75 65 73 74 55 6e 6c 6f 63 6b 28 75 72 6c 2c 20 64 61 74 61 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 64 79 3a 20 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6d 6d 61 6e 64 3a 20 27 61 75 74 68 65 6e 74 69 63 61 74 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 63 75 72 69 74 79 5f 70 69 6e 3a 20 64 61 74 61 5b 27 73 65 63 75 72 69 74 79 5f 70 69 6e 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 5f 6e 61 6d 65 3a 20 64 61 74 61 5b 27 66 6f 72 6d 5f 6e 61 6d 65 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 75 6e 6c 6f 63 6b 2d 61 63 63 6f 75 6e 74 27 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: uestUnlock(url, data) { return fetch(url, { body: new URLSearchParams({ command: 'authenticate', security_pin: data['security_pin'], form_name: data['form_name'], 'unlock-account': 1,
2024-10-05 22:15:06 UTC	1265	IN	Data Raw: 65 6e 74 69 63 61 74 65 5f 66 69 6e 69 73 68 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 3a 20 75 72 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 64 65 3a 20 63 6f 64 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 69 67 6e 69 6e 5f 64 6f 6e 65 3a 20 73 69 67 6e 69 6e 5f 64 6f 6e 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 66 66 65 72 5f 69 64 3a 20 6f 66 66 65 72 5f 69 64 2c 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 61 74 61 2e 63 6f 64 65 20 3d 3d 3d 20 27 30 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 64 61 74 61 2e 75 72 6c 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 Data Ascii: enticate_finish', url: url, code: code, signin_done: signin_done, offer_id: offer_id, }); if (data.code === '0') { window.location.href = data.url; } else { $(
2024-10-05 22:15:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:06 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:06 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 173e0f62-801e-00a3-24fe-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221506Z-1657d5bbd48p2j6x2quer0q02800000001b00000000062hd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:06 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:06 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:06 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:06 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221506Z-1657d5bbd482lxwq1dp2t1zwkc00000000x0000000005cmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-05 22:15:06 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:06 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:06 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76165599-601e-000d-1a02-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221506Z-1657d5bbd482lxwq1dp2t1zwkc00000000x0000000005cme x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:06 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:06 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:06 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: a9a45936-c01e-00a1-54f1-167e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221506Z-1657d5bbd48dfrdj7px744zp8s00000000yg0000000001bw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:06 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:06 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:06 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:06 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 6f1c5b1d-901e-0048-485a-17b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221506Z-1657d5bbd48tnj6wmberkg2xy8000000015g00000000cxyz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:06 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49871	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:06 UTC	477	OUT	GET /sr/mainsite2023/home/expiring-domain-outlook.webp HTTP/1.1 Host: www.dynadot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:06 UTC	465	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:06 GMT Content-Type: application/octet-stream Content-Length: 12386 Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: public, max-age=1209600 Expires: Sat, 19 Oct 2024 22:15:06 GMT ETag: 1727814739708 CF-Cache-Status: HIT Age: 351752 Accept-Ranges: bytes Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4b9cf9b8cd4-EWR
2024-10-05 22:15:06 UTC	904	IN	Data Raw: 52 49 46 46 5a 30 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 bd 02 00 7d 02 00 41 4c 50 48 c6 00 00 00 01 6f 60 20 6d db e4 6a e0 af 83 cf d1 23 22 a2 cf d2 ab 03 80 15 d9 b6 ab e8 48 40 c2 95 84 04 24 20 21 2b 01 19 48 c8 39 cd 55 34 69 ff 75 44 ff 27 a0 aa 06 cb 57 8f f5 ae aa 3d 7b 8f d6 aa 67 6b d8 c3 75 09 57 7b 87 6b dc c3 75 4e d7 35 5d cf 74 bd d3 d5 f9 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff f8 8f ff 28 e3 95 ae 67 ba ee e9 3a a5 6b 92 ae f6 0e 57 5d d3 35 4a 57 ad d3 d5 1e e1 aa 36 7f 67 63 fb ad 37 56 50 38 20 58 2f 00 00 d0 09 01 9d 01 2a be 02 7e 02 3e Data Ascii: RIFFZ0WEBPVP8X}ALPHo` mj#"H@$ !+H9U4iuD'W={gkuW{kuN5]t(g:kW]5JW6gc7VP8 X/*~>
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 6b 65 fc 96 0a 57 1f 5c a3 ea 96 0a 58 29 60 a5 82 96 0a 58 29 60 a5 82 96 0a 58 02 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 dd 11 e1 46 e0 ec 9b 9a 68 16 34 b6 eb 2b eb 11 5a d4 4e ee 01 27 4b aa 27 40 ab 3b 0a a8 92 d5 70 d3 3e 11 07 9a 01 66 bf f4 9e 11 93 1b 85 c9 76 ce 25 0e ce 12 84 20 33 d3 5c 15 88 5f d9 a2 43 b1 64 03 48 80 4c 24 90 5b 69 e7 93 7a aa 35 e1 14 f2 89 52 0a 50 b2 96 3b 6a a9 98 8b 15 53 33 e7 60 2e 57 5b 4c 9c 65 7a cc ba cc f0 99 47 48 7e c6 de 17 47 0f 74 0d f8 45 98 96 65 b9 a9 8c ab c3 cc 93 ae bb 3d 50 a4 e7 ca e1 c4 c1 76 21 34 8c a4 28 c8 da 99 fa 37 31 cb f0 c0 7d 4c 4f 37 fa 25 81 d9 c3 58 80 93 81 d0 05 55 f3 be 90 23 95 98 71 1c 9f 1c a4 02 Data Ascii: keW\X)`X)`X3333333Fh4+ZN'K'@;p>fv% 3\_CdHL$[iz5RP;jS3`.W[LezGH~GtEe=Pv!4(71}LO7%XU#q
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: db 94 5c 58 15 a5 15 b3 b1 e8 2b aa e1 9f b9 8b 29 0f 5c f0 23 6d 94 3c 9c 82 e6 ba ee 03 d4 c6 65 75 5c 34 cf ad 1c 82 ba ae 22 a5 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 33 e1 98 b5 dd 0d 2f 00 00 fe ff b6 9e 91 d8 a8 98 00 00 b1 0f 60 00 00 3e 5c a3 b5 92 45 95 8a 05 4a 48 12 60 ee 8e be 48 03 d5 bf f0 dc 78 b9 ba e5 3f 64 f7 66 51 05 76 c1 10 6d a5 6c d7 2a 37 4f f1 59 d0 23 c6 ad f5 19 8e 5c 29 ad ec c2 48 27 72 88 a5 98 6a ee c7 55 43 94 33 2a 26 0b c8 64 04 7d 16 ba 05 00 f5 a6 59 c2 42 a8 a9 93 0e 1c 5a 2c dd a9 cb 39 07 1c 7a bb 69 05 27 d8 6a 27 db 69 bd a9 75 8f 68 ec 6c 9c a4 38 6b c1 e4 e1 f8 b9 91 37 e7 e1 ea 34 df 3f 81 Data Ascii: \X+)\#m<eu\4"3333333333/`>\EJH`Hx?dfQvml7OY#\)H'rjUC3&d}YBZ,9zi'j'iuhl8k74?
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: e8 30 4f ba 4d 21 85 ed a5 fa 21 bc 0b bc 4c 4c cc 6c d8 40 61 15 3d d3 85 4e a3 21 e1 d7 07 90 70 07 45 92 f1 5c c0 c0 7d af f8 bc 00 cf 00 03 d7 f8 1f 31 a8 03 fd c6 1e a7 c8 7d ce 1a fb f5 95 3c 02 f9 e0 14 6d 6f e5 b7 91 d0 0e 5e b7 99 73 b4 46 74 48 46 6b 93 11 95 c6 77 a4 45 eb 81 c5 0b 8e 99 61 1c 35 5e 87 8e 42 a0 cd f4 64 98 57 22 a5 5d 33 4b 10 85 1a 6e 37 43 da 92 9f 2f 77 da 95 83 b6 eb e9 f6 46 f1 91 c5 72 e2 57 79 cb 88 47 7f 74 d4 60 99 9d 86 04 98 a0 52 a3 2a 7a 04 63 15 3a d3 91 91 c4 8e c8 9e 26 77 b2 f4 80 50 d8 3a 85 cb 23 e0 c3 25 e8 d5 02 6d 02 8c bd 78 ff ef 85 e3 26 fe 28 49 49 7e 22 4a 7b 14 b4 4c ab e0 1d 49 95 97 92 f6 d3 22 8e 88 5f ac 23 ec c1 88 09 02 fa 6d 9a f5 1a a3 11 63 5f 8f d5 e6 95 e7 8b 99 75 aa fb d2 66 1c 3f 04 f6 Data Ascii: 0OM!!LLl@a=N!pE\}1}<mo^sFtHFkwEa5^BdW"]3Kn7C/wFrWyGt`R*zc:&wP:#%mx&(II~"J{LI"_#mc_uf?
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 0b 98 dd 17 da ed 30 1c 2b 23 99 c4 51 e1 00 15 90 07 4d 97 5a 5f 67 7a be 7c 8c cf 3f 33 67 f8 8b 76 d5 17 93 df 88 15 d4 96 17 da 9e bf aa 1e 83 46 62 df ae 27 ab b4 d9 09 14 8e 0a 18 4c df 9d 2b d1 08 ee d0 f6 0c 1a 2d 9b de 6b 38 bf 89 fa 97 f7 67 a6 3f 49 ce fe 35 44 03 a8 32 44 08 59 d9 23 0f a0 5c e8 de af b5 5d 44 eb d3 92 14 c9 da ba 5f 40 99 eb 8f 33 20 b8 ae cf f3 24 23 84 57 48 b2 7d 43 42 ee 17 46 8b 31 17 9a 71 9d 76 f0 ba 99 d9 f1 99 59 61 d9 9e de 97 5f bc 00 a8 a4 e6 7e b7 1b 01 e1 71 8b 5f 09 eb bf 85 f3 26 dc 6f c5 d8 28 a0 1d 38 c9 23 8c 46 26 00 a0 7c 92 f1 b8 aa 18 06 63 49 57 df b9 63 12 30 73 f7 70 eb 91 89 cb ea e3 59 50 82 47 8b cb 33 8f 59 3a 3a 3d 08 13 0b 31 af 63 bb d7 54 dc 8f 44 6c b3 23 df d1 2f eb 60 c6 b7 a5 84 e4 ef 04 Data Ascii: 0+#QMZ_gz\|?3gvFb'L+-k8g?I5D2DY#\]D_@3 $#WH}CBF1qvYa_~q_&o(8#F&\|cIWc0spYPG3Y::=1cTDl#/`
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: ac e2 99 78 21 a5 86 99 b7 3f 0e 31 66 bc e0 d1 65 a7 f9 89 5f 91 e1 9a 72 7a 18 62 5d 19 00 b5 4f dd b1 c8 2e 9a c9 61 c3 e4 ab b2 9b d9 eb 18 ec 4b 36 5d 00 ca 83 21 69 76 a0 84 cb 8b 1f 5f 23 be 97 1a 62 83 34 92 d6 27 2a a7 d2 a0 ac 9f c3 f8 7b 70 25 8c 8b 27 78 db 19 c7 cc 7c 4e 37 f6 65 e7 6d ec ee 8b f5 d9 82 0c cb dc 00 42 36 49 9a 1a 4a 19 10 4a bc ee e1 9a bf cf f1 77 b1 ba a5 c0 2e 2c 3c f2 62 7b 71 a9 73 c3 46 c2 d6 e3 ea 54 07 2a 91 78 26 b4 c4 3e f9 51 90 bf c3 27 7f cb 35 54 91 f9 22 2c 92 d9 ce 21 fb aa 87 ad 62 37 b9 96 76 38 2e 6b cf d4 c4 80 50 3d c1 cd 8a 06 3a 6e b3 35 ff e0 68 41 c5 d4 fc b3 20 f9 f9 21 c1 a1 f2 7b 91 80 eb 70 d7 62 1d 29 07 09 50 34 79 24 3f 5e d5 11 4b 3f 87 e9 09 50 d3 d4 4a c3 61 16 e3 7d 77 10 05 09 55 d1 72 54 Data Ascii: x!?1fe_rzb]O.aK6]!iv_#b4'{p%'x\|N7emB6IJJw.,<b{qsFTx&>Q'5T",!b7v8.kP=:n5hA !{pb)P4y$?^K?PJa}wUrT
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: fa 0f 1a fe 64 81 03 9c 70 14 ef 02 f9 2e bf be eb 76 f7 02 b9 72 60 22 5b db bf d2 4c 6f 36 cc 26 ea 89 6a 27 f4 97 ae 68 ae 65 79 4d 94 06 a5 c5 b8 3d a3 04 87 6a d0 b3 0f c2 29 ae d9 6e b3 1b 4f 38 80 cf 81 b1 ab 04 4d 77 51 2c 81 a2 2a 05 cd 3a 70 4a 35 b7 a9 2a bc 28 67 35 00 42 20 06 a8 0f 5b e8 86 ba 84 66 9e 61 53 03 6f 01 9f fd 5c 83 17 cb f5 88 80 50 09 fc 80 04 22 ed ac cb c6 7f f6 06 c5 03 fa f9 ab 81 ff 40 b4 02 a7 66 3c e3 da 11 10 c0 5e 4c 18 fd d0 23 a1 9d 1e f1 76 f8 6a ec 00 29 79 63 da 26 60 8d 6d 8b ae 82 2b 55 10 46 ec 61 7e f3 44 8c 19 df f9 2b 52 7e fc 11 84 ba 31 9d 29 f2 5f e6 aa 8c 3a 65 7a 18 13 6b 48 54 42 bb 1a b3 b7 14 a0 e7 ce e8 e6 a9 f8 ff 11 c8 4b f1 17 01 4e 6b 79 81 16 73 e4 de 6e 3f e8 14 ac 0c ab f1 81 8e 51 cd 6c 5a Data Ascii: dp.vr`"[Lo6&j'heyM=j)nO8MwQ,:pJ5(g5B [faSo\P"@f<^L#vj)yc&`m+UFa~D+R~1)_:ezkHTBKNkysn?QlZ
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 29 77 0d d9 a9 33 a4 d6 cb ed 86 b5 43 9e 50 ea e5 84 36 b7 5f ce 5e 99 cc f3 80 15 f1 60 c1 dd aa 98 05 9e 11 6b 8d e8 78 24 19 c3 79 e0 1f aa 8f 5e 51 d9 0b 64 8a ae 6e 32 d0 40 df 79 f4 1b 11 64 29 b6 fe a0 8f fb e5 c0 2b b4 6d 44 b2 6d 68 92 b2 2d f5 09 82 ee 22 3f ca 4f 95 89 fa 1d f6 04 f3 71 9a a9 10 14 f4 9e 12 44 ca 0d b1 e3 cd 84 04 69 db 21 20 db e6 d6 28 8e e6 b5 a4 c4 c7 fb c8 7d 43 dc 1e 6d 30 d6 17 9b a5 4a 27 57 08 85 9d 57 45 3d 1e 7a f2 05 80 b4 c0 3d 87 d7 50 d7 30 70 18 b1 fa 84 eb 83 af 3a c7 bd f3 d8 53 40 9a 6f 04 c7 31 86 68 28 d8 03 ba b7 4e 06 c7 50 5f 0f bd 63 cb e6 f9 18 92 1b eb 06 ab bc 83 81 9f 3c f3 fb 1c 6a d0 36 9a c7 0d 81 35 00 b9 64 c3 42 15 25 10 29 26 79 d4 2d 75 bc 1b 74 54 d0 a4 b9 4f c9 e6 2f 47 86 43 5e ec f2 ed Data Ascii: )w3CP6_^`kx$y^Qdn2@yd)+mDmh-"?OqDi! (}Cm0J'WWE=z=P0p:S@o1h(NP_c<j65dB%)&y-utTO/GC^
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 30 a8 98 d4 0f b4 d5 cb 61 7f 94 11 f4 39 66 02 41 72 41 55 8e 49 7e c2 6e 96 65 03 23 0b 8b 1f 61 02 a5 6c e7 3f ee ad 13 62 6b f7 3a c3 ff cf bc c2 08 1c a8 a1 f0 d1 c1 4f 0b 2b 1a ef 34 e2 bc 52 08 f5 e7 6e 0d 83 91 7f a8 01 2e 90 c4 ec 8c ee 6e 0a ac da 07 ad 48 a2 bc c0 26 71 d7 53 d8 ce b0 89 91 1e b0 90 02 c2 e9 06 c1 14 dd 34 3c 11 13 2e eb 00 f4 19 a7 ce 54 fd b8 79 6c 00 48 8c 5a a6 e0 aa 10 44 c2 5d ba a2 3d e9 fb a0 b7 56 1b 0b a7 b5 7e 06 22 c9 c8 01 dd 28 41 d8 1c 82 c0 dc 2c 4a 6f 0c 4a 2a ff 9c 43 21 da 87 ab f3 de 6e e3 e9 4c a9 ce bf 23 69 67 5c 8b de 77 a3 f9 68 11 4b 7b 75 89 fc 49 e0 a7 0f 6d cb 38 41 c4 d9 54 3a 22 b6 7f 48 bc 07 8d 19 42 b6 a4 af f5 5a ea a2 f6 70 6f cb e5 eb c8 09 3a 1e c7 4b b5 bb da ec c4 5b 87 88 50 7b 3b e8 f5 Data Ascii: 0a9fArAUI~ne#al?bk:O+4Rn.nH&qS4<.TylHZD]=V~"(A,JoJ*C!nL#ig\whK{uIm8AT:"HBZpo:K[P{;
2024-10-05 22:15:06 UTC	530	IN	Data Raw: 9c a5 f7 c0 58 05 49 05 d2 62 cc ae 32 01 72 2d 73 04 8a 37 f5 ce 6f 90 b7 77 1d 5f b1 84 cc a6 7b e7 e7 b5 6c 8a b1 5e 5b c4 ad d3 f3 66 7e 72 2a ba e3 ad 6a 58 4f 94 b8 1a a2 ef 41 44 3c 8e d0 cc 47 c4 f9 3b 43 31 1f 13 e4 87 da b0 ec 05 cb ba af c0 c0 c0 c0 c0 c0 c0 c0 ba db 20 0b 1e 33 73 03 54 ac a9 97 7e bd 47 28 1c 7d 01 d4 8a cd d3 6d 65 c9 d2 00 ff 42 e8 86 1e 96 18 c6 08 87 d7 83 63 57 d8 3a 99 ae cb f5 17 23 e3 cd 37 d0 c3 3f a5 a2 f2 59 4e 21 4a 39 af e4 f3 8f fe 41 3b 3c 45 93 81 bc 46 49 99 00 5f 49 73 57 dc 52 8b 18 94 ea 40 85 5e cd c6 ea 94 f3 3d 21 a0 c5 6a 12 54 dc d2 66 a1 57 5c 8f 26 4d 27 43 21 8d 0d 74 b3 8d f7 b9 a5 01 3b c0 73 7d 71 88 4f 33 9a d7 8d 21 10 86 d5 de eb 9a cd 19 56 b5 af 36 a6 d8 b4 95 cd c6 57 cb e2 0c 1c ec 1e bd Data Ascii: XIb2r-s7ow_{l^[f~r*jXOAD<G;C1 3sT~G(}meBcW:#7?YN!J9A;<EFI_IsWR@^=!jTfW\&M'C!t;s}qO3!V6W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	49870	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:06 UTC	691	OUT	GET /switzer/fonts/Switzer-Variable.woff2 HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dynadot.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dynadot.com/switzer/css/switzer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:06 UTC	465	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:06 GMT Content-Type: application/octet-stream Content-Length: 43220 Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: public, max-age=1209600 Expires: Sat, 19 Oct 2024 22:15:06 GMT ETag: 1727814740205 CF-Cache-Status: HIT Age: 351742 Accept-Ranges: bytes Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4b9cd820f68-EWR
2024-10-05 22:15:06 UTC	904	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 a8 d4 00 14 00 00 00 02 28 4c 00 00 a8 5b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 7d 1b 82 dd 52 1c 84 5c 3f 48 56 41 52 88 17 3f 4d 56 41 52 46 06 60 3f 53 54 41 54 1c 27 2e 00 88 1c 2f 6c 11 08 0a 82 90 00 81 d4 02 0b 86 06 00 30 83 95 72 01 36 02 24 03 8c 08 04 20 05 8d 6c 07 8f 46 5b e9 05 92 00 aa 22 b3 ab 28 ff 3b 40 80 ad 23 9a 31 ed 56 84 c8 fd 5b 9d 10 e3 08 d3 e2 fc 4c 2f 91 26 02 2d dd 77 e7 61 09 3b f6 02 6c 1c 86 19 a6 17 d9 ff ff ff ff f9 49 45 c6 4c 03 a6 dd 36 04 d4 81 72 f7 ff 72 23 59 0f 8f e4 26 90 1d a5 08 29 a5 3a 5d 31 2f 75 29 b5 ac b9 28 92 df 30 7b 49 58 4c f8 1d 42 45 7e 0c 68 66 83 46 d9 a9 c8 53 54 1a f2 e2 d3 73 73 b2 43 ec 26 2a 23 f2 80 da b6 22 92 4c 2c 5b Data Ascii: wOF2(L[}R\?HVAR?MVARF`?STAT'./l0r6$ lF["(;@#1V[L/&-wa;lIEL6rr#Y&):]1/u)(0{IXLBE~hfFSTssC&*#"L,[
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: d1 28 1a 8d a2 28 8d 4e a4 48 24 72 52 39 a9 94 2b 05 a6 82 4d 60 3c 89 bc 3c 2c 72 16 9e 14 88 9d c0 0b 1c 57 4e 22 2f 2b 95 70 b8 72 b2 52 19 a9 8c 44 46 56 46 22 91 4b 05 06 c0 8a b7 ff 9f 9c ea 97 53 cf 2b a0 ab b0 e1 e9 d5 cf 56 54 b4 ac 00 7a 52 d1 84 ef 2e 78 3d 7b 80 36 17 1d 41 00 25 4e d2 8d df 4e bd 1c 77 39 e1 b9 84 e3 c6 2a 47 38 31 4c d7 6d 9d 8e 9f bc ba b1 9d f7 04 14 f5 ae aa a3 75 5d 4a 8d a3 c7 92 61 6a a5 33 9b 85 1b eb 16 79 49 07 fc 4b 1f 62 95 8a c6 a5 61 b7 11 9b b4 0d bd fd 7b 6a 94 48 e9 43 44 02 38 ba d1 c2 ab fa cb 24 07 64 5b 98 db c9 64 52 27 75 08 89 14 c9 17 17 44 e4 be ff 33 d5 2a ad 0f ca 34 67 1d b8 b3 a6 d6 17 cf 16 cf f6 fa 54 9a 73 26 32 2e 89 ce 37 aa 60 1a dd 00 08 23 ce 34 41 71 ae 08 92 b7 4d 8c 2b 80 6b 5a a4 b4 Data Ascii: ((NH$rR9+M`<<,rWN"/+prRDFVF"KS+VTzR.x={6A%NNw9G81Lmu]Jaj3yIKba{jHCD8$d[dR'uD34gTs&2.7`#4AqM+kZ
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: f0 80 db 98 83 4a e0 31 2e 3a a2 a3 3f 3e fe 84 f1 74 de c1 eb 42 f9 e1 c3 01 fb 07 01 1d 00 41 2f 8c 42 b1 0b 9f 52 44 70 c4 b8 62 89 46 7a 62 51 ce e4 c5 d4 9f 95 54 60 a6 50 cd 9a d7 ce 13 1d d4 e2 4f 03 40 0a 04 f7 76 c4 29 94 6e 18 04 c5 70 82 a4 d2 64 60 39 5e 10 25 b9 52 08 55 ab 63 98 96 ed d9 7f b1 92 20 53 52 b1 d1 0e 7b 07 47 27 67 17 d7 6e 04 00 21 18 41 31 9c 20 29 9a 61 39 5e 10 a5 ee f5 e9 81 a7 57 39 50 41 d5 74 c3 b4 52 72 1f e8 c1 1b d4 3c 04 61 92 6a 82 34 0c cb f1 82 28 c9 ef 9c 60 1f 39 00 01 f2 ce 56 fa a0 53 44 4a 11 7b 29 86 ca 3b 97 70 6a d1 ac c6 bd 43 3c e1 c5 5b d0 8d c1 7c 1f 40 30 32 80 0b 5e 1f dc e0 31 32 70 99 a3 9d 08 e5 75 a1 6a 24 a5 8f 1f 0d c6 ff f0 51 70 2b 8c 73 88 af cf 98 d1 27 26 70 04 f2 40 9d fe 93 e1 22 1e fd Data Ascii: J1.:?>tBA/BRDpbFzbQT`PO@v)npd`9^%RUc SR{G'gn!A1 )a9^W9PAtRr<aj4(`9VSDJ{);pjC<[\|@02^12puj$Qp+s'&p@"
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 86 07 af e1 d7 59 5a ba 4d 3f db 8e b7 d3 1f b9 d0 e5 f5 f2 2d 31 05 47 20 51 e2 68 80 1f dd 00 10 82 11 14 c3 09 92 a2 19 96 e3 05 51 92 15 55 d3 0d 73 f9 a7 55 a3 c6 b8 01 0c d8 53 9c e5 96 cc ce e1 02 8e 75 7e 01 ca df c1 4b cb 2b 5e 6f de 54 e1 ff 4c 8b da e7 b2 81 1d 31 13 50 16 2f e8 93 21 07 a9 97 74 5b 53 30 62 ae a6 e7 e8 b6 e7 c3 d3 e1 11 7c 3e 53 6b 27 03 76 80 1a 51 47 dd 08 04 24 d4 c1 d4 7b 3a 0d d3 e9 a5 e7 99 e5 5b c7 0d e0 01 bc 60 7b 56 1d 77 b5 3a 75 c7 a6 40 9f 9d b1 2c c7 0b a2 24 ab 9a 6e 98 96 ed d9 63 74 3f d7 1e e0 a1 be e5 c4 12 24 41 a6 9c 57 2c a8 00 26 a9 45 2c 1b fb ec ef 40 59 b3 60 73 66 3b 03 00 00 8e 3c f5 cc 45 9c ae a0 c2 21 08 93 3e 95 ef 8b 9f 7f ea 58 1a 86 e5 78 41 94 e4 4a eb 54 d1 f4 46 33 35 b1 0e fb 0e 5e b2 e1 Data Ascii: YZM?-1G QhQUsUSu~K+^oTL1P/!t[S0b\|>Sk'vQG${:[`{Vw:u@,$nct?$AW,&E,@Y`sf;<E!>XxAJTF35^
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 86 b8 d5 00 41 60 08 14 06 47 20 51 68 0c 16 87 27 10 49 11 3c 78 f2 8a a0 50 69 74 06 93 15 c1 01 69 98 10 4d 37 f0 08 88 21 fe b5 06 03 13 0b 1b 07 17 8f 7a 88 56 35 04 34 43 fc bf 0d 1d ba 21 5a 68 40 a1 d9 f8 1f 2c 0a 85 cc 68 56 85 97 c4 42 ac 6a 8b 26 71 c8 0c 79 2e 69 87 77 78 f9 30 87 1e 1c fd 0b 04 e7 de 38 99 de 25 66 42 b1 50 6e 45 95 9c 4a 63 ca 5b 31 25 5e 7c 59 4b 04 0d 38 44 04 d1 18 8a a1 18 8a a1 30 bd df 8b 1b 0e e9 2d 53 9e 01 5e 7c d9 74 49 26 65 c5 8f 45 1b 4c 89 d4 4b 22 25 2d 23 2b 27 af 50 91 4a 28 ab a8 62 71 78 c2 d3 2b b9 5c 0d 69 6a 69 eb e8 ea 9d b2 4b 63 16 1e ea 5b ae 8a 2d a7 00 92 54 ac 4d 9b 77 00 10 82 11 14 c3 09 92 a2 19 96 e3 05 51 ea 5e b1 1e 78 7a 95 03 15 54 4d 37 4c 2b 91 fb 40 0f de a0 09 42 10 26 a9 e6 48 c3 b0 Data Ascii: A`G Qh'I<xPitiM7!zV54C!Zh@,hVBj&qy.iwx08%fBPnEJc[1%^\|YK8D0-S^\|tI&eELK"%-#+'PJ(bqx+\ijiKc[-TMwQ^xzTM7L+@B&H
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: df 0a 34 67 9b f8 8a af f8 4a 5f 31 f7 1e 85 ee 6f c4 bf 21 06 ed 05 dc 08 bf 06 d8 f0 2b cb d2 d1 3f 19 94 c7 65 78 cd 9f 7c e2 17 24 4b a9 55 00 f8 d1 0d 00 21 18 41 31 9c 20 29 9a 61 39 5e 10 25 59 51 35 dd 30 0f eb 83 02 4f 28 f0 77 44 4a 71 a1 5a 25 b2 ed 09 0f 5e f7 7c f3 6e 6f a3 5d bf 68 5b c1 f8 8d 13 4d c1 11 48 d4 cb 29 e7 32 4b 7b c5 d1 d0 7f 9c d7 0d 60 9b c7 02 16 84 60 04 c5 70 82 a4 68 86 e5 78 41 94 64 45 d5 74 c3 b4 fa 9a 77 df f0 dd 8f c3 cf 0f e2 b9 d0 f2 18 44 4a f1 82 f5 e4 ed ea af 71 e0 ef d7 bc 8c fb 41 ce 32 74 f4 47 74 f5 f2 b7 30 e7 ba 29 7f 22 8c fb c9 4b f8 3d 13 96 e1 c6 83 8e ff 16 78 9e 56 24 45 79 c5 08 9e 62 ab 66 06 83 c1 60 30 18 0c 82 3e 96 9a c0 81 40 08 46 50 0c 27 48 8a 66 58 8e 17 44 49 56 54 4d 37 4c ab af 79 f7 Data Ascii: 4gJ_1o!+?ex\|$KU!A1 )a9^%YQ50O(wDJqZ%^\|no]h[MH)2K{``phxAdEtwDJqA2tGt0)"K=xV$Eybf`0>@FP'HfXDIVTM7Ly
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 82 28 c9 8a aa e9 86 69 75 c4 5a c5 d2 61 30 59 6c 0e 97 a7 5e a3 c2 71 08 4d e8 de 7f 0b 5e 3a c2 e0 e9 b5 c5 7b fe 37 71 ce c9 77 54 28 aa a2 a9 23 98 2e 54 4f 3a 4d 81 f9 a4 a0 17 66 9e 0d dc e1 5e 86 09 fc 77 27 f2 8b 70 91 42 35 f5 a0 d6 74 a0 d9 29 bc 39 d3 82 f7 74 ec ae 5d d1 06 d3 cd 40 b7 78 80 df 06 5a 31 d1 4a 52 56 51 c5 e2 f0 84 6a 25 50 d7 a8 89 96 b6 8e ae de 43 8c c5 95 65 85 80 40 08 46 50 0c 27 48 8a 66 58 8e 17 44 49 56 54 4d 37 4c ab 23 64 ab d7 20 86 0c 1b 19 a3 b2 61 cc b8 89 71 17 f4 cd 2b 59 a8 1c 68 11 4b 87 e5 b9 c6 bf 0a 03 b8 02 ac 01 f3 6d 4e 34 ea 2e a8 99 e6 39 d3 85 ea ab b5 bc 30 3d d7 de bd 66 01 7f ca 72 91 42 bd ba d6 ae 68 61 1e 5e bb a0 66 a1 ac a2 8a c5 e1 09 cf d9 05 35 0b 4d 2d 6d 1d 5d bd 87 61 ef 5e 68 7d 01 42 Data Ascii: (iuZa0Yl^qM^:{7qwT(#.TO:Mf^w'pB5t)9t]@xZ1JRVQj%PCe@FP'HfXDIVTM7L#d aq+YhKmN4.90=frBha^f5M-m]a^h}B
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: eb ff 9c 8c d7 98 90 79 44 ee cb 7b 44 82 8c f0 c1 85 1c 2b ba c0 86 d6 23 8c 62 5a a1 51 b6 db 5a 42 8a 8f df 37 fc 76 d0 23 30 47 2e d4 9c 57 ea 0b 37 1a aa d3 88 9c 16 ba ce 3e bb dd c9 cb ad 30 57 36 8c 30 b2 74 a3 50 43 cc db 6a 21 e3 8a 38 a7 8f 65 0d 76 bd a4 af e8 d0 da 07 f4 55 82 28 65 a6 38 26 a5 aa 4f 78 1f 57 16 f6 0a 4c 46 2c ad 13 f9 52 99 7b 5d 5b be 31 cf d3 bf de cf d5 1f 28 a3 45 1f 7c c0 5a c9 32 a5 39 28 c4 6a 10 20 35 3e 02 a6 19 1c 88 67 59 4d 2a 07 55 77 4a 51 3a 34 c0 18 cb e3 05 ae 73 0f b0 70 76 7f 99 42 cf cd c7 77 f8 c7 df 25 8f e7 95 75 bf 5c a6 3c a3 05 e2 96 a8 43 eb b1 e0 10 9d a7 fd ac fb 75 2d 10 3d 54 cf 07 7d cc fd e7 ab ed 18 59 12 ac e4 bf 24 41 fd 35 c8 1f 24 0e fe 73 de 42 bf f0 7f b2 7b 0a 9f 5a b0 48 bd 2c e5 89 Data Ascii: yD{D+#bZQZB7v#0G.W7>0W60tPCj!8evU(e8&OxWLF,R{][1(E\|Z29(j 5>gYM*UwJQ:4spvBw%u\<Cu-=T}Y$A5$sB{ZH,
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: e0 0e 18 95 02 af 92 b9 4b 2a 83 2a 80 0a 7c da bf fc 92 c8 7d f4 5e 04 d9 54 5f 98 cb ff 61 3e be 7a 98 71 ce 1b 49 dc a3 7b 0a a9 db ef 8d 2f bf f5 a3 73 6f 3d ff ae f7 de fd de 07 3e f8 f8 07 df fd f0 ad 17 5e 7f e1 7d 9f 9f bb fc ec d5 a7 ae dd b8 3e f6 dc bd eb 4f 5d 7f d3 0f 77 3a 3e f3 e3 62 e7 b5 ce 5b 9d 2f 76 5d ef be d2 b3 d2 73 bd f7 4a ef bb ae 9e ef ff ee cf 37 07 2f 0c 3e 3d bc 3b b2 3d fa f4 e8 0b 63 33 63 f7 c6 d7 c7 af 68 3f b1 31 35 3c b5 32 bd 30 bd 34 bd 33 7d 79 66 f1 d6 44 b6 75 6b e7 d6 c5 d9 99 d9 cb b3 2f dd 09 ab a9 f9 95 d2 88 18 97 83 72 58 df d4 78 94 39 7c 34 9d 48 e7 26 d6 ae af 8d 6c 18 e7 81 54 5f 9a 29 aa 43 13 e9 0b a5 c7 86 2b f7 f1 fa 05 79 da dd 01 e0 32 f7 87 73 a1 7c 35 8e b9 e9 86 4b 4e da ad 52 06 e2 90 93 ea e4 Data Ascii: K**\|}^T_a>zqI{/so=>^}>O]w:>b[/v]sJ7/>=;=c3ch?15<2043}yfDuk/rXx9\|4H&lT_)C+y2s\|5KNR
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 04 08 9d 53 63 cc 00 0a 1d 88 8e 80 0a 5b 9a 8e 4c 9a 6e e6 f5 32 29 45 23 a7 24 0d 59 2a 44 21 48 d9 86 d3 6c 04 0c 3d 68 48 fe e7 04 3a 64 f9 63 91 4e 91 e1 0e 7a 4c 39 0d 66 4d 71 c3 24 8c 16 c2 c7 27 04 94 c5 de 7d f7 05 06 b7 e4 13 36 0b 43 42 52 7e 53 1b 0b 87 29 cf 7b 7f 97 70 39 21 90 0f 9c 5b 64 55 b2 39 19 ad a2 a3 e4 0d f9 cb c4 94 62 28 8e 39 d7 20 ec 72 9a da b1 d3 32 57 d7 9a 89 7d e0 9c d1 b1 c7 8c 2d b9 66 9e 31 8b b7 b1 6e 02 fd 2b 9f 26 52 0c 1b ea 86 7a 16 cf 15 56 28 fe 24 f9 dd 1a 04 8e d8 a7 93 22 96 f8 cb 48 a4 e2 ea a5 36 4e 3a e1 64 8b 85 e1 10 25 25 54 aa 76 8b 65 a8 38 b7 f2 c4 88 37 90 f4 99 84 17 4d 19 2b b2 83 eb 9b 9c 83 42 5b 04 00 e6 bb 04 d5 80 e4 5f 52 5c bd 48 79 89 3d 58 ad 7f ed 8b af 42 d6 2b 92 b4 d4 84 c9 38 8d 6e Data Ascii: Sc[Ln2)E#$Y*D!Hl=hH:dcNzL9fMq$'}6CBR~S){p9![dU9b(9 r2W}-f1n+&RzV($"H6N:d%%Tve87M+B[_R\Hy=XB+8n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49875	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:06 UTC	700	OUT	GET /fontawesome6/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dynadot.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dynadot.com/fontawesome6/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:06 UTC	466	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:06 GMT Content-Type: application/octet-stream Content-Length: 329204 Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: public, max-age=1209600 Expires: Sat, 19 Oct 2024 22:15:06 GMT ETag: 1727814739970 CF-Cache-Status: HIT Age: 351742 Accept-Ranges: bytes Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4bb4a2742d4-EWR
2024-10-05 22:15:06 UTC	903	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 05 05 f4 00 0a 00 00 00 0c 82 70 00 05 05 a9 03 01 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 38 02 24 04 20 06 60 03 e1 54 00 81 8b 10 ca af ac 54 cb e1 58 05 87 64 07 20 a5 ff 7f 74 2b 08 d8 38 00 00 dc ff 3c 1c 91 a2 d9 c3 73 04 d8 38 00 00 5c cd 43 40 55 55 f5 96 10 dc bd 6a ff 01 c2 4f bf fc f6 87 3f fd e5 6f ff f8 d7 7f fe f7 9f 03 83 71 07 00 84 c9 6c b1 da ec 0e a7 cb ed f1 fa fc 86 ff fe eb a2 ee 8b ac 6a a8 b2 c5 fa 59 d9 f5 7b c6 2b 21 46 5a 49 8c 81 76 d0 99 1d a8 3f d8 c3 2b 90 e9 87 fd 55 b0 ab a6 27 33 0b 9a 47 9d 88 13 94 4e 7e 2f f8 6a a5 63 b8 94 ba 64 62 61 a6 e6 69 f2 ed c4 e0 0e 02 6d b7 3d 7c 0f 76 bc 7f 5e b2 9b 2a 9e b9 81 3b 08 ee 5c c3 15 d8 cb fa b0 1e 3b de b9 dd 99 0f 47 d4 Data Ascii: wOF2p8$ `TTXd t+8<s8\C@UUjO?oqljY{+!FZIv?+U'3GN~/jcdbaim=\|v^*;\;G
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: a1 2f 63 fa fd 9b ab b8 5a 10 51 03 84 97 71 8f 91 fa df b4 7d e3 ff dd 5b 49 2f ea 39 10 01 81 1c 43 7d fb ee 25 5b fe 96 dc 26 56 b1 0a 42 88 32 4c c7 8b 4c ab 76 b6 b4 bb f9 42 80 24 60 0c b8 c8 b2 ac b6 c8 f4 ed fb da bb dd fe 11 46 08 98 e5 21 6b 59 16 cb 58 95 dd bd af ed 5d 9f 9b d1 79 14 15 11 42 3e 42 f8 2f 08 2a 55 f8 db 97 9f bb df 60 c3 df 98 6a ff 07 80 af bc bf df 75 0f fd f9 de ae 58 a8 00 93 b0 51 f8 1f 07 fc 15 2a 5d 01 8b ee ff ee 43 8b 36 fb fb e3 69 6b f1 bf 7d da 5a ba 9b 85 dc 4f 21 7a fe 75 cf 26 54 17 d1 a7 a7 1d 74 28 b0 75 f9 97 7e 63 21 17 81 31 b9 62 ba a9 9a ff 8f 6c ba db 4e 3b 12 34 5d 87 e3 a6 0a 8e eb 6f 82 d6 d3 6d 40 02 05 10 2c 90 f7 ba 1d 39 b5 a2 6d 2a f4 8f 92 0a 0b 55 a8 29 d4 f2 71 47 58 3b db 51 cf ae 8d e9 1a 9e Data Ascii: /cZQq}[I/9C}%[&VB2LLvB$`F!kYX]yB>B/U`juXQ]C6ik}ZO!zu&Tt(u~c!1blN;4]om@,9m*U)qGX;Q
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 98 46 e3 31 b9 bd db a7 89 93 c2 ee 56 4f 3e 93 fd 8f 9b 3f ce bf 6e 1e e8 5e b9 d4 9c 38 81 df db 35 dd b1 6f 13 1c 74 16 80 f9 c2 ef 6e 87 19 94 b0 d1 5e 56 e2 be ab f1 14 f0 18 26 ea 85 f5 f0 ce 06 32 a2 98 79 95 0a 93 58 2f 2b bd 97 58 3c 4d 3e 8e e8 2a d6 55 a9 e3 79 c0 eb d5 a7 13 0d 26 e5 a4 2b ce a4 1b 7e 0e fc 13 5e 53 6a 73 b1 91 dc a6 c9 62 48 fa 16 c1 b3 b0 67 7f 76 b7 2f 6a 63 29 26 71 a6 87 e7 9a 7e 18 0b 3e 55 f4 d5 ef 4e 78 d6 72 c6 df 53 9a 5f 1c a3 56 9f 83 57 8b a7 f6 ad eb d3 da 60 ff 36 ec 89 a4 ef 85 a4 78 a7 91 fe 51 9c 5b 5c 3a 79 4c 47 e5 8c 39 9b c7 b6 0b e7 3c e9 8a 35 c3 cb 64 d9 b2 2f bb 00 13 7e 7c 76 08 6c f0 e9 07 55 aa 28 b3 0c ae a7 b3 d7 29 f8 95 35 ed 4c 26 eb c1 75 cf 1a 2a e4 a9 6d d0 4f fb 4f b5 4c f1 33 be 6d 0c f5 Data Ascii: F1VO>?n^85otn^V&2yX/+X<M>Uy&+~^SjsbHgv/jc)&q~>UNxrS_VW`6xQ[\:yLG9<5d/~\|vlU()5L&umOOL3m
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 34 3d 99 9e 6b 46 cd 7a cd 15 cd 95 cd 55 cd d5 cd 35 cd b5 cd f5 cd ad cd 6d cd ed cd 1d cd d3 cd 33 cd 2b cd a7 cd 67 a3 fe 68 e6 68 d6 68 d1 68 d9 68 93 d1 4b a3 97 db aa ed b5 8b da c5 ed 4a ed ca ed 2a ed aa ed 0d ed ab ed 57 ed d7 ed 77 ed f7 ed 8f ed 4f ed 2f ed 9f ed 5f ed 3f ed ff cb 9f 1b df 38 be 77 fc f0 f8 f1 f1 ab e3 d7 c6 ff 8c ff cd 64 e5 2a f7 f2 8c 3c 33 cf cd 4b 73 ca a3 dc e6 71 5e 25 af 96 d7 c8 6b e6 75 f3 7a 79 93 ec 79 b3 bc 67 de 2b ef 9d f7 c9 fb e6 fd f2 fe f9 a0 7c 48 ae 87 01 34 86 a6 d0 54 9a 41 b3 68 36 cd a1 b9 34 8f e6 d3 5a 5a 47 1b 68 13 6d a6 ad b4 8b 76 d3 1e da 4b fb 68 3f 1d a0 83 74 88 0e d3 11 3a 4a a7 e8 0c 5d a0 8b 74 89 2e d3 15 7a 41 af e9 0d bd 25 d0 0f fa 49 bf e9 1f 7b b1 0f fb b1 3f 07 71 30 87 70 28 87 71 Data Ascii: 4=kFzU5m3+ghhhhhKJWwO/_?8wd<3Ksq^%kuzyyg+\|H4TAh64ZZGhmvKh?t:J]t.zA%I{?q0p(q
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: e6 a5 79 68 6e 9a 8b e6 a4 39 68 76 42 68 36 9a 95 52 9a 85 66 a6 99 68 1c 8d a1 d1 34 8a 86 d0 60 1a 40 7d a9 8f f9 cf 4c 35 93 4d 6d 2a 53 9a dc 64 e6 1f f3 97 f9 d3 fc 61 7e 37 bf 99 5f cd 2f 66 92 99 68 7a 4c c7 b4 8d a9 84 18 53 08 31 26 1b 93 08 31 26 12 62 4c 20 84 10 63 1c 21 c6 58 63 34 21 c6 c8 cd bb 86 1b c3 ea fd fe 21 c6 60 42 8c 41 84 18 03 8d 01 46 7f a3 6f 1b b7 ea 4d 88 d1 cb e8 59 0f 31 24 06 6b 6e 60 f4 8b be 10 7d a2 77 b4 8b b6 d1 32 5a 44 f3 f1 7e 24 9a 44 e3 33 d1 20 ea 43 d4 83 a8 1b 75 52 e3 8f 1e d5 20 aa 46 15 88 ca 10 95 20 2a 46 85 28 1f 65 a3 0c 44 e9 28 05 51 32 4a 44 f1 c8 17 39 22 7b 1f ff bd 93 25 52 88 24 32 47 86 bf f9 2b f8 8b 3f f8 8d 5f fa 01 f8 3e f8 9e ef fa 96 2f 82 2f 80 cf fb 9c cf f8 94 4f fa b8 0f f9 a0 0f 80 Data Ascii: yhn9hvBh6Rfh4`@}L5MmSda~7_/fhzLS1&1&bL c!Xc4!!`BAFoMY1$kn`}w2ZD~$D3 CuR F F(eD(Q2JD9"{%R$2G+?_>//O
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 02 0b fc 20 08 b2 07 39 82 c2 41 a9 a0 72 50 35 68 19 f4 0d 46 04 73 82 79 c1 f2 e0 68 70 3b f8 38 d4 30 4b 98 23 2c 12 c6 61 a9 b0 5d d8 3e 3c 15 3e 1b be 96 25 24 0b 40 e5 41 00 90 59 04 88 80 fe 5f aa 7a cb a0 d7 a5 01 30 78 89 80 21 4b 12 18 ba c4 c0 b0 a5 04 30 7c 49 01 23 16 07 8c 5c 4a 02 a3 96 52 c0 e8 a5 34 30 66 29 03 8c 5d ca 02 e3 96 72 c0 f8 a5 3c 30 61 a9 00 4c 5c 2a 02 93 96 4a c0 e4 a5 32 30 65 a9 02 4c 5d aa 02 d3 96 6a c0 f4 77 55 07 af fa c2 19 40 0d 60 26 4b 4d 60 d6 52 0b 98 bd d5 f6 c4 95 f3 75 80 b9 c0 02 a0 21 70 54 d1 05 c0 f1 e8 22 e0 74 f4 09 e0 6c b4 21 70 21 66 c0 8d e8 6d e0 6e b4 11 f0 46 64 1d f0 66 fc c7 81 3f e2 5d 80 44 ee c8 eb 90 c8 9b f0 14 24 8a 44 db 40 a2 68 b4 2d 24 6a 47 9b 42 a2 4e b4 19 24 8e 45 f7 40 e2 54 74 Data Ascii: 9ArP5hFsyhp;80K#,a]><>%$@AY_z0x!K0\|I#\JR40f)]r<0aL\*J20eL]jwU@`&KM`Ru!pT"tl!p!fmnFdf?]D$D@h-$jGBN$E@Tt
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 72 00 dd bb 98 1c c4 e4 04 a6 b7 32 39 89 c9 3b 98 de 93 c9 bb e8 2e 98 7e 01 93 f7 30 79 3f d3 2f 64 f2 41 e6 76 63 fa a5 cc ed c1 dc e3 49 cb 98 7b 22 73 ef 23 9d 45 20 3a a4 17 12 5d 9d c8 3b 88 69 22 cd f3 8e 91 b9 30 bd 94 28 88 05 a4 97 11 8b 88 a5 a4 d7 11 cb 94 e2 28 62 79 d2 9b 88 15 13 f9 c5 c4 4a 62 35 e9 cd c4 1a a5 f8 18 b1 36 c5 27 89 75 49 6f 23 d6 27 3f 81 d8 30 91 de 4e 6c 26 0e 25 bd 83 38 5c 13 c5 79 c4 11 c4 d1 a4 af 11 c7 28 f9 19 c4 b1 93 f9 a9 c4 71 c4 a9 a4 6f 11 a7 13 17 95 05 8f 71 31 49 bf 24 2e 49 fa 15 71 e9 89 f4 3b e2 72 e2 61 65 fd 63 3c 9c 18 10 8f 48 fa 1b f1 c8 0b f5 89 47 11 8f 23 fd 9d 78 02 f1 3c d2 7f 88 17 68 22 5d 47 bc 98 78 19 e9 7a e2 e5 4a 7e 35 f1 8a e4 d7 10 af 4c 0a e2 55 63 da ec af e6 1a 53 4b bc 96 78 1d Data Ascii: r29;.~0y?/dAvcI{"s#E :];i"0((byJb56'uIo#'?0Nl&%8\y(qoq1I$.Iq;raec<HG#x<h"]GxzJ~5LUcSKx
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: f4 20 54 f3 40 7a 18 d2 53 50 cd 07 e9 19 48 2f 41 b5 18 a4 57 20 bd 01 d5 b2 90 de 82 f4 36 54 2b 41 7a 17 d2 bf 50 ad 02 e9 7f 48 1d a8 76 85 d4 40 9a 0c d5 5e 90 a6 42 a7 07 aa 7d a0 d3 1b 3a 7d a0 3a 01 3a fd a0 b3 34 54 27 41 67 59 e8 2c 07 d5 7d d0 59 01 3a 57 42 f5 00 74 ae 46 09 dd d0 b9 e6 42 96 87 ce b5 d0 b9 1b 42 0f 74 ee 85 ce ab 10 46 40 e7 0d dd 05 61 61 e8 bc 05 9d 2f 20 2c 02 9d af a0 6e 41 58 19 ea 0c ea 79 20 ec 05 f5 fc 50 6f 09 e1 52 a8 b7 86 fa 10 08 2f 40 7d 98 5e 6d e1 2b a8 8f 84 fa 44 08 5f 43 7d 32 d4 a7 42 f8 05 ea d3 a1 3e 13 c2 ef 50 9f 0d f5 39 10 fe 82 fa 7c a8 2f 86 f0 0f d4 97 43 7d 37 04 87 fa 7e 74 07 63 05 f5 83 50 3f 0e 31 40 fd 14 d4 2f 41 ec 03 f5 2b 50 bf 0f 71 28 d4 1f 42 fd 11 c4 89 50 7f 02 f5 d7 eb e8 8f f5 f7 Data Ascii: T@zSPH/AW 6T+AzPHv@^B}:}::4T'AgY,}Y:WBtFBBtF@aa/ ,nAXy PoR/@}^m+D_C}2B>P9\|/C}7~tcP?1@/A+Pq(BP
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 05 c9 ae 41 29 4a fe 0f 4a 6d c9 9f 43 a9 5b b2 13 50 ea 23 d9 5f 28 f5 95 ec 72 94 fa 49 36 05 a5 fe 92 2f 8c d2 00 c9 5f 42 69 a0 64 37 a1 34 48 f2 5e 28 0d 96 fc 52 94 c6 49 bc 1d a5 09 92 7d 8e d2 44 89 ff a3 34 49 f2 0a a5 59 25 ac 89 d2 ec 12 b6 46 69 4e a9 4e 40 69 2e e1 28 94 16 94 7c 2d 94 16 5a c3 b6 0a 52 bd 88 d2 6a 52 fd 86 d2 ea 52 6e 87 d2 1a 52 7d 81 d2 9a 52 fd 8a d2 5a 12 22 4a 6b 4b 58 07 a5 0d 24 bb 00 a5 3d 86 cd 1d d2 5e 48 7b 1e 94 f6 1e fe 70 48 fb 20 61 36 94 f6 93 70 24 4a 07 49 fe 29 4a 07 4b 7c 1b a5 43 ec 87 28 0f 41 71 5f 29 0f 43 71 3f a9 fe 47 f1 80 e1 1b 87 78 10 52 dd 85 e2 e1 92 0d 46 f1 d8 e1 e7 87 78 3c 92 6f 82 e2 09 12 86 a0 78 a2 64 cf a1 78 96 54 eb 50 3c 5b f2 04 c5 2b 47 9e 7b 88 57 21 f9 fd 28 5e 2b 8d ab 51 bc Data Ascii: A)JJmC[P#_(rI6/_Bid74H^(RI}D4IY%FiNN@i.(\|-ZRjRRnR}RZ"JkKX$=^H{pH a6p$JI)JK\|C(Aq_)Cq?GxRFx<oxdxTP<[+G{W!(^+Q
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: df 6c b3 41 9b 6e 76 c7 7b 9b 6e aa 47 d5 a2 65 fb ff b6 69 76 d7 a5 03 66 1f 7d f4 d4 7f c8 03 78 cb 5b c0 c8 7e f9 1c 65 ff f9 87 62 be 82 b9 4b df 45 67 61 8a 5c d4 44 28 ed a5 dd e1 c0 5e 4d 5a 71 9d 92 32 78 61 d0 f7 eb b4 4b 7c 2f 0c fa bd 74 38 58 4d 5a c9 88 33 c6 18 bf ff c7 d8 ba 61 e8 76 c3 98 31 13 a0 5e ed 12 d7 58 e7 50 af eb 86 65 19 fa bf da dd 11 46 08 4d 61 0b a6 c8 41 2d 84 5c 52 85 a0 eb f1 16 0c fb 7c 1a b5 56 dc ad d3 7a db 17 ae 92 97 34 9d 73 5d 93 f2 8a eb 95 cb 1e d4 bd 72 d9 d3 b7 43 e3 5c d3 a5 3c 71 e1 a9 5c f5 dd 82 31 c6 c4 bb ab b9 30 0c c3 6a df 4e 84 11 ba b4 07 33 98 a2 6b d1 8d 08 41 9c 0e 93 56 d2 a2 44 44 a3 3a 1d e3 95 1b 40 19 40 c2 20 0c fa c3 2d e8 eb 8e 1e a7 c9 f0 02 a4 bc 25 31 8d d3 3e 85 e9 ba 06 94 72 53 d7 Data Ascii: lAnv{nGeivf}x[~ebKEga\D(^MZq2xaK\|/t8XMZ3av1^XPeFMaA-\R\|Vz4s]rC\<q\10jN3kAVDD:@@ -%1>rS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	49872	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:06 UTC	702	OUT	GET /sr/mainsite2023/home/buy-and-sell.webp HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:06 UTC	466	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:06 GMT Content-Type: application/octet-stream Content-Length: 193822 Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: public, max-age=1209600 Expires: Sat, 19 Oct 2024 22:15:06 GMT ETag: 1727814739686 CF-Cache-Status: HIT Age: 351751 Accept-Ranges: bytes Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4bb4c09423e-EWR
2024-10-05 22:15:06 UTC	903	IN	Data Raw: 52 49 46 46 16 f5 02 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 97 04 00 d8 04 00 41 4c 50 48 54 b3 00 00 01 19 c6 6d 24 29 52 f7 f0 6e fe 19 1f cc f1 3d 23 fa af c8 6d db 46 b9 ee aa af 80 10 74 40 34 da 03 9c 24 71 3c ce 81 ee 27 51 67 10 a2 67 90 e4 29 e4 39 b8 9e 03 4e 49 89 fb f8 c9 7c 2f 3f 73 41 7f c0 0c 22 cb cc a2 2c ac 3b c0 2c f3 0c 89 70 39 47 a2 fc a7 7f fc 9f fc b0 8e 33 43 80 b4 55 8c d1 1c 10 22 30 af ac 28 64 a2 39 a0 c2 84 e3 b8 6d 24 47 52 4b f9 47 bd de dd 7d 23 62 02 58 0a b9 c9 61 01 27 51 84 b5 e3 14 cd f5 e5 bf e3 8b f4 cb 89 b2 f4 64 4c db c9 b9 56 38 52 71 1e 94 ce f5 65 bf 9b 2f d2 9f e3 8b 74 93 52 96 72 ae 95 02 8a 22 9e 1d 10 04 e0 89 03 0c 30 be 25 49 b2 24 49 b2 2d 65 ff ff 5f 9e 60 00 13 62 16 73 8b cc 9c 01 9b 5b Data Ascii: RIFFWEBPVP8XALPHTm$)Rn=#mFt@4$q<'Qgg)9NI\|/?sA",;,p9G3CU"0(d9m$GRKG}#bXa'QdLV8Rqe/tRr"0%I$I-e_`bs[
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 78 0a 21 0a 89 fc bd 97 5c ce 2c a6 94 76 e0 c6 91 3e f2 e5 40 59 ae 99 00 13 82 82 6f b4 cb d1 4e a1 50 45 18 e4 30 bd ff 76 c4 4b 8c 38 40 0a ac bf 2c 24 04 62 a9 a9 1b 32 6f ff 60 7b 1f 1e 41 49 0b c2 7e 70 8e 50 bc 44 ef 3b 84 ac f2 fb fa aa f7 3d 46 93 12 fb 17 7f 51 7e 2b 99 0b 95 71 84 7b fd 38 64 87 5a 2c 58 98 22 b9 66 2c 6f 59 51 87 85 d6 62 ea a9 57 6b 5b 54 45 21 f8 2b a9 02 e4 87 d8 aa 16 e3 c5 8d 26 a1 51 53 51 19 9c d1 49 ad 5e 9a a1 95 e5 02 bc c8 af 77 df 0d dd ca 64 da 87 2b 93 fe b7 fe 93 5f 05 94 7d ad 83 62 f4 95 61 42 60 4a 2d c5 32 64 ec 1c 74 22 06 1c 64 18 94 98 95 03 5b e2 7a 98 c8 0f 98 f3 58 36 c3 d1 73 e4 1a 9d 04 e5 3c 35 71 f9 1d 0c 28 40 6a f0 5e 7c e3 fb 7e 20 8f 15 90 43 6f 7f eb 73 64 7d ac 25 dc 31 1e 77 7f c1 3a 70 b2 Data Ascii: x!\,v>@YoNPE0vK8@,$b2o`{AI~pPD;=FQ~+q{8dZ,X"f,oYQbWk[TE!+&QSQI^wd+_}baB`J-2dt"d[zX6s<5q(@j^\|~ Cosd}%1w:p
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 79 0c 94 f7 25 06 fb b4 04 30 12 eb 98 53 c5 22 01 3a 00 71 49 a4 8a 0c a6 c0 20 30 22 bc 21 53 83 18 a4 14 05 d2 31 3e 36 d1 40 a3 a8 02 f2 f2 16 b8 3e 54 05 71 1c 85 df 6a 90 5b 76 cf 3c 70 be d8 7d 47 88 ad bb fb a2 ca 66 eb 15 c7 49 dc fa 8a fc 24 71 8d 48 64 fa b8 bc 45 47 24 3e e4 1e 32 21 84 2a 1e 39 ca a6 6f 51 7d 87 2d 3f 2a 45 8d ca 83 34 fa b1 e3 33 75 45 dd c1 19 dc 48 84 b0 34 d5 ca 9d 7c 9c 1f 53 2e 38 3b ca 62 c5 63 3b 7b ef fa 56 f7 dd ee ed ee 56 eb c2 fb 5c 22 32 d5 57 e2 d5 bd 0b 74 be eb 90 a0 f5 23 db d0 6d a1 42 2f ca cc 7a ea 45 0e fd 48 09 43 1c 44 29 fe 60 d2 2a 0b 0c a4 0f 8b 68 ce bb 23 fb ba b4 2c 83 dc 96 12 63 49 03 6f 9e 2a ed 39 05 7f 40 8f f2 41 14 5d df 9d ec af 75 df 7f ac bb 07 58 27 48 72 84 c8 fc d1 5a 7d fc be 29 2b Data Ascii: y%0S":qI 0"!S1>6@>Tqj[v<p}GfI$qHdEG$>2!9oQ}-?E43uEH4\|S.8;bc;{VV\"2Wt#mB/zEHCD)`h#,cIo9@A]uX'HrZ})+
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 3e 4d f8 f1 73 bf a8 93 3e 28 4a 31 22 a0 78 08 28 c9 87 ef b2 98 b4 1d 4c 42 41 1a e4 fd d3 ef 5d 9f 2a fc f7 d7 fe 08 57 d6 79 9c e4 e8 a3 a2 af b2 42 67 02 d2 93 5f 4e 8c 1e d6 a0 e6 06 02 27 4c f6 2f bb b0 2f ff a2 6f ca 61 bc f3 b5 8a ad 86 c6 16 bd 65 c3 f0 ec b7 ed fc 4d 19 8b 4c fe af cf 27 0c ff fd 57 bf 18 47 70 c0 64 88 59 a3 15 12 63 73 f5 e0 b7 10 aa 56 8d da 65 4a dc 73 f6 fb d7 37 c3 a7 0c 3f 7d 0b 02 84 fa 20 aa 14 5a 7b 03 3c c9 c3 3f 9d f6 b3 83 a0 59 2a 51 f4 fc c7 67 1a fe 7c f3 17 41 4e b4 5f ae 85 bb bd 92 43 8d 22 0f 7e a5 44 03 9f 92 44 e7 93 b3 b8 4f fd d3 bf dd 86 ed 07 be ff 8b a6 ae d0 16 06 b2 cf 1a 18 e1 a7 9f fd d1 91 32 28 7e cd fd 68 91 7f 7d b6 61 f3 6f fd 47 1a e9 51 61 1b d7 a3 b0 d4 1c c9 d1 27 6f 8e 97 c5 d0 a1 b0 da Data Ascii: >Ms>(J1"x(LBA]WyBg_N'L//oaeML'WGpdYcsVeJs7?} Z{<?YQg\|AN_C"~DDO2(~h}aoGQa'o
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 98 7d d1 ec 2b f3 86 41 2e 45 22 68 f0 5c 07 10 e2 e5 00 01 14 f5 98 6a 7f 17 9c 06 c3 da cd 9f 7e 81 45 71 07 0f af 9c 88 31 10 5e 71 23 9c 35 34 4e 55 02 86 08 73 b7 f5 9d 02 73 e0 e8 47 92 f8 34 a8 3e 88 07 9e 57 e2 03 30 10 17 b7 4c 59 51 80 30 57 fa 6b b9 5e 78 e8 bf 0e f9 f0 55 01 8b 27 65 f4 cb 95 48 94 22 eb c6 53 51 e4 f4 59 10 8f 20 96 a1 6a a2 3a 89 eb 9c 32 41 43 44 19 33 11 83 9b b6 cc 6b 0b 0c 29 36 cd 36 a2 cc 54 5e a9 4f 11 07 bb b9 ad da cf 3a 5f 89 8a 5a 13 45 a3 39 39 e4 c2 a6 be 6a 57 57 40 c5 ab 23 d7 a1 fa 80 24 12 80 44 23 31 d8 0a a1 c5 ae 20 91 49 25 41 56 7f 6f aa 70 19 0c 09 fa a2 eb 49 0c b9 9c f5 48 14 a6 b0 46 57 96 2e b2 32 d1 d0 2e 56 42 81 3e 35 08 31 c1 a5 a0 13 d1 06 62 87 a9 52 60 d1 5b a5 bf 8a 32 75 bc 0a 31 17 32 41 Data Ascii: }+A.E"h\j~Eq1^q#54NUssG4>W0LYQ0Wk^xU'eH"SQY j:2ACD3k)66T^O:_ZE99jWW@#$D#1 I%AVopIHFW.2.VB>51bR`[2u12A
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: cc e8 3c ce 41 44 c9 38 b6 33 ac f2 c3 f5 82 76 f1 3f 90 7f 9d be 3a 11 5d a1 30 39 cc 28 17 53 2a c4 38 04 f6 b9 ca f3 02 82 59 12 e6 b0 1d 4a 20 66 21 6a 30 d4 ec b3 2e 76 5c 26 c6 1e 20 59 9e 71 74 7e 15 c1 0e e4 2e 76 34 c5 88 a2 c8 a5 81 f8 5c 1e 47 a3 8d c2 56 ae 99 0b 24 f3 a5 96 72 83 bf c1 47 6e fb d2 c0 35 d8 cf 09 80 54 4f 44 11 d2 e2 e5 08 83 2d 92 24 91 ce af ba 9d 07 ca 80 2b 78 c1 5f 20 22 db 46 44 a7 ff f8 a5 f1 5e c7 72 b9 12 9e fd 58 f2 9b 2f dd 6c db 58 cf 2e 0b e5 4c 0c 2d 73 be f3 a2 c8 0c 14 14 98 ee d7 8c 56 28 b5 2b 89 3c 68 61 bc a8 67 24 46 a7 c6 aa 1c 8b e1 14 5c 10 55 f5 58 44 47 9d 86 5e df 71 6f 59 78 0d a4 95 18 bf fb 24 90 e3 2e aa d4 c5 9a 04 8a 54 1d e9 71 57 5e 0e 1c 7a d9 91 09 4f e3 bb c4 81 28 8a e7 8e c1 c8 21 b5 99 Data Ascii: <AD83v?:]09(S*8YJ f!j0.v\& Yqt~.v4\GV$rGn5TOD-$+x_ "FD^rX/lX.L-sV(+<hag$F\UXDG^qoYx$.TqW^zO(!
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 58 b7 a0 68 41 15 6b 7a ec ad 87 ab 2f 2d 60 ce b8 7f 2c 51 0f 1a ad c5 ef 9c aa 6c a5 2c 7c 71 e6 47 9a 80 6a 2f d7 93 60 be 86 83 f8 d8 0b dd b9 ec 48 9c 3c aa 0a 01 b2 97 2a cd d4 b5 8d 73 13 f6 b7 91 a0 d1 b1 b9 d1 d8 56 84 40 24 7e be e6 4a ac 4b e0 00 2d 18 8a 3c f6 3a 52 8b 73 73 5c 83 ad 4a d5 79 f6 21 e6 e5 06 e5 28 5e a6 d2 ea ff 55 16 2b 11 5a e4 67 e5 2e f8 0b 26 cb 85 2b c9 bc e2 89 14 de f9 02 de 0e 91 1a 9a 8a 1a 03 72 27 82 a4 bc 5c 99 2c 6a 60 92 26 24 db 72 29 33 cc aa d2 26 3e d9 14 56 78 a4 9d 28 c6 5c 17 49 b9 6b 0e ea 40 33 a4 da 80 21 43 e0 c1 05 55 a6 66 d4 e6 9d e8 c5 71 76 1f 51 22 38 c5 d6 25 19 75 aa 2a c7 a4 6c 4e fa fc 50 a0 89 e8 a5 b1 c6 75 af a5 47 c5 b4 27 7e be fc e5 e3 c8 92 c6 a7 82 dd 18 47 a2 9a c2 d3 ca 76 ab a8 ec Data Ascii: XhAkz/-`,Ql,\|qGj/`H<sV@$~JK-<:Rss\Jy!(^U+Zg.&+r'\,j`&$r)3&>Vx(\Ik@3!CUfqvQ"8%ulNPuG'~Gv
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 61 c8 ac 12 d1 6c 48 83 d5 63 f4 67 37 4d 3a 3c 15 0c 2f e1 61 48 13 11 19 da 82 ac 1a 8b 8b 22 1d 4b e5 0a 04 f7 7a c2 15 ba a0 00 ba 02 00 d3 3d 22 2e c4 2b 3d 28 01 e1 ca 24 4c 00 f1 d2 b7 d5 4d e5 09 04 3e ea 73 28 71 b1 4c e9 00 b5 11 a3 54 94 16 ea 8a e6 2c 4c 89 e9 9f cf bb b8 4f b2 a0 0f f5 81 d0 82 fd 9d 9c e0 51 dc 4c 52 dc 4e 7c 34 cf dd 6d 1a 8d 85 2f 0f c3 b3 75 6b ec ad d7 e0 38 5d 0c bb 1d a4 c0 16 c0 04 2c 6b 21 62 bb c8 12 c1 a1 b1 58 a6 2a 76 d4 64 db 4f f7 0e 50 60 07 ea a0 03 b5 50 1b e8 07 3f 14 ab a6 fc 02 45 c5 6d 84 e6 9b 90 36 4b aa 6e af 00 2d 0b 61 3d 13 a1 d1 ef 89 38 a8 9c 1b ed 14 c7 55 d4 e6 40 a1 18 f7 cf 63 eb 49 f9 f1 88 ba cf 14 61 a5 b2 8d 28 0a 80 46 7f b3 55 38 96 0d b5 41 d6 d0 44 d9 c1 e5 ec 30 88 d5 88 80 02 10 80 Data Ascii: alHcg7M:</aH"Kz=".+=($LM>s(qLT,LOQLRN\|4m/uk8],k!bX*vdOP`P?Em6Kn-a=8U@cIa(FU8AD0
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 40 4f c1 59 89 4b 1e eb f1 3a 47 54 b0 5a 7b 93 58 17 67 7a 97 72 5b d1 62 74 28 c0 9b a6 2a 6c 21 0e 2e 9a 2b 32 cb 96 2c 6d 06 97 61 bd 84 e0 d4 05 21 52 c9 61 a1 e2 a9 38 2e 68 4f d5 66 96 87 e4 a9 7d d6 03 71 42 b3 a1 76 fb c9 85 1d 0f 5d 90 19 47 e2 c8 e3 ac aa be 61 11 17 ce 81 e3 e7 97 12 9d c5 4f 4c 54 5b c8 0a 15 f9 94 6c 2a d6 97 2b 34 27 e8 cc d1 5b 15 55 02 07 d4 01 54 0b 03 09 b6 84 b3 b6 e7 ec a6 3d fa d9 89 6a 1c ea 4b d7 55 20 e0 94 6e 33 12 7c 6a 57 a6 7e 76 5a ac 02 51 23 51 1d 59 8d be 20 2a 8a 2b 9b af bb 3b f7 bb 78 c2 11 52 49 82 92 23 52 8b a1 af 9e 99 38 f2 b9 f5 65 80 c1 38 69 02 a5 f8 71 14 ef 4b d7 ed 48 7e 33 a4 1a 3b 59 34 0d 7b d1 97 d9 3e a5 1a bd 40 a0 9c 08 c2 9a af 8c 4d d0 dd 9f 87 6b 10 f1 16 86 72 ea 6a f6 40 f4 39 16 Data Ascii: @OYK:GTZ{Xgzr[bt(l!.+2,ma!Ra8.hOf}qBv]GaOLT[l+4'[UT=jKU n3\|jW~vZQ#QY *+;xRI#R8e8iqKH~3;Y4{>@Mkrj@9
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 38 b4 a5 6f e0 31 04 de 81 c9 47 a9 02 f3 8b 82 94 41 7f 68 45 d5 42 34 d8 7d f1 e1 70 15 7b aa fa 3a 30 b0 bf 3a 76 0c 4a 6a 4d 99 ee 5a ea e0 5b d1 c8 ce cc e2 78 0a 92 53 3f 1d e7 3e cf 5c 99 0f 23 fb 09 f6 ca e6 8b dc 89 90 a7 41 08 8e 94 9b 31 25 be aa 91 d3 6b 2d ff c6 4e 1b e5 de 5c 72 22 22 e1 ac f0 1c 3c b6 a7 91 12 28 ba 06 69 4b 11 64 51 29 af 4d 31 48 8c e6 91 41 33 13 eb 39 13 41 d6 6d 6a 99 57 d5 8c 6b 62 b5 e2 c6 b9 1c 01 7e 70 fb 10 38 93 9b 88 c3 6c 29 e5 05 02 95 ae 2a a6 92 96 76 fb 13 bf 14 65 39 91 3f 22 50 7c 99 31 30 64 9f 3b 7a 22 06 52 4e 32 3d 28 5f 64 85 73 40 33 00 fb e1 22 cc 46 60 62 88 ad 24 a4 0a 6d 44 63 34 67 08 8c 33 bd c1 80 c2 06 e7 8c c7 34 63 f9 a7 89 43 2c 40 6a 08 92 b7 c3 82 46 33 71 da 38 53 d9 96 8d da 00 12 83 Data Ascii: 8o1GAhEB4}p{:0:vJjMZ[xS?>\#A1%k-N\r""<(iKdQ)M1HA39AmjWkb~p8l)*ve9?"P\|10d;z"RN2=(_ds@3"F`b$mDc4g34cC,@jF3q8S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49873	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:06 UTC	706	OUT	GET /sr/mainsite2023/home/manage-on-the-go.webp HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:06 UTC	466	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:06 GMT Content-Type: application/octet-stream Content-Length: 227912 Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: public, max-age=1209600 Expires: Sat, 19 Oct 2024 22:15:06 GMT ETag: 1727814739715 CF-Cache-Status: HIT Age: 351751 Accept-Ranges: bytes Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4bb7ca88c11-EWR
2024-10-05 22:15:06 UTC	903	IN	Data Raw: 52 49 46 46 40 7a 03 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 05 05 00 e0 04 00 41 4c 50 48 a1 f7 00 00 01 19 47 6e db 48 12 dc 8e 93 b8 7a fa ff 0f de b7 db 5c 22 fa af c0 6d 1b 25 3d c6 c1 2f 80 e5 77 22 44 d5 99 29 40 44 04 26 9e 09 11 cb a9 25 88 20 7b 3a 15 70 c5 12 4c 41 3c 05 e9 cf 51 cf 91 ac a7 68 fa 73 e4 93 c4 f7 9a ff 56 fe 9a 8e 4b c4 05 4b 9a e5 c0 8c 63 d1 0e 1c 6a 06 d8 64 c3 6e 69 ac da be 54 b6 24 6d ed d8 ca 24 bb c2 1e ad cc 95 d6 10 ca 6c 69 63 c7 ce 1e 52 ec 6a a4 ad 54 77 4a 46 e5 66 11 5b 3b 94 6a 78 e4 4a e1 19 81 c3 b6 6d 24 47 b3 9a fe ab 5e 73 e6 ff a3 4f 22 42 81 db 36 ca 18 0e 06 bf 90 c2 4b 04 bc 85 1b c5 c4 1e da 84 af 10 40 dc 41 e0 9e f0 0e b0 2b de 16 e6 85 47 b8 7a ed 2b 8b fe 67 f6 b7 af 2e 42 18 51 50 12 8a Data Ascii: RIFF@zWEBPVP8XALPHGnHz\"m%=/w"D)@D&% {:pLA<QhsVKKcjdniT$m$licRjTwJFf[;jxJm$G^sO"B6K@A+Gz+g.BQP
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 0c fd 19 cc 07 7b e4 a8 3d cf f8 fe 27 ff ce df cf 79 5e 5c 74 4c ca e3 b7 ac d8 fa b3 e8 d5 98 5b 32 5a 90 fe f5 ff e3 df d7 79 5e e8 e9 7a 20 d4 5b 6f ff e6 1f 92 5f c9 61 6a 63 3a ee 82 0f fa 5b 0b b4 e6 c3 9d 7f f4 bf fb 57 ff ee ce f3 e2 4d e2 ce 91 6a 5a fc 47 51 62 fc c2 7f ff 1b 7e 88 7f 34 51 75 b3 30 d4 df cc 5a ef 72 ff ca ff f6 c1 ff fe ee de 49 22 03 eb 37 1c 95 95 2e 91 c2 24 16 5f 47 c4 21 ee 04 4f 32 59 b5 02 fc 47 ff c1 df e7 79 2e c6 09 1f 94 53 b4 9b 4d cf bf f9 ef 3f 3f d4 ff 8d bb 31 43 88 f2 81 a6 08 40 fc e3 ff db 3f fe 7b 3d ce 45 4f 5c d6 c3 5e b9 24 e1 3f 0e 8f 7e fc 67 7e f7 f3 03 fe 5f d1 84 1e 37 76 ca 87 23 53 85 b1 fc 0b ff 8f bf e7 e3 5c 75 05 12 9d 9c 53 af 4a fd e6 ff fc 07 fe e7 96 57 24 f9 91 0b a4 27 9f ff c6 ff fa ef Data Ascii: {='y^\tL[2Zy^z [o_ajc:[WMjZGQb~4Qu0ZrI"7.$_G!O2YGy.SM??1C@?{=EO\^$?~g~_7v#S\uSJW$'
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 0d 7d db b8 29 33 69 a1 94 f7 3c 7a bd 9d 47 41 42 04 bf fc e7 c7 1e af 54 71 bd 61 a0 63 ce 83 43 7a 26 f7 40 f3 fc 5b a3 e7 8a 9c 9e 41 a1 97 61 62 6a 17 9b 9f b3 bb cb a0 56 a9 e3 06 b1 de d4 8c 11 b1 cb 76 6e e2 b4 66 50 0e 50 06 02 38 06 de 6f 7e af 52 92 27 8d 9c df 7a df 2b 5d fe fc 1d 5b 55 f0 46 a9 51 f2 92 03 09 7e e9 97 be 97 3d 2c 1d 9a e7 3e 46 52 d6 92 a3 ff 58 4b f4 fc 2f 7c 63 6f 23 c2 7d d8 29 a0 e4 96 99 05 b2 a0 5e e6 d9 86 43 c9 f2 8f a7 82 3f f5 e0 ac 20 1c 3d c6 8e 87 e2 f9 17 5b 72 fb e5 ff 46 5a 52 21 c4 1c 14 b3 75 86 16 0f 00 b7 f4 56 19 20 bc e4 61 82 3f f0 cd 2a e0 11 2f ea 71 dc a9 a8 ac ad dd 3f f7 e3 9a e8 f9 df 5a f4 ba 02 38 da 51 66 b2 6a be 89 1d 6f f7 96 83 09 7e f2 07 3f f9 23 5f 05 26 d1 47 99 4b ff f6 d3 93 5e fd 27 Data Ascii: })3i<zGABTqacCz&@[AabjVvnfPP8o~R'z+][UFQ~=,>FRXK/\|co#})^C? =[rFZR!uV a?*/q?Z8Qfjo~?#_&GK^'
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 0e 39 37 d4 7d fd 01 1c a4 e8 de dc 0c 1d 52 97 2e be 85 25 fd 97 ce 9a 96 e2 30 d0 e5 ce e3 ea 18 64 84 6b 08 f8 3d f5 78 f9 74 6b 3d 07 e9 f8 e9 cc bf 6d cc 39 0c a9 4d c7 79 be 3f f6 c4 6b 59 73 c4 25 a0 90 46 d5 31 88 74 85 51 c1 ec bd d5 8f d8 ab 5f 7a a6 34 9a ae 8a 9c 14 37 0c bb 11 dd cd b4 ac c2 4b d3 02 02 81 d8 01 54 9c 47 b8 60 4a 16 31 f3 07 81 5a 40 90 4b d3 be be 93 ec e0 50 23 4a 14 ff 75 ef b9 05 b2 c5 d3 9c 63 18 00 99 16 a3 05 9d 27 51 5e 80 53 9b c7 e3 62 59 22 58 5d 99 a2 74 75 39 d5 c1 da e6 f3 c4 5f 62 aa ce ed 3c bc 22 1d 33 4d ef 81 c8 8f 60 9a f6 b4 82 21 e9 4c 22 d8 0e 20 61 6c 8a 59 fa cd d5 b2 27 b8 a5 58 4a f7 3e 54 ed 8c 47 a8 5e 48 d9 3e af 78 e7 ba da da ea b4 e6 a0 48 30 0c 8b 28 4b 5d 8e 0c b9 6f 6e 16 8f 83 e3 02 79 0f Data Ascii: 97}R.%0dk=xtk=m9My?kYs%F1tQ_z47KTG`J1Z@KP#Juc'Q^SbY"X]tu9_b<"3M`!L" alY'XJ>TG^H>xH0(K]ony
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 73 ab e7 52 e9 72 75 9e e0 d7 05 a6 e8 b4 65 fa 68 a2 b3 28 d5 22 c5 ce 39 81 c5 e0 a1 39 0f 99 05 8f 3e 52 68 e4 3c 97 a9 cd 1e 45 c9 43 bd e0 b8 4c bd c5 8c cf a7 40 87 15 58 9d 22 bb 82 23 33 8f 5d ae 88 d2 9a a1 82 28 6c 8b 5d bb 53 d5 12 6c b3 7c 8e 43 6f 76 c3 b2 85 c3 61 d2 1a f0 77 cf 59 b8 77 24 70 12 28 43 0b 7a 3f cd f1 48 8e 32 1d 2f 70 16 20 45 56 56 73 9e 94 1f 70 47 7a 15 37 78 bc 08 70 43 72 bc 1b 88 56 59 56 4e 8e 3b 9d a1 d5 a6 d9 a1 a4 a9 5e 5d 08 3a a6 35 f1 0d 3c 9d a9 cf b8 8a af 4d 98 22 54 c2 31 fa c7 a7 31 ff 22 03 38 bf 7f 82 96 6a 33 55 8a 37 ec 85 a2 15 76 30 a5 7e 5c 9c a9 8d a0 56 f3 3c 6f c6 d4 ee 4f 5f 18 24 48 59 0f 8c fd 29 3b 27 b7 9b 63 93 30 4a e4 5b 12 58 04 9a c4 dc 1a 45 d3 b7 4e 6b 6a 63 72 b5 ee 0f 5c 87 22 17 10 Data Ascii: sRrueh("99>Rh<ECL@X"#3](l]Sl\|CovawYw$p(Cz?H2/p EVVspGz7xpCrVYVN;^]:5<M"T11"8j3U7v0~\V<oO_$HY);'c0J[XENkjcr\"
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 38 22 8f 97 a7 25 0d 20 64 da a8 3e ed 58 89 ca 2e ce e9 aa 56 33 c0 8f 0b 8d 83 85 51 3f 54 38 e1 63 20 30 fd 61 ef 39 8c 2c a3 ea 8c 4b 9c da f5 c8 dc 71 01 3f 07 4d e1 1d f5 a6 57 1f 51 f2 fd 3e dc c3 f5 92 51 9c 47 c1 5e a8 82 5f 02 ed 96 b7 6f c6 e6 0c a2 39 36 d1 7b 3f 16 97 86 ac c3 e9 8d a1 6f 17 67 5f 0a 45 4e b8 b5 aa f1 5e 9e 03 37 74 bd 81 7b 98 12 47 84 51 67 9e 3d 82 c5 be 29 f1 3b 7b af d2 c7 3c a1 ee d6 4c 6d e2 b6 5e b4 b8 4d a2 55 b4 29 1d ef 91 b3 94 ba 28 ea 09 e1 c1 39 ad 39 f1 3d 34 7d df a6 57 f7 fa 45 31 25 de 99 bd 7d de 4d 06 fe 92 9c 8e 13 66 9e 5b bd 2e 9d ee 0a ce 8c 3c 2c 83 6f 47 50 ea ce e5 14 ad f4 9c 31 44 d8 02 4a 76 67 f4 6c e5 40 51 1a 45 32 c5 5a 13 ac 46 77 da 27 e2 9d 76 ba b4 08 c1 99 86 6b f3 c5 43 26 58 fb 81 47 Data Ascii: 8"% d>X.V3Q?T8c 0a9,Kq?MWQ>QG^_o96{?og_EN^7t{GQg=);{<Lm^MU)(99=4}WE1%}Mf[.<,oGP1DJvgl@QE2ZFw'vkC&XG
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 1e fd 5e df b7 1d e7 34 b8 12 12 f1 a3 d6 74 e8 21 44 97 b7 79 b0 85 59 73 89 bc 08 70 1a ed 46 65 22 c6 ec 9b c4 5a 32 34 6f b7 37 63 05 c7 cb 9d a3 93 df b4 68 e7 be 6b 33 b1 a1 18 55 a5 49 53 e2 74 72 38 b8 06 e9 bc 7b 14 b6 95 d8 cb 4a e7 92 f6 6b d3 98 e6 f0 5c 53 e3 1a 5b ce eb a9 42 0b 93 0e c1 3a 72 be 40 c5 e2 f3 9d 2a 5d 40 e0 f8 00 2a 2d 69 b9 3e 93 a6 e7 9c e7 2c a6 48 3b d8 e5 f9 69 4f 76 88 d3 14 e3 7a 8c ef 09 3c 30 0b ae 4d 9a 01 f8 f8 2a ae 8d 47 68 0c b4 b2 73 8d 47 05 7a 56 ea d0 13 67 ff 0c 90 6e 47 eb 72 ef 88 21 01 ca 11 2f f7 12 38 bc 03 bc de 38 45 a3 ea ed 32 67 2e 1f 6d 15 63 08 57 a7 99 33 c1 b3 1a 0e 2d 6b ce 77 d2 69 d7 10 3b 41 e3 33 e3 8a 74 8c b0 12 c0 bd 19 2b 44 8a bd af ba 75 69 13 a7 85 46 f7 6a 4d a7 ee 5c 31 95 a8 42 Data Ascii: ^4t!DyYspFe"Z24o7chk3UIStr8{Jk\S[B:r@]@-i>,H;iOvz<0M*GhsGzVgnGr!/88E2g.mcW3-kwi;A3t+DuiFjM\1B
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 0f c4 d3 8e 11 60 0b b3 d6 9c cb 54 1c f5 6a 53 e6 6b 8a 9c de 90 fc 4a fb 3e f2 1c b1 5e 6d 26 36 6a f2 94 68 c6 8f f7 72 dd f8 74 53 0f 3b 42 41 dc dd 20 8e 11 aa f3 90 de eb 41 db f9 66 fb 2c 9f 2b 0d 51 6d f6 c3 8f e6 c4 66 c2 ad 03 53 eb da 78 76 1e 1f 90 c6 32 ca ba a5 39 35 ca 1d 9b 6c b2 1e 1d 5b 53 6e 98 47 fd 10 f3 b1 52 45 08 7f 95 ac 89 e6 e7 c2 66 fe 80 a2 dc 41 d0 e2 8c 20 2a 4e 19 74 0b 05 eb 80 c1 47 06 42 d4 2d 4e 25 55 2b ca c8 f6 ea 49 83 c2 3a 2f 22 e1 05 c2 ae 5c 26 f6 0f e8 aa 8c 4d d0 46 68 3a c3 51 fc 5e 0c 8f ae d9 50 9b 9c 6b d3 e0 0d 31 0c db 1e f6 3a ba 94 2e d9 5c c0 2f 14 11 03 d0 a5 b1 4c 75 3c 62 d1 27 f8 e5 59 b5 fc 5d 2f 93 87 01 f4 b2 a4 5d ba 73 b9 79 58 4c f8 4a f4 f8 c6 17 a5 73 cb d7 58 27 52 c2 6f bf 6f 43 69 5c 72 Data Ascii: `TjSkJ>^m&6jhrtS;BA Af,+QmfSxv295l[SnGREfA *NtGB-N%U+I:/"\&MFh:Q^Pk1:.\/Lu<b'Y]/]syXLJsX'RooCi\r
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 40 38 ae dc f0 eb be 2b 8b 14 a8 ea 72 37 c3 43 80 01 1f 01 76 66 33 8a c5 2a ce d5 73 29 65 5f d4 b7 42 d7 a7 37 bd 3a ee de 7a c2 94 9f 9e 99 6c 9d f0 27 fa 8a ec 15 d8 8c 10 e5 13 65 67 2c 72 d1 73 6f 7f bd 15 ae 74 5f 21 07 44 6b 4a 14 7e d4 9b 6c 2f 23 43 db 95 61 98 74 23 dd 0a cd d6 a7 e3 da 74 47 a0 21 8a ce 14 67 af 9d 13 6f 87 a6 e5 65 d1 bb 35 3b 8c ab 5f 82 47 24 79 24 50 d4 d4 73 bf cf a2 2d 62 a1 2f 74 1c 06 95 d7 4b f4 ca b8 84 ba 5f ad 71 8e b1 c7 7a 93 89 a7 5d 6f 96 78 5a b6 95 04 5b 88 01 f4 b2 e8 bc 04 00 4a 5b 87 01 34 83 99 08 48 58 a1 df f1 d1 9e c7 3d 50 ba 1c 06 51 6d 36 29 55 c9 2e ba 5c 42 2c c4 7a 68 8e 3d ae 65 a8 20 d8 e1 73 98 30 89 6b 63 92 b0 85 46 bf 6f 43 dc 2d 0a 19 18 6e cd dc 66 b2 db d2 8d 53 01 a2 3e 8e bc e7 f1 e8 Data Ascii: @8+r7Cvf3*s)e_B7:zl'eg,rsot_!DkJ~l/#Cat#tG!goe5;_G$y$Ps-b/tK_qz]oxZ[J[4HX=PQm6)U.\B,zh=e s0kcFoC-nfS>
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 35 75 0e 89 a5 2b 03 84 17 2e f0 70 6e c9 f1 0e 67 a4 4f 4a e3 12 1d 6a 99 2f 69 f6 ee 07 c6 10 9c d1 19 3d 6b 5e 0b 04 87 89 86 27 1b 8e 41 34 e7 9d 77 0e 07 63 95 31 50 0c 04 29 61 80 a7 d6 9c b5 9f 90 b2 d1 cf 8f a6 2f 5e c5 69 a4 d6 ec 86 0f 27 c0 8e 5d b0 e5 20 d5 44 df c8 75 d8 bb 02 6a 1f dd 62 b4 9b 26 71 6f 3c 22 58 03 03 04 73 dc b9 fc 30 0a 0f 50 69 96 78 9a 64 2d 6a d1 70 a8 7a 8c 0b d9 e9 f7 d0 39 16 b5 c2 1e 9a 8c ce 10 87 23 e0 3a 63 13 6e 60 8d 13 02 9e 76 9e ed 92 a2 cb f3 5d b0 cc ad d3 8b 9a b7 ab 89 b6 96 b5 13 35 43 b6 41 20 e6 dc 81 01 3b e9 16 00 d4 18 39 e4 0c 0c 8f a4 0f b5 2e 62 74 a6 47 0f 0d aa e7 d6 5f 32 af 7b a9 76 39 19 00 53 be b8 82 df 5e 1b 78 ee cd 30 61 f9 b1 64 a6 b6 af 2f 50 86 43 9d b9 e5 b9 18 62 96 74 3f 09 22 01 Data Ascii: 5u+.pngOJj/i=k^'A4wc1P)a/^i'] Dujb&qo<"Xs0Pixd-jpz9#:cn`v]5CA ;9.btG_2{v9S^x0ad/PCbt?"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49874	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:06 UTC	623	OUT	GET /tr/jquery.cookie.js HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:06 UTC	444	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:06 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:06 GMT CF-Cache-Status: HIT Age: 351752 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4bb7cf28c2d-EWR
2024-10-05 22:15:06 UTC	925	IN	Data Raw: 31 30 34 35 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 43 6f 6f 6b 69 65 20 50 6c 75 67 69 6e 20 76 31 2e 34 2e 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 63 61 72 68 61 72 74 6c 2f 6a 71 75 65 72 79 2d 63 6f 6f 6b 69 65 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 20 4b 6c 61 75 73 20 48 61 72 74 6c 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 66 61 63 74 6f 72 79 29 20 7b 0a 09 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0a 09 09 2f 2f 20 41 4d 44 2e 20 52 65 67 69 73 74 65 72 20 61 73 20 61 6e 6f Data Ascii: 1045/! jQuery Cookie Plugin v1.4.0 * https://github.com/carhartl/jquery-cookie * * Copyright 2013 Klaus Hartl * Released under the MIT license */(function (factory) {if (typeof define === 'function' && define.amd) {// AMD. Register as ano
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 2f 2f 20 49 66 20 77 65 20 63 61 6e 27 74 20 64 65 63 6f 64 65 20 74 68 65 20 63 6f 6f 6b 69 65 2c 20 69 67 6e 6f 72 65 20 69 74 2c 20 69 74 27 73 20 75 6e 75 73 61 62 6c 65 2e 0a 09 09 09 73 20 3d 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 2e 72 65 70 6c 61 63 65 28 70 6c 75 73 65 73 2c 20 27 20 27 29 29 3b 0a 09 09 7d 20 63 61 74 63 68 28 65 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 0a 0a 09 09 74 72 79 20 7b 0a 09 09 09 2f 2f 20 49 66 20 77 65 20 63 61 6e 27 74 20 70 61 72 73 65 20 74 68 65 20 63 6f 6f 6b 69 65 2c 20 69 67 6e 6f 72 65 20 69 74 2c 20 69 74 27 73 20 75 6e 75 73 61 62 6c 65 2e 0a 09 09 09 72 65 74 75 72 6e 20 63 6f 6e 66 69 67 2e 6a 73 6f 6e 20 3f 20 4a 53 4f 4e 2e 70 61 72 73 65 28 73 29 20 3a 20 73 3b 0a Data Ascii: // If we can't decode the cookie, ignore it, it's unusable.s = decodeURIComponent(s.replace(pluses, ' '));} catch(e) {return;}try {// If we can't parse the cookie, ignore it, it's unusable.return config.json ? JSON.parse(s) : s;
2024-10-05 22:15:06 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3f 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 27 3b 20 27 29 20 3a 20 5b 5d 3b 0a 0a 09 09 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 2c 20 6c 20 3d 20 63 6f 6f 6b 69 65 73 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 3b 20 69 2b 2b 29 20 7b 0a 09 09 09 76 61 72 20 70 61 72 74 73 20 3d 20 63 6f 6f 6b 69 65 73 5b 69 5d 2e 73 70 6c 69 74 28 27 3d 27 29 3b 0a 09 09 09 76 61 72 20 6e 61 6d 65 20 3d 20 64 65 63 6f 64 65 28 70 61 72 74 73 2e 73 68 69 66 74 28 29 29 3b 0a 09 09 09 76 61 72 20 63 6f 6f 6b 69 65 20 3d 20 70 61 72 74 73 2e 6a 6f 69 6e 28 27 3d 27 29 3b 0a 0a 09 09 09 69 66 20 28 6b 65 79 20 26 26 20 6b 65 79 20 3d 3d 3d 20 6e 61 6d 65 29 20 7b 0a 09 09 09 09 2f 2f 20 49 66 20 73 65 63 6f Data Ascii: ument.cookie ? document.cookie.split('; ') : [];for (var i = 0, l = cookies.length; i < l; i++) {var parts = cookies[i].split('=');var name = decode(parts.shift());var cookie = parts.join('=');if (key && key === name) {// If seco
2024-10-05 22:15:06 UTC	510	IN	Data Raw: 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 0a 45 58 50 52 45 53 53 20 4f 52 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 0a 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c 20 46 49 54 4e 45 53 53 20 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 20 41 4e 44 0a 4e 4f 4e 49 4e 46 52 49 4e 47 45 4d 45 4e 54 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 Data Ascii: or substantial portions of the Software.THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OFMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE ANDNONINFRINGEMENT. IN NO EVENT
2024-10-05 22:15:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49880	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:06 UTC	626	OUT	GET /tr/dotlottie-player.js HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:07 UTC	444	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:07 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=2592000 Cache-Control: max-age=600, stale-while-revalidate=3600 Expires: Sat, 19 Oct 2024 22:15:07 GMT CF-Cache-Status: HIT Age: 351752 Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4bd0943440b-EWR
2024-10-05 22:15:07 UTC	925	IN	Data Raw: 37 64 65 32 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 65 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 5b 22 64 6f 74 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 22 5d 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 Data Ascii: 7de2!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self)["dotlottie-player"]={})}(this,(function(exports){"use
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 59 20 44 41 4d 41 47 45 53 20 57 48 41 54 53 4f 45 56 45 52 20 52 45 53 55 4c 54 49 4e 47 20 46 52 4f 4d 0a 20 20 4c 4f 53 53 20 4f 46 20 55 53 45 2c 20 44 41 54 41 20 4f 52 20 50 52 4f 46 49 54 53 2c 20 57 48 45 54 48 45 52 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 4e 45 47 4c 49 47 45 4e 43 45 20 4f 52 0a 20 20 4f 54 48 45 52 20 54 4f 52 54 49 4f 55 53 20 41 43 54 49 4f 4e 2c 20 41 52 49 53 49 4e 47 20 4f 55 54 20 4f 46 20 4f 52 20 49 4e 20 43 4f 4e 4e 45 43 54 49 4f 4e 20 57 49 54 48 20 54 48 45 20 55 53 45 20 4f 52 0a 20 20 50 45 52 46 4f 52 4d 41 4e 43 45 20 4f 46 20 54 48 49 53 20 53 4f 46 54 57 41 52 45 2e 0a 20 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: Y DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. ********************************
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 28 3b 65 21 3d 3d 72 3b 29 7b 63 6f 6e 73 74 20 72 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 2c 65 3d 72 7d 7d 2c 6d 61 72 6b 65 72 3d 60 7b 7b 6c 69 74 2d 24 7b 53 74 72 69 6e 67 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 73 6c 69 63 65 28 32 29 7d 7d 7d 60 2c 6e 6f 64 65 4d 61 72 6b 65 72 3d 60 5c 78 33 63 21 2d 2d 24 7b 6d 61 72 6b 65 72 7d 2d 2d 5c 78 33 65 60 2c 6d 61 72 6b 65 72 52 65 67 65 78 3d 6e 65 77 20 52 65 67 45 78 70 28 60 24 7b 6d 61 72 6b 65 72 7d 7c 24 7b 6e 6f 64 65 4d 61 72 6b 65 72 7d 60 29 2c 62 6f 75 6e 64 41 74 74 72 69 62 75 74 65 53 75 66 66 69 78 3d 22 24 6c 69 74 24 22 3b 63 6c 61 73 73 20 54 65 6d 70 6c 61 74 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 65 29 7b 74 68 Data Ascii: (;e!==r;){const r=e.nextSibling;t.removeChild(e),e=r}},marker=`{{lit-${String(Math.random()).slice(2)}}}`,nodeMarker=`\x3c!--${marker}--\x3e`,markerRegex=new RegExp(`${marker}\|${nodeMarker}`),boundAttributeSuffix="$lit$";class Template{constructor(t,e){th
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 66 6f 72 65 28 63 72 65 61 74 65 4d 61 72 6b 65 72 28 29 2c 74 29 2c 72 2e 70 75 73 68 28 74 29 29 3a 74 2e 64 61 74 61 3d 73 5b 6e 5d 2c 6f 2b 3d 6e 7d 7d 65 6c 73 65 20 69 66 28 38 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 74 2e 64 61 74 61 3d 3d 3d 6d 61 72 6b 65 72 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 6e 75 6c 6c 21 3d 3d 74 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 26 26 61 21 3d 3d 6e 7c 7c 28 61 2b 2b 2c 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 72 65 61 74 65 4d 61 72 6b 65 72 28 29 2c 74 29 29 2c 6e 3d 61 2c 74 68 69 73 2e 70 61 72 74 73 2e 70 75 73 68 28 7b 74 79 70 65 3a 22 6e 6f 64 65 22 2c 69 6e 64 65 78 3a 61 7d 29 2c 6e 75 6c 6c 3d 3d 3d 74 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3f 74 2e 64 Data Ascii: fore(createMarker(),t),r.push(t)):t.data=s[n],o+=n}}else if(8===t.nodeType)if(t.data===marker){const e=t.parentNode;null!==t.previousSibling&&a!==n\|\|(a++,e.insertBefore(createMarker(),t)),n=a,this.parts.push({type:"node",index:a}),null===t.nextSibling?t.d
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 61 6c 6b 65 72 4e 6f 64 65 46 69 6c 74 65 72 2c 6e 75 6c 6c 2c 21 31 29 3b 66 6f 72 28 3b 72 2e 6e 65 78 74 4e 6f 64 65 28 29 3b 29 65 2b 2b 3b 72 65 74 75 72 6e 20 65 7d 2c 6e 65 78 74 41 63 74 69 76 65 49 6e 64 65 78 49 6e 54 65 6d 70 6c 61 74 65 50 61 72 74 73 3d 28 74 2c 65 3d 2d 31 29 3d 3e 7b 66 6f 72 28 6c 65 74 20 72 3d 65 2b 31 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 63 6f 6e 73 74 20 65 3d 74 5b 72 5d 3b 69 66 28 69 73 54 65 6d 70 6c 61 74 65 50 61 72 74 41 63 74 69 76 65 28 65 29 29 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 2d 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 6e 73 65 72 74 4e 6f 64 65 49 6e 74 6f 54 65 6d 70 6c 61 74 65 28 74 2c 65 2c 72 3d 6e 75 6c 6c 29 7b 63 6f 6e 73 74 7b 65 6c 65 6d 65 6e 74 3a 7b 63 6f 6e 74 65 6e 74 Data Ascii: alkerNodeFilter,null,!1);for(;r.nextNode();)e++;return e},nextActiveIndexInTemplateParts=(t,e=-1)=>{for(let r=e+1;r<t.length;r++){const e=t[r];if(isTemplatePartActive(e))return r}return-1};function insertNodeIntoTemplate(t,e,r=null){const{element:{content
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 68 74 20 28 63 29 20 32 30 31 37 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 20 20 2a 20 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 61 74 0a 20 20 20 2a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 4c 49 43 45 4e 53 45 2e 74 78 74 0a 20 20 20 2a 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 61 75 74 68 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 0a 20 20 20 2a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 41 55 54 Data Ascii: ht (c) 2017 The Polymer Project Authors. All rights reserved. * This code may only be used under the BSD style license found at * http://polymer.github.io/LICENSE.txt * The complete set of authors may be found at * http://polymer.github.io/AUT
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 63 65 73 73 6f 72 2e 68 61 6e 64 6c 65 41 74 74 72 69 62 75 74 65 45 78 70 72 65 73 73 69 6f 6e 73 28 6f 2c 73 2e 6e 61 6d 65 2c 73 2e 73 74 72 69 6e 67 73 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 29 3b 6e 2b 2b 7d 65 6c 73 65 20 74 68 69 73 2e 5f 5f 70 61 72 74 73 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 6e 2b 2b 3b 72 65 74 75 72 6e 20 69 73 43 45 50 6f 6c 79 66 69 6c 6c 26 26 28 64 6f 63 75 6d 65 6e 74 2e 61 64 6f 70 74 4e 6f 64 65 28 74 29 2c 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2e 75 70 67 72 61 64 65 28 74 29 29 2c 74 7d 7d 0a 2f 2a 2a 0a 20 20 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c Data Ascii: cessor.handleAttributeExpressions(o,s.name,s.strings,this.options));n++}else this.__parts.push(void 0),n++;return isCEPolyfill&&(document.adoptNode(t),customElements.upgrade(t)),t}}/** * @license * Copyright (c) 2017 The Polymer Project Authors. Al
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 20 20 2a 20 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 61 74 0a 20 20 20 2a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 4c 49 43 45 4e 53 45 2e 74 78 74 0a 20 20 20 2a 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 61 75 74 68 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 0a 20 20 20 2a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 41 55 54 48 4f 52 53 2e 74 78 74 0a 20 20 20 Data Ascii: The Polymer Project Authors. All rights reserved. * This code may only be used under the BSD style license found at * http://polymer.github.io/LICENSE.txt * The complete set of authors may be found at * http://polymer.github.io/AUTHORS.txt
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 68 69 73 2e 76 61 6c 75 65 7c 7c 28 74 68 69 73 2e 76 61 6c 75 65 3d 74 2c 69 73 44 69 72 65 63 74 69 76 65 28 74 29 7c 7c 28 74 68 69 73 2e 63 6f 6d 6d 69 74 74 65 72 2e 64 69 72 74 79 3d 21 30 29 29 7d 63 6f 6d 6d 69 74 28 29 7b 66 6f 72 28 3b 69 73 44 69 72 65 63 74 69 76 65 28 74 68 69 73 2e 76 61 6c 75 65 29 3b 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 76 61 6c 75 65 3b 74 68 69 73 2e 76 61 6c 75 65 3d 6e 6f 43 68 61 6e 67 65 2c 74 28 74 68 69 73 29 7d 74 68 69 73 2e 76 61 6c 75 65 21 3d 3d 6e 6f 43 68 61 6e 67 65 26 26 74 68 69 73 2e 63 6f 6d 6d 69 74 74 65 72 2e 63 6f 6d 6d 69 74 28 29 7d 7d 63 6c 61 73 73 20 4e 6f 64 65 50 61 72 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 74 68 69 73 2e 76 61 6c 75 65 3d 76 6f 69 64 20 30 2c 74 68 69 73 Data Ascii: his.value\|\|(this.value=t,isDirective(t)\|\|(this.committer.dirty=!0))}commit(){for(;isDirective(this.value);){const t=this.value;this.value=noChange,t(this)}this.value!==noChange&&this.committer.commit()}}class NodePart{constructor(t){this.value=void 0,this
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 28 74 3d 6e 75 6c 6c 3d 3d 74 3f 22 22 3a 74 29 3f 74 3a 53 74 72 69 6e 67 28 74 29 3b 65 3d 3d 3d 74 68 69 73 2e 65 6e 64 4e 6f 64 65 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 26 26 33 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 61 74 61 3d 72 3a 74 68 69 73 2e 5f 5f 63 6f 6d 6d 69 74 4e 6f 64 65 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 72 29 29 2c 74 68 69 73 2e 76 61 6c 75 65 3d 74 7d 5f 5f 63 6f 6d 6d 69 74 54 65 6d 70 6c 61 74 65 52 65 73 75 6c 74 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 65 6d 70 6c 61 74 65 46 61 63 74 6f 72 79 28 74 29 3b 69 66 28 74 68 69 73 2e 76 61 6c 75 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 54 65 6d 70 6c 61 74 65 49 6e 73 74 61 6e 63 65 26 26 Data Ascii: (t=null==t?"":t)?t:String(t);e===this.endNode.previousSibling&&3===e.nodeType?e.data=r:this.__commitNode(document.createTextNode(r)),this.value=t}__commitTemplateResult(t){const e=this.options.templateFactory(t);if(this.value instanceof TemplateInstance&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49878	157.240.253.1	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:07 UTC	536	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dynadot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:15:07 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-05 22:15:07 UTC	1702	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-05 22:15:07 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-05 22:15:07 UTC	14681	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-05 22:15:07 UTC	16384	IN	Data Raw: 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 Data Ascii: c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="objec
2024-10-05 22:15:07 UTC	16384	IN	Data Raw: 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 Data Ascii: k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})()
2024-10-05 22:15:07 UTC	16384	IN	Data Raw: 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 68 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 67 3d 68 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 3f 5b 61 2c 63 2c 6a 2c 66 2c 67 5d 3a 6e 75 6c 6c 7d 63 3d 6e 65 77 20 61 28 67 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 63 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 Data Ascii: )==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"undefined":i(h))==="object"&&(g=h);return a!=null&&c!=null?[a,c,j,f,g]:null}c=new a(g);l.exports=c})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered(
2024-10-05 22:15:07 UTC	1702	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 68 2c 61 29 3f 68 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 61 29 3f 76 6f 69 64 20 30 3a 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 Data Ascii: unction p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.prototype.hasOwnProperty.call(h,a)?h[a]:a}function r(a){if(typeof a==="string")return a;if(typeof a==="number")return isNaN(a)?void 0:a;try{return JSON.string
2024-10-05 22:15:07 UTC	14682	IN	Data Raw: 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 7d 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 21 3d 6e 75 6c 6c 26 26 61 2e 61 70 70 65 6e 64 28 22 68 6d 65 22 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 29 2c 61 2e 61 70 70 65 6e 64 28 22 65 78 5f 6d 22 2c 66 2e 6a 6f 69 6e 28 22 2c 22 29 29 29 7d 7d 5d 29 3b 72 65 Data Ascii: ion(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null}),function(a){return a!=null});f.length>0&&(this.moduleEncodings.hash!=null&&a.append("hme",this.moduleEncodings.hash),a.append("ex_m",f.join(",")))}}]);re
2024-10-05 22:15:07 UTC	16384	IN	Data Raw: 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 61 72 20 63 3d 21 30 2c 64 3d 21 31 2c 65 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 66 3d 62 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 62 3b 21 28 63 3d 28 62 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 63 3d 21 30 29 7b 62 3d 62 2e 76 61 6c 75 65 3b 6c 2e 74 72 69 67 67 65 72 28 61 2c 62 29 7d 7d 63 Data Ascii: alsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){var c=!0,d=!1,e=void 0;try{for(var f=b[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),b;!(c=(b=f.next()).done);c=!0){b=b.value;l.trigger(a,b)}}c
2024-10-05 22:15:07 UTC	16384	IN	Data Raw: 2c 6c 28 7b 7d 2c 65 2c 62 28 64 5b 65 5d 29 29 29 7d 2c 7b 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 61 28 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 64 3d 42 28 65 2c 49 2e 6f 62 6a 65 63 74 28 29 29 3b 65 3d 63 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 66 3d 62 5b 65 5d 2c 67 3d 64 5b 65 5d 3b 66 3d 66 28 67 29 3b 72 65 74 75 72 6e 20 61 28 7b 7d 2c 63 2c 6c 28 7b 7d 2c 65 2c 66 29 29 7d 2c 7b 7d 29 3b 72 65 74 75 72 6e Data Ascii: ,l({},e,b(d[e])))},{})}}function y(a){return function(b){return b==null?null:a(b)}}function z(b){return function(e){var d=B(e,I.object());e=c(Object.keys(b),function(c,e){if(c==null)return null;var f=b[e],g=d[e];f=f(g);return a({},c,l({},e,f))},{});return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49886	104.16.152.132	443	4920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:07 UTC	725	OUT	GET /sr/mainsite2023/home/header_bg.jpg HTTP/1.1 Host: www.dynadot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dynadot.com/sr/home_responsive_2023.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_id=1095218721; welcome_page=7k9H9LQ6S7P7N9A; glbl_curr=0; language_id=0
2024-10-05 22:15:07 UTC	466	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:07 GMT Content-Type: image/jpeg Content-Length: 49814 Connection: close Cache-Control: public, max-age=1209600 Cf-Bgj: h2pri ETag: 1727814739681 Expires: Sat, 19 Oct 2024 22:15:07 GMT Strict-Transport-Security: max-age=2592000 X-Frame-Options: SAMEORIGIN CF-Cache-Status: HIT Age: 351491 Accept-Ranges: bytes Access-Control-Allow-Origin: *.mouseflow.com Server: cloudflare CF-RAY: 8ce0c4be5df04252-EWR
2024-10-05 22:15:07 UTC	903	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 03 8f 05 a0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("}!1AQa"q2
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 90 f4 aa 10 84 8a 39 a2 8c d0 21 0f 07 a7 14 84 f1 d2 8a 42 79 c7 7a a1 07 d0 52 1e f4 a7 bf 34 de 94 c4 1e fd 69 bd 78 a5 ef d2 9b da 81 01 e0 66 93 34 b4 d3 cd 34 48 67 ad 37 34 a4 d2 55 08 0d 30 f5 a5 27 a0 a4 a6 20 3d 69 0d 1f fe aa 0f 34 c9 10 f4 cd 21 f5 a0 d2 1e 94 c4 21 39 39 cd 07 9a 43 49 f5 a6 20 6e 94 9c 01 41 3c 7e 94 94 c4 19 a4 c7 7a 5a 69 a6 21 09 eb 41 38 a3 14 9d 45 31 09 d2 8c e6 83 48 69 92 14 87 93 45 21 a6 21 09 e6 83 cd 27 5a 43 fc e9 88 0d 26 7f 0a 0f 07 9a 4a 62 03 49 de 8c d2 67 ad 31 07 6e 94 99 e6 83 48 79 14 c4 1c 52 13 f9 d1 9a 42 69 88 29 09 cf 7a 29 0d 31 07 6a 4c d1 d2 90 f4 a0 40 69 33 41 a4 fa 53 10 b9 a4 cf 5a 29 a7 9e 86 98 80 9a 0d 19 e3 8a 42 69 88 29 33 41 38 eb 48 4f 4a 62 02 7a d2 67 8a 29 33 c5 31 0b 9a 6d 19 c5 Data Ascii: 9!ByzR4ixf44Hg74U0' =i4!!99CI nA<~zZi!A8E1HiE!!'ZC&JbIg1nHyRBi)z)1jL@i3ASZ)Bi)3A8HOJbzg)31m
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 93 3c d2 f6 a3 8e c6 98 86 f7 cd 04 d0 7a e2 90 9f 41 8a 62 13 a0 a4 3f 8e 69 48 e3 39 a0 fa 53 10 dc fb d2 1e 4d 29 c1 e3 de 90 f1 c2 d3 24 43 c5 27 3f 8d 2f 3d e9 0d 31 08 7f 2a 43 4a 7a 52 1a 62 13 d6 93 8c fb 51 d3 a7 d6 90 f4 a6 20 fc 69 0f 14 77 26 81 4c 42 1a 4f a7 6a 5f 51 48 7a d3 10 87 b5 21 e0 f2 68 22 93 f0 fc 29 88 09 e2 9a 3a e6 9c 70 73 cd 34 fb 53 24 4a 09 e6 8e bd f9 a6 f7 cf 4a 62 0f c2 90 e3 a5 2b 1c 0e b4 d2 69 88 33 ce 29 08 a2 90 d3 10 67 9a 43 8c d2 1c 7e 34 7f 9e 94 c4 20 e0 0a 4e b4 a7 de 90 8f 4a a2 44 3d 38 a4 fe 54 1f 43 48 78 e2 98 80 9e 9d e9 0f e3 47 41 48 7a 53 10 9d 69 3f 0a 5f ad 21 eb 4c 42 76 3e b4 dc d3 9a 9a 7d 0d 32 40 f4 f4 a4 34 67 f2 a4 3c 53 10 1a 4c f1 47 eb 49 9a 62 03 4d 3d 28 34 13 c5 31 09 ef 49 eb 41 a4 3d Data Ascii: <zAb?iH9SM)$C'?/=1*CJzRbQ iw&LBOj_QHz!h"):ps4S$JJb+i3)gC~4 NJD=8TCHxGAHzSi?_!LBv>}2@4g<SLGIbM=(41IA=
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 34 7d 28 a0 02 8a 28 cd 00 14 51 46 68 00 a3 f0 a4 ef 45 00 19 a2 92 96 80 16 8a 43 41 a0 05 a3 b5 14 52 00 ed 45 14 9d a8 01 68 a2 8a 43 0f c2 83 45 14 00 51 49 4b 48 02 8e f9 a2 8c 52 18 b4 b4 da 5a 43 16 81 49 4b 48 02 8a 28 35 25 00 a5 14 94 b4 86 2f 7a 28 ef 45 4b 1a 3e 8a f5 14 c3 d3 a5 2f d2 91 8e 6b e2 8f d1 03 3e 94 52 77 a3 34 c4 1e dc d2 73 47 5c 52 0a 04 1d 05 07 27 8a 01 e6 90 fb e2 98 83 3c 52 1f 5a 09 e2 90 f1 da 98 83 3d 7d 29 3b 1a 52 79 38 a4 a6 21 3a 01 49 90 3e b4 52 74 a6 20 27 9f f0 a4 3e d4 51 c7 e3 4c 42 66 9b c8 a7 53 7b d3 10 84 d0 7f ce 69 4f 1d 29 bd b9 c5 31 05 34 f3 4a 46 7e b4 9d e9 88 3f 33 48 7a d0 7a 52 1e 7b 53 10 1e 05 37 f9 9a 5a 43 d6 99 22 1e bd 69 07 1c 51 da 92 98 80 9f 7e 29 0f 5a 3b 7b d2 53 10 87 20 d2 53 8d 27 Data Ascii: 4}((QFhECAREhCEQIKHRZCIKH(5%/z(EK>/k>Rw4sG\R'<RZ=});Ry8!:I>Rt '>QLBfS{iO)14JF~?3HzzR{S7ZC"iQ~)Z;{S S'
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: de 83 49 4c 41 49 47 d2 83 4c 04 a4 3e f4 1a 28 10 84 fb 52 51 d6 8f 7a 62 03 49 45 21 a0 40 69 29 4d 25 31 05 14 94 53 00 c9 a3 bf 5a 4a 3d 28 10 51 d2 8a 43 40 08 68 a2 8a 62 00 68 a4 a3 b7 5a 00 28 a0 d1 40 07 7a 0d 25 14 08 29 69 28 a0 02 8a 28 a0 02 8e f4 51 40 05 14 51 48 02 8a 28 14 00 51 45 1d 7a d2 00 a2 8a 28 18 bf 5a 4a 28 a0 02 8a 0d 2d 21 85 20 14 b4 b4 ae 02 62 81 4a 28 eb 48 61 de 8a 29 69 0c 4a 5a 31 4b 52 31 05 03 8a 5a 29 5c 62 01 4b 4a 05 02 a5 b1 d8 31 4b d2 97 1e 94 62 a1 b2 92 13 e9 4e 02 8c 52 e2 a1 b2 92 3e 83 cd 20 fe 74 66 86 38 19 af 90 3e fc 4e 9f 5a 3b d0 4d 26 69 88 33 c5 21 c8 a0 9f 4e 9e f4 84 d0 01 db bf d2 83 8f c6 81 f4 a4 a6 20 07 39 cd 27 e7 41 fd 28 eb c5 31 09 df 9e b4 73 f4 a0 9e 7e 94 da 62 02 49 1c 52 1e 3d 71 41 Data Ascii: ILAIGL>(RQzbIE!@i)M%1SZJ=(QC@hbhZ(@z%)i((Q@QH(QEz(ZJ(-! bJ(Ha)iJZ1KR1Z)\bKJ1KbNR> tf8>NZ;M&i3!N 9'A(1s~bIR=qA
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 41 a0 f2 7d a9 0d 31 08 69 29 4d 21 e9 de 98 84 3d 78 a4 34 a6 9a 4d 31 05 21 a5 eb 48 79 a6 21 0f 34 84 d2 d3 49 a6 20 ed 48 68 26 90 d3 24 43 47 6c d2 75 a2 98 80 d2 50 69 29 88 0f 4c 74 a4 a5 eb 49 4c 41 49 47 d2 93 de 80 0e f4 df a5 2d 25 31 05 06 8e a2 93 a6 29 88 4c d0 4d 04 d2 50 20 a4 34 1a 09 a6 21 29 09 a5 ef 49 9a 62 12 90 d2 d2 13 40 05 27 6a 5a 69 a6 20 cd 25 2d 21 a6 20 38 a4 a5 ed 49 40 82 92 96 93 b5 00 06 93 b5 2d 25 31 05 14 1a 4a 00 0d 21 a5 a4 fa 53 10 51 47 5a 28 00 e6 8a 3a d0 29 00 52 52 d1 da 81 09 47 7a 28 a6 31 28 a5 a3 b5 00 25 14 b4 52 00 ef 49 4b 45 20 12 8a 75 25 00 14 52 d1 40 09 de 8c 52 d1 48 61 45 14 52 00 14 0a 28 a0 61 4b 45 15 37 18 98 a5 02 96 8a 57 00 14 7d 28 a5 a4 31 28 c5 2e 29 6a 5b 18 98 a5 a2 96 a5 b2 92 0a 5c Data Ascii: A}1i)M!=x4M1!Hy!4I Hh&$CGluPi)LtILAIG-%1)LMP 4!)Ib@'jZi %-! 8I@-%1J!SQGZ(:)RRGz(1(%RIKE u%R@RHaER(aKE7W}(1(.)j[\
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 0e 94 99 a0 f2 69 0f 22 99 20 4d 36 97 f1 a4 3d 70 29 88 4e bd 69 0f bd 06 83 54 21 33 ce 7b 53 7b e6 94 d2 76 a6 48 1a 69 a5 a6 b7 5a 62 03 db ad 34 9e 78 a7 53 69 88 31 48 7a d2 9a 69 1c d3 10 1f 7a 4a 33 49 4c 41 49 cf 5a 38 a4 3e b4 c4 06 90 d1 48 7d e9 92 06 90 f1 45 25 31 08 7d a9 33 4a 69 39 a6 21 3b 50 7a d0 69 31 4c 40 69 b4 b4 87 a5 31 08 4d 26 79 cd 2f f3 a4 34 c4 25 21 a2 83 d6 98 84 3d 29 ad 4e e9 d6 98 7a d3 10 a6 9b de 94 f3 49 4c 91 3b d2 1a 5a 4c 53 10 1a 4a 0d 25 02 03 49 de 83 da 8a 60 21 f6 a4 fa d2 9a 4c d3 10 76 a4 a5 a4 c5 31 09 db 8a 43 4b 49 da 98 82 90 d0 7a 52 76 a0 40 7a 52 1a 29 29 88 29 0d 29 a4 34 08 43 48 69 69 0e 29 88 4a 0d 2f 7a 4a 60 25 14 1a 0d 31 05 21 a0 d1 da 90 84 e6 92 96 8e b4 c0 4e f4 86 9d 8a 43 40 84 cd 14 51 Data Ascii: i" M6=p)NiT!3{S{vHiZb4xSi1HzizJ3ILAIZ8>H}E%1}3Ji9!;Pzi1L@i1M&y/4%!=)NzIL;ZLSJ%I`!Lv1CKIzRv@zR))))4CHii)J/zJ`%1!NC@Q
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: 25 04 f3 8a 4f 5c d3 10 7e 74 84 8e 28 cf 7a 4c f3 4c 41 d3 14 66 93 f5 a4 f6 a6 20 e8 39 e6 8c d1 f8 d2 7d 69 92 21 e9 cd 06 90 f5 1e 94 13 4c 42 1a 42 41 14 1e a2 93 20 53 10 37 34 99 e3 ad 14 87 da 98 80 d3 49 e0 62 9d 9a 6d 31 05 21 c7 6a 29 3b 53 10 7b d3 47 4e 69 73 de 9b f5 a6 48 7e 34 84 f1 4a 69 a7 f4 a6 20 f4 a4 26 97 b5 37 a7 6a a1 09 db de 8f a5 21 fa 50 31 8a 62 12 93 3c 51 49 4c 40 7d fa 52 1e 3d 29 4e 72 79 a4 3e f4 c9 12 93 39 34 66 90 1f ca 98 80 f5 07 34 df e5 4a 7d a9 33 8c 53 10 1e 29 09 ed 41 eb 4d 39 ef 54 20 3c 8c d2 50 7d e9 33 8a 64 81 3d 69 0f 5a 0d 06 98 84 34 de d4 ac 69 1a 98 84 a4 34 a6 9a 7d 69 88 5e f4 d3 47 b5 25 32 40 fa 53 7a 0e b4 a7 ad 21 a6 20 a6 9a 5f c2 93 3f 9d 31 09 da 93 af 14 a6 9b 54 48 1e 29 bf 5a 5a 46 a6 21 Data Ascii: %O\~t(zLLAf 9}i!LBBA S74Ibm1!j);S{GNisH~4Ji &7j!P1b<QIL@}R=)Nry>94f4J}3S)AM9T <P}3d=iZ4i4}i^G%2@Sz! _?1TH)ZZF!
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: b4 63 bd 3b 14 62 95 c7 61 28 1d 69 d8 a3 1e d4 ae 3b 09 8a 31 d2 9c 06 3b 52 81 52 d9 56 1b 8a 70 14 b8 a5 c5 43 63 b0 80 52 81 4b 8a 76 2a 1b 2d 21 b8 f5 a5 03 9c 53 80 e4 52 e3 8a 87 22 d4 46 e3 8a 70 14 e5 14 e0 2b 37 22 94 46 01 d8 53 80 e2 9e 16 9c 16 b3 94 cd 14 46 05 f5 a7 aa 66 a4 54 a9 42 56 12 a8 6d 18 11 2a f1 52 2c 7c d4 a9 1d 58 8e 12 71 c5 72 d4 ad 63 a2 14 ae 40 91 d5 98 a0 cd 59 86 dc 93 cd 5d 8a 0c 63 8a f3 6b 62 ad b1 e8 51 c3 5c ad 0d bf 03 35 7a 28 31 da a6 8e 21 c7 15 3a 27 b5 79 15 b1 0e 47 a9 4b 0e 90 c4 8b 03 a5 4c a9 8a 90 26 7b 54 8a bc 0a e0 9c ee 76 c2 16 18 17 f2 a9 55 73 8a 55 5f 6a 93 1d 38 ae 79 33 78 c4 bf f4 a3 38 34 87 20 52 77 af b2 3c 51 7b 77 a3 b1 22 93 19 14 87 9c 81 4c 41 9a 33 eb 47 7f eb 4d 34 c4 29 eb d3 9a 39 Data Ascii: c;ba(i;1;RRVpCcRKv-!SR"Fp+7"FSFfTBVmR,\|Xqrc@Y]ckbQ\5z(1!:'yGKL&{TvUsU_j8y3x84 Rw<Q{w"LA3GM4)9
2024-10-05 22:15:07 UTC	1369	IN	Data Raw: d5 12 06 90 d0 69 38 ef 40 80 d2 51 9a 43 54 20 34 df a5 2f 6e 69 bd 0d 31 06 7a 9a 0f 5a 0f 7a 69 a6 20 3d 69 0d 29 a4 a6 48 86 90 fe 74 73 9a 43 c5 31 01 eb 48 68 ed 8a 43 d6 98 84 a4 3f a5 2d 21 a6 21 33 cd 27 43 4a 69 3a f6 a6 20 3e f4 d3 4a 45 21 a6 48 87 d6 93 b5 29 a4 a6 21 09 39 a4 26 97 ad 21 a6 02 52 1a 5f 4a 43 4c 91 3d 29 29 4f 4a 69 a6 20 a4 a5 a4 a6 21 3a 66 93 b5 2b 52 53 10 87 9a 4e f4 a7 da 90 f5 a6 21 0d 25 07 de 8a 62 10 fe 34 50 7a d0 7a d3 10 da 29 7b 52 7a d0 20 a6 d2 d2 53 10 52 1e bd 28 34 1a 62 12 90 d2 d2 76 a0 02 93 b5 2d 25 31 09 47 6a 3b d2 53 10 9c d1 41 a2 98 84 a4 e6 94 f3 49 40 84 34 52 e2 93 14 c0 29 29 69 28 10 52 52 f6 a3 b5 00 25 25 3a 8f c2 80 13 a6 29 38 a2 96 98 0d 23 9a 5a 5a 4f ad 02 13 1c d1 4b d6 83 40 09 49 d4 Data Ascii: i8@QCT 4/ni1zZzi =i)HtsC1HhC?-!!3'CJi: >JE!H)!9&!R_JCL=))OJi !:f+RSN!%b4Pzz){Rz SR(4bv-%1Gj;SAI@4R))i(RR%%:)8#ZZOK@I

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:07 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:07 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221507Z-1657d5bbd48sqtlf1huhzuwq7000000000vg000000007cmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:07 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:07 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:07 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 4035d6e2-a01e-0002-4602-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221507Z-1657d5bbd48qjg85buwfdynm5w000000012g00000000syu2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:07 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:07 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:07 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6bee43b5-001e-00a2-2106-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221507Z-1657d5bbd48brl8we3nu8cxwgn00000001d000000000apy0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:07 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:07 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:07 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 62f7f1ae-f01e-0096-4d0c-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221507Z-1657d5bbd48jwrqbupe3ktsx9w000000018g00000000fhed x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:07 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:15:07 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-05 22:15:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:15:07 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241005T221507Z-1657d5bbd48tzspvqynhg14aes00000001e00000000073ag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-05 22:15:07 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Target ID:	0
Start time:	18:14:39
Start date:	05/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:14:44
Start date:	05/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2164,i,6291912327454323900,11968717775315074238,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:14:46
Start date:	05/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ofinovardweb.cstrikehost.com/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	18:15:21
Start date:	05/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5740 --field-trial-handle=2164,i,6291912327454323900,11968717775315074238,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://ofinovardweb.cstrikehost.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Windows Analysis Report
http://ofinovardweb.cstrikehost.com/