Edit tour

Windows Analysis Report
http://ykbdmz.com/php/php.exe?c:

Overview

General Information

Sample URL:	http://ykbdmz.com/php/php.exe?c:
Analysis ID:	1527495
Tags:	urlscan
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3032 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2184,i,11222019368487239187,10007873458667200943,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5928 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ykbdmz.com/php/php.exe?c:" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://identity.safenames.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Didp.oidc%26redirect_uri%3Dhttps%253A%252F%252Fidp.safenames.com%252F%26response_type%3Dcode%26scope%3Dopenid%2520email%2520role%26code_challenge%3DB1LIKCW3WkG99en5X1-PM5T1Efy3C_s30RmHJmiq6z8%26code_challenge_method%3DS256%26state%3DOpenIdConnect.AuthenticationProperties%253D25N4ke8V2HQiXxjbP4puwJu-iPeD2B2OB4wYzWbpwjavYgz9M1VCM9cVvLoXb26LJZ8lR1YKcYMQdGJWybRfKpfuyqHF6scK_w01IvrC9ScBmFFSxlCoZGt6mTHt3j4CXAKesDDiHF1g3JbI44SNxyhLuRvXfv528tTa_KWFJaMYAh7DSccREYPdv34BlAIQKlEMoyBNejo_mlLMCVQe7PRwESCRCNl0G53oC8GL01QL4V9s7oYEWZZJ3FLo8zb6WPfDmMWXTUb8YsA6FqwnhCQkBF4%26nonce%3D638638524666852583.Y2YzOWNmYjMtZmY4NC00YjVjLWJmMTMtYzRkOWYyYzg3ZjE4MmUzMmU0OWUtNmJhYi00NjMwLWFkNzItOTY4MGYxMTE3NzRm%26x-client-SKU%3DID_NET472%26x-client-ver%3D6.25.0.0

HTTP Parser: Base64 decoded: cf39cfb3-ff84-4b5c-bf13-c4d9f2c87f182e32e49e-6bab-4630-ad72-9680f111774f

Source: https://www.safenames.net/?ref=lndrdr	HTTP Parser: Iframe src: https://www.youtube.com/embed/TCYnibZRObM
Source: https://www.safenames.net/?ref=lndrdr	HTTP Parser: Iframe src: https://www.youtube.com/embed/TCYnibZRObM
Source: https://www.safenames.net/?ref=lndrdr	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-S2Q2NMTHK4&gacid=1103165935.1728255644&gtm=45je4a20v893209708z8812949306za200zb812949306&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1487827300
Source: https://www.safenames.net/	HTTP Parser: Iframe src: https://www.youtube.com/embed/TCYnibZRObM
Source: https://www.safenames.net/	HTTP Parser: Iframe src: https://www.youtube.com/embed/TCYnibZRObM

Source: http://ykbdmz.com/php/php.exe?c:	HTTP Parser: No favicon
Source: https://idp.safenames.com/ErrorMessage.aspx?aspxerrorpath=/Profile/default.aspx	HTTP Parser: No favicon

Source: https://www.safenames.net/?ref=lndrdr	HTTP Parser: No <meta name="author".. found
Source: https://www.safenames.net/?ref=lndrdr	HTTP Parser: No <meta name="author".. found
Source: https://www.safenames.net/who-we-are	HTTP Parser: No <meta name="author".. found
Source: https://www.safenames.net/who-we-are	HTTP Parser: No <meta name="author".. found
Source: https://www.safenames.net/about-us/contact	HTTP Parser: No <meta name="author".. found
Source: https://www.safenames.net/about-us/contact	HTTP Parser: No <meta name="author".. found
Source: https://identity.safenames.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Didp.oidc%26redirect_uri%3Dhttps%253A%252F%252Fidp.safenames.com%252F%26response_type%3Dcode%26scope%3Dopenid%2520email%2520role%26code_challenge%3DB1LIKCW3WkG99en5X1-PM5T1Efy3C_s30RmHJmiq6z8%26code_challenge_method%3DS256%26state%3DOpenIdConnect.AuthenticationProperties%253D25N4ke8V2HQiXxjbP4puwJu-iPeD2B2OB4wYzWbpwjavYgz9M1VCM9cVvLoXb26LJZ8lR1YKcYMQdGJWybRfKpfuyqHF6scK_w01IvrC9ScBmFFSxlCoZGt6mTHt3j4CXAKesDDiHF1g3JbI44SNxyhLuRvXfv528tTa_KWFJaMYAh7DSccREYPdv34BlAIQKlEMoyBNejo_mlLMCVQe7PRwESCRCNl0G53oC8GL01QL4V9s7oYEWZZJ3FLo8zb6WPfDmMWXTUb8YsA6FqwnhCQkBF4%26nonce%3D638638524666852583.Y2YzOWNmYjMtZmY4NC00YjVjLWJmMTMtYzRkOWYyYzg3ZjE4MmUzMmU0OWUtNmJhYi00NjMwLWFkNzItOTY4MGYxMTE3NzRm%26x-client-SKU%3DID_NET472%26x-client-ver%3D6.25.0.0	HTTP Parser: No <meta name="author".. found
Source: https://www.safenames.net/	HTTP Parser: No <meta name="author".. found
Source: https://www.safenames.net/	HTTP Parser: No <meta name="author".. found

Source: https://www.safenames.net/?ref=lndrdr	HTTP Parser: No <meta name="copyright".. found
Source: https://www.safenames.net/?ref=lndrdr	HTTP Parser: No <meta name="copyright".. found
Source: https://www.safenames.net/who-we-are	HTTP Parser: No <meta name="copyright".. found
Source: https://www.safenames.net/who-we-are	HTTP Parser: No <meta name="copyright".. found
Source: https://www.safenames.net/about-us/contact	HTTP Parser: No <meta name="copyright".. found
Source: https://www.safenames.net/about-us/contact	HTTP Parser: No <meta name="copyright".. found
Source: https://identity.safenames.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Didp.oidc%26redirect_uri%3Dhttps%253A%252F%252Fidp.safenames.com%252F%26response_type%3Dcode%26scope%3Dopenid%2520email%2520role%26code_challenge%3DB1LIKCW3WkG99en5X1-PM5T1Efy3C_s30RmHJmiq6z8%26code_challenge_method%3DS256%26state%3DOpenIdConnect.AuthenticationProperties%253D25N4ke8V2HQiXxjbP4puwJu-iPeD2B2OB4wYzWbpwjavYgz9M1VCM9cVvLoXb26LJZ8lR1YKcYMQdGJWybRfKpfuyqHF6scK_w01IvrC9ScBmFFSxlCoZGt6mTHt3j4CXAKesDDiHF1g3JbI44SNxyhLuRvXfv528tTa_KWFJaMYAh7DSccREYPdv34BlAIQKlEMoyBNejo_mlLMCVQe7PRwESCRCNl0G53oC8GL01QL4V9s7oYEWZZJ3FLo8zb6WPfDmMWXTUb8YsA6FqwnhCQkBF4%26nonce%3D638638524666852583.Y2YzOWNmYjMtZmY4NC00YjVjLWJmMTMtYzRkOWYyYzg3ZjE4MmUzMmU0OWUtNmJhYi00NjMwLWFkNzItOTY4MGYxMTE3NzRm%26x-client-SKU%3DID_NET472%26x-client-ver%3D6.25.0.0	HTTP Parser: No <meta name="copyright".. found
Source: https://www.safenames.net/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.safenames.net/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49754 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.7:63268 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /?ref=lndrdr HTTP/1.1Host: www.safenames.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/css/bootstrap.css?vrs=115 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/css/fonts.css?vrs=115 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=DzHrpQl5URXarFHAtrmzFvvwtxERElSZ_b2Ca1mxtmzvyTwDr6K2uqyW80PraHwZqn7BbM5lQGIiy7biXNxjLG9gJ71MSZTcvi7eeKKPJBLIN5mVSMeRsnLnzbDpw9vtrgTOqyeHT00x826p9zjpJthZ-3nX299B5pryZnfavheEFwbHupd-iASOQMXwlLQK0&t=637824974880000000 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/css/styles.css?vrs=115 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=okuX3IVIBwfJlfEQK32K3gK8Aiu7WHWoEQUncQG3Me4qBC8PqUDSanqR6Ahd3omIkuFu6Ev7Gv2ttmV6KR9lcUWQL5405Mpb6ScB6eSmJaIA5nR_TYEYPDplnGHHWqwmBd4glDQQ9ZyBTvYu1QllxjvyMDdS9h2GGbjDGaL0WIFEOosa2oyc6d64gO7VfnRz0&t=fffffffffa5b9a95 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=EydukmxBmDstn7gSYzQESPK2TwG5hv2uqB2Gdl8pAyFIQLWmhmE5_O4YUNZloDdZi8iaO67pF9ggYX5lq9QXH4DU3H3ovw67x2l8oxk1qthswYwdyAZkJyBGs2YdcflDo0Xk-NiDQkpkWzN3McFywnx1bxXHhbpmNH9AuSVoTpA5RdJ4oVevVdYcukTyGML_0&t=fffffffffa5b9a95 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/js/bootstrap.js HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/js/custom.js HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/js/popper.min.js HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/js/core.js HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=EydukmxBmDstn7gSYzQESPK2TwG5hv2uqB2Gdl8pAyFIQLWmhmE5_O4YUNZloDdZi8iaO67pF9ggYX5lq9QXH4DU3H3ovw67x2l8oxk1qthswYwdyAZkJyBGs2YdcflDo0Xk-NiDQkpkWzN3McFywnx1bxXHhbpmNH9AuSVoTpA5RdJ4oVevVdYcukTyGML_0&t=fffffffffa5b9a95 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=DzHrpQl5URXarFHAtrmzFvvwtxERElSZ_b2Ca1mxtmzvyTwDr6K2uqyW80PraHwZqn7BbM5lQGIiy7biXNxjLG9gJ71MSZTcvi7eeKKPJBLIN5mVSMeRsnLnzbDpw9vtrgTOqyeHT00x826p9zjpJthZ-3nX299B5pryZnfavheEFwbHupd-iASOQMXwlLQK0&t=637824974880000000 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=VKaJmfFWDpQxp1_HxsR1qKyfqr1LoFdI1Larj06AwCrRGITZ0NZSm_gMLZ6jHmmIF30zk8r8VDydl4Hd0d7FZ9PIVI4Kle1brOUAMAyDWepfLOYh0V6vpqj1mJBFx92SzKTkVvuYlX-uO3fZ9ykmpzYqFvEcr5MMYvRo81yJnDqp6rzP6WxevUeNAFj3K6WqcNxIoYGo1-d3_ru3xKsagA2&t=fffffffffa5b9a95 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/default-source/icons/uk-flag.png HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=okuX3IVIBwfJlfEQK32K3gK8Aiu7WHWoEQUncQG3Me4qBC8PqUDSanqR6Ahd3omIkuFu6Ev7Gv2ttmV6KR9lcUWQL5405Mpb6ScB6eSmJaIA5nR_TYEYPDplnGHHWqwmBd4glDQQ9ZyBTvYu1QllxjvyMDdS9h2GGbjDGaL0WIFEOosa2oyc6d64gO7VfnRz0&t=fffffffffa5b9a95 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/js/custom.js HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/icons/usa-flag.png HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/js/bootstrap.js HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/js/core.js HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/js/popper.min.js HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/default-source/icons/uk-flag.png HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/mag-glass-sm.svg HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/safenames-logo-white.svg HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/icons/usa-flag.png HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/sn-25.png HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /Frontend-Assembly/Telerik.Sitefinity.Frontend.Search/Mvc/Scripts/SearchBox/Search-box.js?package=Safenames&v=MTMuMy43NjM5LjA%3d HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/g4s-logo.png?sfvrsn=8e1596ff_4 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=VKaJmfFWDpQxp1_HxsR1qKyfqr1LoFdI1Larj06AwCrRGITZ0NZSm_gMLZ6jHmmIF30zk8r8VDydl4Hd0d7FZ9PIVI4Kle1brOUAMAyDWepfLOYh0V6vpqj1mJBFx92SzKTkVvuYlX-uO3fZ9ykmpzYqFvEcr5MMYvRo81yJnDqp6rzP6WxevUeNAFj3K6WqcNxIoYGo1-d3_ru3xKsagA2&t=fffffffffa5b9a95 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/nhsbloodandtransplant.png?sfvrsn=77d6694d_6 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /26584007.js HTTP/1.1Host: js-eu1.hs-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hotjar-1425002.js?sv=6 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/mag-glass-sm.svg HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/cushman-wakefield-logo.png?sfvrsn=11e1b817_4 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/gsk-logo.png?sfvrsn=86c1b0a5_7 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/safenames-logo-white.svg HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/g4s-logo.png?sfvrsn=8e1596ff_4 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/safe2-thin-60.svg HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /Frontend-Assembly/Telerik.Sitefinity.Frontend.Search/Mvc/Scripts/SearchBox/Search-box.js?package=Safenames&v=MTMuMy43NjM5LjA%3d HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/monitor-thin-60.svg HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/nhsbloodandtransplant.png?sfvrsn=77d6694d_6 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/server-thin-60.svg HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /web-interactives-embed.js HTTP/1.1Host: js-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.safenames.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/robot-thin-60.svg HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/sn-25.png HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/nhs-blood-logo.png?sfvrsn=6c326917_2 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/horwath-htl-logo-white.png?sfvrsn=98c8ee06_4 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /v2/26584007/banner.js HTTP/1.1Host: js-eu1.hs-banner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /26584007.js HTTP/1.1Host: js-eu1.hs-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/1728252900000/26584007.js HTTP/1.1Host: js-eu1.hs-analytics.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/security-video-person.png?sfvrsn=54439678_2 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/services-brochure-thumb.png?sfvrsn=d8a9fe68_2 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.safenames.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/sn-iso9001.png HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/sn-iso27001.png HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/icann-acc.png HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/digicertpartnerplatinumlogo.png?sfvrsn=9ea9a433_3 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/facebook-48.png HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /modules.ca70bc16369dcd35d4ef.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/twitter-48.png HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/cushman-wakefield-logo.png?sfvrsn=11e1b817_4 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/gsk-logo.png?sfvrsn=86c1b0a5_7 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/monitor-thin-60.svg HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/safe2-thin-60.svg HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/server-thin-60.svg HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/horwath-htl-logo-white.png?sfvrsn=98c8ee06_4 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=26584007&utk= HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.safenames.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/linkedin-48.png HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/youtube-48.png HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1215135276 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web-interactives-embed.js HTTP/1.1Host: js-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/HorwathHTLhomepage HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /c/hotjar-1425002.js?sv=6 HTTP/1.1Host: static.hotjar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/26584007/banner.js HTTP/1.1Host: js-eu1.hs-banner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /analytics/1728252900000/26584007.js HTTP/1.1Host: js-eu1.hs-analytics.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/default-source/safenamesblog/NavigatingtheComplexitiesofDomainManagementTheHorwathHTLExperiencehomepage HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/safenamesblog/AShortReviewofURSRecommendationsandProposedChangeshomepage HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/safenamesblog/EdgeNextandSafenamesPartnertoEnhanceWebsiteandAppPerformanceSecurityandEdgeComputinghomepage HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/nhs-blood-logo.png?sfvrsn=6c326917_2 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/robot-thin-60.svg HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/security-video-person.png?sfvrsn=54439678_2 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/services-brochure-thumb.png?sfvrsn=d8a9fe68_2 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/sn-iso9001.png HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/sn-iso27001.png HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/sn-dots-background.jpg HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/ResourcePackages/Safenames/assets/dist/css/styles.css?vrs=115Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/default-source/safenamesblog/AShortReviewofURSRecommendationsandProposedChangeshomepage HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=26584007&utk= HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.35727259335991546 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/digicertpartnerplatinumlogo.png?sfvrsn=9ea9a433_3 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/icann-acc.png HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/facebook-48.png HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/twitter-48.png HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/linkedin-48.png HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643
Source: global traffic	HTTP traffic detected: GET /modules.ca70bc16369dcd35d4ef.js HTTP/1.1Host: script.hotjar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: nTKz3lsEmZ/tGTCTHf0h8g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /sessions/1425002?s=0.25&r=0.23120141626564017 HTTP/1.1Host: vc.hotjar.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.safenames.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/youtube-48.png HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/favicon.ico HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1215135276 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/favicon.ico HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=26584007&rcu=https%3A%2F%2Fwww.safenames.net%2F&pu=https%3A%2F%2Fwww.safenames.net%2F%3Fref%3Dlndrdr&t=Safenames+-+Global+Domain+Search%2C+Registration+and+Protection&cts=1728255644800&vi=b0d8d964aeb6481607376bb169425680&nc=true&u=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1&b=165226720.1.1728255644796&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=qsD9aF8za6bIpSPVQSeHPgNbRdnk__3A527eR3D3Y5s-1728255644-1.0.1.1-Vh5Jc0FnNXSAd0ilKtJvaViPH_By0fc7x6Emv.E3TIHjlugBF8AoGsz9cBP2fBCc4nTumlkpTv4uy9a0rtXONQ; _cfuvid=SemtPQgX2DrrrH36oy5L_D7xVfUFRtF9ZDHGn2VHUlM-1728255644372-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/HorwathHTLhomepage HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/sn-dots-background.jpg HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.35727259335991546 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /images/default-source/safenamesblog/EdgeNextandSafenamesPartnertoEnhanceWebsiteandAppPerformanceSecurityandEdgeComputinghomepage HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; ___utmvc=wVe6AAOcrFzPoK+SIDd6RSnEhQD88huQzvL7z9veWo1VActlB69LncjlOSSbROsEEQshrgtjr6UEkstwXQzkYI5VUv72fSe+oJNupC8gMNYTTyRl19IS+i/+pS/IAP1JtMooA9KOwql3DEkV/5du4FuPU1OMA3NcT8ADLexhn09iS1BDRvFfmf48dtv51qS/UD7wrq9Ms+iM83ZFbpZS2wTADWYsddamqIaXqODZdWy+d/L/0LfDHTWJjstmDxXHK7HHwGAuvUpJfUTt7v5KLzo1rZ/YBbA1pyH+C7BIRX46o8OxwBxj3BH0TY2y3WKIBIwzks6O75KNakKxQT+7yfpICZvpwhBXxPsK3UXlKEj41d7Fqjk1nvtSdJN4/y7+EEh6AIknlnK7R4D+ZfvCjsiSzCHDVhWjorNHu+lKKoFSe//dCRvvsh7F+J7N5+mLH1VnaMUqj+dhQhWs/YouXrIhRPPuLYYLjz2mp+WNpy7py7GvEhBL15/18rK2P992lO75tap8pcQFAEE3IOUoaooXgQNuIpoRbVju/e2qjyEf+IUttjKKaxTgaul+kL/lnWWfHZeEU06gR6Y+j+Q1KT/HbXWFGyx10ZvFfAFMSy+lyQS8pO2Rj/2Rkdnx+m1bPQmD47rmMQscpk9MheJGZpiZH0NWAo8AFQ0XuqxD0RvbQjfOo1W/nE7jOoYSyoJii4bKVQ7jgG0UURSk6TJd7t583gmhVVPzIM9CsmaDdSIgSjCHOgv3DKJJn8OUqdlTIAoxKmN6jvcJfuEcRK+HoadAvf3nmg57CfLciXAOB+9MM5uuVrP+0chSLqrGWUB3Uo6p5HbEgZy7fFlFG1cUy9tZ1lIlJL2vMCK5qv2+/V2vtEz0Ia+HEMkhmsyGD1/VEGgYPqZ65x65izCjhEMnOHFSfdlmNcTti3x+E2A4JXvTUzwmRs5WP/2tjaNbN7d/aYI7s1k+cBTXVyEiGVCG5PA80KMi8WjwJDkuKmbibp5WD8uFHJMTTvlhUEPChHJqRze+iw8MabCZq3F8iZ6MX4VF3JJqvROkrO2VAJ/9oTWAd/1KUF7WsTgrIP/dCJpTGa/OUXPUb2jyjFK4J+sDZadtIlnAANGA/kmKH5E26E9B7zWlw39IesfFOpLhcBOCJ3IfcoFSfH7YKH9imvfqKZYB1fjGUzq6WWka5/tF/OFsx1dcA8fa74n5KpvqoOJZcoEx8RYRB3fi/4DHeaJNZsSLekmpm1yB/lartiQr5DbZXMk0UbCL6woPzJaFYzH3TMr+mF6Pi+B/Gl9CzUEg9FOLrqT/E6bzaiMcqBwH20dx8TDhgx5XeXYUkQacuUryUN44I4X557cDwqErgsInj3iBjW/3dtrRF2lqlUW2WLb90ohs+rLAr8fqO5+990Te+aZFf+PnVIphzzauGae+tnQb4xOLu9+7xKE1/70WZ8qcwRO3civOZL2C35monxmVWyz67/VYJKyK5QzEgDieW4ww+adVUrWVg+QtE/pjl8AkrGzG5G+8UHmvMgKqVkYTnUb/YhcdvAOy/ORtveY02ahefmFNb00wZbMqig0OpgecfMa+Pu0v44S9OXi5b1QHk/H/Ovsi6i6o3cs8C/Q5/rpj3Y4
Source: global traffic	HTTP traffic detected: GET /images/default-source/safenamesblog/NavigatingtheComplexitiesofDomainManagementTheHorwathHTLExperiencehomepage HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /images/default-source/safenamesblog/AShortReviewofURSRecommendationsandProposedChangeshomepage HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; ___utmvc=wVe6AAOcrFzPoK+SIDd6RSnEhQD88huQzvL7z9veWo1VActlB69LncjlOSSbROsEEQshrgtjr6UEkstwXQzkYI5VUv72fSe+oJNupC8gMNYTTyRl19IS+i/+pS/IAP1JtMooA9KOwql3DEkV/5du4FuPU1OMA3NcT8ADLexhn09iS1BDRvFfmf48dtv51qS/UD7wrq9Ms+iM83ZFbpZS2wTADWYsddamqIaXqODZdWy+d/L/0LfDHTWJjstmDxXHK7HHwGAuvUpJfUTt7v5KLzo1rZ/YBbA1pyH+C7BIRX46o8OxwBxj3BH0TY2y3WKIBIwzks6O75KNakKxQT+7yfpICZvpwhBXxPsK3UXlKEj41d7Fqjk1nvtSdJN4/y7+EEh6AIknlnK7R4D+ZfvCjsiSzCHDVhWjorNHu+lKKoFSe//dCRvvsh7F+J7N5+mLH1VnaMUqj+dhQhWs/YouXrIhRPPuLYYLjz2mp+WNpy7py7GvEhBL15/18rK2P992lO75tap8pcQFAEE3IOUoaooXgQNuIpoRbVju/e2qjyEf+IUttjKKaxTgaul+kL/lnWWfHZeEU06gR6Y+j+Q1KT/HbXWFGyx10ZvFfAFMSy+lyQS8pO2Rj/2Rkdnx+m1bPQmD47rmMQscpk9MheJGZpiZH0NWAo8AFQ0XuqxD0RvbQjfOo1W/nE7jOoYSyoJii4bKVQ7jgG0UURSk6TJd7t583gmhVVPzIM9CsmaDdSIgSjCHOgv3DKJJn8OUqdlTIAoxKmN6jvcJfuEcRK+HoadAvf3nmg57CfLciXAOB+9MM5uuVrP+0chSLqrGWUB3Uo6p5HbEgZy7fFlFG1cUy9tZ1lIlJL2vMCK5qv2+/V2vtEz0Ia+HEMkhmsyGD1/VEGgYPqZ65x65izCjhEMnOHFSfdlmNcTti3x+E2A4JXvTUzwmRs5WP/2tjaNbN7d/aYI7s1k+cBTXVyEiGVCG5PA80KMi8WjwJDkuKmbibp5WD8uFHJMTTvlhUEPChHJqRze+iw8MabCZq3F8iZ6MX4VF3JJqvROkrO2VAJ/9oTWAd/1KUF7WsTgrIP/dCJpTGa/OUXPUb2jyjFK4J+sDZadtIlnAANGA/kmKH5E26E9B7zWlw39IesfFOpLhcBOCJ3IfcoFSfH7YKH9imvfqKZYB1fjGUzq6WWka5/tF/OFsx1dcA8fa74n5KpvqoOJZcoEx8RYRB3fi/4DHeaJNZsSLekmpm1yB/lartiQr5DbZXMk0UbCL6woPzJaFYzH3TMr+mF6Pi+B/Gl9CzUEg9FOLrqT/E6bzaiMcqBwH20dx8TDhgx5XeXYUkQacuUryUN44I4X557cDwqErgsInj3iBjW/3dtrRF2lqlUW2WLb90ohs+rLAr8fqO5+990Te+aZFf+PnVIphzzauGae+tnQb4xOLu9+7xKE1/70WZ8qcwRO3civOZL2C35monxmVWyz67/VYJKyK5QzEgDieW4ww+adVUrWVg+QtE/pjl8AkrGzG5G+8UHmvMgKqVkYTnUb/YhcdvAOy/ORtveY02ahefmFNb00wZbMqig0OpgecfMa+Pu0v44S9OXi5b1QHk/H/Ovsi6i6o3cs8C/Q5/rpj3Y4wRD29DlPcHZ5QonEu9YxwLsZ5F/uvg77e6
Source: global traffic	HTTP traffic detected: GET /?site_id=1425002&gzip=1 HTTP/1.1Host: content.hotjar.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/HorwathHTLhomepage HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/HorwathHTLhomepage HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/Safenames/assets/dist/images/favicon.ico HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=26584007&rcu=https%3A%2F%2Fwww.safenames.net%2F&pu=https%3A%2F%2Fwww.safenames.net%2F%3Fref%3Dlndrdr&t=Safenames+-+Global+Domain+Search%2C+Registration+and+Protection&cts=1728255644800&vi=b0d8d964aeb6481607376bb169425680&nc=true&u=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1&b=165226720.1.1728255644796&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=qsD9aF8za6bIpSPVQSeHPgNbRdnk__3A527eR3D3Y5s-1728255644-1.0.1.1-Vh5Jc0FnNXSAd0ilKtJvaViPH_By0fc7x6Emv.E3TIHjlugBF8AoGsz9cBP2fBCc4nTumlkpTv4uy9a0rtXONQ; _cfuvid=SemtPQgX2DrrrH36oy5L_D7xVfUFRtF9ZDHGn2VHUlM-1728255644372-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: UlRwWyfwtbXtofO+skIDxA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /who-we-are HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/safenames-mk-front.jpg HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/who-we-areAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/who-we-are-headerf9549dc52bbb461a8ef66f0b9e1bc3f6.jpg HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/who-we-areAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/dons-chelsea.jpg HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/who-we-areAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796
Source: global traffic	HTTP traffic detected: GET /26584007.js HTTP/1.1Host: js-eu1.hs-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/who-we-areAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Sun, 06 Oct 2024 22:16:42 GMT
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/mission-statement-icon.png?sfvrsn=dc262cb1_2 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/who-we-areAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/vision-statement-icon.png?sfvrsn=8023281a_2 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/who-we-areAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/idp-screen.png?sfvrsn=5279de35_13 HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/who-we-areAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/safenames-mk-front.jpg HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.1.1728255653.50.0.0; __utmb=170342050.2.10.1728255643
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/tick-lightblue.png HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/ResourcePackages/Safenames/assets/dist/css/styles.css?vrs=115Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; __utmb=170342050.1.10.1728255643; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.0.1728255643.60.0.0; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: vEtvWiqONjQ7QsTYcwCIkA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/mission-statement-icon.png?sfvrsn=dc262cb1_2 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.1.1728255653.50.0.0; __utmb=170342050.2.10.1728255643
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/dons-chelsea.jpg HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.1.1728255653.50.0.0; __utmb=170342050.2.10.1728255643
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=26584007&utk=b0d8d964aeb6481607376bb169425680 HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.safenames.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.safenames.net/who-we-areAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/who-we-are-headerf9549dc52bbb461a8ef66f0b9e1bc3f6.jpg HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.1.1728255653.50.0.0; __utmb=170342050.2.10.1728255643
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/vision-statement-icon.png?sfvrsn=8023281a_2 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.1.1728255653.50.0.0; __utmb=170342050.2.10.1728255643
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/idp-screen.png?sfvrsn=5279de35_13 HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.1.1728255653.50.0.0; __utmb=170342050.2.10.1728255643
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"48bb5c8a01043eceaf45e65d5c98950b"If-Modified-Since: Thu, 12 Sep 2024 08:47:39 UTC
Source: global traffic	HTTP traffic detected: GET /26584007.js HTTP/1.1Host: js-eu1.hs-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Sun, 06 Oct 2024 22:16:42 GMT
Source: global traffic	HTTP traffic detected: GET /images/default-source/default-album/tick-lightblue.png HTTP/1.1Host: www.safenames.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __hssc=165226720.1.1728255644796; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.1.1728255653.50.0.0; __utmb=170342050.2.10.1728255643
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: e1RHGJsBkyG4S5iLrRWkiA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=26584007&rcu=https%3A%2F%2Fwww.safenames.net%2Fwho-we-are&pu=https%3A%2F%2Fwww.safenames.net%2Fwho-we-are&t=Global+Domain+Name+Registration+Company+%7C+Corporate+Domain+Portfolio+Management+and+Services&cts=1728255654701&vi=b0d8d964aeb6481607376bb169425680&nc=false&u=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1&b=165226720.2.1728255644796&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/who-we-areAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=qsD9aF8za6bIpSPVQSeHPgNbRdnk__3A527eR3D3Y5s-1728255644-1.0.1.1-Vh5Jc0FnNXSAd0ilKtJvaViPH_By0fc7x6Emv.E3TIHjlugBF8AoGsz9cBP2fBCc4nTumlkpTv4uy9a0rtXONQ; _cfuvid=SemtPQgX2DrrrH36oy5L_D7xVfUFRtF9ZDHGn2VHUlM-1728255644372-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=26584007&utk=b0d8d964aeb6481607376bb169425680 HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?site_id=1425002&gzip=1 HTTP/1.1Host: content.hotjar.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=26584007&rcu=https%3A%2F%2Fwww.safenames.net%2Fwho-we-are&pu=https%3A%2F%2Fwww.safenames.net%2Fwho-we-are&t=Global+Domain+Name+Registration+Company+%7C+Corporate+Domain+Portfolio+Management+and+Services&cts=1728255654701&vi=b0d8d964aeb6481607376bb169425680&nc=false&u=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1&b=165226720.2.1728255644796&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=qsD9aF8za6bIpSPVQSeHPgNbRdnk__3A527eR3D3Y5s-1728255644-1.0.1.1-Vh5Jc0FnNXSAd0ilKtJvaViPH_By0fc7x6Emv.E3TIHjlugBF8AoGsz9cBP2fBCc4nTumlkpTv4uy9a0rtXONQ; _cfuvid=SemtPQgX2DrrrH36oy5L_D7xVfUFRtF9ZDHGn2VHUlM-1728255644372-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /about-us/contact HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.1.1728255653.50.0.0; __utmb=170342050.2.10.1728255643; __hssc=165226720.2.1728255644796
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: Y89qGxfoFVjVy0oR6D0PVg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /26584007.js HTTP/1.1Host: js-eu1.hs-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/about-us/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Sun, 06 Oct 2024 22:16:42 GMT
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: L4Qh864m0zgUhPdhmrhLOw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=26584007&utk=b0d8d964aeb6481607376bb169425680 HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.safenames.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.safenames.net/about-us/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /?site_id=1425002&gzip=1 HTTP/1.1Host: content.hotjar.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=26584007&rcu=https%3A%2F%2Fwww.safenames.net%2Fabout-us%2Fcontact-us&pu=https%3A%2F%2Fwww.safenames.net%2Fabout-us%2Fcontact&t=Contact+Us+%7C+Safenames&cts=1728255661635&vi=b0d8d964aeb6481607376bb169425680&nc=false&u=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1&b=165226720.3.1728255644796&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/about-us/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=qsD9aF8za6bIpSPVQSeHPgNbRdnk__3A527eR3D3Y5s-1728255644-1.0.1.1-Vh5Jc0FnNXSAd0ilKtJvaViPH_By0fc7x6Emv.E3TIHjlugBF8AoGsz9cBP2fBCc4nTumlkpTv4uy9a0rtXONQ; _cfuvid=SemtPQgX2DrrrH36oy5L_D7xVfUFRtF9ZDHGn2VHUlM-1728255644372-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"48bb5c8a01043eceaf45e65d5c98950b"If-Modified-Since: Thu, 12 Sep 2024 08:47:39 UTC
Source: global traffic	HTTP traffic detected: GET /26584007.js HTTP/1.1Host: js-eu1.hs-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Sun, 06 Oct 2024 22:16:42 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=26584007&rcu=https%3A%2F%2Fwww.safenames.net%2Fabout-us%2Fcontact-us&pu=https%3A%2F%2Fwww.safenames.net%2Fabout-us%2Fcontact&t=Contact+Us+%7C+Safenames&cts=1728255661635&vi=b0d8d964aeb6481607376bb169425680&nc=false&u=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1&b=165226720.3.1728255644796&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=qsD9aF8za6bIpSPVQSeHPgNbRdnk__3A527eR3D3Y5s-1728255644-1.0.1.1-Vh5Jc0FnNXSAd0ilKtJvaViPH_By0fc7x6Emv.E3TIHjlugBF8AoGsz9cBP2fBCc4nTumlkpTv4uy9a0rtXONQ; _cfuvid=SemtPQgX2DrrrH36oy5L_D7xVfUFRtF9ZDHGn2VHUlM-1728255644372-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: o6IWIou0s9wflkacn0tksA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=26584007&utk=b0d8d964aeb6481607376bb169425680 HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: jIrwBVASvt8j4tgyrss+Ow==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Login HTTP/1.1Host: idp.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: idp.safenames.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=se331htdvfkzomagildzknsy
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: sj9qsmqOV8Goz43/YcV40g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /connect/authorize?client_id=idp.oidc&redirect_uri=https%3A%2F%2Fidp.safenames.com%2F&response_type=code&scope=openid%20email%20role&code_challenge=B1LIKCW3WkG99en5X1-PM5T1Efy3C_s30RmHJmiq6z8&code_challenge_method=S256&state=OpenIdConnect.AuthenticationProperties%3D25N4ke8V2HQiXxjbP4puwJu-iPeD2B2OB4wYzWbpwjavYgz9M1VCM9cVvLoXb26LJZ8lR1YKcYMQdGJWybRfKpfuyqHF6scK_w01IvrC9ScBmFFSxlCoZGt6mTHt3j4CXAKesDDiHF1g3JbI44SNxyhLuRvXfv528tTa_KWFJaMYAh7DSccREYPdv34BlAIQKlEMoyBNejo_mlLMCVQe7PRwESCRCNl0G53oC8GL01QL4V9s7oYEWZZJ3FLo8zb6WPfDmMWXTUb8YsA6FqwnhCQkBF4&nonce=638638524666852583.Y2YzOWNmYjMtZmY4NC00YjVjLWJmMTMtYzRkOWYyYzg3ZjE4MmUzMmU0OWUtNmJhYi00NjMwLWFkNzItOTY4MGYxMTE3NzRm&x-client-SKU=ID_NET472&x-client-ver=6.25.0.0 HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Didp.oidc%26redirect_uri%3Dhttps%253A%252F%252Fidp.safenames.com%252F%26response_type%3Dcode%26scope%3Dopenid%2520email%2520role%26code_challenge%3DB1LIKCW3WkG99en5X1-PM5T1Efy3C_s30RmHJmiq6z8%26code_challenge_method%3DS256%26state%3DOpenIdConnect.AuthenticationProperties%253D25N4ke8V2HQiXxjbP4puwJu-iPeD2B2OB4wYzWbpwjavYgz9M1VCM9cVvLoXb26LJZ8lR1YKcYMQdGJWybRfKpfuyqHF6scK_w01IvrC9ScBmFFSxlCoZGt6mTHt3j4CXAKesDDiHF1g3JbI44SNxyhLuRvXfv528tTa_KWFJaMYAh7DSccREYPdv34BlAIQKlEMoyBNejo_mlLMCVQe7PRwESCRCNl0G53oC8GL01QL4V9s7oYEWZZJ3FLo8zb6WPfDmMWXTUb8YsA6FqwnhCQkBF4%26nonce%3D638638524666852583.Y2YzOWNmYjMtZmY4NC00YjVjLWJmMTMtYzRkOWYyYzg3ZjE4MmUzMmU0OWUtNmJhYi00NjMwLWFkNzItOTY4MGYxMTE3NzRm%26x-client-SKU%3DID_NET472%26x-client-ver%3D6.25.0.0 HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /lib/bootstrap/dist/css/bootstrap.min.css HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /css/safenames.css HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /css/snIdentity.css HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /lib/jquery/dist/jquery.min.js HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/uk-flag.png HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/usa-flag.png HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: Rj8av8HyLFs5YrJjUwtjSQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /images/facebook-48.png HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/sn-iso9001.png HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/digicertpartnerplatinumlogo.png?sfvrsn=9ea9a433_0 HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/usa-flag.png HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/uk-flag.png HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /lib/jquery/dist/jquery.min.js HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/twitter-48.png HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/linkedin-48.png HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/london.jpg HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://identity.safenames.com/css/snIdentity.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/sn-iso27001.png HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/youtube-48.png HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/safenames-logo-white.svg HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/facebook-48.png HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/digicertpartnerplatinumlogo.png?sfvrsn=9ea9a433_0 HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/sn-iso9001.png HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/cog.svg HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/twitter-48.png HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/icann-logo.png HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/linkedin-48.png HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/london.jpg HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /lib/jquery/jquery.validate.unobtrusive.js HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /lib/jquery/jquery.validate.min.js HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/youtube-48.png HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/safenames-logo-white.svg HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /lib/bootstrap/dist/js/bootstrap.bundle.min.js HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/sn-iso27001.png HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/cog.svg HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /images/icann-logo.png HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 483p8OBftt1Jeja1VXDslQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /lib/bootstrap/dist/js/bootstrap.bundle.min.js HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /lib/jquery/jquery.validate.min.js HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /lib/jquery/jquery.validate.unobtrusive.js HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.safenames.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==; __utma=170342050.1680886355.1728255643.1728255643.1728255643.1; __utmc=170342050; __utmz=170342050.1728255643.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-5736218-2=1; _hjSessionUser_1425002=eyJpZCI6ImRhMTZiOGUyLTYxNTctNTJmMS1iYThlLTUwYWIyZGI1MDMyMCIsImNyZWF0ZWQiOjE3MjgyNTU2NDM3NDksImV4aXN0aW5nIjp0cnVlfQ==; _hjSession_1425002=eyJpZCI6IjA0NTg2MWIwLTdhYzEtNDU1MC1hZTA4LTUxMTVhZmE3ZjVmMCIsImMiOjE3MjgyNTU2NDM3NTIsInMiOjEsInIiOjEsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga=GA1.1.1103165935.1728255644; __hstc=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1; hubspotutk=b0d8d964aeb6481607376bb169425680; __hssrc=1; __utmb=170342050.3.10.1728255643; _ga_S2Q2NMTHK4=GS1.1.1728255643.1.1.1728255660.43.0.0; __hssc=165226720.3.1728255644796
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /26584007.js HTTP/1.1Host: js-eu1.hs-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.safenames.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Sun, 06 Oct 2024 22:16:42 GMT
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: /t6VQvv2tTRDul66rRae7g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=26584007&utk=b0d8d964aeb6481607376bb169425680 HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.safenames.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.safenames.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /26584007.js HTTP/1.1Host: js-eu1.hs-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Sun, 06 Oct 2024 22:16:42 GMT
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: W4Rqhgd1kJ1EqromNlyoOQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=26584007&rcu=https%3A%2F%2Fwww.safenames.net%2F&pu=https%3A%2F%2Fwww.safenames.net%2F&t=Safenames+-+Global+Domain+Search%2C+Registration+and+Protection&cts=1728255684247&vi=b0d8d964aeb6481607376bb169425680&nc=false&u=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1&b=165226720.4.1728255644796&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.safenames.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=qsD9aF8za6bIpSPVQSeHPgNbRdnk__3A527eR3D3Y5s-1728255644-1.0.1.1-Vh5Jc0FnNXSAd0ilKtJvaViPH_By0fc7x6Emv.E3TIHjlugBF8AoGsz9cBP2fBCc4nTumlkpTv4uy9a0rtXONQ; _cfuvid=SemtPQgX2DrrrH36oy5L_D7xVfUFRtF9ZDHGn2VHUlM-1728255644372-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /?site_id=1425002&gzip=1 HTTP/1.1Host: content.hotjar.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"48bb5c8a01043eceaf45e65d5c98950b"If-Modified-Since: Thu, 12 Sep 2024 08:47:39 UTC
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=26584007&utk=b0d8d964aeb6481607376bb169425680 HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=26584007&rcu=https%3A%2F%2Fwww.safenames.net%2F&pu=https%3A%2F%2Fwww.safenames.net%2F&t=Safenames+-+Global+Domain+Search%2C+Registration+and+Protection&cts=1728255684247&vi=b0d8d964aeb6481607376bb169425680&nc=false&u=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1&b=165226720.4.1728255644796&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=qsD9aF8za6bIpSPVQSeHPgNbRdnk__3A527eR3D3Y5s-1728255644-1.0.1.1-Vh5Jc0FnNXSAd0ilKtJvaViPH_By0fc7x6Emv.E3TIHjlugBF8AoGsz9cBP2fBCc4nTumlkpTv4uy9a0rtXONQ; _cfuvid=SemtPQgX2DrrrH36oy5L_D7xVfUFRtF9ZDHGn2VHUlM-1728255644372-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /Profile/Index?newcustomer=truehttps://www.safenames.net/hosting/hosting-solutions HTTP/1.1Host: idp.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=se331htdvfkzomagildzknsy; OpenIdConnect.nonce.0AkNnrNeIwLGmhWSzCeXRURmqM%2FJFDzzfqlvlF9gY6c%3D=VTEwLWI0cXNSU2RSQ0ZscjR6SzB1eWpEaTVVZWxOUGJKQ3NwVFdSZkVveXk3VHJwUVh4b0NkOFA5OWRDclA1SjJVTUhnN2YxaHRDN25wdlpOVjlXVUs3SlIxRTBjT1FPVFdnanRzVVlja2w5NWg1VFV6VjVER2Z1ZjlWaFRISW1jcXc0QWJqWVA0SXEydzVrNnVnZndQUHIyTVktaUdYd2J3VGdSZlExMkdlQ3FmRlZLaFN6LUdEMi1aMldBMnlKaXhWQVl0RHFCM1RuQjdscFRlRHIxTE5EM2xz; OpenIdConnect.cv.TWzGiti2s%2BxosRsqawJqM5sw9GDLRpB7mh8sJ6Z9y0I%3D=YXFpS1NUNVY4TkU0a25mSGpFbkdWVFBjemp5VE5QWTMzZ21kNkxEc1AwME9BQ3hoRG96T2Y1TjlNRUdrSlg1UVBONkg4dlVpa3FHb3BWUV9XOGx6RnRvS1BXRnA0VE90MF9WMUhwaHJLT3NSeUl3M0ZYS2xZN0gwUENEZUh1QXg3cWVEVXc%3D
Source: global traffic	HTTP traffic detected: GET /Profile/default.aspx HTTP/1.1Host: idp.safenames.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=se331htdvfkzomagildzknsy; OpenIdConnect.nonce.0AkNnrNeIwLGmhWSzCeXRURmqM%2FJFDzzfqlvlF9gY6c%3D=VTEwLWI0cXNSU2RSQ0ZscjR6SzB1eWpEaTVVZWxOUGJKQ3NwVFdSZkVveXk3VHJwUVh4b0NkOFA5OWRDclA1SjJVTUhnN2YxaHRDN25wdlpOVjlXVUs3SlIxRTBjT1FPVFdnanRzVVlja2w5NWg1VFV6VjVER2Z1ZjlWaFRISW1jcXc0QWJqWVA0SXEydzVrNnVnZndQUHIyTVktaUdYd2J3VGdSZlExMkdlQ3FmRlZLaFN6LUdEMi1aMldBMnlKaXhWQVl0RHFCM1RuQjdscFRlRHIxTE5EM2xz; OpenIdConnect.cv.TWzGiti2s%2BxosRsqawJqM5sw9GDLRpB7mh8sJ6Z9y0I%3D=YXFpS1NUNVY4TkU0a25mSGpFbkdWVFBjemp5VE5QWTMzZ21kNkxEc1AwME9BQ3hoRG96T2Y1TjlNRUdrSlg1UVBONkg4dlVpa3FHb3BWUV9XOGx6RnRvS1BXRnA0VE90MF9WMUhwaHJLT3NSeUl3M0ZYS2xZN0gwUENEZUh1QXg3cWVEVXc%3D
Source: global traffic	HTTP traffic detected: GET /ErrorMessage.aspx?aspxerrorpath=/Profile/default.aspx HTTP/1.1Host: idp.safenames.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=se331htdvfkzomagildzknsy; OpenIdConnect.nonce.0AkNnrNeIwLGmhWSzCeXRURmqM%2FJFDzzfqlvlF9gY6c%3D=VTEwLWI0cXNSU2RSQ0ZscjR6SzB1eWpEaTVVZWxOUGJKQ3NwVFdSZkVveXk3VHJwUVh4b0NkOFA5OWRDclA1SjJVTUhnN2YxaHRDN25wdlpOVjlXVUs3SlIxRTBjT1FPVFdnanRzVVlja2w5NWg1VFV6VjVER2Z1ZjlWaFRISW1jcXc0QWJqWVA0SXEydzVrNnVnZndQUHIyTVktaUdYd2J3VGdSZlExMkdlQ3FmRlZLaFN6LUdEMi1aMldBMnlKaXhWQVl0RHFCM1RuQjdscFRlRHIxTE5EM2xz; OpenIdConnect.cv.TWzGiti2s%2BxosRsqawJqM5sw9GDLRpB7mh8sJ6Z9y0I%3D=YXFpS1NUNVY4TkU0a25mSGpFbkdWVFBjemp5VE5QWTMzZ21kNkxEc1AwME9BQ3hoRG96T2Y1TjlNRUdrSlg1UVBONkg4dlVpa3FHb3BWUV9XOGx6RnRvS1BXRnA0VE90MF9WMUhwaHJLT3NSeUl3M0ZYS2xZN0gwUENEZUh1QXg3cWVEVXc%3D
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 2A886UrqmSNm4uHreR6vOQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /App_Themes/IDP/01_style.css HTTP/1.1Host: idp.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://idp.safenames.com/ErrorMessage.aspx?aspxerrorpath=/Profile/default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=se331htdvfkzomagildzknsy; OpenIdConnect.nonce.0AkNnrNeIwLGmhWSzCeXRURmqM%2FJFDzzfqlvlF9gY6c%3D=VTEwLWI0cXNSU2RSQ0ZscjR6SzB1eWpEaTVVZWxOUGJKQ3NwVFdSZkVveXk3VHJwUVh4b0NkOFA5OWRDclA1SjJVTUhnN2YxaHRDN25wdlpOVjlXVUs3SlIxRTBjT1FPVFdnanRzVVlja2w5NWg1VFV6VjVER2Z1ZjlWaFRISW1jcXc0QWJqWVA0SXEydzVrNnVnZndQUHIyTVktaUdYd2J3VGdSZlExMkdlQ3FmRlZLaFN6LUdEMi1aMldBMnlKaXhWQVl0RHFCM1RuQjdscFRlRHIxTE5EM2xz; OpenIdConnect.cv.TWzGiti2s%2BxosRsqawJqM5sw9GDLRpB7mh8sJ6Z9y0I%3D=YXFpS1NUNVY4TkU0a25mSGpFbkdWVFBjemp5VE5QWTMzZ21kNkxEc1AwME9BQ3hoRG96T2Y1TjlNRUdrSlg1UVBONkg4dlVpa3FHb3BWUV9XOGx6RnRvS1BXRnA0VE90MF9WMUhwaHJLT3NSeUl3M0ZYS2xZN0gwUENEZUh1QXg3cWVEVXc%3D
Source: global traffic	HTTP traffic detected: GET /App_Themes/IDP/02_print.css HTTP/1.1Host: idp.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://idp.safenames.com/ErrorMessage.aspx?aspxerrorpath=/Profile/default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=se331htdvfkzomagildzknsy; OpenIdConnect.nonce.0AkNnrNeIwLGmhWSzCeXRURmqM%2FJFDzzfqlvlF9gY6c%3D=VTEwLWI0cXNSU2RSQ0ZscjR6SzB1eWpEaTVVZWxOUGJKQ3NwVFdSZkVveXk3VHJwUVh4b0NkOFA5OWRDclA1SjJVTUhnN2YxaHRDN25wdlpOVjlXVUs3SlIxRTBjT1FPVFdnanRzVVlja2w5NWg1VFV6VjVER2Z1ZjlWaFRISW1jcXc0QWJqWVA0SXEydzVrNnVnZndQUHIyTVktaUdYd2J3VGdSZlExMkdlQ3FmRlZLaFN6LUdEMi1aMldBMnlKaXhWQVl0RHFCM1RuQjdscFRlRHIxTE5EM2xz; OpenIdConnect.cv.TWzGiti2s%2BxosRsqawJqM5sw9GDLRpB7mh8sJ6Z9y0I%3D=YXFpS1NUNVY4TkU0a25mSGpFbkdWVFBjemp5VE5QWTMzZ21kNkxEc1AwME9BQ3hoRG96T2Y1TjlNRUdrSlg1UVBONkg4dlVpa3FHb3BWUV9XOGx6RnRvS1BXRnA0VE90MF9WMUhwaHJLT3NSeUl3M0ZYS2xZN0gwUENEZUh1QXg3cWVEVXc%3D
Source: global traffic	HTTP traffic detected: GET /App_Themes/IDP/03_extra.css HTTP/1.1Host: idp.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://idp.safenames.com/ErrorMessage.aspx?aspxerrorpath=/Profile/default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=se331htdvfkzomagildzknsy; OpenIdConnect.nonce.0AkNnrNeIwLGmhWSzCeXRURmqM%2FJFDzzfqlvlF9gY6c%3D=VTEwLWI0cXNSU2RSQ0ZscjR6SzB1eWpEaTVVZWxOUGJKQ3NwVFdSZkVveXk3VHJwUVh4b0NkOFA5OWRDclA1SjJVTUhnN2YxaHRDN25wdlpOVjlXVUs3SlIxRTBjT1FPVFdnanRzVVlja2w5NWg1VFV6VjVER2Z1ZjlWaFRISW1jcXc0QWJqWVA0SXEydzVrNnVnZndQUHIyTVktaUdYd2J3VGdSZlExMkdlQ3FmRlZLaFN6LUdEMi1aMldBMnlKaXhWQVl0RHFCM1RuQjdscFRlRHIxTE5EM2xz; OpenIdConnect.cv.TWzGiti2s%2BxosRsqawJqM5sw9GDLRpB7mh8sJ6Z9y0I%3D=YXFpS1NUNVY4TkU0a25mSGpFbkdWVFBjemp5VE5QWTMzZ21kNkxEc1AwME9BQ3hoRG96T2Y1TjlNRUdrSlg1UVBONkg4dlVpa3FHb3BWUV9XOGx6RnRvS1BXRnA0VE90MF9WMUhwaHJLT3NSeUl3M0ZYS2xZN0gwUENEZUh1QXg3cWVEVXc%3D
Source: global traffic	HTTP traffic detected: GET /App_Themes/IDP/04_markprotect.css HTTP/1.1Host: idp.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://idp.safenames.com/ErrorMessage.aspx?aspxerrorpath=/Profile/default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=se331htdvfkzomagildzknsy; OpenIdConnect.nonce.0AkNnrNeIwLGmhWSzCeXRURmqM%2FJFDzzfqlvlF9gY6c%3D=VTEwLWI0cXNSU2RSQ0ZscjR6SzB1eWpEaTVVZWxOUGJKQ3NwVFdSZkVveXk3VHJwUVh4b0NkOFA5OWRDclA1SjJVTUhnN2YxaHRDN25wdlpOVjlXVUs3SlIxRTBjT1FPVFdnanRzVVlja2w5NWg1VFV6VjVER2Z1ZjlWaFRISW1jcXc0QWJqWVA0SXEydzVrNnVnZndQUHIyTVktaUdYd2J3VGdSZlExMkdlQ3FmRlZLaFN6LUdEMi1aMldBMnlKaXhWQVl0RHFCM1RuQjdscFRlRHIxTE5EM2xz; OpenIdConnect.cv.TWzGiti2s%2BxosRsqawJqM5sw9GDLRpB7mh8sJ6Z9y0I%3D=YXFpS1NUNVY4TkU0a25mSGpFbkdWVFBjemp5VE5QWTMzZ21kNkxEc1AwME9BQ3hoRG96T2Y1TjlNRUdrSlg1UVBONkg4dlVpa3FHb3BWUV9XOGx6RnRvS1BXRnA0VE90MF9WMUhwaHJLT3NSeUl3M0ZYS2xZN0gwUENEZUh1QXg3cWVEVXc%3D
Source: global traffic	HTTP traffic detected: GET /App_Themes/IDP/05_idpFramework.css HTTP/1.1Host: idp.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://idp.safenames.com/ErrorMessage.aspx?aspxerrorpath=/Profile/default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=se331htdvfkzomagildzknsy; OpenIdConnect.nonce.0AkNnrNeIwLGmhWSzCeXRURmqM%2FJFDzzfqlvlF9gY6c%3D=VTEwLWI0cXNSU2RSQ0ZscjR6SzB1eWpEaTVVZWxOUGJKQ3NwVFdSZkVveXk3VHJwUVh4b0NkOFA5OWRDclA1SjJVTUhnN2YxaHRDN25wdlpOVjlXVUs3SlIxRTBjT1FPVFdnanRzVVlja2w5NWg1VFV6VjVER2Z1ZjlWaFRISW1jcXc0QWJqWVA0SXEydzVrNnVnZndQUHIyTVktaUdYd2J3VGdSZlExMkdlQ3FmRlZLaFN6LUdEMi1aMldBMnlKaXhWQVl0RHFCM1RuQjdscFRlRHIxTE5EM2xz; OpenIdConnect.cv.TWzGiti2s%2BxosRsqawJqM5sw9GDLRpB7mh8sJ6Z9y0I%3D=YXFpS1NUNVY4TkU0a25mSGpFbkdWVFBjemp5VE5QWTMzZ21kNkxEc1AwME9BQ3hoRG96T2Y1TjlNRUdrSlg1UVBONkg4dlVpa3FHb3BWUV9XOGx6RnRvS1BXRnA0VE90MF9WMUhwaHJLT3NSeUl3M0ZYS2xZN0gwUENEZUh1QXg3cWVEVXc%3D
Source: global traffic	HTTP traffic detected: GET /App_Themes/IDP/06_jquery-ui.css HTTP/1.1Host: idp.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://idp.safenames.com/ErrorMessage.aspx?aspxerrorpath=/Profile/default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=se331htdvfkzomagildzknsy; OpenIdConnect.nonce.0AkNnrNeIwLGmhWSzCeXRURmqM%2FJFDzzfqlvlF9gY6c%3D=VTEwLWI0cXNSU2RSQ0ZscjR6SzB1eWpEaTVVZWxOUGJKQ3NwVFdSZkVveXk3VHJwUVh4b0NkOFA5OWRDclA1SjJVTUhnN2YxaHRDN25wdlpOVjlXVUs3SlIxRTBjT1FPVFdnanRzVVlja2w5NWg1VFV6VjVER2Z1ZjlWaFRISW1jcXc0QWJqWVA0SXEydzVrNnVnZndQUHIyTVktaUdYd2J3VGdSZlExMkdlQ3FmRlZLaFN6LUdEMi1aMldBMnlKaXhWQVl0RHFCM1RuQjdscFRlRHIxTE5EM2xz; OpenIdConnect.cv.TWzGiti2s%2BxosRsqawJqM5sw9GDLRpB7mh8sJ6Z9y0I%3D=YXFpS1NUNVY4TkU0a25mSGpFbkdWVFBjemp5VE5QWTMzZ21kNkxEc1AwME9BQ3hoRG96T2Y1TjlNRUdrSlg1UVBONkg4dlVpa3FHb3BWUV9XOGx6RnRvS1BXRnA0VE90MF9WMUhwaHJLT3NSeUl3M0ZYS2xZN0gwUENEZUh1QXg3cWVEVXc%3D
Source: global traffic	HTTP traffic detected: GET /App_Themes/IDP/07_grid960.css HTTP/1.1Host: idp.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://idp.safenames.com/ErrorMessage.aspx?aspxerrorpath=/Profile/default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=se331htdvfkzomagildzknsy; OpenIdConnect.nonce.0AkNnrNeIwLGmhWSzCeXRURmqM%2FJFDzzfqlvlF9gY6c%3D=VTEwLWI0cXNSU2RSQ0ZscjR6SzB1eWpEaTVVZWxOUGJKQ3NwVFdSZkVveXk3VHJwUVh4b0NkOFA5OWRDclA1SjJVTUhnN2YxaHRDN25wdlpOVjlXVUs3SlIxRTBjT1FPVFdnanRzVVlja2w5NWg1VFV6VjVER2Z1ZjlWaFRISW1jcXc0QWJqWVA0SXEydzVrNnVnZndQUHIyTVktaUdYd2J3VGdSZlExMkdlQ3FmRlZLaFN6LUdEMi1aMldBMnlKaXhWQVl0RHFCM1RuQjdscFRlRHIxTE5EM2xz; OpenIdConnect.cv.TWzGiti2s%2BxosRsqawJqM5sw9GDLRpB7mh8sJ6Z9y0I%3D=YXFpS1NUNVY4TkU0a25mSGpFbkdWVFBjemp5VE5QWTMzZ21kNkxEc1AwME9BQ3hoRG96T2Y1TjlNRUdrSlg1UVBONkg4dlVpa3FHb3BWUV9XOGx6RnRvS1BXRnA0VE90MF9WMUhwaHJLT3NSeUl3M0ZYS2xZN0gwUENEZUh1QXg3cWVEVXc%3D
Source: global traffic	HTTP traffic detected: GET /static/images/logo_safenames.png HTTP/1.1Host: idp.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://idp.safenames.com/ErrorMessage.aspx?aspxerrorpath=/Profile/default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=se331htdvfkzomagildzknsy; OpenIdConnect.nonce.0AkNnrNeIwLGmhWSzCeXRURmqM%2FJFDzzfqlvlF9gY6c%3D=VTEwLWI0cXNSU2RSQ0ZscjR6SzB1eWpEaTVVZWxOUGJKQ3NwVFdSZkVveXk3VHJwUVh4b0NkOFA5OWRDclA1SjJVTUhnN2YxaHRDN25wdlpOVjlXVUs3SlIxRTBjT1FPVFdnanRzVVlja2w5NWg1VFV6VjVER2Z1ZjlWaFRISW1jcXc0QWJqWVA0SXEydzVrNnVnZndQUHIyTVktaUdYd2J3VGdSZlExMkdlQ3FmRlZLaFN6LUdEMi1aMldBMnlKaXhWQVl0RHFCM1RuQjdscFRlRHIxTE5EM2xz; OpenIdConnect.cv.TWzGiti2s%2BxosRsqawJqM5sw9GDLRpB7mh8sJ6Z9y0I%3D=YXFpS1NUNVY4TkU0a25mSGpFbkdWVFBjemp5VE5QWTMzZ21kNkxEc1AwME9BQ3hoRG96T2Y1TjlNRUdrSlg1UVBONkg4dlVpa3FHb3BWUV9XOGx6RnRvS1BXRnA0VE90MF9WMUhwaHJLT3NSeUl3M0ZYS2xZN0gwUENEZUh1QXg3cWVEVXc%3D
Source: global traffic	HTTP traffic detected: GET /static/images/logo_safenames.png HTTP/1.1Host: idp.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=se331htdvfkzomagildzknsy; OpenIdConnect.nonce.0AkNnrNeIwLGmhWSzCeXRURmqM%2FJFDzzfqlvlF9gY6c%3D=VTEwLWI0cXNSU2RSQ0ZscjR6SzB1eWpEaTVVZWxOUGJKQ3NwVFdSZkVveXk3VHJwUVh4b0NkOFA5OWRDclA1SjJVTUhnN2YxaHRDN25wdlpOVjlXVUs3SlIxRTBjT1FPVFdnanRzVVlja2w5NWg1VFV6VjVER2Z1ZjlWaFRISW1jcXc0QWJqWVA0SXEydzVrNnVnZndQUHIyTVktaUdYd2J3VGdSZlExMkdlQ3FmRlZLaFN6LUdEMi1aMldBMnlKaXhWQVl0RHFCM1RuQjdscFRlRHIxTE5EM2xz; OpenIdConnect.cv.TWzGiti2s%2BxosRsqawJqM5sw9GDLRpB7mh8sJ6Z9y0I%3D=YXFpS1NUNVY4TkU0a25mSGpFbkdWVFBjemp5VE5QWTMzZ21kNkxEc1AwME9BQ3hoRG96T2Y1TjlNRUdrSlg1UVBONkg4dlVpa3FHb3BWUV9XOGx6RnRvS1BXRnA0VE90MF9WMUhwaHJLT3NSeUl3M0ZYS2xZN0gwUENEZUh1QXg3cWVEVXc%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: idp.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://idp.safenames.com/ErrorMessage.aspx?aspxerrorpath=/Profile/default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=se331htdvfkzomagildzknsy; OpenIdConnect.nonce.0AkNnrNeIwLGmhWSzCeXRURmqM%2FJFDzzfqlvlF9gY6c%3D=VTEwLWI0cXNSU2RSQ0ZscjR6SzB1eWpEaTVVZWxOUGJKQ3NwVFdSZkVveXk3VHJwUVh4b0NkOFA5OWRDclA1SjJVTUhnN2YxaHRDN25wdlpOVjlXVUs3SlIxRTBjT1FPVFdnanRzVVlja2w5NWg1VFV6VjVER2Z1ZjlWaFRISW1jcXc0QWJqWVA0SXEydzVrNnVnZndQUHIyTVktaUdYd2J3VGdSZlExMkdlQ3FmRlZLaFN6LUdEMi1aMldBMnlKaXhWQVl0RHFCM1RuQjdscFRlRHIxTE5EM2xz; OpenIdConnect.cv.TWzGiti2s%2BxosRsqawJqM5sw9GDLRpB7mh8sJ6Z9y0I%3D=YXFpS1NUNVY4TkU0a25mSGpFbkdWVFBjemp5VE5QWTMzZ21kNkxEc1AwME9BQ3hoRG96T2Y1TjlNRUdrSlg1UVBONkg4dlVpa3FHb3BWUV9XOGx6RnRvS1BXRnA0VE90MF9WMUhwaHJLT3NSeUl3M0ZYS2xZN0gwUENEZUh1QXg3cWVEVXc%3D
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: TxQX8fUFa3WVHiIZ/mMEeQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /connect/authorize?client_id=idp.oidc&redirect_uri=https%3A%2F%2Fidp.safenames.com%2F&response_type=code&scope=openid%20email%20role&code_challenge=EDAFu1V4I3kTV5sXbRW6GDp-LKykUthEGgvxVtS-rUY&code_challenge_method=S256&state=OpenIdConnect.AuthenticationProperties%3D4zpZm3j2nO8qGhESYYse5GSWlNWvPPXjsNmUgsEGTutgn23bOlqnFtVw2xxVFnwiedpB34zNAtlQzsUURUzjVpHBJAM3IIrH3ZeCdBIKvgSKO5NzgM60nCZO59ZYJCOTasPty5nWOAQ9KBBnXhZe6sPGegS66TdYKTOsMi1MR0lB_mgYuTqUVnFwSmLy_-hdOaB9j6OOCWPUbF_vY4u6UJyzHAmsWiJ1yM75tyB3sheeQlm9ZaSSS9HA2VyX9L7D77VZt_aQayvTgOOVja_CpyHR-Kw&nonce=638638524915603037.OGI5MTRhNGYtYzUzMy00MDkwLThmOTYtOTI0YzI2MWY3YmJlMzY3ZmMxNzktNzI3NS00YjA5LWI4MmMtYzMxYjY1MDAxMzZh&x-client-SKU=ID_NET472&x-client-ver=6.25.0.0 HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://idp.safenames.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Didp.oidc%26redirect_uri%3Dhttps%253A%252F%252Fidp.safenames.com%252F%26response_type%3Dcode%26scope%3Dopenid%2520email%2520role%26code_challenge%3DEDAFu1V4I3kTV5sXbRW6GDp-LKykUthEGgvxVtS-rUY%26code_challenge_method%3DS256%26state%3DOpenIdConnect.AuthenticationProperties%253D4zpZm3j2nO8qGhESYYse5GSWlNWvPPXjsNmUgsEGTutgn23bOlqnFtVw2xxVFnwiedpB34zNAtlQzsUURUzjVpHBJAM3IIrH3ZeCdBIKvgSKO5NzgM60nCZO59ZYJCOTasPty5nWOAQ9KBBnXhZe6sPGegS66TdYKTOsMi1MR0lB_mgYuTqUVnFwSmLy_-hdOaB9j6OOCWPUbF_vY4u6UJyzHAmsWiJ1yM75tyB3sheeQlm9ZaSSS9HA2VyX9L7D77VZt_aQayvTgOOVja_CpyHR-Kw%26nonce%3D638638524915603037.OGI5MTRhNGYtYzUzMy00MDkwLThmOTYtOTI0YzI2MWY3YmJlMzY3ZmMxNzktNzI3NS00YjA5LWI4MmMtYzMxYjY1MDAxMzZh%26x-client-SKU%3DID_NET472%26x-client-ver%3D6.25.0.0 HTTP/1.1Host: identity.safenames.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://idp.safenames.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /api/v2/client/ws?v=7&site_id=1425002 HTTP/1.1Host: ws.hotjar.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.safenames.netSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: f4TpPQML7WiMn28sMmWwuQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Didp.oidc%26redirect_uri%3Dhttps%253A%252F%252Fidp.safenames.com%252F%26response_type%3Dcode%26scope%3Dopenid%2520email%2520role%26code_challenge%3DEDAFu1V4I3kTV5sXbRW6GDp-LKykUthEGgvxVtS-rUY%26code_challenge_method%3DS256%26state%3DOpenIdConnect.AuthenticationProperties%253D4zpZm3j2nO8qGhESYYse5GSWlNWvPPXjsNmUgsEGTutgn23bOlqnFtVw2xxVFnwiedpB34zNAtlQzsUURUzjVpHBJAM3IIrH3ZeCdBIKvgSKO5NzgM60nCZO59ZYJCOTasPty5nWOAQ9KBBnXhZe6sPGegS66TdYKTOsMi1MR0lB_mgYuTqUVnFwSmLy_-hdOaB9j6OOCWPUbF_vY4u6UJyzHAmsWiJ1yM75tyB3sheeQlm9ZaSSS9HA2VyX9L7D77VZt_aQayvTgOOVja_CpyHR-Kw%26nonce%3D638638524915603037.OGI5MTRhNGYtYzUzMy00MDkwLThmOTYtOTI0YzI2MWY3YmJlMzY3ZmMxNzktNzI3NS00YjA5LWI4MmMtYzMxYjY1MDAxMzZh%26x-client-SKU%3DID_NET472%26x-client-ver%3D6.25.0.0 HTTP/1.1Host: identity.safenames.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LoginReturnUrl=https%3A%2F%2Fidp.safenames.com%2F; .AspNetCore.Antiforgery.gA1NeJ2oyGA=CfDJ8H4sSno3tg1BsYZb5qKAu3HrRNsMCbZdOH7eje7q5Cltp1cpTm9PyJM7FvKTU-8Qqa0w8df_Ou8aLiXIKNDvFOFO6RhAipafmR724wLqiHxQPTBB3anQ3br743Y_IxjsYe2eFEDOcG_1IjlUmwEBKUY
Source: global traffic	HTTP traffic detected: GET /php/php.exe?c: HTTP/1.1Host: ykbdmz.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/styles.css HTTP/1.1Host: ykbdmz.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://ykbdmz.com/php/php.exe?c:Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/header.png HTTP/1.1Host: ykbdmz.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ykbdmz.com/php/php.exe?c:Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/cont_back.png HTTP/1.1Host: ykbdmz.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ykbdmz.com/Content/styles.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/header.png HTTP/1.1Host: ykbdmz.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ykbdmz.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ykbdmz.com/php/php.exe?c:Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_202.6.dr, chromecache_207.6.dr	String found in binary or memory: </button><div class="embed-responsive embed-responsive-16by9"><iframe class="embed-responsive-item" src=" https://www.youtube.com/embed/TCYnibZRObM" id="video" allowscriptaccess="always" allow="autoplay"></iframe></div></div></div></div></div></div> equals www.youtube.com (Youtube)
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: </nav></div><div class="col-12 col-lg-2 text-lg-left mt-4 mt-lg-0"><h5><strong>Follow Us</strong></h5><ul class="social-icon"><a href="http://www.facebook.com/safenames"><img src="/images/default-source/default-album/facebook-48.png" alt="Facebook" /></a> equals www.facebook.com (Facebook)
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: <a href="http://www.twitter.com/safenames"><img src="/images/default-source/default-album/twitter-48.png" alt="Facebook" /></a> equals www.twitter.com (Twitter)
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/safenames"><img src="/images/default-source/default-album/linkedin-48.png" alt="Facebook" /></a> equals www.linkedin.com (Linkedin)
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: <a href="https://www.youtube.com/channel/UC9ITKD1jDvIBweFQiel5tcQ"><img src="/images/default-source/default-album/youtube-48.png" alt="Facebook" /></a> equals www.youtube.com (Youtube)
Source: chromecache_172.6.dr, chromecache_283.6.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_172.6.dr, chromecache_283.6.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_179.6.dr, chromecache_166.6.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: ykbdmz.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.safenames.net
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: forms-eu1.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: ws.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: vc.hotjar.io
Source: global traffic	DNS traffic detected: DNS query: content.hotjar.io
Source: global traffic	DNS traffic detected: DNS query: track-eu1.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: idp.safenames.com
Source: global traffic	DNS traffic detected: DNS query: identity.safenames.com

Source: unknown

HTTP traffic detected: POST /?site_id=1425002&gzip=1 HTTP/1.1Host: content.hotjar.ioConnection: keep-aliveContent-Length: 21510sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain; charset=UTF-8Accept: */*Origin: https://www.safenames.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.safenames.net/?ref=lndrdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_146.6.dr, chromecache_191.6.dr	String found in binary or memory: http://api.jquery.com/category/selectors/
Source: chromecache_196.6.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_264.6.dr, chromecache_287.6.dr	String found in binary or memory: http://www.google-analytics.com
Source: chromecache_301.6.dr, chromecache_135.6.dr, chromecache_235.6.dr, chromecache_176.6.dr	String found in binary or memory: http://www.hubspot.com
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: http://www.twitter.com/safenames
Source: chromecache_283.6.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_179.6.dr, chromecache_172.6.dr, chromecache_166.6.dr, chromecache_283.6.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://e2eg.co.uk/3656.js
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Nunito
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_225.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v15/pe1mMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8u
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v5/pe03MImSLYBIv1o4X1M8cc8-BM5iU1EQVg.woff2)
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v5/pe03MImSLYBIv1o4X1M8cc8-BM5jU1EQVg.woff2)
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v5/pe03MImSLYBIv1o4X1M8cc8-BM5tU1E.woff2)
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v5/pe03MImSLYBIv1o4X1M8cc8GBs5iU1EQVg.woff2)
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v5/pe03MImSLYBIv1o4X1M8cc8GBs5jU1EQVg.woff2)
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v5/pe03MImSLYBIv1o4X1M8cc8GBs5tU1E.woff2)
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v5/pe0qMImSLYBIv1o4X1M8cce9I9s.woff2)
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v5/pe0qMImSLYBIv1o4X1M8cceyI9tScg.woff2)
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v5/pe0qMImSLYBIv1o4X1M8ccezI9tScg.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v8/pxiByp8kv8JHgFVrLCz7Z11lFc-K.woff2)
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v8/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v8/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v8/pxiByp8kv8JHgFVrLDz8Z11lFc-K.woff2)
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v8/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_211.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v8/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_201.6.dr, chromecache_234.6.dr, chromecache_145.6.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_201.6.dr, chromecache_234.6.dr, chromecache_145.6.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_234.6.dr, chromecache_145.6.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://idp.safenames.com/Login
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://idp.safenames.com/Profile/Index?newcustomer=true
Source: chromecache_242.6.dr	String found in binary or memory: https://inhope.org/EN#hotlineReferral
Source: chromecache_249.6.dr, chromecache_270.6.dr	String found in binary or memory: https://jqueryvalidation.org/
Source: chromecache_272.6.dr, chromecache_268.6.dr	String found in binary or memory: https://js-eu1.hs-analytics.net/analytics/1728252900000/26584007.js
Source: chromecache_135.6.dr, chromecache_235.6.dr	String found in binary or memory: https://js-eu1.hs-banner.com/v2
Source: chromecache_272.6.dr, chromecache_268.6.dr	String found in binary or memory: https://js-eu1.hs-banner.com/v2/26584007/banner.js
Source: chromecache_301.6.dr, chromecache_176.6.dr	String found in binary or memory: https://js-eu1.hs-scripts.com/26584007.js
Source: chromecache_272.6.dr, chromecache_268.6.dr	String found in binary or memory: https://js-eu1.hscollectedforms.net/collectedforms.js
Source: chromecache_272.6.dr, chromecache_268.6.dr	String found in binary or memory: https://js-eu1.hubspot.com/web-interactives-embed.js
Source: chromecache_283.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_179.6.dr, chromecache_172.6.dr, chromecache_166.6.dr, chromecache_283.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_236.6.dr	String found in binary or memory: https://popper.js.org/)
Source: chromecache_264.6.dr, chromecache_287.6.dr	String found in binary or memory: https://ssl.google-analytics.com
Source: chromecache_264.6.dr, chromecache_287.6.dr	String found in binary or memory: https://ssl.google-analytics.com/j/__utm.gif
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_172.6.dr, chromecache_283.6.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_264.6.dr, chromecache_287.6.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect?
Source: chromecache_179.6.dr, chromecache_172.6.dr, chromecache_166.6.dr, chromecache_283.6.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_287.6.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences?
Source: chromecache_283.6.dr	String found in binary or memory: https://www.google.com
Source: chromecache_264.6.dr, chromecache_287.6.dr	String found in binary or memory: https://www.google.com/analytics/web/inpage/pub/inpage.js?
Source: chromecache_179.6.dr, chromecache_172.6.dr, chromecache_166.6.dr, chromecache_283.6.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_283.6.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_143.6.dr	String found in binary or memory: https://www.icann.org/
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.linkedin.com/company/safenames
Source: chromecache_172.6.dr, chromecache_283.6.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_207.6.dr	String found in binary or memory: https://www.safenames.net
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/
Source: chromecache_242.6.dr	String found in binary or memory: https://www.safenames.net/about-us/contact-us
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/brand-protection/additional-monitoring
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/brand-protection/brand-enforcement
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/brand-protection/brand-monitoring
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/brand-protection/domain-dispute-resolution
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/brand-protection/dpml
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/brand-protection/legal-services
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/brand-protection/trademark-clearinghouse
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/domain-names/domain-acquisition
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/domain-names/domain-management
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/domain-names/domain-name-regulations
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/domain-names/domain-services
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/domain-names/new-gtlds
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/domain-names/whois-privacy
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/hosting/colocation-hosting
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/hosting/data-centre
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/hosting/dedicated-servers
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/hosting/disaster-recovery-solutions
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/hosting/hosting-solutions
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/hosting/shared-hosting
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/hosting/virtual-servers
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/resources/blogs
Source: chromecache_202.6.dr, chromecache_207.6.dr	String found in binary or memory: https://www.safenames.net/resources/blogs/safenames-blog/2024/06/12/a-short-review-of-urs-recommenda
Source: chromecache_202.6.dr, chromecache_207.6.dr	String found in binary or memory: https://www.safenames.net/resources/blogs/safenames-blog/2024/09/23/navigating-the-complexities-of-d
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/resources/case-studies
Source: chromecache_202.6.dr, chromecache_207.6.dr	String found in binary or memory: https://www.safenames.net/resources/case-studies/case-studies/2024/05/07/horwath-htl-case-study
Source: chromecache_202.6.dr, chromecache_207.6.dr	String found in binary or memory: https://www.safenames.net/resources/press-events/press-releases/2023/07/27/edgenext-and-safenames-pa
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/resources/white-papers
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/security-performance/bot-management
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/security-performance/cdn
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/security-performance/ddos-protection
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/security-performance/dns-sec
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/security-performance/web-application-firewall-waf
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/ssl/domain-validations
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/ssl/extended-validation
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/ssl/organisation-validation
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/ssl/ssl-certificates
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/ssl/wildcard
Source: chromecache_143.6.dr	String found in binary or memory: https://www.safenames.net/who-we-are
Source: chromecache_143.6.dr	String found in binary or memory: https://www.wipo.int/amc/en/domains/decisions/html/2009/d2009-0331.html
Source: chromecache_143.6.dr	String found in binary or memory: https://www.worldtrademarkreview.com/enforcement-and-litigation/udrp-dispute-resolution-policy-stand
Source: chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.youtube.com/channel/UC9ITKD1jDvIBweFQiel5tcQ
Source: chromecache_202.6.dr, chromecache_207.6.dr	String found in binary or memory: https://www.youtube.com/embed/TCYnibZRObM
Source: chromecache_172.6.dr, chromecache_283.6.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 63325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 63280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 63372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 63303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 63350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 63289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 63327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 63349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63401
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63400
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 63323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 63345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63299 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 63297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63364
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63363
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63380
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63382
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63381
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63384
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63383
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63375
Source: unknown	Network traffic detected: HTTP traffic on port 63354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63377
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63379
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63391
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63390
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63393
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63392
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63395
Source: unknown	Network traffic detected: HTTP traffic on port 63342 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63394
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63385
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63388
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63387
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63389
Source: unknown	Network traffic detected: HTTP traffic on port 63320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63397
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63396
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63399
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63398
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63329
Source: unknown	Network traffic detected: HTTP traffic on port 63309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63320
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63322
Source: unknown	Network traffic detected: HTTP traffic on port 63376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63323
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63338
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63331
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 63295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 63388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63349
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63343
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63345
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63347
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 63366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63357

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49754 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@26/278@64/21

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2184,i,11222019368487239187,10007873458667200943,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ykbdmz.com/php/php.exe?c:"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2184,i,11222019368487239187,10007873458667200943,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
http://jqueryui.com	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect?	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
15e49451d4884c2582b2c780d1077dd0.pacloudflare.com	172.65.192.122	true	false	unknown
vc-live-cf.hotjar.io	18.66.112.79	true	false	unknown
pacman-content-live.live.eks.hotjar.com	54.73.193.221	true	false	unknown
a8kw3tn.impervadns.net	45.223.61.112	true	false	unknown
e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com	172.65.240.166	true	false	unknown
18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com	172.65.238.60	true	false	unknown
a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com	172.65.236.181	true	false	unknown
script.hotjar.com	3.164.206.63	true	false	unknown
ykbdmz.com	217.19.248.132	true	false	unknown
www.google.com	142.250.184.228	true	false	unknown
7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com	172.65.202.201	true	false	unknown
idp.safenames.com	31.3.66.52	true	false	unknown
wsky-live.live.eks.hotjar.com	52.209.84.30	true	false	unknown
2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com	172.65.208.22	true	false	unknown
static-cdn.hotjar.com	18.66.102.11	true	false	unknown
identity.safenames.com	31.3.66.53	true	false	unknown
windowsupdatebg.s.llnwi.net	87.248.205.0	true	false	unknown
track-eu1.hubspot.com	unknown	unknown	false	unknown
js-eu1.hubspot.com	unknown	unknown	false	unknown
forms-eu1.hscollectedforms.net	unknown	unknown	false	unknown
js-eu1.hs-analytics.net	unknown	unknown	false	unknown
js-eu1.hs-scripts.com	unknown	unknown	false	unknown
vc.hotjar.io	unknown	unknown	false	unknown
content.hotjar.io	unknown	unknown	false	unknown
www.safenames.net	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	unknown
js-eu1.hs-banner.com	unknown	unknown	false	unknown
ws.hotjar.com	unknown	unknown	false	unknown
js-eu1.hscollectedforms.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.safenames.net/images/default-source/default-album/sn-iso27001.png	false	unknown
https://identity.safenames.com/lib/bootstrap/dist/css/bootstrap.min.css	false	unknown
https://idp.safenames.com/ErrorMessage.aspx?aspxerrorpath=/Profile/default.aspx	false	unknown
https://www.safenames.net/?ref=lndrdr	false	unknown
https://www.safenames.net/images/default-source/default-album/who-we-are-headerf9549dc52bbb461a8ef66f0b9e1bc3f6.jpg	false	unknown
https://www.safenames.net/ScriptResource.axd?d=EydukmxBmDstn7gSYzQESPK2TwG5hv2uqB2Gdl8pAyFIQLWmhmE5_O4YUNZloDdZi8iaO67pF9ggYX5lq9QXH4DU3H3ovw67x2l8oxk1qthswYwdyAZkJyBGs2YdcflDo0Xk-NiDQkpkWzN3McFywnx1bxXHhbpmNH9AuSVoTpA5RdJ4oVevVdYcukTyGML_0&t=fffffffffa5b9a95	false	unknown
https://www.safenames.net/ResourcePackages/Safenames/assets/dist/images/safenames-logo-white.svg	false	unknown
https://www.safenames.net/images/default-source/default-album/horwath-htl-logo-white.png?sfvrsn=98c8ee06_4	false	unknown
https://track-eu1.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=26584007&rcu=https%3A%2F%2Fwww.safenames.net%2F&pu=https%3A%2F%2Fwww.safenames.net%2F%3Fref%3Dlndrdr&t=Safenames+-+Global+Domain+Search%2C+Registration+and+Protection&cts=1728255644800&vi=b0d8d964aeb6481607376bb169425680&nc=true&u=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1&b=165226720.1.1728255644796&cc=15	false	unknown
https://www.safenames.net/images/default-source/default-album/digicertpartnerplatinumlogo.png?sfvrsn=9ea9a433_3	false	unknown
https://www.safenames.net/images/default-source/default-album/twitter-48.png	false	unknown
https://www.safenames.net/images/default-source/default-album/vision-statement-icon.png?sfvrsn=8023281a_2	false	unknown
https://js-eu1.hscollectedforms.net/collectedforms.js	false	unknown
https://identity.safenames.com/images/sn-iso9001.png	false	unknown
https://identity.safenames.com/connect/authorize?client_id=idp.oidc&redirect_uri=https%3A%2F%2Fidp.safenames.com%2F&response_type=code&scope=openid%20email%20role&code_challenge=EDAFu1V4I3kTV5sXbRW6GDp-LKykUthEGgvxVtS-rUY&code_challenge_method=S256&state=OpenIdConnect.AuthenticationProperties%3D4zpZm3j2nO8qGhESYYse5GSWlNWvPPXjsNmUgsEGTutgn23bOlqnFtVw2xxVFnwiedpB34zNAtlQzsUURUzjVpHBJAM3IIrH3ZeCdBIKvgSKO5NzgM60nCZO59ZYJCOTasPty5nWOAQ9KBBnXhZe6sPGegS66TdYKTOsMi1MR0lB_mgYuTqUVnFwSmLy_-hdOaB9j6OOCWPUbF_vY4u6UJyzHAmsWiJ1yM75tyB3sheeQlm9ZaSSS9HA2VyX9L7D77VZt_aQayvTgOOVja_CpyHR-Kw&nonce=638638524915603037.OGI5MTRhNGYtYzUzMy00MDkwLThmOTYtOTI0YzI2MWY3YmJlMzY3ZmMxNzktNzI3NS00YjA5LWI4MmMtYzMxYjY1MDAxMzZh&x-client-SKU=ID_NET472&x-client-ver=6.25.0.0	false	unknown
https://track-eu1.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=26584007&rcu=https%3A%2F%2Fwww.safenames.net%2Fwho-we-are&pu=https%3A%2F%2Fwww.safenames.net%2Fwho-we-are&t=Global+Domain+Name+Registration+Company+%7C+Corporate+Domain+Portfolio+Management+and+Services&cts=1728255654701&vi=b0d8d964aeb6481607376bb169425680&nc=false&u=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1&b=165226720.2.1728255644796&cc=15	false	unknown
https://www.safenames.net/about-us/contact	false	unknown
https://www.safenames.net/Frontend-Assembly/Telerik.Sitefinity.Frontend.Search/Mvc/Scripts/SearchBox/Search-box.js?package=Safenames&v=MTMuMy43NjM5LjA%3d	false	unknown
https://script.hotjar.com/modules.ca70bc16369dcd35d4ef.js	false	unknown
https://www.safenames.net/_Incapsula_Resource?SWKMTFSR=1&e=0.35727259335991546	false	unknown
https://identity.safenames.com/images/facebook-48.png	false	unknown
https://track-eu1.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=26584007&rcu=https%3A%2F%2Fwww.safenames.net%2Fabout-us%2Fcontact-us&pu=https%3A%2F%2Fwww.safenames.net%2Fabout-us%2Fcontact&t=Contact+Us+%7C+Safenames&cts=1728255661635&vi=b0d8d964aeb6481607376bb169425680&nc=false&u=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1&b=165226720.3.1728255644796&cc=15	false	unknown
https://track-eu1.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=26584007&rcu=https%3A%2F%2Fwww.safenames.net%2F&pu=https%3A%2F%2Fwww.safenames.net%2F&t=Safenames+-+Global+Domain+Search%2C+Registration+and+Protection&cts=1728255684247&vi=b0d8d964aeb6481607376bb169425680&nc=false&u=165226720.b0d8d964aeb6481607376bb169425680.1728255644796.1728255644796.1728255644796.1&b=165226720.4.1728255644796&cc=15	false	unknown
https://www.safenames.net/who-we-are	false	unknown
https://www.safenames.net/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1215135276	false	unknown
https://www.safenames.net/images/default-source/default-album/sn-dots-background.jpg	false	unknown
https://www.safenames.net/images/default-source/default-album/linkedin-48.png	false	unknown
https://identity.safenames.com/css/safenames.css	false	unknown
https://www.safenames.net/ResourcePackages/Safenames/assets/dist/images/favicon.ico	false	unknown
https://www.safenames.net/ResourcePackages/Safenames/assets/dist/images/monitor-thin-60.svg	false	unknown
http://ykbdmz.com/Content/cont_back.png	false	unknown
https://www.safenames.net/images/default-source/default-album/security-video-person.png?sfvrsn=54439678_2	false	unknown
https://idp.safenames.com/Login	false	unknown
https://www.safenames.net/ResourcePackages/Safenames/assets/dist/css/bootstrap.css?vrs=115	false	unknown
https://www.safenames.net/images/default-source/icons/uk-flag.png	false	unknown
https://js-eu1.hs-scripts.com/26584007.js	false	unknown
https://www.safenames.net/images/default-source/default-album/g4s-logo.png?sfvrsn=8e1596ff_4	false	unknown
https://idp.safenames.com/Profile/Index?newcustomer=truehttps://www.safenames.net/hosting/hosting-solutions	false	unknown
https://forms-eu1.hscollectedforms.net/collected-forms/v1/config/json?portalId=26584007&utk=	false	unknown
https://idp.safenames.com/	false	unknown
https://identity.safenames.com/images/youtube-48.png	false	unknown
https://identity.safenames.com/images/linkedin-48.png	false	unknown
https://www.safenames.net/ResourcePackages/Safenames/assets/dist/images/robot-thin-60.svg	false	unknown
http://ykbdmz.com/favicon.ico	false	unknown
https://idp.safenames.com/App_Themes/IDP/02_print.css	false	unknown
http://www.safenames.net/?ref=lndrdr	false	unknown
https://vc.hotjar.io/sessions/1425002?s=0.25&r=0.23120141626564017	false	unknown
https://www.safenames.net/images/default-source/default-album/cushman-wakefield-logo.png?sfvrsn=11e1b817_4	false	unknown
https://identity.safenames.com/images/usa-flag.png	false	unknown
https://www.safenames.net/images/default-source/default-album/nhs-blood-logo.png?sfvrsn=6c326917_2	false	unknown
https://www.safenames.net/ResourcePackages/Safenames/assets/dist/images/server-thin-60.svg	false	unknown
https://identity.safenames.com/images/safenames-logo-white.svg	false	unknown
https://www.safenames.net/	false	unknown
https://identity.safenames.com/lib/jquery/jquery.validate.unobtrusive.js	false	unknown
https://www.safenames.net/ResourcePackages/Safenames/assets/dist/js/bootstrap.js	false	unknown
https://forms-eu1.hscollectedforms.net/collected-forms/v1/config/json?portalId=26584007&utk=b0d8d964aeb6481607376bb169425680	false	unknown
https://identity.safenames.com/images/twitter-48.png	false	unknown
https://identity.safenames.com/images/digicertpartnerplatinumlogo.png?sfvrsn=9ea9a433_0	false	unknown
https://www.safenames.net/ResourcePackages/Safenames/assets/dist/css/fonts.css?vrs=115	false	unknown
https://www.safenames.net/images/default-source/default-album/dons-chelsea.jpg	false	unknown
https://www.safenames.net/ResourcePackages/Safenames/assets/dist/js/custom.js	false	unknown
https://identity.safenames.com/css/snIdentity.css	false	unknown
https://www.safenames.net/images/default-source/default-album/youtube-48.png	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.safenames.net/domain-names/whois-privacy	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_172.6.dr, chromecache_283.6.dr	false	URL Reputation: safe	unknown
https://inhope.org/EN#hotlineReferral	chromecache_242.6.dr	false		unknown
https://www.safenames.net/brand-protection/domain-dispute-resolution	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.safenames.net/ssl/wildcard	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
http://jqueryui.com	chromecache_196.6.dr	false	URL Reputation: safe	unknown
https://www.safenames.net/hosting/virtual-servers	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.safenames.net/hosting/data-centre	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.google.com	chromecache_283.6.dr	false		unknown
https://www.youtube.com/iframe_api	chromecache_172.6.dr, chromecache_283.6.dr	false		unknown
https://www.safenames.net/brand-protection/additional-monitoring	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.safenames.net	chromecache_207.6.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_234.6.dr, chromecache_145.6.dr	false		unknown
https://www.safenames.net/domain-names/new-gtlds	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.worldtrademarkreview.com/enforcement-and-litigation/udrp-dispute-resolution-policy-stand	chromecache_143.6.dr	false		unknown
https://www.safenames.net/hosting/disaster-recovery-solutions	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://js-eu1.hs-banner.com/v2	chromecache_135.6.dr, chromecache_235.6.dr	false		unknown
https://www.safenames.net/domain-names/domain-services	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.safenames.net/hosting/colocation-hosting	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.safenames.net/security-performance/ddos-protection	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.safenames.net/brand-protection/trademark-clearinghouse	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.safenames.net/resources/case-studies/case-studies/2024/05/07/horwath-htl-case-study	chromecache_202.6.dr, chromecache_207.6.dr	false		unknown
https://cct.google/taggy/agent.js	chromecache_179.6.dr, chromecache_172.6.dr, chromecache_166.6.dr, chromecache_283.6.dr	false	URL Reputation: safe	unknown
https://www.safenames.net/brand-protection/brand-enforcement	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.safenames.net/brand-protection/dpml	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.safenames.net/security-performance/dns-sec	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.safenames.net/security-performance/bot-management	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.safenames.net/resources/blogs/safenames-blog/2024/06/12/a-short-review-of-urs-recommenda	chromecache_202.6.dr, chromecache_207.6.dr	false		unknown
https://stats.g.doubleclick.net/j/collect?	chromecache_264.6.dr, chromecache_287.6.dr	false	URL Reputation: safe	unknown
http://api.jquery.com/category/selectors/	chromecache_146.6.dr, chromecache_191.6.dr	false		unknown
https://idp.safenames.com/Profile/Index?newcustomer=true	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.safenames.net/hosting/dedicated-servers	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.safenames.net/hosting/hosting-solutions	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_201.6.dr, chromecache_234.6.dr, chromecache_145.6.dr	false		unknown
https://www.safenames.net/domain-names/domain-name-regulations	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.linkedin.com/company/safenames	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown
https://www.safenames.net/domain-names/domain-management	chromecache_202.6.dr, chromecache_242.6.dr, chromecache_207.6.dr, chromecache_143.6.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.66.102.11	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
3.164.206.63	script.hotjar.com	United States	16509	AMAZON-02US	false
18.66.112.79	vc-live-cf.hotjar.io	United States	3	MIT-GATEWAYSUS	false
54.73.193.221	pacman-content-live.live.eks.hotjar.com	United States	16509	AMAZON-02US	false
172.65.236.181	a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.65.240.166	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.65.202.201	7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
45.223.61.112	a8kw3tn.impervadns.net	United States	19551	INCAPSULAUS	false
172.65.238.60	18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
31.3.66.53	identity.safenames.com	United Kingdom	3356	LEVEL3US	false
31.3.66.52	idp.safenames.com	United Kingdom	3356	LEVEL3US	false
217.19.248.132	ykbdmz.com	United Kingdom	3356	LEVEL3US	false
52.209.84.30	wsky-live.live.eks.hotjar.com	United States	16509	AMAZON-02US	false
3.164.206.76	unknown	United States	16509	AMAZON-02US	false
172.65.192.122	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
52.215.101.83	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.65.208.22	2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.66.102.51	unknown	United States	3	MIT-GATEWAYSUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527495
Start date and time:	2024-10-07 00:59:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://ykbdmz.com/php/php.exe?c:
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@26/278@64/21
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://www.safenames.net/?ref=lndrdr Browse: https://www.safenames.net/who-we-are Browse: https://www.safenames.net/about-us/contact Browse: https://idp.safenames.com/Login Browse: https://www.safenames.net/ Browse: https://idp.safenames.com/Profile/Index?newcustomer=true Browse: https://www.safenames.net/hosting/hosting-solutions

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 172.217.16.206, 108.177.15.84, 34.104.35.123, 52.149.20.212, 93.184.221.240, 20.3.187.198, 216.58.206.74, 216.58.206.67, 142.250.185.136, 142.250.186.170, 172.217.18.106, 172.217.16.202, 216.58.212.138, 142.250.186.74, 142.250.185.74, 172.217.23.106, 172.217.16.138, 142.250.186.42, 142.250.186.106, 142.250.186.138, 216.58.206.42, 142.250.185.106, 142.250.74.202, 172.217.18.10, 142.250.184.232, 142.250.186.72, 52.165.164.15, 142.250.185.202, 216.58.212.170, 142.250.184.234, 142.250.185.234, 142.250.181.234, 142.250.184.202, 142.250.185.138, 142.250.185.170, 216.58.206.35
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, time.windows.com, wu.azureedge.net, d.8.0.a.e.e.f.b.0.0.0.0.0.0.0.0.5.0.0.0.0.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa, clients2.google.com, www.googletagmanager.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, ssl.google-analytics.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://ykbdmz.com/php/php.exe?c:

Input	Output
URL: https://www.safenames.net/?ref=lndrdr Model: jbxai	{ "brand":["Safenames"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Celebrating 25 Years of excellence", "has_visible_qrcode":false}

URL: http://ykbdmz.com/php/php.exe?c: Model: jbxai	{ "brand":["Safenames"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"This domain has been registered at Safenames Experts in Global Domain Management and Online Brand Protection. Domain Registration in over 1, 400 different extensions Enterprise Domain Management since 1999 Mark Protect Online Brand Monitoring and Enforcement Domain Consultancy and Strategy Domain Name Acquisition Domain Disputes and Recovery Web Hosting and Data Center Solutions SSL Management Cyber Security Solutions Please visit www.safenames.net for more information. Europe, Middle East and Africa: +44 1908 200022 USA, Canada & South America: +1 703 574 5313 Australia & Asia-Pacific: +61 755 245 575", "has_visible_qrcode":false}

URL: https://www.safenames.net/who-we-are Model: jbxai	{ "brand":["Safenames"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"We are a leading global domain name registrar with a 'wrap around' service that manages corporate domain portfolios and protects online trademarks. We are brand protectors to our valued clients; providing reassurance, security and healthy ongoing relationships that helps us grow with the businesses we love to support. In a fluid digital age, Safenames protect our client's brands in a safe and secure framework. We engage, connect, and share knowledge to help deliver our client's online aspirations.", "has_visible_qrcode":false}

URL: https://www.safenames.net/about-us/contact Model: jbxai	{ "brand":["Safenames"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Contact Safenames", "text_input_field_labels":["Contact customer support", "Contact Abuse team"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Let us know how to contact you and we will be in touch as soon as possible.", "has_visible_qrcode":false}

URL: https://www.safenames.net/who-we-are Model: jbxai	{ "brand":["Safenames"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"We are a leading global domain name registrar with a 'wrap around' service that manages corporate domain portfolios and protects online trademarks. We are brand protectors to our valued clients; providing reassurance, security and healthy ongoing relationships that helps us grow with the businesses we love to support. In a fluid digital age, Safenames protect our client's brands in a safe and secure framework. We engage, connect, and share knowledge to help deliver our client's online aspirations.", "has_visible_qrcode":false}

URL: https://identity.safenames.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Didp.oidc%26redirect_uri%3Dhttps%253A%252F%252Fidp.safenames.com%252F%26response_type%3Dcode%26scope%3Dopenid%2520email%2520role%26code_challenge%3DB1LIK Model: jbxai	{ "brand":["Safenames"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Login", "text_input_field_labels":["Username", "Forgot Password", "Forgot Username"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Safenames", "has_visible_qrcode":false}

URL: https://identity.safenames.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Didp.oidc%26redirect_uri%3Dhttps%253A%252F%252Fidp.safenames.com%252F%26response_type%3Dcode%26scope%3Dopenid%2520email%2520role%26code_challenge%3DB1LIK Model: jbxai	{ "phishing_score":2, "brands":"Safenames", "legit_domain":"safenames.com", "classification":"known", "reasons":["The URL 'identity.safenames.com' is a subdomain of 'safenames.com', which is a known domain registrar and brand.", "The domain 'safenames.com' matches fully with the brand 'Safenames'.", "The use of a subdomain 'identity' is not uncommon for legitimate services, especially for login or identity management purposes.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions."], "brand_matches":[false], "url_match":false, "brand_input":"Safenames", "input_fields":"Username"}

URL: https://idp.safenames.com/ErrorMessage.aspx?aspxerrorpath=/Profile/default.aspx Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"An unexpected error occurred Our technical team have been notified of this error. We apologise for any inconvenience this may have caused. If this error continues to occur, please contact us. Safenames Go to the IDP homepage", "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64990)
Category:	dropped
Size (bytes):	72407
Entropy (8bit):	5.4125016514290945
Encrypted:	false
SSDEEP:	1536:zyLhbg6b717QRA3iovGlNORlHakoOoz0y5gTNNty4jfKRYGCgGBT3E:ZlNilbo52TNnXy6u
MD5:	C638139166E2A1D5E1A0F0CA55A3E3AB
SHA1:	7E56704BD69DBFC53E7E5C5D346A5C7E7AC8096A
SHA-256:	973361BFE8DA18DB085B671080BFDA26326275E4137DFA18F8F5C4446A3C1FF0
SHA-512:	2BE7A00E298B5F231A171939FFBCD8458C777A697A56883B3F4567F1063A698FC90BB829A61B322697A0B6D65675CDA30F425FCE1B55A40EE92E82B7A8F209B4
Malicious:	false
Reputation:	low
Preview:	var _hsp = window['_hsp'] = window['_hsp'] \|\| [];._hsp.push(['setBannerSettings', {}]);._hsp.push(['setCustomizationSettings', {}]);._hsp.push(['addCookieDomain', '.hubspotpagebuilder.eu']);._hsp.push(['addCookieDomain', '.hsforms.com']);._hsp.push(['addCookieDomain', '.hubspot.com']);._hsp.push(['addCookieDomain', '.safenames.net']);._hsp.push(['addCookieDomain', '.hs-sites-eu1.com']);._hsp.push(['setApiBaseUrl', 'https://js-eu1.hs-banner.com/v2']);./*. HubSpot Cookie Banner Code Copyright 2024 HubSpot, Inc. http://www.hubspot.com. */.!function(e){var t={};function n(o){if(t[o])return t[o].exports;var i=t[o]={i:o,l:!1,exports:{}};e[o].call(i.exports,i,i.exports,n);i.l=!0;return i.exports}n.m=e;n.c=t;n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})};n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};n.t=function(e,t){1&t&&(e=n(e))

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1112
Entropy (8bit):	7.728432676395773
Encrypted:	false
SSDEEP:	24:pNxbHhviy8nfT3yDWAYGl+1X2J6G7yGvuZO3p1H+5dkA7EmQBCOM4o/6rs90e9/N:5bHD8fWDWkcNG76ZOAqAomaCx4oCQ9bl
MD5:	32A822DD3254736A59D3FA41F2ABE94F
SHA1:	242EB96A440597F1AFDF3EA54BACCDCAED80AD62
SHA-256:	5A592EFA471F5B29203DF9973BCDF913EE26153D5B6028CE542E83CCBE24399C
SHA-512:	04236566D7EFB17534F2A21B0CE4C9463A4F797166E49A0F8AF4F5462F1FE77E91AA0B881272F80667BDD1E5F5E74A019B2D178AC5D811B8284BCE39A83CD962
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/twitter-48.png
Preview:	.PNG........IHDR...0...0.......%.....IDATx..YHTQ...LEFQ3.h...-.!3.@+[.\|)..E.b.L.L.D.2..L.I.......V.....-0.}3...........{.9r.^~......w9.w.&....,..{.f'...N......0;..a.X.....7/....33..)..w..1...].^n..\|.'']sb...........'.C.......Wf.!!^.`` ..H....V.'...d.....7m....wn.?...^.....T5..yEG...../....{.x.....s...z.<_.......hn....4.]]....u...Vh..6}.N'.K../+.Cp.z.%.....11..8\|HY.w......W/..~hPz...Q...F.+4..V]..G.m.1.F7...D.]..B..&.m.......p.R....H......S.D.....0!Q......Z...BO.+4...\|1.O.t..ND.:.N..Cx..a........{......[...T0?...@..C.:.@......(.&:.. ..hf.~0-..d.W......a.....4..)6.D....Q1:.......m.):.Uhl@J....).........btPT.f.7.kb..Q.......6@j.h3OQXRb....J...;..~.V....6.....^.A.......4...F..W.......C .....$7[.f....>. 5..U.A.".7.VEp2 6.4.D...........z*x........3....H.is..p......~KUs.(.pp0H.9T..[P....<..n...t.j............0....d...C`9it.c.~JHC.K......t.}.Ch9..)7W;.....1..R...r..uP..Z9../.N7.=......u.V$.f..Ay..L!.f........D3.s.T..[H...H=;....W.Cx.....64....>..w.aox..

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 650 x 650, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	378790
Entropy (8bit):	7.99419206037213
Encrypted:	true
SSDEEP:	6144:PxLxIxyDaVza4HDPGaXYxfDeqHksxBU9WPLDZw9X1gIFP89/aytuv7s:rVDx2eaXYpDeodxBkWPLFw9XC889/ayz
MD5:	D95BFC3D74325ED52482C75F6C53CF1B
SHA1:	B15F90E709AD7591C7375F222FD98B9D4AAA1086
SHA-256:	F0F5D5CCE4DB3593D05BDC88B0F54D9E4226BBDBA3266FF6F7F464187C68171F
SHA-512:	F8A720B244E52258F7AD616C8A05A793850D4509AFB797D8B8444C9060BF2B177F716E2C7790FC081A0444EF078C0395D6B6C1402096E721DB5A28BE3F7783D0
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/safenamesblog/NavigatingtheComplexitiesofDomainManagementTheHorwathHTLExperiencehomepage
Preview:	.PNG........IHDR..............tz.....pHYs.................sRGB.........gAMA......a....;IDATx.....dWv....Lx.I....@.U...."E..%...f.v3.=..Z.Z......3-..=kZ#..I.TQd..=PU.......{o.?s..s..H.<....DF.0/..w....}.~..F.i..F.i..`(.b#....,.4..p.F.i..F.7i.t..H...$...;...H#.4.H.&.M...2.i.. B....#..i..F....p.V@.C....8Y....UDM...BS......N.z...W..(..F.i..#.;..K../`"...9......... ....v.[..g.{.G...........4..D.\|3B....#..i....>........v...2.,..cM.<,a..5B.#K...1...Zpt...!,.hp..:;ic. ..;....3."$.2.4...)d...s.f."J..^;TZ..F.i..#C.SD ....,N..s....u..t.....N..x...y.g.K.ANu... B3p.J.P..i.....2..=L.c.....p...\:E...H..4.H.}.R....f7.....A.'.q...u...\|b...%3.....H..O...D.Z>.....X. .}.%....C....<DKK....=4...i!..!R..F.i.....x...F............`.Ag..X.j.@.k.b.et...U..;s....=.e...H....N.p.=.+..V3U<.......u./;..P9 ....H.........f...s.i...M.y..~w.wz...vb.....u7.#....!.8.%..%6.sb...W..h.e..y..8\|.L+!.P..F..h....q<.....a\...ES../......F.o<r..C..0.y.b.(..F.i...L..w._.>.G./I~X...!.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3318
Entropy (8bit):	4.699639024931757
Encrypted:	false
SSDEEP:	48:MDJRVTrQVH7I/YVsUazm/KQEKsZ3FHGZFRuW4vzEt25qCwz7T5kkvE1aP:eHQH7I/zUb/LqFCFnm9wz7VhGaP
MD5:	C06CD8D1B654D97D29CDE2B4F67F2222
SHA1:	AE4ECF1F540A9DA8E9921E15834BF7839422EE93
SHA-256:	942FD29D95F4D47C4DE98ED9A5785D48008F4AEBF3A61D12030B2FC6729B6483
SHA-512:	3A6F77FA91AD5A11A2A0A6C4D219EF30087728A023F7BEA7E0F54882F61A2F9FEB2A53646DB400444275BAD003FCF62C298ADDED62679CB921D5A079022545E3
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/css/snIdentity.css
Preview:	.body {.. background-color: #444444;..}.....body-container {.. margin-top: 60px;.. padding-bottom: 40px;..}.....welcome-page li {.. list-style: none;.. padding: 4px;..}.....logged-out-page iframe {.. display: none;.. width: 0;.. height: 0;..}.....grants-page .card {.. margin-top: 20px;.. border-bottom: 1px solid lightgray;..}.... .grants-page .card .card-title {.. font-size: 120%;.. font-weight: bold;.. }.... .grants-page .card .card-title img {.. width: 100px;.. height: 100px;.. }.... .grants-page .card label {.. font-weight: bold;.. }.....navbar-links {.. height: 58px;..}.....icon-image {.. height: 18px;..}.....navbar-right {.. margin-left: auto;..}.....create-account {.. font-size: 0.8em;..}....#footer .nav-link {.. padding: 0.2rem 0;.. font-size: 0.9em;..}.....forgotConfirmation, .resetConfirmation {.. margin-bottom: 5em;..}.... .forgotConfirmation .info {..

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1195
Entropy (8bit):	7.738107912968781
Encrypted:	false
SSDEEP:	24:pkIEgPUHigofLoAvNoyQ1pDAPyAY8v02xT8ZHIFVckP1CEo3+AFMCrS:1nQojoSNJDTYGGuP16MCrS
MD5:	BECCE6992EE9BE4B92D32D000A41FEDF
SHA1:	7969825FA2461A4EC4157B6A4FEC1B35F3D102D5
SHA-256:	6E9293B32AED0D06EBFC420AFA7C1C03DC0D3FCE1120AD11336A5F204315BC85
SHA-512:	2D8E54A7BBF40EBD532FDA4A20FA872054CA33551E8BB6EDC4F2873703E96BA2DAD25A701B3A4206491F28CD0E8E05031A8A9CD657672677486D66F35F445C34
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......%....rIDATx..KO.Q..]R....c.......kw.H.&}......q.EC......Ak..R.._.PE...A..T{...c..=..2..9.......F...Q...J%h..t..j..n.@.C..X..q..~...Ui.K-.....6....P....y....'...UV..._..G..d.ya..U..K9 .k...]....'S...VH._..kjA..l..m.jji.}...Z....a..u...o.a.mm..7....D.PC.P.5.C...o.....Z..(.?x...p,/....\|>.I....V.....kw.L.f.k.?3.............7..\|CC....[..>ep....t..YMmm...h4:>.....l..1....c...o.0...N..[..W.".....Z_..[,;..........-......+;.(.J....80......@.......R......@`.&....@5....M2vz57nvt...F....m..k........G..{;...........zw7..D....j.y<;.9..u..D..j.......idf......n.b.x.Z....:g<n..N..m..C......5......u$V.R..;E....8&........rm.......d...t.._.......N(..X,.....P.......2......`#.\|..........T.%.z....h%,.. L...=. nJ.L.4......7...q......Y.p]u....d...Mx..4.U..p......8....w..vA.thH..!.`......:k%.@.9..&..Y....f...N..?;dp.....u..).....F.r...)......-Iy.@_......Ll$,7.&.......2.......X.L. .Do............P(@.=.....7."e.. ..@.?.........O...

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 302 x 170, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	11196
Entropy (8bit):	7.968058836646684
Encrypted:	false
SSDEEP:	192:Wpk6hFkaGj1fSvLAfX9+yw/HAsNVJL6t/WcKu9oz4GJDZPkCosHWS:WqyCb+Afsn/1JWFWmWzzJDZ39j
MD5:	7C48116A064A065EB703B11802D6DB78
SHA1:	3CF08BA6F9540CC557FF4903AED8CBC2F0934A43
SHA-256:	944DFB58442A92335AD3C0AE7B4D99ECF4F879FB086DD78B0C8066A42ABBA360
SHA-512:	150F5C8AA9B4F46F9963EDDA116E88D246F9F5B1F5E638F46A4ECD6B5E202997B6B33CD44236829C07A3B7192A93E0AD5F5C584C7F39A85B0779BD1A9C68F7EE
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/images/sn-iso27001.png
Preview:	.PNG........IHDR..............t5n....tEXtSoftware.Adobe ImageReadyq.e<..+^IDATx..}.pT.f.;.....F..g.H..8.`]...a'5.f.... ...d-$e.........L...d=;.A.d.F....j..A&v.I\..-;c{.Kv.., b;.......{..u...._uu....{}.w.=..s.LLLx444.....hhhjhhhjhhjhhhjhhjhhhjhhjhhD.\|.c...'N...HCc.p....&.c....ihL#..6?.......3N.>......Tlnn.OSC#f.;v,"...FC#%.......................................-..;.....b.q.......>.(44..............ihh&.}.....I.@44.....:;;..QCS1.hii.@Q.....F.0_?..a5mkk3e...^....6...:+......g,.."...O...B.^..$54.T.A.T.i.Y...C`..I..N..4....g..i..jM........8p..PJ;;;..`(...k..AII.~.ZA.....\|c@..n.....U..S...\....$4...}}}...\|>.:b.A#.... HB.RS1]a".x.6..........P`tl..$4...---.vB/....Y.z2.l......L.M.4..H4..U..{.uL.>}...]......1f..t..YjAUUS....+\I.Fqux....r!.F..1a......Sq._...^5.jkUvv..b.....A\|...c.\.PYYYQQQTT...Gb.82...V.v..C.......u.d.@.)..D...m.Cz$.D.....d.S.2....Q.......-.... ...1.X..B.....JKJ...x..70.hhhli..C$v.C1\|..B.....U...AM.d2.jg__...\;..<.UA.......^`...x###

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 206 x 206, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17400
Entropy (8bit):	7.958969125508256
Encrypted:	false
SSDEEP:	384:vZ1Mz/WgxpK8iRyqTrYpvVtZyQjQ+zyWevIf2mSpjb6AR:R1Mz/WCpK8iRbr+dtAg8E2R
MD5:	E504F256E0F7223414A0A88108990DA0
SHA1:	663F681A82E13AAE377D175B626366CB83EE82C9
SHA-256:	AEE6D4044A09182C73E1E30A6C839B365DBB1EA34330B4EC384F6119F781BD78
SHA-512:	8B3EDD7EDFD46522DEE6933D34BC9749F5C8B51E3EA87BBE1921F263D7F4577BBA493F891A9B20BBACDA66385FA5CC0AC9B7BB4C6AF8FD90D2BE4DE071D7D010
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.=.....tEXtSoftware.Adobe ImageReadyq.e<...BiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.3 (20231127.m.2415 28b0a5c) (Windows)" xmpMM:InstanceID="xmp.iid:A909FC1B92AE11EEA75FC32A62E568C6" xmpMM:DocumentID="xmp.did:A909FC1C92AE11EEA75FC32A62E568C6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A909FC1992AE11EEA75FC32A62E568C6" stRef:documentID="xmp.did:A909FC1A92AE11EEA75FC32A62E568C6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>m..'..@LIDATx..}..-Eu.>.N^......DQ.E..9..AE.h.....2\|..c&ML.1..5_.....(....OqB#.......

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	252469
Entropy (8bit):	5.140266889504615
Encrypted:	false
SSDEEP:	3072:AkvBNXLO1wG0qFuOO8DrBnAcKcvFPi/fXM66fuQr1Q7SV7opS:R7ODlFa0/Ku66fx
MD5:	8A4042DA760F5BDEB4090B2C8758033B
SHA1:	1A1BD556EC169CFB669557021B9BFC1809C14B9E
SHA-256:	A66D6A32CBB5993BE1EDE582CA03A939259E888BD27D9A4E83935F5CF76D2D34
SHA-512:	94BF1FBD120C96810384390A9408112C27CA312632B1E7D7C2A06BBCFDBFB3932F4EDE46BD5B31DA2132AE0A018941580BC2EAABB6E84D92056386D1E9A3A03A
Malicious:	false
Reputation:	low
Preview:	(function(t){t(jQuery)})(function(t){function e(t){for(var e=t.css("visibility");"inherit"===e;)t=t.parent(),e=t.css("visibility");return"hidden"!==e}function i(t){for(var e,i;t.length&&t[0]!==document;){if(e=t.css("position"),("absolute"===e\|\|"relative"===e\|\|"fixed"===e)&&(i=parseInt(t.css("zIndex"),10),!isNaN(i)&&0!==i))return i;t=t.parent()}return 0}function s(){this._curInst=null,this._keyEvent=!1,this._disabledInputs=[],this._datepickerShowing=!1,this._inDialog=!1,this._mainDivId="ui-datepicker-div",this._inlineClass="ui-datepicker-inline",this._appendClass="ui-datepicker-append",this._triggerClass="ui-datepicker-trigger",this._dialogClass="ui-datepicker-dialog",this._disableClass="ui-datepicker-disabled",this._unselectableClass="ui-datepicker-unselectable",this._currentClass="ui-datepicker-current-day",this._dayOverClass="ui-datepicker-days-cell-over",this.regional=[],this.regional[""]={closeText:"Done",prevText:"Prev",nextText:"Next",currentText:"Today",monthNames:["January","Fe

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5451), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	63861
Entropy (8bit):	5.191111064841083
Encrypted:	false
SSDEEP:	1536:hwRMfv9CwxBIct3gcCrSIBV9kQcec7I8dmYv:r9dV
MD5:	4D08B15AB2F8C6576BC77B5B9926BE4E
SHA1:	038C60590CEA42804618BF925D3A5D2C0DC13562
SHA-256:	482DE8F93D7BF5905C6AAB9D27348E647B31381DE03AD7E19B2E4D4E21C21705
SHA-512:	9E28A9ADA1B89D88920F343628269CF4F4B2FF57AF74A21AB0768D5A4697C8739E8E01E69ACA9E809D76D13843B34F2CAB712F2E0262B412C51C180540064DE6
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/who-we-are
Preview:	<!DOCTYPE html> <html lang="en"> <head> <link rel="shortcut icon" href="/ResourcePackages/Safenames/assets/dist/images/favicon.ico" /> <meta charset="utf-8" /><script type="text/javascript" src="/WebResource.axd?d=DzHrpQl5URXarFHAtrmzFvvwtxERElSZ_b2Ca1mxtmzvyTwDr6K2uqyW80PraHwZqn7BbM5lQGIiy7biXNxjLG9gJ71MSZTcvi7eeKKPJBLIN5mVSMeRsnLnzbDpw9vtrgTOqyeHT00x826p9zjpJthZ-3nX299B5pryZnfavheEFwbHupd-iASOQMXwlLQK0&t=637824974880000000">....</script><script type="text/javascript">...(function() { TrackingConsentManager.init(''); })();..</script> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <title>...Global Domain Name Registration Company \| Corporate Domain Portfolio Management and Services..</title> Google Tag Manager --> <script>.. (function (w, d, s, l, i) {.. w[l] = w[l] \|\| []; w[l].push({.. 'gtm.start':.. new Date().getTime(), event: 'gtm.js'.. }); var f = d.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 273 x 387, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	187933
Entropy (8bit):	7.997522306146969
Encrypted:	true
SSDEEP:	3072:3Sfo+C/Tm5ODxCdT3a5cn20UI0mrDDvrRqEOyCfYfEewXrFg/0eJ9qtgKu1eG8nc:qBSwOdCpa5k20UxmrfvoWSksU5Qwh8nc
MD5:	ED4A357F29E5EF3EC919228C7D5175AC
SHA1:	F7B657569E488E42A91F54D7C1704698B6FBE17E
SHA-256:	942192E4339FB1BF64F90AB07530E24A511E811F8ABF15760DEABCCF026DAFDB
SHA-512:	DC66637E2F83D64848BE0F877839DF3F20E67BEC9F7240C690C42AF1D9C8808D15CBE565E6B97D2008AD6B79649A422324485F0890515C46E520118B5EDE4F34
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/services-brochure-thumb.png?sfvrsn=d8a9fe68_2
Preview:	.PNG........IHDR..............X......tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Windows)" xmpMM:InstanceID="xmp.iid:2D1C7D6EAE7111EB90B88F203F5514F2" xmpMM:DocumentID="xmp.did:2D1C7D6FAE7111EB90B88F203F5514F2"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2D1C7D6CAE7111EB90B88F203F5514F2" stRef:documentID="xmp.did:2D1C7D6DAE7111EB90B88F203F5514F2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.<.@...IDATx.d.[.e]v.4/./.R...[..w..n.n[i'..b..NpBB. !.$.H<.!..y'.@J.<....Q....BQ"B.."..C.t....oU....{]...c....

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65297)
Category:	dropped
Size (bytes):	80698
Entropy (8bit):	5.262089837939735
Encrypted:	false
SSDEEP:	768:u09+zQtNHVGCcWTb7zTuBV4KtkSsMtJQ5C/xd7vPn2JNtFiH5jsHaikKrjRM+PKk:ua+OOkSs2Q5CXnFOpc6RvFvVGGZ5
MD5:	A5334E475209F965B4862F3BEDF32618
SHA1:	FAC45259046DD90B16D251739108002D67A00B54
SHA-256:	394156EE114ED3FAF968419340ECFD17F69740EB7E4F0A88D59E1F6D5BF0C34E
SHA-512:	738C1384F3C2326BB8C6C56E7C91E8928800F57E246B9F1CCBD70461FE6DD78EF04B0D19A38DDFC1D4F2FC80B4935A0BC5771494FBD664C9C3F1B7BAD6CC16EE
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.4.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],t):t((e=e\|\|self).bootstrap={},e.jQuery)}(this,function(e,p){"use strict";function i(e,t){for(var n=0;n<t.length;n++){var i=t[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(e,i.key,i)}}function s(e,t,n){return t&&i(e.prototype,t),n&&i(e,n),e}function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter(function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})),n.push.apply(n,i)}return n}function l(o){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?argumen

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19398
Entropy (8bit):	4.524478176423156
Encrypted:	false
SSDEEP:	384:yiazoreEM4mPiQxRrBZwZMGr1Jn0JncPlf5KcVeWdRC/nnQA8yPm1BKCbJnna2Md:Yr0QxRrBZu0J4F5KHLMBOH
MD5:	6A833614387F9CB69C77E46478AD173C
SHA1:	890F0692C132D6B62F4DD8D51E1C1F77CBE1A305
SHA-256:	94DF272AC3CB17FB802797B6796D4787F2D9827DF08F80B8D1DC530DDC127E89
SHA-512:	526A0A046D964AFFE25CA5CE81BA04D02011F7DA16B4C56679ED5C9E562FE87BC2BD0B2EB30EE2ACCC0A74C61E56DBB2FCA05315A42F1F09B29FDB7247AC3B07
Malicious:	false
Reputation:	low
Preview:	/*. @license. * Unobtrusive validation support library for jQuery and jQuery Validate. * Copyright (c) .NET Foundation. All rights reserved.. * Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.. * @version <placeholder>. /../jslint white: true, browser: true, onevar: true, undef: true, nomen: true, eqeqeq: true, plusplus: true, bitwise: true, regexp: true, newcap: true, immed: true, strict: false /./global document: false, jQuery: false */..(function (factory) {. if (typeof define === 'function' && define.amd) {. // AMD. Register as an anonymous module.. define("jquery.validate.unobtrusive", ['jquery-validation'], factory);. } else if (typeof module === 'object' && module.exports) {. // CommonJS-like environments that support module.exports . module.exports = factory(require('jquery-validation'));. } else {. // Browser global. jQuery.validator.unobtrusive = factory(j

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 140, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2361
Entropy (8bit):	7.641630482993319
Encrypted:	false
SSDEEP:	48:/DQnwriYBdQ6MUaZWmDDxrqq6CVe8DCC7Myq5xDfS6xeljU9u:iY7Q6MemDDxAt8DCC7yK6wljD
MD5:	6FB42B36E3548616D1BEBCD819B682DB
SHA1:	3E1894AB9B292ACEC0C0C5B70FCED78CAAB05D7B
SHA-256:	7EDC82E7C4B64B486944D7E1DC21A4C2CCEB5FF920485E16AD2DBDE1E01F76BA
SHA-512:	E2B5D02C8882596471D64618C7CD00F70F57EC35BF0084A36DF6BCA968EB3A866EA2ABCB50830CF2A47EDB6EC155A677D27C0FFE17A91AC72EAEEAC3993B9742
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/mission-statement-icon.png?sfvrsn=dc262cb1_2
Preview:	.PNG........IHDR....................8PLTE........................................................................................................................................................................................................................................................................................................................v......dtRNS............... &(.078?@COPTWX[_`cdhlmopsxy}~..............................................................LIDATx..Y..4....R.6.!fC!..M..p%.........,g......:l.3.7V.<.<tweY...iF......8I.<_&.d.kW...-.....8...x,...<..@ar.e..oY.E..,...M.e..oY..:.[...<....{......R~..ZK"UZ..?...;L-.u....d..Q..F..p..7u..o.g-...Ke.si....h........z....aN....t..h.)..vG.=....6...m..T8..g.....Lm.\.....Xv..<...!v...t.U>"...El.E.Ma..eC^%....hO.!J".......i..P2}..wl......0.o.Y...H.Q0E..?0A....I.u.*m..s.T8...Ge....a.#._.g@\|..........S.4.$.....Tve.hT...I.Z.A...g.I&....&-..T.]...S.:g..2:3..&ly..a...c\|t6....5..V.......~L~.vd<....4MO8F..q1...`.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1457
Entropy (8bit):	7.816438616008456
Encrypted:	false
SSDEEP:	24:pcICo1M419/+pBk13AEUNoBhmwBuGygjrX0UqlflhXf9vQImFCD6rWEtTQBf6tIE:t1B+pBkxHHBryorkU8FYImFDpc3K3
MD5:	C177944CDC91022D5E1D9AC15DC9E2C5
SHA1:	9C82E7693EAD006F9A3C3D372967281CE02243AE
SHA-256:	7CA703290D5624DDE4ECF456FA361A511E86A79CCE8D11ABD286C1E8245C9B18
SHA-512:	3B4C371038D85CFFA260132BC79721DA90D901AAB1D2A9148DC6A72009A88A75A4359585788D844ABEA8EF135D08C3C80F4F87D1F2B7112BF5D3401FBCD29D34
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......%....xIDATx..{LSW.....pc.F.aSA."..m.2.C..m......J.24...Q.E.D...A.c..\.7m.Z[..8..."STD.......%.b{Po.....{....'==..!.'..G..b.....r....t..D.e..x...$..).f......Hs,..+..d.....p7.3CW.P..n...\|..s..7j.4Y.s..[.bM...6G0..=....c.as...R..au..?..kEL.@..~..B..8..>....(.yv...PRT.4[....h.S....q....T/5...e.qs..K.b^..)@....[...{J..'.........}..\|..?D.<..~..B.mh....Q`...x4.O..~.......T..r..I....%..[. ...{...;.f...@H..j.~..).............r...\z.sh...+<L.#......N..'K.0......@._.^.7 ...h.~.<.....X..:...,5......N~...[`s.6@.[i..Z..]Y....,.\@.....-*......@3...:.I.....6...h..t.6.+]...&K.....X...y..p..on.04...5uz.t.>.H.h8.....?...n..B.r.s..../o..m......_.~;...V..\.6.@.O..j9.....r.o.od.....}..>y..N...z.....N.....S... ....s.8./...u..p.....Ob.3........5'G5..~.VxP.Zu.....m.....p............(q.`.l..y.5j"...k.>.....M..O/.i=?.EN...L..vu4.N...`D.._^?...`.Oa.....>K........K.?N..[.Z{"..O<.x>......{....Zh1}<.m.}...6/x^.!..p...l.]Iir.]s1.._X..&\|..

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 541 x 595, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	113927
Entropy (8bit):	7.992141812319601
Encrypted:	true
SSDEEP:	3072:Gnq8NNXrMRag4hlHQRGji3XUKTtRBrmAomrU830Jp2s9Divxp:GfNXng4hxQgG3XFTfBrmv83kMyDiH
MD5:	E3C98A79076847EF3D3C8FF791AB549B
SHA1:	F7AE39C4EA37EF2BD20A7FA59D65A46828CAF2A9
SHA-256:	0B731AC77F05CE68978D44341ECC53C104BB16343A102630C59F7558BAA6D77D
SHA-512:	96AB9B43417796F10139A7460DFB3E89DDF0378773B5DDE294CE23D23A69E4263AFF7244774AE73974F93F284906D3FF7E42EEA5EDA69400392351612B3906EE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......S.....#P3... .IDATx..}.x.W.......i.g..~......$@..B.1........{....lcj..{o..4.f.UG3s....J1..p....r.i.....467.....FI....`````.K.......Q........Q........Q........Q........Q....Q. \|(.#...x{`^.(gptBr.r....'...000...W0...H..+4..x.....#.y....!.-....u....vF.`H.[.v.....c.{L.".F...S.._,.....+.e.O.c....;`&..n...,.-.f...<L.f..<.<..... ..lb.c...(.wA".l..F.X.~.......y...@.(....=.=.p .\l..vV.d2...@..N..<C...X..D.....#...R.>.;ww..V.......G.-;\|q..K..^Y....../=L....]..t.%..>Gjc.N..@.B;D?...EC...q!......J...t.}.[.00J..W0J....<........&....tn(..[Z..d..'......s6......}.e.G.Vn90.i_...@..Q...0.4...D.z..D....4.].e..q..w.....?....o..q..}..\x.......4.u..(..Ynht1Z.K.Ciy...1............\p.s.z7.3P.7...W...~l.....\|=p.'.cD?...{..=?l;..=...>..5..&.Y.g...S....qr....;.l.....,.{f....:5k..q.Gm.=pu.O3.7....Y....}...&}.........?.._......Y.c..s)W..\|..gt.!.d...u..ch............a...VOC..*..&......'ZOZ.e...s.H...~.aX.!.{..<#.h..[.=Q.Q.d.,....,,...t...[m..

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16920, version 1.0
Category:	downloaded
Size (bytes):	16920
Entropy (8bit):	7.985319371792544
Encrypted:	false
SSDEEP:	384:D6Xgx/W3GwkdJA8b999pB4VS+Ps5zpcHd7l6hTQvW93h:egxukJA8bB4XE5OsT593h
MD5:	9C6A1FF29AABA0C21496EAC04BE062DF
SHA1:	EE28016A3CE0DBAFCB4AAA9A1C91DCC0A63DA415
SHA-256:	6B6BDB341440C662D46A4FE200F47772EDE3040D2CE52ECFCAB8F017F4FA2738
SHA-512:	2B637DE51C3F30343CBA41A2B756E88EDBB9E05BF6203CD3383680ED7B25A5DC42D41FEAC38CA85C5B726A519275177ABF936BE564D314C5836C19E3C4FEF337
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunitosans/v5/pe0qMImSLYBIv1o4X1M8cce9I9s.woff2
Preview:	wOF2......B...........A..........................4.....\.`..............h..S.....6.$.... ..`..f..#.....6.b~p.@..O?4.!l.....#.................MZ..~.."rf...{......\':.).:{}..;Z.~.@Ac..&R....h.b..\|}}....+./e8....7.>.E.........7....x....5.8......D.e?"%..62y..ev.....d..\|.....$......s_........0........b.....3+.....^..h..x.v...-F;.bOi...~..jZ...L}...M...h`..@..k......b.@..Q..\|<..B.b.v...U.("..q...p.Q!.f......rk...>.#.....,...t.5..S.....oV..E...7.I....-..z.4.D.....HvaF....v......8.@.Kd..9.7.[....S...ME..;.zb.4u_JIi...-AY...t...@.. 6f.Z..S...K..........<s.?.,...hd..&.,...e...B..T....uU.O..._...$.....U..m.\|\).i.......kK.{.)0.7.n.......tT.tQ.Fk@+......."..a?........p.j.....9..?...L..7.$!83...."A.$.5..D.ni$..s.A.[.9."JZ#...u.w.G.V...?.?...........k......X...2.......b.F.a.G<!Z...\....R2!.R....?......9.&K.d?.=....1B..}c...EG....ED....J...;...o..%5.!.8..84.....6.T...B` ,.D!.....J..F_....H...U..K..A....P8.]<...w............6Y...-...r...{....b;........

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65327)
Category:	downloaded
Size (bytes):	70475
Entropy (8bit):	5.380996746038723
Encrypted:	false
SSDEEP:	1536:ZKblURHpp4V2JLxcbvM/9mU7C7Az6v0j861:ZmlgJpEvM/9D9z6cI61
MD5:	48BB5C8A01043ECEAF45E65D5C98950B
SHA1:	4603360883DD66F7254CD5DB17777748226DC657
SHA-256:	77080938572095BDDC311784E1C284E7CD12268F46946AFF94D04A43A53DFFC9
SHA-512:	3A03DD060953E790E8ECB40DBE64F2CE4980DAE93433209C40C56910231663660306FE5FCD3D8D3041CC2BAECACA1E3DB1E5C27C39B1A23381D633CA432992DD
Malicious:	false
Reputation:	low
URL:	https://js-eu1.hscollectedforms.net/collectedforms.js
Preview:	/! For license information please see project.js.LICENSE.txt /.!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t:"function"==typeof t},i=function(t){if(null==t)throw TypeError("Can't call method on "+t);return t},o=function(t){return Object(i(t))},s=Math.ceil,a=Math.floor,u=function(t){return isNaN(t=+t)?0:(t>0?a:s)(t)},c=Math.min,l=function(t){return t>0?c(u(t),9007199254740991):0},f=function(t,e){if(!n(t))return t;var r,i;if(e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;if("function"==typeof(r=t.valueOf)&&!n(i=r.call(t)))return i;if(!e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;throw TypeError("Can't convert object to primitive value")},d=function(t){try{return!!t()}catch(t){return!0}},h=!d((function(){return 7!=Object.defineProperty({},"a",{get:function(){return 7}}).a})),p="object"==typeof window&&window&&window.Ma

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	63606
Entropy (8bit):	4.815507814851289
Encrypted:	false
SSDEEP:	1536:3m/MDW9AgMzxIJNmmvhj6cBP44QC1VHkxAHw18iN3lfHqs7g8xuZqmkMM1dYTHwW:cMDWegMolRX
MD5:	B265AB667FAC9FD74FCF7A2F9CA8C362
SHA1:	7417BB7816B084AD915A3E3EAA91EAEED70098D5
SHA-256:	C022492E7170B106A5EECF4C7F6E3C2F40D1F2A0C605B56EFEC6F35045386161
SHA-512:	955C6615439A1D57259CF61BC9538B38320CBB9431F444B3F10363C997E80D54E88B2999A5C840D68E496AB61392DA3B4380041CC995FFF8FFF1CC1D46B058B8
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/css/safenames.css
Preview:	..BODY {.. color: #3B505C;.. counter-reset: list;.. text-rendering: optimizeLegibility;.. -webkit-font-smoothing: antialiased;.. -moz-osx-font-smoothing: grayscale;..}.....text-default {.. color: #3B505C !important;..}.....text-lightblue {.. color: #009FE3 !important;..}....@media (max-width: 991.98px) {.. .img--fit-on-mobile {.. width: 100%;.. }..}..../* inner pages top bar colors /.....top-bar-domains {.. background: linear-gradient(120deg, #00496d 0%, #00aeef 100%);.. /background: linear-gradient(120deg, #d53369 0%, #daae51 100%);/..}.....top-bar-ssl {.. background: linear-gradient(120deg, #00496d 0%, #00aeef 100%);.. /background: linear-gradient(120deg, #F1E871 0%, #10BBB9 100%);/..}.....top-bar-bp {.. background: linear-gradient(120deg, #00496d 0%, #00aeef 100%);.. /background: linear-gradient(120deg, #FFCE3C 0%, #F68A4C 100%);*/..}.....top-bar-hosting {.. background: linear-gradient(120deg, #00496d 0%, #00aeef 100%);.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8156), with CRLF line terminators
Category:	downloaded
Size (bytes):	8271
Entropy (8bit):	5.007351417501929
Encrypted:	false
SSDEEP:	192:zQdwADmtum6rPl2K/kNEZf+NEVZfau6xnhjOLh5xP5tQPqXIz:zQdwAAurrd4EZfJ9au62Lh5xPEqXIz
MD5:	0ADDE77E542608C9DD603C7F6C7F65A2
SHA1:	AF56B71660CF09FE7B483AF7B25F0F7F15B0F2AC
SHA-256:	7545B8823869F8C680BFE9C73F8D2D9295D98E891A58F26B186A7379CC6C7EAD
SHA-512:	ADE6938FEDAD00BCE4618E0655601FAAED3B621CFE384CD5C004439CD3860639470716956CD5B1B59D572B32616959F8AAFD8FD61ED53465E3C06D1ACC98B911
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ScriptResource.axd?d=EydukmxBmDstn7gSYzQESPK2TwG5hv2uqB2Gdl8pAyFIQLWmhmE5_O4YUNZloDdZi8iaO67pF9ggYX5lq9QXH4DU3H3ovw67x2l8oxk1qthswYwdyAZkJyBGs2YdcflDo0Xk-NiDQkpkWzN3McFywnx1bxXHhbpmNH9AuSVoTpA5RdJ4oVevVdYcukTyGML_0&t=fffffffffa5b9a95
Preview:	/! jQuery Migrate v1.2.1 \| (c) 2005, 2013 jQuery Foundation, Inc. and other contributors \| jquery.org/license /..jQuery.migrateMute === void 0 && (jQuery.migrateMute = !0), function (e, t, n) { function r(n) { var r = t.console; i[n] \|\| (i[n] = !0, e.migrateWarnings.push(n), r && r.warn && !e.migrateMute && (r.warn("JQMIGRATE: " + n), e.migrateTrace && r.trace && r.trace())) } function a(t, a, i, o) { if (Object.defineProperty) try { return Object.defineProperty(t, a, { configurable: !0, enumerable: !0, get: function () { return r(o), i }, set: function (e) { r(o), i = e } }), n } catch (s) { } e._definePropertyBroken = !0, t[a] = i } var i = {}; e.migrateWarnings = [], !e.migrateMute && t.console && t.console.log && t.console.log("JQMIGRATE: Logging is active"), e.migrateTrace === n && (e.migrateTrace = !0), e.migrateReset = function () { i = {}, e.migrateWarnings.length = 0 }, "BackCompat" === document.compatMode && r("jQuery is not compatible with Quirks Mode"); var o = e("<input/

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2419
Entropy (8bit):	5.206137676311382
Encrypted:	false
SSDEEP:	48:F1ySku42GOIde/8w2dqjPpVJTk5tr9sGIhTpRBv0I+R:FcxeUzqjPpTTEtrSrPRBMbR
MD5:	4642298B76C37BF799B8ED0010C4CB36
SHA1:	00F21FF64D9B60299B26F03EDFD4F09950D89B24
SHA-256:	A6D351A5A910EC2DA1FE3EBE0AA83DA66921F8D09ECB72FBA0404D25D37338B1
SHA-512:	41AD1F6863AB29D947D3D8D4B532CF36BBB8C5423A605D690DB1B749414D3A3BE64EF41FEDE6A6B56F8DCA00DBAB515AE57D85D98EEAA9D297C9341FFAA00A29
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ResourcePackages/Safenames/assets/dist/images/robot-thin-60.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" viewBox="0 0 60 60" width="60" height="60"><title>Exported from Streamline App (https://app.streamlineicons.com)</title><g transform="matrix(2.5,0,0,2.5,0,0)"><path d="M 6,1h12c0.828,0,1.5,0.672,1.5,1.5v6c0,0.828-0.672,1.5-1.5,1.5H6c-0.828,0-1.5-0.672-1.5-1.5v-6 C4.5,1.672,5.172,1,6,1z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 8,4c0.828,0,1.5,0.672,1.5,1.5S8.828,7,8,7S6.5,6.328,6.5,5.5S7.172,4,8,4z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 16,4 c0.828,0,1.5,0.672,1.5,1.5S16.828,7,16,7c-0.828,0-1.5-0.672-1.5-1.5S15.172,4,16,4z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 10.5,12h3 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7085), with no line terminators
Category:	dropped
Size (bytes):	7085
Entropy (8bit):	5.2127589076056555
Encrypted:	false
SSDEEP:	96:LSz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:LSzvGw/35YbMx9jKLKD3UIDBR8VVUq
MD5:	9A1A4D8DD53C5A5FBF7188A8275ED80A
SHA1:	2D54CE3B7676192907D8365626A84258A9373859
SHA-256:	59B58CBC7A6CDCBD308CCE1321A938025BB66F7DE0FD34FFEA8431B9E4EED8F0
SHA-512:	CF8D79BDA2B57592618A963FB2114FAB54077D389CD2A3865843464A6248783BBF3CAC8B5A6F47F06B0794C9E5DE3FF103001A1253423D53865E9F3CE08EC662
Malicious:	false
Reputation:	low
Preview:	jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]\|\|(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Object.defineProperty)try{return Object.defineProperty(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.log&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.length=0},"BackCompat"===document.compatMode&&r("jQuery is not compatible with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get\|\|function(){return null},c=e.attrHooks.value&&e.attrHooks.value.set\|\|function(){return n},l=/^(?:input\|button)$/i,d=/^[238]$/,p=/^(?:autofocus\|autopla

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	4.286585024642417
Encrypted:	false
SSDEEP:	96:dj/1RtQDxuop7TvAP5M6as17j21ZgtRhM:djNRGT7cRM6h1KZoy
MD5:	D436CBC3C5CB49C47418CC306CD7DA90
SHA1:	091EBEA7EE615153071DEC3ED65A4484AC211F00
SHA-256:	D996EB6DA76A1FBFB802137A15513F3F18FC6A982F36605A3D0FA649BC990076
SHA-512:	6C38408024E5215D23E6B41D946CEA2689B0670EC5B24674D864A920CA46711FB3737D141A721D1C2D15F4D13B24CEF932018D8CE56254508FDFD5A2692C4A6B
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ResourcePackages/Safenames/assets/dist/images/favicon.ico
Preview:	...... .... .........(... ...@..... ....................................................................................H.................................b...\.a.W..{R.}wO............................................................9........x.............\|...z...u...........b...]...X..{R..wO...............................................................S..h................\|...z...t...........d...\.:.W..{S.LwO........................................@........8.................................}...y..u.E.........d...]...X..{R..wO........................................S........I...............................6.}..y...u.w.............[...W..\|T..vN...........................................<..9....................................}.K.y.`.u...........b...Z...W..}T..wO............................................................'........G.............}...y...u...........b...].{.W..{R..wO....................................................

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3399), with no line terminators
Category:	dropped
Size (bytes):	3399
Entropy (8bit):	4.989497169351416
Encrypted:	false
SSDEEP:	48:iTS6pOw0nIwId8Q9gbMI9+RTTCaqx5AKLHIA2j99635j9y4oew/4FdRYnnhgimv/:iTSwKIVgbN9ZXQR96JRy4849Mberp
MD5:	673E41F1D1A7E6E0F6E39A416C281022
SHA1:	C2576299BD171896E340F97B341C7F53D325B445
SHA-256:	9ADEE9A958C9C930CB469BB2716F1E198BBFFF68D4A2B5168BCFF3AF2DCE9531
SHA-512:	E22FE7064ED036C0BE06DFC9D2984557FB0AD7BAEF861A6042FC2BDF316B514F6EF8A028BEEB3C617EA146AAA83168549947B3F1E84C95DF82F6819A5986F05F
Malicious:	false
Reputation:	low
Preview:	TrackingConsentManager=(function(){var consentCookieName="sf-tracking-consent";var consentDialogHtml="";var consentDialog=null;var eventListeners={AfterDialogDisplayed:[],BeforeDialogClosed:[],ConsentChanged:[],};function closeConsentDialog(){if(consentDialog==null){return;}invokeEventListeners("BeforeDialogClosed",[consentDialog]);document.body.removeChild(consentDialog);consentDialog=null;}function openConsentDialog(){if(!document.body){return;}closeConsentDialog();consentDialog=document.createElement("div");consentDialog.innerHTML=consentDialogHtml;document.body.insertBefore(consentDialog,document.body.childNodes[0]);var scripts=consentDialog.getElementsByTagName("script");for(var idx=0;idx<scripts.length;idx++){try{eval(scripts[idx].textContent);}catch(err){console.error(err);}}invokeEventListeners("AfterDialogDisplayed",[consentDialog]);}function openDialogIfConsentNotProvided(){var userConsent=readCookie(consentCookieName);if(userConsent!=null){return;}openConsentDialog();}functi

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 650 x 650, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	328640
Entropy (8bit):	7.996659375654859
Encrypted:	true
SSDEEP:	6144:QNAX8ielPNBYk5/iqTQ9Ee7TteQrJP9WyG8PQaWT6MdLcqt1rWmZ267y:J8ieVd5/fM9Ee7cQr9oH89WeMpZ1rVQ
MD5:	310BBC442D7C1F3CF54E68E61DC2F705
SHA1:	B4F0825F18E281C4E49A660E119F8698690BA0CB
SHA-256:	E1C96C9AAD0BD42EF2B8236577BE1D5347E818B9AA3FB21E769166FEBFABD4DC
SHA-512:	3D0A02C3368B186A9CEABD18B5861D8E82A734FCAC4C2A4C73EF485445E0A142290EC34A67A557E1CE76254C6847420CEE87713B2566720DE0EC0BA92B1C3BE2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............tz.....pHYs.................sRGB.........gAMA......a....UIDATx...kz3I.$J...g.g..11mU..@..o....Ln..y......?n.f.....n.zZ.....7.I......x.C.o..`.n.\|G......v...&.._.W.....E...\|.2{xY.}......w.9.X8..#^....-..u.....'..........._.l.....6)s.m.....6.I...m.....NZb....=..}..(.a....d..P?4=^?2iW....G.s.q.i.pm.o.P.>e.>]}.9..Aoic\.x..^=r..Z.......[}.].....^...xm..?.n......>4...08M..e..n...]>...).lO...5Hy.....m..Q...6.JUO~.Fg.L.8C..Y.C..,.....b..y.C..wW....E.....z.Lb#.0...ng.3..4s'}f[..i3p.......W.....^.P.C...cr`..._s..%.^.y...]..uy:...... ]3..w=>.h.f....<..q..../...a'..-.u.R..].l..M^G......$.(.'..8......x.8....@..?.....ZaM....r....Rl.._..=..k....I.A...-B.j.f....6C....r}9N..2...?....E>.....=......e.P.?.8}`.....o...".38........p.1.3F.}......u..q..G..\|.\|.e*5.=.FI...........q4\..m..2.=..........s..E..)...}.[......LM.3i.eqEe.;?..~P...b... ..}}.r..7(!0......+..t...0.,Y./H..C_pc+..&.Qv..N1.:P,fL...X.K.^.;...k>1.........CM[...9L.".84

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1469
Entropy (8bit):	4.92190616617412
Encrypted:	false
SSDEEP:	24:tuLx/jHxM3vFHx8G/GuBCh06KREyCstw+xQo7vPo8CZbSx5+d1NwI:sxLKdHJOutRvC8xQo7nxCdSx5uH
MD5:	A9027DA743C92D75CACDF7A99EF33605
SHA1:	90E4DCF19FFC2D9274FCC7942C1696AAEFF3C38B
SHA-256:	45DB0C237CF2B34DD6565DA3D6894DCCFB942341F66CD8C86965CD8380453708
SHA-512:	3FC6F2B86F6A2494A6D5CD68AB3BCAE42E853A8C634CCBE067A9EC9C7E1B2075DEC56108372F0F09718A70330804B8D10A3430ADDBDF2DCEE6F57FCFB1FC5BE9
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/images/cog.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 364.27 361.41"><defs><style>.cls-1{fill:url(#linear-gradient);}</style><linearGradient id="linear-gradient" x1="-96.15" y1="312.11" x2="160.26" y2="55.7" gradientTransform="matrix(1, 0, 0, -1, 156.09, 364)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#00aeef"/><stop offset="1" stop-color="#00a8e7"/></linearGradient></defs><title>cog</title><path class="cls-1" d="M323.74,151.76c-2.93-14.64,8.83-31,30.9-46.47a180.85,180.85,0,0,0-24.71-40.63C306,77.13,286.1,80,274.45,70.66s-13.16-29.4-6.22-55.43A182.18,182.18,0,0,0,223.22,0c-10.29,24.92-23.68,40-38.61,40.31s-29-14.07-40.39-38.46A180.85,180.85,0,0,0,99.9,19.08c8.14,25.7,7.55,45.83-3.67,55.69S65,82.62,40.56,71.27A183.71,183.71,0,0,0,17.69,113c22.74,14.46,35.23,30.26,33,45S31.8,184.1,5.78,191.11a184.49,184.49,0,0,0,9.31,46.61c26.72-3.54,46.43.55,54.19,13.3s2.31,32.14-13.13,54.23A182.67,182.67,0,0,0,

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (14277), with no line terminators
Category:	downloaded
Size (bytes):	14280
Entropy (8bit):	5.343284326837626
Encrypted:	false
SSDEEP:	384:IEv6NbCyfShE/cKsazzNeNwVBh6eQw/6/fqFbFP0D:3mbCrVKsazzNeN+h6eQw/6/fqID
MD5:	BC0312B7AB112A570BC93A867B266219
SHA1:	C8B6DB7ED0D2BFFCE87D87F5B061C422D1C4F9E9
SHA-256:	7BC79D4F349F563CD927CD93A61C39CD81622A085BE61BEC26BBAAEF920D0982
SHA-512:	9E393D6549FFDB9CE0C7D0C11C038D5908661F8A410ADAFE1B54F79DD7966507ABF0AAB69A233A0830F589102736BEB4F96FEC9EDF751597765EDE342B54B165
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ResourcePackages/Safenames/assets/dist/js/core.js
Preview:	.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("Typewriter",[],t):"object"==typeof exports?exports.Typewriter=t():e.Typewriter=t()}("undefined"!=typeof self?self:this,(function(){return function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=func

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	135
Entropy (8bit):	4.915756686255547
Encrypted:	false
SSDEEP:	3:YVKBEi9QZV6HWQoMRL2KIhfwcP2xR2GXEqRWJ6jLZHJqaDcc:YiTQZEBbU2mn6jLZp9/
MD5:	39A139867EE5BD9EC6698C43E61D401B
SHA1:	DDBBCF9B96BBFE0FF529ADA13401105B3F4E7F25
SHA-256:	1EEED5D7B98ADF51D7E3B287A36194747C8D47267DC14ADC4F97CD85D35F486E
SHA-512:	AA92162DBE6ACD6BC3E695B76D2FCDDE3606B4D189A3EADCAC4EB3F1C6D6CD9F6B917BDAB6BE1572A46CBFDC731F641DDA7421510C1D3BAFDE57461CB1D451E1
Malicious:	false
Reputation:	low
URL:	https://forms-eu1.hscollectedforms.net/collected-forms/v1/config/json?portalId=26584007&utk=
Preview:	{"portalId":26584007,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":-606939824}

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 166 x 168, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	23750
Entropy (8bit):	7.984514027351092
Encrypted:	false
SSDEEP:	384:0u1oe9Z8b6W96n0/cgt2b9AzhJBVUEYZRyPnX5BOk+/N72UHCqOFcxTL6KMlOA1:R139C2W/Z29AtJBVW0nX58VicCq8coKY
MD5:	EA8B1B59CC4B8C9EF7AC9FB51CEA809D
SHA1:	222AE6539F271ED0497315516E6AC398EF9288DA
SHA-256:	9F6B2BADFBAF35B22389CAF8D8E5DBE9A36896E8A50EA173BDDE32AA3CB13612
SHA-512:	C6A0274232742BA654EF3FD2D34A8CDD74E2C5CA89952BB8D9AD7E138B1D01AB843476AB785CA27F187E073E80055FA77B7E1A476F49B09763849AA1B0E2DB82
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............j..... .IDATx..].X...g6.^...S.DD.i.....;.[l@E@.T..k.5.um.z....;gv..e..............oN...+.z.......{....v..:.G....}f.......(....F={.gt..Y.K.6.];...6....WP.....S..\.....=.'m.V.61y.,#.....<..0.D.N..j.A....B..7V....W.v..VT1..k..m.s..?-.X\.%M....j..to..tk...HYK..(%=R7.^............1. .....EGG.?0ib.Z.Y....0^A.x..Dz..@....`..Tem.FS.y...La.~..W.1...e.......u.I..>...86k.b..D(..Weo.....\|....@...4..Ne....Z...._..X.........S.L_.2F^..z..F.....i.I..c.e.[-....O. .....l..'..6..3I.U....._Q.[.0i.i.....u..F.D....c...e.[m.....E#=..x.C'.4.l.o..w..n>...{RV.NQ...#u=.[V.L.p.2U,.pMB.!r.1..u...m..J.}.f...I(.4....[v.....-i...x.....@.iBe.V6.l.!....J.g...,;..4...h...8`...&SM.t.{.-J~.. ....d.Wm......i....<. ..@@].'..7.Aj..o..}...0UT]....5p&].=d..g..B.....x.=.$.?".Z:.k.....R.~qK..u...e(.....L..0...[..R...y.W.....n...u,.G.{.\;?....M.....2xl. .F..&t.r...7.....3po?...u..&^.{B#.9f.Ux...6.o.L...h...L............e..B..!g....6.H./.....c.r`u..X}...*~..5..L

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 302 x 170, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	11196
Entropy (8bit):	7.968058836646684
Encrypted:	false
SSDEEP:	192:Wpk6hFkaGj1fSvLAfX9+yw/HAsNVJL6t/WcKu9oz4GJDZPkCosHWS:WqyCb+Afsn/1JWFWmWzzJDZ39j
MD5:	7C48116A064A065EB703B11802D6DB78
SHA1:	3CF08BA6F9540CC557FF4903AED8CBC2F0934A43
SHA-256:	944DFB58442A92335AD3C0AE7B4D99ECF4F879FB086DD78B0C8066A42ABBA360
SHA-512:	150F5C8AA9B4F46F9963EDDA116E88D246F9F5B1F5E638F46A4ECD6B5E202997B6B33CD44236829C07A3B7192A93E0AD5F5C584C7F39A85B0779BD1A9C68F7EE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............t5n....tEXtSoftware.Adobe ImageReadyq.e<..+^IDATx..}.pT.f.;.....F..g.H..8.`]...a'5.f.... ...d-$e.........L...d=;.A.d.F....j..A&v.I\..-;c{.Kv.., b;.......{..u...._uu....{}.w.=..s.LLLx444.....hhhjhhhjhhjhhhjhhjhhhjhhjhhD.\|.c...'N...HCc.p....&.c....ihL#..6?.......3N.>......Tlnn.OSC#f.;v,"...FC#%.......................................-..;.....b.q.......>.(44..............ihh&.}.....I.@44.....:;;..QCS1.hii.@Q.....F.0_?..a5mkk3e...^....6...:+......g,.."...O...B.^..$54.T.A.T.i.Y...C`..I..N..4....g..i..jM........8p..PJ;;;..`(...k..AII.~.ZA.....\|c@..n.....U..S...\....$4...}}}...\|>.:b.A#.... HB.RS1]a".x.6..........P`tl..$4...---.vB/....Y.z2.l......L.M.4..H4..U..{.uL.>}...]......1f..t..YjAUUS....+\I.Fqux....r!.F..1a......Sq._...^5.jkUvv..b.....A\|...c.\.PYYYQQQTT...Gb.82...V.v..C.......u.d.@.)..D...m.Cz$.D.....d.S.2....Q.......-.... ...1.X..B.....JKJ...x..70.hhhli..C$v.C1\|..B.....U...AM.d2.jg__...\;..<.UA.......^`...x###

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 25, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	487
Entropy (8bit):	6.731006523547025
Encrypted:	false
SSDEEP:	12:6v/7azPrf56ZxjqK6uRUHlgAJYW88HsKrZ7k:1zPlMzXUHlgNisKrW
MD5:	38962D9D031981976B270236F0AAF14C
SHA1:	F27BBD74749CC9864CEA27AE9B2ACF4466539131
SHA-256:	6AB2146D8E4229D6D5CD929F39C7BA9CC00193EFE230E7FEFACA2524C0D338E3
SHA-512:	23744887877840E6E55E0C5EA7760E69B3CBC099059BE823246EFA67AA22516B3BD7437A86FDEB0A639E9CBB3F872F6152B9AAB162A857A894C7B1CCC9B30F62
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/tick-lightblue.png
Preview:	.PNG........IHDR.....................PLTE........................................................................................................................J..Q..b..f..j..k..l..m..s......................................E.... tRNS.....QRSTUV[\...........................IDAT(......0.EW....Q..Q.{Wl...2....'....3.l.J..O.[r..q.T..,.e.9..".".c.2....ZcP.C.41..k.u......5...>!.......0[Mo.<\|....0bv..{.....x..G.....`.K...6mB/k......o.Y+^][d..o..-Y..!..l.......B].=2.....IEND.B`.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1195
Entropy (8bit):	7.738107912968781
Encrypted:	false
SSDEEP:	24:pkIEgPUHigofLoAvNoyQ1pDAPyAY8v02xT8ZHIFVckP1CEo3+AFMCrS:1nQojoSNJDTYGGuP16MCrS
MD5:	BECCE6992EE9BE4B92D32D000A41FEDF
SHA1:	7969825FA2461A4EC4157B6A4FEC1B35F3D102D5
SHA-256:	6E9293B32AED0D06EBFC420AFA7C1C03DC0D3FCE1120AD11336A5F204315BC85
SHA-512:	2D8E54A7BBF40EBD532FDA4A20FA872054CA33551E8BB6EDC4F2873703E96BA2DAD25A701B3A4206491F28CD0E8E05031A8A9CD657672677486D66F35F445C34
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/facebook-48.png
Preview:	.PNG........IHDR...0...0.......%....rIDATx..KO.Q..]R....c.......kw.H.&}......q.EC......Ak..R.._.PE...A..T{...c..=..2..9.......F...Q...J%h..t..j..n.@.C..X..q..~...Ui.K-.....6....P....y....'...UV..._..G..d.ya..U..K9 .k...]....'S...VH._..kjA..l..m.jji.}...Z....a..u...o.a.mm..7....D.PC.P.5.C...o.....Z..(.?x...p,/....\|>.I....V.....kw.L.f.k.?3.............7..\|CC....[..>ep....t..YMmm...h4:>.....l..1....c...o.0...N..[..W.".....Z_..[,;..........-......+;.(.J....80......@.......R......@`.&....@5....M2vz57nvt...F....m..k........G..{;...........zw7..D....j.y<;.9..u..D..j.......idf......n.b.x.Z....:g<n..N..m..C......5......u$V.R..;E....8&........rm.......d...t.._.......N(..X,.....P.......2......`#.\|..........T.%.z....h%,.. L...=. nJ.L.4......7...q......Y.p]u....d...Mx..4.U..p......8....w..vA.thH..!.`......:k%.@.9..&..Y....f...N..?;dp.....u..).....F.r...)......-Iy.@_......Ll$,7.&.......2.......X.L. .Do............P(@.=.....7."e.. ..@.?.........O...

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2629)
Category:	downloaded
Size (bytes):	220322
Entropy (8bit):	5.541183218189157
Encrypted:	false
SSDEEP:	3072:wHIp9SXNKW40MM9Z0xTKCcuBcO9yyqoiAuxWTnDF2Dej7o82k:qIGKlFddcvO/DF2Dej7Z
MD5:	B8DBEEDBF2BFE6BCF9F6535357D7D930
SHA1:	987BEBBB3E1D4CB66A6615EF70313BDBCF9DF4C5
SHA-256:	D6652F502E8B02E02F789CDABE9589F4610311ED16027E42F357BD5C755D888E
SHA-512:	27A351418161BA66CB94E65B2D5B2AA56AF889B92034CB23E4801E8E8237DC9FC722B3332251F3CC04C02B71B89B512D78B5CC22805B8789657C39F1919BC007
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-WHZ2V6C
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"8",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"UA-5736218-2"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__ga","metadata":["map"],"once_per_event":true,"vtp_detectTitle":true,"vtp_ignoredRef":["list"],"vtp_useDebugVersion":false,"vtp_allowLinker":false,"vtp_trackType":"TRACK_PAGEVIEW","vtp_cookiePathCopy":["list"],"vtp_clientInfo":true,"vtp_campaignTrack":true,"v

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2535x924, components 3
Category:	downloaded
Size (bytes):	509361
Entropy (8bit):	7.977911231444655
Encrypted:	false
SSDEEP:	12288:Sew83k717xn6X0bpoJWH4h39FlOnAS7evl2kwElJdl1V+vq:Sejk3nesOWU3rlKwv1lJdl1H
MD5:	E440370E09309B0342469CF581426290
SHA1:	0E44DA8624981FFF5D6EE5A9FD4AB22AD112780F
SHA-256:	109B5AF587CA0DBC47A25001D8C282F9AF9BE3FD3D220837A05C0E5A2292D04A
SHA-512:	1527260F549744279871F727FAF63BEC90BF6327108934BBC24ACBF8E5BDBDA63C8401980DE5C7FD23F355FD5C19B0CE41C321B7C98B2BB427CA556B20E7766D
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/images/london.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:FCB9ADBC11FC11EA8264FF1699D00032" xmpMM:InstanceID="xmp.iid:FCB9ADBB11FC11EA8264FF1699D00032" xmp:CreatorTool="Adobe Photoshop CC 2019 Windows"> <xmpMM:DerivedFrom stRef:instanceID="40688B9CEAA4362AA863F260B8A03CF6" stRef:documentID="40688B9CEAA4362AA863F260B8A03CF6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................................................................................................................

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 650 x 650, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	277764
Entropy (8bit):	7.998747296674252
Encrypted:	true
SSDEEP:	6144:VF3hUw3XZwDY2nL0q/YkV67M7fwNC4AFUbh4vRDOg1vsZ:nhUIpwDY2nLl/YkV77fEKcheJL1vy
MD5:	11C9A421C0BB4FAD967036E995E27E2C
SHA1:	082430FDDF46E43AC35ADC88036A12CF26ADF262
SHA-256:	F7DF1B3D2926CF7B443D7305B94A9452522E77FD07E974F15A6268D2054F09E8
SHA-512:	811C4AEED685E429FE85041CE3F0A4927A45FFDC979E56C81222A2EB442AFBB757902FC6BAEC5D8481266718F6E73A5567E42FC4AC1C719C778536EEF313930C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............5.......tEXtSoftware.Adobe ImageReadyq.e<...qiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f1e2eff-511e-0343-87de-b1f85096cb46" xmpMM:DocumentID="xmp.did:3495E39B2C7711EE85DAE9C635E6CFDC" xmpMM:InstanceID="xmp.iid:3495E39A2C7711EE85DAE9C635E6CFDC" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D99B69291B4611EEB1C4C3CB62864E07" stRef:documentID="xmp.did:D99B692A1B4611EEB1C4C3CB62864E07"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......9)IDATx.....8.+&h.;."..,...H..\|g^

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	658
Entropy (8bit):	7.243513225500089
Encrypted:	false
SSDEEP:	12:6v/7+OJdESah3+W9t/Wuj1BzeMg1e3JM94r9V0puHSQF+ukEEHu:GT2h3+Yt/H1BaZ1e3+injTAu
MD5:	8FF23461B76BF408F5BD59F1F67AB1FF
SHA1:	19384D49A6263F6EC96CD6D750320707BF0E606A
SHA-256:	F83FC218F6EB39077D3D289264A993C7DFC335274F675890DEC4815AAE0314A4
SHA-512:	73353333511EF0740CEC57575B4EB05383A3D5DA81C018CB71B9FB5AB912E6203303C7AE9070D5AFC0F73404F8EBD5E04EED8C15B3B8107DD125F285C2768017
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`.......PLTE..Ze]b.........1>PU~BGt.?K.....v~.........5:j.LXx\|........PT~..............hr....................hqko...................'-`....#1......p...0tRNS................................................b..x....IDATH..... ..`..$Q.M..w....n.T...2..[........,d...6TT.... ..@......oI=.5..\|.X.. $...c[n@..........0..^@2l....Z!.<.S ......x..\|.0."Np.W..Z(.m1.q......$..C...$.)E........`..b..}...b.^..T..b....G2.$.......M.B/a Ewa..Op..."........}HP$.}..W..._Q..}.r{...(.. 1...S'W.3ob.5..d....d..2.x....'mT..v_.....R.w.....g...~z>..\|hp6.f....G...O....w.W.....\|.........d~k...2........A./A.~q..a6....IEND.B`.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 302 x 170, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6228
Entropy (8bit):	7.947970045393425
Encrypted:	false
SSDEEP:	96:AHZ4/cjtsZQUTYyd863TWPVxlJmNWKVEdf5kDlF7nk1bdAIpNKmn:AHIcjtsZl0y+ETKlJmNxVSxM7nYbdBDn
MD5:	438ABB572D83B1C60730E22AB218F8C1
SHA1:	EAEC73182CAA98B4CE8B215CB29580B059A438B1
SHA-256:	5A0381E6DBC1FDC6B57A6CBDDE1D911543602DFB2B500265BD9E8871C51D51B4
SHA-512:	46627712D9B70A6164EC55ACEF0E255F221201466659D27B85C3A61AC6BC9D36FD5F9EF84CF5298CA754D954357C21768FC2CF7B0A0713F781CD00BEBF91604F
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/sn-iso27001.png
Preview:	.PNG........IHDR.............$.R.....PLTE..............E $!>)#\+,/U0001.K5/e6,V61f9:8:::?:e@@@A;mB?_C6QD?pGHGLHvOJuPKyPPPQL{TQnVVUXT.ZU.[W.]HE_Z.```d`.dbpddclh.pl.pppqn.rrqxw.yv.\|x.}z.............................................................................................................................%...............................................................................................................s........V.............:........................l..\|..... ..^.....@..P..`..........................lD....IDATx.....U..ST.q.@.\|..V.9.........!.p`.....c.`.%,.B.....z..+..B....I..-...>~.YZi4^}..7o.F.r...y...K..j..W-9.%G\....q.#.Z..5.R&.\Z.(e..YG.Q...n...G\u...q.#.Zr.UK..j..W-9.%G\..p...{JrM...Bl.OI........t.zp-:..!..$.+.1Q.,..k.5.y5Yd.OI.....!.!8.%.b.n%.o........X)_..\.5D4Hm....pyB..q.]....8.j-..%..k.EA....._Uq..QX..u..RB.5.Um.T..Tx.R6.Ye.R......^/......o......R...!W7.......&.4.T.zqa.GK.i..S3_...g....ng....xs-

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	695
Entropy (8bit):	7.61542562674215
Encrypted:	false
SSDEEP:	12:6v/7u9qSug+WCEwBR8RneeCivbx7aLP/6LvBzZvqO0j4vQZbhk3iWmIxR7sa+Qf9:p4SL+jEWWX/qCzQO0j/lWxFRN+QX1Ai9
MD5:	1A31EC7C75FB89BCC1C081710374B6A6
SHA1:	F59632DCB3C28E291A7093C87BA248260BCCB742
SHA-256:	E53F35C4C0A13730E3037AEAF669390DA554FFF89CBA0C0F435B65848AF585E0
SHA-512:	C5C7267381161BEFD0BB19DDA3CF159FD86334CDC20C4A7D7202C84FD68CA62BA465F4FEB091C13BA4FDCD5C55E56947740AA487C786A6AA307509519D6F2CD0
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/images/youtube-48.png
Preview:	.PNG........IHDR...0...0.......%....~IDATx..;O.A..i5.D=....j..$ZR...O`(.!.F....-).1..%.Y.j......0..%..9..^.x..L.#...........{.\|D...P...T'....@u..P...Tg...vi....)...pm..........O.......0...s.b.k2.;~...w......y.</.'.......ux .<;u.....-..a.C!.a...'.c(T..O..[#.8#..DB....D.VxM.....y.5.2 ..C.j..-.".9...H.2 ..C.j.E-..q9..x......u.-.qi.~..L..B!.^]5.ok.......WC...c...0...D.<_....{x..]X...............G.\|xpt.....O..m..n..V..;.jQ..c.R,.....}.......X,X.<.......0r.0......d^;.J>9..g.=^.S...vLO....eg..`.ry....\;......$.....jm.E8....E..Cq(.C.F...F.Z.8...j..P4...C............My..My.K...Rh0.....h4.K:.&.p...w..u>#h<.160..l.=..9O...N.....T'....@u..P...T'......Hz..I.1....IEND.B`.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	dropped
Size (bytes):	316837
Entropy (8bit):	5.576925247582731
Encrypted:	false
SSDEEP:	6144:i4RlIGKlq3/Z1MvO5K1x72Dej7NsYFVVl2pR:rRlwU3/ZQlQ
MD5:	9F8DF6CA33E0BBB0D52118FC82A3B695
SHA1:	6BC276FF7C645EAFB053BFF98B794015039AEF61
SHA-256:	74E097178FEE47EB66174ADFA35062DD6B79A0F4E4D3AE1A294AD60BB93C8FCA
SHA-512:	C80EB951C80273D1DC039D5B7BB2967E3070E1873F6ABB75A3DC0DEAA06AF1E6AF642EEAFE4B07F83C5C7D88CAD86AF092E42A94C5F6824AB8FA4591C43F4296
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":25,"vtp_rules":["list","^safenames\\.net$"],"tag_id":8},{"function":"__ogt_1p_data_v2","priority":15,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_las

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5232
Entropy (8bit):	4.486210242453492
Encrypted:	false
SSDEEP:	96:6h/XqxafLr/YeWE+LYKG1MO7Sj7h6oN7nBOLe:6JTLcjE+LYQ4ScoN7n
MD5:	1DF5D198B80A6389762E9533E15D6D54
SHA1:	379DABAF752D5BF532467B389673701C80E8398A
SHA-256:	4EA91ED7073AAC5BFCC527A36195613A1B4A961F1153C01EB2FD0F6472B07112
SHA-512:	82BEC184FAFBF41EAE6C6D96118EFFC956C475BFABA6CC460E4ABADD58570EBAAD89DBC5FE11E90B81BD67891C0D3F25B82302CBDD7961552FDD59F53E04236C
Malicious:	false
Reputation:	low
Preview:	<svg id="SAFENAMES_LOGO" data-name="SAFENAMES LOGO" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 677.17 167.42"><defs><style>.cls-1{fill:#fff;}</style></defs><title>safenames-logo-white</title><g id="Safenames"><path class="cls-1" d="M248.44,94.42v2.14h-6.95V95.13c0-9.29-5.41-15.94-19.82-15.94-14.61,0-20.23,5.52-20.23,13.7v.81c0,10.63,8.79,11.75,22.28,14.82,12.87,2.86,25,6.13,25,21.66V131c0,11.54-9.1,20.23-27.38,20.23-19.83,0-28.1-8.79-28.1-22.07V126.7h7v1.84c0,8.48,4,16,20.94,16,15.84,0,20.13-7.05,20.13-13.48v-1.33c0-9.5-8.58-12-21.86-14.92-13.8-3.06-25.44-5.21-25.44-21.35v-.61c0-12.57,9.09-20.44,27.38-20.44C240.17,72.45,248.44,81.24,248.44,94.42Z" transform="translate(-38.06 -33)"/><path class="cls-1" d="M256.2,132c0-11.24,5.93-18,23.3-18,8.58,0,15.22,1.53,18,5v-9.3c0-8.48-4.6-14.71-16.14-14.71-9.1,0-16,3.58-16,11.75h-7.05c0-11.54,7.56-18.39,22.47-18.39h1.95c14.81,0,22.17,8.58,22.17,21.56v22.17c0,12.36-10.32,19-23.5,19h-2.15c-14.2,0-23-5.72-23-17.77Zm41.28-.21c0-8.07-4.5-11.75-17.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 273 x 387, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	187933
Entropy (8bit):	7.997522306146969
Encrypted:	true
SSDEEP:	3072:3Sfo+C/Tm5ODxCdT3a5cn20UI0mrDDvrRqEOyCfYfEewXrFg/0eJ9qtgKu1eG8nc:qBSwOdCpa5k20UxmrfvoWSksU5Qwh8nc
MD5:	ED4A357F29E5EF3EC919228C7D5175AC
SHA1:	F7B657569E488E42A91F54D7C1704698B6FBE17E
SHA-256:	942192E4339FB1BF64F90AB07530E24A511E811F8ABF15760DEABCCF026DAFDB
SHA-512:	DC66637E2F83D64848BE0F877839DF3F20E67BEC9F7240C690C42AF1D9C8808D15CBE565E6B97D2008AD6B79649A422324485F0890515C46E520118B5EDE4F34
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Windows)" xmpMM:InstanceID="xmp.iid:2D1C7D6EAE7111EB90B88F203F5514F2" xmpMM:DocumentID="xmp.did:2D1C7D6FAE7111EB90B88F203F5514F2"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2D1C7D6CAE7111EB90B88F203F5514F2" stRef:documentID="xmp.did:2D1C7D6DAE7111EB90B88F203F5514F2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.<.@...IDATx.d.[.e]v.4/./.R...[..w..n.n[i'..b..NpBB. !.$.H<.!..y'.@J.<....Q....BQ"B.."..C.t....oU....{]...c....

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 650 x 650, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	215573
Entropy (8bit):	7.998103821264098
Encrypted:	true
SSDEEP:	6144:oiA/SeGSxLscAXxfTK/lWyJEUWKarSDw3cT3rB9I:oDqoR0fSuUPWS0eB9I
MD5:	20F05F0C6786F9DE10FD494C228D6257
SHA1:	68BB4E1F74197EF532BA8157F00C1F9C7F1FA0A4
SHA-256:	50EFD7F3A559EDBD6597889F10102D0C82B20F27F9712B315C019A868B3ABAD5
SHA-512:	7D12D8A8480CD897C48F23C5070E47083527CD540CD61B2CE9A6C068E1BAD9C5ADAD1B107BD18C8857878317B07B7607C8861B7DAAEADF09E04B0E06A4C5AF9B
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/HorwathHTLhomepage
Preview:	.PNG........IHDR.............5.......tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f1e2eff-511e-0343-87de-b1f85096cb46" xmpMM:DocumentID="xmp.did:8C858CF989B711EAA1F687D6D80519EA" xmpMM:InstanceID="xmp.iid:8C858CF889B711EAA1F687D6D80519EA" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:842e727b-08d7-1342-97c7-ff7b8778de48" stRef:documentID="xmp.did:6f1e2eff-511e-0343-87de-b1f85096cb46"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>5.Z...F5IDATx.......HP.......U...T

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64735)
Category:	downloaded
Size (bytes):	69912
Entropy (8bit):	5.298035931392097
Encrypted:	false
SSDEEP:	1536:qn9kVMDaEXVAnZXYNtWu2scVDXYRClzlIgQXyjXlkaioEFWOqDw6usT5aXsdtkVV:END2LlzlIgQX28XsYce
MD5:	B3D801B2FEFFF6430208F0A7300CC743
SHA1:	891EFE1142A3C0C3F3B265FFA90CE3A5CBC337FB
SHA-256:	B0248268D558E402C7C60E210633DF35EAE77890BCAD7072E285CCF4079AF039
SHA-512:	1DD42CD5D7EB8240AA5079A4AA6D1C66D3D949CBEE7BA8401C2529AAC318FC806457DF54B8E96C491C74BB88AA088E671BC26E04B33A955118DA74535D058109
Malicious:	false
Reputation:	low
URL:	https://js-eu1.hs-analytics.net/analytics/1728252900000/26584007.js
Preview:	/** . * HubSpot Analytics Tracking Code Build Number 1.993. * Copyright 2024 HubSpot, Inc. http://www.hubspot.com. /.var _hsq = _hsq \|\| [];._hsq.push(['setPortalId', 26584007]);._hsq.push(['trackPageView']);._hsq.push(['setLegacy', false]);._hsq.push(['addHashedCookieDomain', '115452825']);._hsq.push(['addHashedCookieDomain', '205882892']);._hsq.push(['addHashedCookieDomain', '165226720']);._hsq.push(['addHashedCookieDomain', '20629287']);._hsq.push(['addHashedCookieDomain', '251652889']);._hsq.push(['embedHubSpotScript', 'https://js-eu1.hs-scripts.com/26584007.js', 'hs-script-loader']);._hsq.push(['initEventVisualizerScript']);._hsq.push(['setTrackingDomain', 'track-eu1.hubspot.com']);./* _anon_wrapper_ */ (function() {./! For license information please see hsa-prod.js.LICENSE.txt */.(hstc=hstc\|\|{}).JS_VERSION=1.1;hstc.ANALYTICS_HOST="track.hubspot.com";(hstc=hstc\|\|{}).Math={uuid:function(){if(window.navigator.userAgent.indexOf("googleweblight")>-1)return hstc.Math._mathRandomUui

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5232
Entropy (8bit):	4.486210242453492
Encrypted:	false
SSDEEP:	96:6h/XqxafLr/YeWE+LYKG1MO7Sj7h6oN7nBOLe:6JTLcjE+LYQ4ScoN7n
MD5:	1DF5D198B80A6389762E9533E15D6D54
SHA1:	379DABAF752D5BF532467B389673701C80E8398A
SHA-256:	4EA91ED7073AAC5BFCC527A36195613A1B4A961F1153C01EB2FD0F6472B07112
SHA-512:	82BEC184FAFBF41EAE6C6D96118EFFC956C475BFABA6CC460E4ABADD58570EBAAD89DBC5FE11E90B81BD67891C0D3F25B82302CBDD7961552FDD59F53E04236C
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/images/safenames-logo-white.svg
Preview:	<svg id="SAFENAMES_LOGO" data-name="SAFENAMES LOGO" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 677.17 167.42"><defs><style>.cls-1{fill:#fff;}</style></defs><title>safenames-logo-white</title><g id="Safenames"><path class="cls-1" d="M248.44,94.42v2.14h-6.95V95.13c0-9.29-5.41-15.94-19.82-15.94-14.61,0-20.23,5.52-20.23,13.7v.81c0,10.63,8.79,11.75,22.28,14.82,12.87,2.86,25,6.13,25,21.66V131c0,11.54-9.1,20.23-27.38,20.23-19.83,0-28.1-8.79-28.1-22.07V126.7h7v1.84c0,8.48,4,16,20.94,16,15.84,0,20.13-7.05,20.13-13.48v-1.33c0-9.5-8.58-12-21.86-14.92-13.8-3.06-25.44-5.21-25.44-21.35v-.61c0-12.57,9.09-20.44,27.38-20.44C240.17,72.45,248.44,81.24,248.44,94.42Z" transform="translate(-38.06 -33)"/><path class="cls-1" d="M256.2,132c0-11.24,5.93-18,23.3-18,8.58,0,15.22,1.53,18,5v-9.3c0-8.48-4.6-14.71-16.14-14.71-9.1,0-16,3.58-16,11.75h-7.05c0-11.54,7.56-18.39,22.47-18.39h1.95c14.81,0,22.17,8.58,22.17,21.56v22.17c0,12.36-10.32,19-23.5,19h-2.15c-14.2,0-23-5.72-23-17.77Zm41.28-.21c0-8.07-4.5-11.75-17.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 582 x 155, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	18031
Entropy (8bit):	7.966353903425636
Encrypted:	false
SSDEEP:	384:s9uWl4fLSozO/Q9bCoN+45doo3Y/0JTpVW0zBJAy:s9usOqCLPTooo/0lpVW0zBJR
MD5:	F2094F5408027766C3BE5CC6723C1742
SHA1:	0B7B0DAAA6EE02F4114135E83447E56B4378D488
SHA-256:	673D6122510419EB77556DB82F099D7678A429459A499DFFC25A7DAAC4A735CB
SHA-512:	7B33A7F5C84E1F970DB79350F6759C25F2E3358348C6EA6422CAA5C37E8FC268B75C26031B962AC512424C76F93275F91DAA549C9E6E6ED9280F2E8A1E02E2C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...F............... .IDATx...x.........X.s.....Y./...;.%.....S....HU.P..f.(Q..Q..DQ.$.vR$....+A...X..6..g.=......y...NQ..H$...).h...H$..$..i$..D.$"..H$.....F".H.N"B..D".:..i$..D.$"..H$.....F".H.N"B..D".:..i......Y .H$..".YSSiY......D".$..fM......Y].......Z.u#.H.vB.55...~....E.iO>!..H$R{.!.T,..kj......'......,..D".Hm.B...'.CZ.../.Q...........GN.U.H$..d]..gj.z.....~.zi...7.-V.D../j..I.H$..d].5...=..46.}.V..........7......ZePL.G..I$...z......+..>..P..b.b....;%..W...?..q.m.a..D"..yE..e...,y.7:....k..e.%D....]+V.X..Wk.,j.H$...O.=.YeLj....~S..: m...w.H3....^.R..neH\|..F>R..O".Hm...i.5..u/R(J^.C...({..Gx.....'7..........H$....i..[....o.X.+.(..4>t..!u.Wt?x.....Z.vH$.....".!w_..~....'...d..].K.-R\|.:.pF".Hm...iB.4..i. ..P.P...../]m..".H$..:9.....iO.!..V..a..?Z....D".H...Hk..nl.y.a.K.f....A...w.$..D.H{......?.[;m....d9..Un.....7^....Gl.3EI$...H3.~}..o.*....0_..i.AH....+^.......FSGH$...H.N.Q...N....W..r.o].4=...{._../V..l..

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2629)
Category:	dropped
Size (bytes):	220312
Entropy (8bit):	5.540938735737531
Encrypted:	false
SSDEEP:	3072:wHIp9SXNKW40WM9Z0xTKCcuBcO9yyqoiAuxWTnDF2Dej7o81k:qIGKl3ddcvO/DF2Dej7e
MD5:	192FFA9E2E1DF828141DE33409BCD4B8
SHA1:	BD11D34D37B93130670990394C0F12E08D29D8F8
SHA-256:	68B3D32A7FE581A5010C8A8ACEA410DB6AB4DEFDC9BCE1FBC8EE7D1D49C9AD28
SHA-512:	A6C4B46CA5FD3BD357AF097E76AA293303EE45E28F67B39F3DE059D57FDF8547944748FAAF82A79266E5995F38F16A7317A350DD24F297F534202E180020AB7A
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"8",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"UA-5736218-2"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__ga","metadata":["map"],"once_per_event":true,"vtp_detectTitle":true,"vtp_ignoredRef":["list"],"vtp_useDebugVersion":false,"vtp_allowLinker":false,"vtp_trackType":"TRACK_PAGEVIEW","vtp_cookiePathCopy":["list"],"vtp_clientInfo":true,"vtp_campaignTrack":true,"v

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	4.523694655615326
Encrypted:	false
SSDEEP:	24:NYOyI7QQeHOht0Cg9Os0nyJO7lL+1JRqj9:NYOTmHOn29Os0nyJqL+ZqR
MD5:	2C49DDD4D8914DDB330F07BA8A6A285B
SHA1:	47D126FA7440620AC5E14DA739A21CA66531E9EB
SHA-256:	6E0CBE981E5ECFEA90AA5443455B54C5FE4A2F4DB3DE10A17146C8FAC763B656
SHA-512:	C226F2DDA1FD2021DA6FF993A1C75CA8FBAA7097651C1918225ABA30A5ABF4A58F22CA85950583D3D1F4E0E1FE8D47E5FB6FF304390A83E241CB7E94F52C0662
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/favicon.ico
Preview:	............ .h.......(....... ..... .....@................................... .#J .#.""&......... .#.! $. .#Z............................ .#. .#...".........@99....2....$#'.! $. .#................. .#. .#............d^....................!'. .#. .#......... .#. .#..... .#E !&.!....W../.....0.................. ..... .#O .#..... .#> %. ...!."7..........s............/+.#"&... Z .#. .#..... .#. ... ..................s................XW[..... .#. .#2.... .#. ......................s................B@DC"!%. .#. .#..... .#. ...........%..........s........................ .#. .#..... .#v %.........m..........h....#...@AD....L{z}..... .#. .#J........ .#.....= ..S......E..9".............conq .... .#. .#................K-...7......P..<.......&&~........! $. .#I .#. .#.........................)..v...................."!%U.... .#. .#............................v............ .#. .#............. .#. .#. ..................N...J........ ... .#. .#................. .#. !&. ... ..F ........=Y& .

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2419
Entropy (8bit):	5.206137676311382
Encrypted:	false
SSDEEP:	48:F1ySku42GOIde/8w2dqjPpVJTk5tr9sGIhTpRBv0I+R:FcxeUzqjPpTTEtrSrPRBMbR
MD5:	4642298B76C37BF799B8ED0010C4CB36
SHA1:	00F21FF64D9B60299B26F03EDFD4F09950D89B24
SHA-256:	A6D351A5A910EC2DA1FE3EBE0AA83DA66921F8D09ECB72FBA0404D25D37338B1
SHA-512:	41AD1F6863AB29D947D3D8D4B532CF36BBB8C5423A605D690DB1B749414D3A3BE64EF41FEDE6A6B56F8DCA00DBAB515AE57D85D98EEAA9D297C9341FFAA00A29
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" viewBox="0 0 60 60" width="60" height="60"><title>Exported from Streamline App (https://app.streamlineicons.com)</title><g transform="matrix(2.5,0,0,2.5,0,0)"><path d="M 6,1h12c0.828,0,1.5,0.672,1.5,1.5v6c0,0.828-0.672,1.5-1.5,1.5H6c-0.828,0-1.5-0.672-1.5-1.5v-6 C4.5,1.672,5.172,1,6,1z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 8,4c0.828,0,1.5,0.672,1.5,1.5S8.828,7,8,7S6.5,6.328,6.5,5.5S7.172,4,8,4z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 16,4 c0.828,0,1.5,0.672,1.5,1.5S16.828,7,16,7c-0.828,0-1.5-0.672-1.5-1.5S15.172,4,16,4z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 10.5,12h3 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2874
Entropy (8bit):	5.118565524006542
Encrypted:	false
SSDEEP:	48:F1ySkuXoPqJdqt5q9qzHYmGky7p5WQYUW9xeTxRR:FcnPOdqt5I+PGky7pwQY19xeTxRR
MD5:	3BA48C2912B3149A87CBBD9F633DF0FF
SHA1:	547A5D613C4E796B12640E904EB7D73412C863EF
SHA-256:	6F7250AE575BDBE720169BE62CDE61264179039C4E2C2D694F85E598D3044D6F
SHA-512:	5843378F936057B7CEACD1222C188CEE5255A9AA0B38E363148224E10E96BC509BF8996FD4BED3A53A16EAD98FDFD4BFF491AE487A195F83DD560B86AA09C718
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ResourcePackages/Safenames/assets/dist/images/safe2-thin-60.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" viewBox="0 0 60 60" width="60" height="60"><title>Exported from Streamline App (https://app.streamlineicons.com)</title><g transform="matrix(2.5,0,0,2.5,0,0)"><path d="M 2.504,0.5h19c1.105,0,2,0.895,2,2v18c0,1.105-0.895,2-2,2h-19c-1.105,0-2-0.895-2-2v-18 C0.504,1.395,1.399,0.5,2.504,0.5z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 2.504,22.5v1 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 21.504,22.5v1 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 3.5,16.5v1c0,1.105,0.895,2,2,2h13c1.105,0,2-0.895,2-2v-12 c0-1.105-0.895-2-2-2h-13c-1.105,0-2,0.895-2,2v1 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><pa

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	658
Entropy (8bit):	7.243513225500089
Encrypted:	false
SSDEEP:	12:6v/7+OJdESah3+W9t/Wuj1BzeMg1e3JM94r9V0puHSQF+ukEEHu:GT2h3+Yt/H1BaZ1e3+injTAu
MD5:	8FF23461B76BF408F5BD59F1F67AB1FF
SHA1:	19384D49A6263F6EC96CD6D750320707BF0E606A
SHA-256:	F83FC218F6EB39077D3D289264A993C7DFC335274F675890DEC4815AAE0314A4
SHA-512:	73353333511EF0740CEC57575B4EB05383A3D5DA81C018CB71B9FB5AB912E6203303C7AE9070D5AFC0F73404F8EBD5E04EED8C15B3B8107DD125F285C2768017
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/icons/uk-flag.png
Preview:	.PNG........IHDR...0...0.....`.......PLTE..Ze]b.........1>PU~BGt.?K.....v~.........5:j.LXx\|........PT~..............hr....................hqko...................'-`....#1......p...0tRNS................................................b..x....IDATH..... ..`..$Q.M..w....n.T...2..[........,d...6TT.... ..@......oI=.5..\|.X.. $...c[n@..........0..^@2l....Z!.<.S ......x..\|.0."Np.W..Z(.m1.q......$..C...$.)E........`..b..}...b.^..T..b....G2.$.......M.B/a Ewa..Op..."........}HP$.}..W..._Q..}.r{...(.. 1...S'W.3ob.5..d....d..2.x....'mT..v_.....R.w.....g...~z>..\|hp6.f....G...O....w.W.....\|.........d~k...2........A./A.~q..a6....IEND.B`.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	208
Entropy (8bit):	4.7371149224850875
Encrypted:	false
SSDEEP:	6:Mm/CGrI8rRi5rbre5YC8Ga8dVs5SnP90fR0K+1GXnN48rZ658d/:MmKOMti5YQxPK9+MGW/
MD5:	1A8B0E50D56F1FE0CF5BFE7D00C2BA9D
SHA1:	C37619B483732341CF4B1C89B3B4E82B57BA28C4
SHA-256:	FE62E317FCE3BBECEFA07AD1627E97F3EA2D70E94C4D313A507B29C7E827CB61
SHA-512:	A6AB2969DC3860459069E6F3B51605945AB8FF05D24E9CC01E4998B9ECBCC68B04F3F0AAA9D9693BA7E70F69460A2294B3E0ABE8912B64D438D63F18174BCA5E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSgAEJNfbOO1SyS5kSBQ0fCEQdEgUNCjEwVxIFDXZRZ4ESBQ041EmrEgUNcmzX_RIFDbpygtsSBQ0QiYCtEgUNBhDTCBIFDVRb9uESBQ3sH7baEgUNXT0SvhIFDfLEV1cSBQ3-VYleEgUNlXM7BhIFDUeNPWMSBQ1MKw4pEgUNlI4OGw==?alt=proto
Preview:	CpkBCgcNHwhEHRoACgcNCjEwVxoACgcNdlFngRoACgcNONRJqxoACgcNcmzX/RoACgcNunKC2xoACgcNEImArRoACgcNBhDTCBoACgcNVFv24RoACgcN7B+22hoACgcNXT0SvhoACgcN8sRXVxoACgcN/lWJXhoACgcNlXM7BhoACgcNR409YxoACgcNTCsOKRoACgcNlI4OGxoA

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	690
Entropy (8bit):	7.274774598213589
Encrypted:	false
SSDEEP:	12:6v/7+sSJdESah3+WUMi1gV82S725xu99gi8XO9LU4veUsbgVS+ez:RT2h3+JuV8NFvgeLvZQmShz
MD5:	F39EE91DDD4D65F1F44621A3A1CBAFE2
SHA1:	EF66BD27407C8D566E839771A72AE910A8E0B3DB
SHA-256:	7EA111F9265E3BB62554AF224E00FCAA2B22E5021EA51B73B5C5DE115EC3B5F4
SHA-512:	D5380303B9F1B2918063C9E0661848F8AC25D50DAC6D1DE8148D34FF149E14892450EF61C4EB90D87BB18157D67622FA8443D99A463173A638376BC974E9EAD2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`.......tEXtSoftware.Adobe ImageReadyq.e<....PLTE..Ze]b.........1>PU~BGt.?K.....v~.........5:j.LXx\|........PT~..............hr....................hqko...................'-`....#1......p...0tRNS................................................b..x...\|IDATx....r.0..`......=N/.........K.fi.1.._.-....p^2YiT.......W.._.@....j:I\|`WR..4[..:.[n@.......".H.......-...x..5..7A...X..=..'x...)+...8q>8.....Z..`{o.`...1A.....9..A..8.J..........z..0...sk..}....K.H.C.`..........?8\|..y.0.T./..$...+..S}...?T.c_..~..>..b.Mn.b.Lv..X...TE..>W.DG.A...Uf...Mz.,......\|...;.n$..I.d..K.k.n..d....>.s....9.....jk.,........+..A.~q)].....IEND.B`.

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	4.523694655615326
Encrypted:	false
SSDEEP:	24:NYOyI7QQeHOht0Cg9Os0nyJO7lL+1JRqj9:NYOTmHOn29Os0nyJqL+ZqR
MD5:	2C49DDD4D8914DDB330F07BA8A6A285B
SHA1:	47D126FA7440620AC5E14DA739A21CA66531E9EB
SHA-256:	6E0CBE981E5ECFEA90AA5443455B54C5FE4A2F4DB3DE10A17146C8FAC763B656
SHA-512:	C226F2DDA1FD2021DA6FF993A1C75CA8FBAA7097651C1918225ABA30A5ABF4A58F22CA85950583D3D1F4E0E1FE8D47E5FB6FF304390A83E241CB7E94F52C0662
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .....@................................... .#J .#.""&......... .#.! $. .#Z............................ .#. .#...".........@99....2....$#'.! $. .#................. .#. .#............d^....................!'. .#. .#......... .#. .#..... .#E !&.!....W../.....0.................. ..... .#O .#..... .#> %. ...!."7..........s............/+.#"&... Z .#. .#..... .#. ... ..................s................XW[..... .#. .#2.... .#. ......................s................B@DC"!%. .#. .#..... .#. ...........%..........s........................ .#. .#..... .#v %.........m..........h....#...@AD....L{z}..... .#. .#J........ .#.....= ..S......E..9".............conq .... .#. .#................K-...7......P..<.......&&~........! $. .#I .#. .#.........................)..v...................."!%U.... .#. .#............................v............ .#. .#............. .#. .#. ..................N...J........ ... .#. .#................. .#. !&. ... ..F ........=Y& .

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 80, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1092
Entropy (8bit):	7.509542643444666
Encrypted:	false
SSDEEP:	24:r7abee5i4m/X/EsAYFSDYzva3NqoT4hvpKCHBZj0m7KX9qiXu5M/:r7Ne5i4musjIqoUhxxhvQ9Ze5M/
MD5:	0897456A7C0A7AD12861C95874D5F41F
SHA1:	5D604331565352B9927330B621AB36D6A2A0F962
SHA-256:	3E4D3383E0700F3C2A5CEA51A779A3F4571D0E0D052ABDDC4138B88CC0A34711
SHA-512:	2CD94680906D5D72B4C53438A15EF0B6FF75265EF921AEE2A1EB93E773D88EFB24B7EA9A0596AC3B69FE0BA96053ABCA814FC405C03C27A2B78C9ADCECB7603F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......P......+]....?PLTE...............................................................C..j....tRNS... ,0<>@P`p.........%......IDATh....0.@U.jiY.....%%..F..9..&..f4..DG..q.?.p#..7.p#..7.p.A.........W}..y..K.QJ./Y..!.)E.c..N.;..A......\|....9.pJ......Y.p....s+<L...F..b...S..<.b....MU..Xu.."m..C3..D_..2".G..4.3.^....-...../.N....>...=!.....]E..].@.L.....i..T.....4..!.M.T...Au.Y........^.c}.(.p<...-[..a.v.qC #.9.\|u..G).ZQ.3.a...l...=o.,. .9q..V....`...=.8.0..V....5..f....n./v..]...q.....\|........L..sFP....ji.......!.N.~@...@..V.u].RQw2.I2N..R.m.h./.#..K..b.. TUD..,4.c.3...4.....^q.......h.. ..%=!..tsO"...DF..j..d=).#....h..b...q....uQc.;...=...<.jA...\|=B..Z..L\|9....~~...<[..}..B.7.U...J..!..!R...EM.z..L.[.k....9..\..$...V>.(.f..!..h.AD.,!+.(\|....p.....s'..'.......I.;?\|.p..T....B.cw...N!D.KC."..LV[....!@=....U\|..A..ZM. .&E/B8 ...w.xP..F....nE....a>8./C..:.......?.B..).Z.lL...{THQkJW....0.K.."#.2..b......LP}..._~_...9..<...6....*.....$..<.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 541 x 595, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	113927
Entropy (8bit):	7.992141812319601
Encrypted:	true
SSDEEP:	3072:Gnq8NNXrMRag4hlHQRGji3XUKTtRBrmAomrU830Jp2s9Divxp:GfNXng4hxQgG3XFTfBrmv83kMyDiH
MD5:	E3C98A79076847EF3D3C8FF791AB549B
SHA1:	F7AE39C4EA37EF2BD20A7FA59D65A46828CAF2A9
SHA-256:	0B731AC77F05CE68978D44341ECC53C104BB16343A102630C59F7558BAA6D77D
SHA-512:	96AB9B43417796F10139A7460DFB3E89DDF0378773B5DDE294CE23D23A69E4263AFF7244774AE73974F93F284906D3FF7E42EEA5EDA69400392351612B3906EE
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/security-video-person.png?sfvrsn=54439678_2
Preview:	.PNG........IHDR.......S.....#P3... .IDATx..}.x.W.......i.g..~......$@..B.1........{....lcj..{o..4.f.UG3s....J1..p....r.i.....467.....FI....`````.K.......Q........Q........Q........Q........Q....Q. \|(.#...x{`^.(gptBr.r....'...000...W0...H..+4..x.....#.y....!.-....u....vF.`H.[.v.....c.{L.".F...S.._,.....+.e.O.c....;`&..n...,.-.f...<L.f..<.<..... ..lb.c...(.wA".l..F.X.~.......y...@.(....=.=.p .\l..vV.d2...@..N..<C...X..D.....#...R.>.;ww..V.......G.-;\|q..K..^Y....../=L....]..t.%..>Gjc.N..@.B;D?...EC...q!......J...t.}.[.00J..W0J....<........&....tn(..[Z..d..'......s6......}.e.G.Vn90.i_...@..Q...0.4...D.z..D....4.].e..q..w.....?....o..q..}..\x.......4.u..(..Ynht1Z.K.Ciy...1............\p.s.z7.3P.7...W...~l.....\|=p.'.cD?...{..=?l;..=...>..5..&.Y.g...S....qr....;.l.....,.{f....:5k..q.Gm.=pu.O3.7....Y....}...&}.........?.._......Y.c..s)W..\|..gt.!.d...u..ch............a...VOC..*..&......'ZOZ.e...s.H...~.aX.!.{..<#.h..[.=Q.Q.d.,....,,...t...[m..

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (572), with CRLF line terminators
Category:	downloaded
Size (bytes):	207268
Entropy (8bit):	4.745097431738217
Encrypted:	false
SSDEEP:	1536:nlTMdfvzxPIs8eHw90sEJF72QW5f2Lx7RLr75VnqA+xa3iQPx61d1wSRNAnNOqtM:loda5e91Pdc6IqtgprIgtrJ
MD5:	BB3C2935D4723AE71B7A2356F72DAEB1
SHA1:	192AA7377C027B4337536B2176866832C4FB70C8
SHA-256:	E99A7CF9C04BCEA9D78043DE74D7A9C954915D11748F0B03E07DC48893FC5C7C
SHA-512:	07CD378BD6408636CAC8EC8878C12AB9E9F4653048C2DA829005A646FCD66AFBE447D991D854A4C2AADE191D4637BC5E2116A504166C7B6B56D813756195BDE0
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ResourcePackages/Safenames/assets/dist/css/bootstrap.css?vrs=115
Preview:	:root {.. --blue: #007bff;.. --indigo: #6610f2;.. --purple: #6f42c1;.. --pink: #e83e8c;.. --red: #dc3545;.. --orange: #fd7e14;.. --yellow: #ffc107;.. --green: #28a745;.. --teal: #20c997;.. --cyan: #17a2b8;.. --white: #fff;.. --gray: #6c757d;.. --gray-dark: #343a40;.. --primary: #007bff;.. --secondary: #6c757d;.. --success: #28a745;.. --info: #17a2b8;.. --warning: #ffc107;.. --danger: #dc3545;.. --light: #f8f9fa;.. --dark: #343a40;.. --breakpoint-xs: 0;.. --breakpoint-sm: 576px;.. --breakpoint-md: 768px;.. --breakpoint-lg: 992px;.. --breakpoint-xl: 1200px;..}....,..::before,..*::after {.. box-sizing: border-box;..}....html {.. font-family: sans-serif;.. line-height: 1.15;.. -webkit-text-size-adjust: 100%;.. -webkit-tap-highlight-color: rgba(0, 0, 0, 0);..}....article, aside, figcaption, figure, footer, header, hgroup, main, nav, section {.. display: block;..}....body {.. margin: 0;..

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19398
Entropy (8bit):	4.524478176423156
Encrypted:	false
SSDEEP:	384:yiazoreEM4mPiQxRrBZwZMGr1Jn0JncPlf5KcVeWdRC/nnQA8yPm1BKCbJnna2Md:Yr0QxRrBZu0J4F5KHLMBOH
MD5:	6A833614387F9CB69C77E46478AD173C
SHA1:	890F0692C132D6B62F4DD8D51E1C1F77CBE1A305
SHA-256:	94DF272AC3CB17FB802797B6796D4787F2D9827DF08F80B8D1DC530DDC127E89
SHA-512:	526A0A046D964AFFE25CA5CE81BA04D02011F7DA16B4C56679ED5C9E562FE87BC2BD0B2EB30EE2ACCC0A74C61E56DBB2FCA05315A42F1F09B29FDB7247AC3B07
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/lib/jquery/jquery.validate.unobtrusive.js
Preview:	/*. @license. * Unobtrusive validation support library for jQuery and jQuery Validate. * Copyright (c) .NET Foundation. All rights reserved.. * Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.. * @version <placeholder>. /../jslint white: true, browser: true, onevar: true, undef: true, nomen: true, eqeqeq: true, plusplus: true, bitwise: true, regexp: true, newcap: true, immed: true, strict: false /./global document: false, jQuery: false */..(function (factory) {. if (typeof define === 'function' && define.amd) {. // AMD. Register as an anonymous module.. define("jquery.validate.unobtrusive", ['jquery-validation'], factory);. } else if (typeof module === 'object' && module.exports) {. // CommonJS-like environments that support module.exports . module.exports = factory(require('jquery-validation'));. } else {. // Browser global. jQuery.validator.unobtrusive = factory(j

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (1202)
Category:	dropped
Size (bytes):	3634
Entropy (8bit):	5.152206085293573
Encrypted:	false
SSDEEP:	48:AAD2qqayttKQUkn9XnoeYSZ96UsrXjMoccXnBMQOssFSVxDu5eKUk8ldUfNFjK/k:b2hZSE96UczZxMQyFSV53KGLUrKyOE9
MD5:	82F2E0C491C40B0F5CB9C89017AB8D0B
SHA1:	C20A92275AE748578021F53F95FC95E9B49E46E4
SHA-256:	5FACBB192E6F9FBE9477BF232C223BD3F2A8E4DEA84CBB6703BBACF033232BE5
SHA-512:	9BCF4046124035DDAFD73424DC0C2185FB08EFCAF015C7485ECDE0A2992F72F790912D9794533FEA70E1023EF7A3609858588F06C444C68F99A884D656800A5B
Malicious:	false
Reputation:	low
Preview:	.(function($){$(document).ready(function(){var searchBoxIdFields=$('[data-sf-role="searchTextBoxId"]');for(var i=0;i<searchBoxIdFields.length;i++){var searchBoxIdField=$(searchBoxIdFields[i]);var controlServerData={resultsUrl:searchBoxIdField.siblings('[data-sf-role="resultsUrl"]').first().val(),indexCatalogue:searchBoxIdField.siblings('[data-sf-role="indexCatalogue"]').first().val(),wordsMode:searchBoxIdField.siblings('[data-sf-role="wordsMode"]').first().val(),disableSuggestions:$.parseJSON(searchBoxIdField.siblings('[data-sf-role="disableSuggestions"]').first().val()),minSuggestionLength:searchBoxIdField.siblings('[data-sf-role="minSuggestionLength"]').first().val(),suggestionFields:searchBoxIdField.siblings('[data-sf-role="suggestionFields"]').first().val(),language:searchBoxIdField.siblings('[data-sf-role="language"]').first().val(),siteId:searchBoxIdField.siblings('[data-sf-role="siteId"]').first().val(),suggestionsRoute:searchBoxIdField.siblings('[data-sf-role="suggestionsRout

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 960x540, components 3
Category:	dropped
Size (bytes):	148120
Entropy (8bit):	7.966154344422257
Encrypted:	false
SSDEEP:	3072:Vxpeb4CXK1k8BPL7OXSlXq1vNnXSqQZqPf/q+qdDPTCE/6Iswaw:VxGKZPLCX2q1vNX5tfdqxCWAw
MD5:	679CE6139B415DBEA487CF27C6174B12
SHA1:	2420F2C37BD97C09E7DCE8EECCB362DF1E7906D8
SHA-256:	8CD5D3F90024BD719727A6F15EFC60EBFC259E245B87767200E074E448257D0C
SHA-512:	5EA32F89BC9FC4FE456448F99A672026067666D7F2AD2964CBCD7268F90FAEEAC8A1005536A4AE5DF76F457491215503A6554E93A23BB6BCFA9B2FCEE48FB7AF
Malicious:	false
Reputation:	low
Preview:	.....C....................................................................C............................................................................".........................................\...........................".!1.2ABQ.#Raq.b...$3r....C...S...%4cs..5t....&DT...'6d.EUV.....................................C......................!..1.A."Qa.q..2...#BR....b...$34C..r.%..5E.............?........H.sty.....$....&....4...<F....>....8F..........V..q..2.....un.^../.....X.E./.&e.Oh.oh.?.pc..<....\.:.........~.r.....l.......+.o.E.x....0l...8sM.U.yK2....Q.1...6W.`. RqS...r..n8..9........w^r...4.=Q....$R........4i.zhm....F.S....2.p7.+.c....jK...C.t^..e..k...T.[O..cz....X.V...38b..67.."....ez.=.j_g......".c.m.......<.1.X996q..~.S1.".Re...t.&....V\uG..UT.........X..^.J6.....J`...E..~....R-....74..sC.O.T...h.....U.i.]y...y...sE/X.X........u.{....0.7v.ej.A)..B.,.......G.G.l.^....v.....H].hd..+.....j.a..J.gbL.Y.I.zE...V!.5.Z.S.OL2.gF..G....R,..\...V

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 140, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1054
Entropy (8bit):	7.020921442272497
Encrypted:	false
SSDEEP:	24:xYVll0b3aL//bNx62XNf1MS22hzRppWOMI/OtUcYmVMGfHA5hs:6P//Jx6WN9rRppuvRRzA5O
MD5:	55A9F91BE33F83BB9F1ABDBACE3E6627
SHA1:	E94545C528CC59A2FECF96A43941FC3ECCA766EB
SHA-256:	6375AEFDB85710FCC5A036A216CAA8B955B7D63EFCF7CF345EB1A0E0E8E617EF
SHA-512:	E5D5C94115374356A166B6A7EFE2CA3F660F7A3A4644000A46F491A9111957CB878D479AD295E13ACEB2086253BCB8A1D4B6060B6BE9E3601A4C6F8620F249C0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTE..................................................................................................................................................................................................................................................................I^M....StRNS........... !')06:<?@OP]_`dgmppv\|..................................................:......xIDATx..{[.0....@..eNPA.7.7..v.M@@l...._E.)..e9g....{.X.4M..].S.................n.,Y..ra=.ij$K..]..%.....H..v,t..zk....-{?.......n...~..H.j...bS1.".e.m'.....r....W..r~Z.D24\|....Ltv.>."c/-.vE..h..).20..A&&....L....c.2t..[z..\.Yu..z.TC..Tq.....\y>.....`.\e....r.._......>f..}...ZC...23.\..=..>..dV....zVw....fo....F...H..\6*...D2w..W...;....R.;.w.b>..72z....F.......E...2S...@.2...d ...@.2.(...........FfG/nL..^lL.L1%24.6..w.\:$.W........k.m4.i45.......;.&.>MJE;.d..eT.......R._...1F".[...'(.cM.zJ~.p...'..2.......'L.(B..N%;.....4..F.t.'..../......q....6.Ib....g...L'.._

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1165 x 720, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	46479
Entropy (8bit):	7.842070529004446
Encrypted:	false
SSDEEP:	768:/X/+boML118d8W53g394PSEHD4a0T2L5zCe55S9zDsYjRR+q:3+hU8W5Q3KTjnLWDsG7
MD5:	9326632D47E707DFFE4DD7381116CA37
SHA1:	F7EB03E6AF40C4203FC8EFAD6EC0EAE8BFF9C782
SHA-256:	FE6363E1595A69F773BACE1912CF4EA4A7067A432EC3D14826B20D9BE35715BA
SHA-512:	B69FC3977A38B3FC26B181FEDFF2F21B5C5B9EDE0CF4E8186FE75D890DC2B9CC773AAF6DEF2EA2A31BAD973DD16CF22E1C4D62E31CF539564A2A57DD70A8807C
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/idp-screen.png?sfvrsn=5279de35_13
Preview:	.PNG........IHDR................'....gAMA......a... .IDATx.....Gb.Y^.-i%......JZ.V......{u.u..fli...!g.v..1.H....O.....8H..!@..I\.A.... .....\|x...pxa.angUWwVVfUuw.../.........;3.q................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................C.!..B...........B.!..B..........B.!..B..........B.!..B..........B.!..B........"..B.!.......).aA.!..B.!T}.@.Rt..B.!..B.....Ptc..B.!..B.....Rt...B.!..B....9P..B.!..B..%.H../h..B.!..B(-.@..}.v..;..B.!...PE.y.I..../.nR.7...B.!.Pw..>O7..,.}qb. ..B.!...Q.}L.$..(...4B.!..B........F.1.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33267), with CRLF line terminators
Category:	downloaded
Size (bytes):	253621
Entropy (8bit):	5.143304953160522
Encrypted:	false
SSDEEP:	3072:WkvBN6LO1wG0qxOO8DEBnAcKcvqwi/fXM76iuQr1Q7SV7opS:/WODlDn/Kq76ix
MD5:	C2A4187A1E23F42548005CABC628A1EF
SHA1:	C1E44F8E93227F76F0170CA217D0EBD34AF4F2C7
SHA-256:	5B812760CC9A246B2582B8F2BC643DA2E769965E15C83A3502BB46263AE50726
SHA-512:	418D2A92D84D967A185A27E2E06DA5DB7D9C8607E74DBE9CD64C6798C92D0641A99A610EB93AE53A209C01DDF3B4F8D37DBB123821AA89710FFE42D2E0389870
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ScriptResource.axd?d=VKaJmfFWDpQxp1_HxsR1qKyfqr1LoFdI1Larj06AwCrRGITZ0NZSm_gMLZ6jHmmIF30zk8r8VDydl4Hd0d7FZ9PIVI4Kle1brOUAMAyDWepfLOYh0V6vpqj1mJBFx92SzKTkVvuYlX-uO3fZ9ykmpzYqFvEcr5MMYvRo81yJnDqp6rzP6WxevUeNAFj3K6WqcNxIoYGo1-d3_ru3xKsagA2&t=fffffffffa5b9a95
Preview:	/! jQuery UI - v1.12.1 - 2018-02-18.. http://jqueryui.com..* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-1-7.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js, widgets/droppable.js, widgets/resizable.js, widgets/selectable.js, widgets/sortable.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/selectmenu.js, widgets/slider.js, widgets/spinner.js, widgets/tabs.js, widgets/tooltip.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effe

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (14277), with no line terminators
Category:	dropped
Size (bytes):	14280
Entropy (8bit):	5.343284326837626
Encrypted:	false
SSDEEP:	384:IEv6NbCyfShE/cKsazzNeNwVBh6eQw/6/fqFbFP0D:3mbCrVKsazzNeN+h6eQw/6/fqID
MD5:	BC0312B7AB112A570BC93A867B266219
SHA1:	C8B6DB7ED0D2BFFCE87D87F5B061C422D1C4F9E9
SHA-256:	7BC79D4F349F563CD927CD93A61C39CD81622A085BE61BEC26BBAAEF920D0982
SHA-512:	9E393D6549FFDB9CE0C7D0C11C038D5908661F8A410ADAFE1B54F79DD7966507ABF0AAB69A233A0830F589102736BEB4F96FEC9EDF751597765EDE342B54B165
Malicious:	false
Reputation:	low
Preview:	.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("Typewriter",[],t):"object"==typeof exports?exports.Typewriter=t():e.Typewriter=t()}("undefined"!=typeof self?self:this,(function(){return function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=func

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	7.770287121974757
Encrypted:	false
SSDEEP:	48:ZsruaO4dZXwlyfjOVqyZe15ccylFPuSVRd7:Zc9BdRwayVqya/KluSt7
MD5:	370836ACBD6C1B2C489CB42896E65C04
SHA1:	866A3B17594CDFBDFD4FD467E7BF6F1D55EA4E85
SHA-256:	7056ACEBB53F421C5514029A1262015E8ECFC4291271FF1428D6461F186FBD7C
SHA-512:	3DFF3D97EC820295E1C713E0EB36648918B4F4F83CA2904CA7A273A4D147487820B6FC74AA603A9E7A1E78B3CE823B7FCA1CD725E3F8092B4CA1E92CF85EB70C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......P.............tEXtSoftware.Adobe ImageReadyq.e<....IDATx..\.y.<.6}.......n.N.2A..........(..N...2...\|.\|'.(.....y......Y.N..%..............................{..l6.........d.^ov }Ek].Z.......H.Mg9.~.r.C.u[.@_.<.....2g...\|.P...A%.....I..e\....w.I.}x.Z.#..PG.pE.....jk8S..j....u)....._....%P(P.T2...I....S.m..r..}..;.v...W..2h.,:h..d.Z.E.+-.HAK.....}..S...d].....B.%&.o.\|...Z..t...7..t&....lLm...n..!r..)qx.Zq.I+.h...H.~.K.'..U.M=2]E...1....-.v.VR...$..U...E...q/...(.,v.J..mrm..%.....=.......C.eB.+.-..4...93N.....!..e.+.FH.M.a...@.@...R.D...'.F.lLp..p.C..>uh.>.C...... .....O,{...........F...2..6..n..G....,...#D.f.\|.-.).Y}q......g....6...V]+.\.#...3IW...5..FD.mk.b..`yN.......J\.AKN\|j.@4.0.........-.8:gRe..y..>....*..d...e>....b.V..P.H&zH.M.\Z"M.(.X.]c....[:.i.z.}..Dk..V.L...Z.-.3x.#.....3..k.. &..k...-J..r.3-.D.D..J...FV-cu...k......8..J..%..^)..+f.e..{.Jq+.....V.SDqd..F.,.?..j..=...eD..E..<..K..}..A..-X...DG._}..x.#..Zd.%..0O/Y..

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	741
Entropy (8bit):	7.305905854600736
Encrypted:	false
SSDEEP:	12:6v/7+sdfTdduMOFRGvfmFJh466Gv619sHQ1sGgklyxDRT+qhs7fnKwUvkl/N:IfTiPfGnyw6nv6KQ1NTyx5I7KjstN
MD5:	77201A61A374CA65E4716E1E6339116C
SHA1:	4A650B4CC33ADE24ACF3E54B0661FE2EC40490F7
SHA-256:	4CA23AFD320E3733B1C49C6A4BAB755BA638007158AE61AB720819F0903005AB
SHA-512:	EE861B9E186CA5EA0BEA368ED5876A97CC9FC8693D295679563ED4720C2953EDD321A61D6EBB9A89FA1A8C64FD242FECB30A855634A5470B48568FE3C55E5F4E
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/images/usa-flag.png
Preview:	.PNG........IHDR...0...0.....`.......tEXtSoftware.Adobe ImageReadyq.e<....PLTE...&J....5V.Rn.Cb....J=jo.........._b...>=m...............}...FJ`z..x{.........o..1>q....SV.ko...`{.........wn.....w{}....kn.>x.:>........BJ...2tRNS...................................................P......IDATx...b.0.E.....Um..@....LT......y.{Hr3Y,i(..K.tx..`>......f.>f......P......L..Z....t@.\.T.p..P4.p...R.`.`.K.7yW...N5.......E..Ik.<r+....h.....V.......)]."..C.o...w..B....x....e$.V..J.....&.".....#.C&....".J.#.Z<1..3K...R...{z.}..,R.C........z8 .q.~..bA)m.....^...PJ..>O...\|(.\..U.M'....4..]..........3.......@`...~....q..4U_..0..\|..........j...h..2ND..A..4..R.....[t,..==..z...o.8hV.*H.^32.m2..f.t...`.X...C_.....IEND.B`.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1112
Entropy (8bit):	7.728432676395773
Encrypted:	false
SSDEEP:	24:pNxbHhviy8nfT3yDWAYGl+1X2J6G7yGvuZO3p1H+5dkA7EmQBCOM4o/6rs90e9/N:5bHD8fWDWkcNG76ZOAqAomaCx4oCQ9bl
MD5:	32A822DD3254736A59D3FA41F2ABE94F
SHA1:	242EB96A440597F1AFDF3EA54BACCDCAED80AD62
SHA-256:	5A592EFA471F5B29203DF9973BCDF913EE26153D5B6028CE542E83CCBE24399C
SHA-512:	04236566D7EFB17534F2A21B0CE4C9463A4F797166E49A0F8AF4F5462F1FE77E91AA0B881272F80667BDD1E5F5E74A019B2D178AC5D811B8284BCE39A83CD962
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......%.....IDATx..YHTQ...LEFQ3.h...-.!3.@+[.\|)..E.b.L.L.D.2..L.I.......V.....-0.}3...........{.9r.^~......w9.w.&....,..{.f'...N......0;..a.X.....7/....33..)..w..1...].^n..\|.'']sb...........'.C.......Wf.!!^.`` ..H....V.'...d.....7m....wn.?...^.....T5..yEG...../....{.x.....s...z.<_.......hn....4.]]....u...Vh..6}.N'.K../+.Cp.z.%.....11..8\|HY.w......W/..~hPz...Q...F.+4..V]..G.m.1.F7...D.]..B..&.m.......p.R....H......S.D.....0!Q......Z...BO.+4...\|1.O.t..ND.:.N..Cx..a........{......[...T0?...@..C.:.@......(.&:.. ..hf.~0-..d.W......a.....4..)6.D....Q1:.......m.):.Uhl@J....).........btPT.f.7.kb..Q.......6@j.h3OQXRb....J...;..~.V....6.....^.A.......4...F..W.......C .....$7[.f....>. 5..U.A.".7.VEp2 6.4.D...........z*x........3....H.is..p......~KUs.(.pp0H.9T..[P....<..n...t.j............0....d...C`9it.c.~JHC.K......t.}.Ch9..)7W;.....1..R...r..uP..Z9../.N7.=......u.V$.f..Ay..L!.f........D3.s.T..[H...H=;....W.Cx.....64....>..w.aox..

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65324)
Category:	downloaded
Size (bytes):	159515
Entropy (8bit):	5.07932870649894
Encrypted:	false
SSDEEP:	1536:a7OIJNT48SyEIA1pDEBi8INcuSEFO//uKFq3SYiLENM6HN26F:a7Za4GMq3SYiLENM6HN26F
MD5:	7CC40C199D128AF6B01E74A28C5900B0
SHA1:	D305110FB79113A961394B433D851A3410342B8C
SHA-256:	2FF5B959FA9F6B4B1D04D20A37D706E90039176AB1E2A202994D9580BAEEBFD6
SHA-512:	CE79937F81CDA05F54EA67C1E8A96101285B46F6EDE02BC2687A0D574832B2C7D3A0D43FF40D1E35D51BBEC4B038852825D323146DA7752BEBD0BA37669B13A9
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/lib/bootstrap/dist/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.4.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors. * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3311), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	67287
Entropy (8bit):	5.155954988934228
Encrypted:	false
SSDEEP:	768:qhtwRMfP3PusEHZUj8ZkrbKwhaAQBF8K1hOnhkI9ckm4tbaL:owRMfPmshkgmY4
MD5:	C22E7BFF551A8AEB0467F8FDE9ADBE8A
SHA1:	45768F72C971B14F1C82CAE77CD46A4CA2A36B8F
SHA-256:	C4C73AE404E14C6BE2FF1F6149393D5CCEF9267AEEFBF4C4F9B9AB632FE9A328
SHA-512:	3A37DD390F57C571A880489C7E01708AA5D7D477D68C2CA1723301F62BF35D6790DEB36B64DAFB656E2F47FFCD6A0DD4491BE95468DDFF799808621399BC3648
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/
Preview:	<!DOCTYPE html> <html lang="en"> <head> <link rel="shortcut icon" href="/ResourcePackages/Safenames/assets/dist/images/favicon.ico" /> <meta charset="utf-8" /><script type="text/javascript" src="/WebResource.axd?d=DzHrpQl5URXarFHAtrmzFvvwtxERElSZ_b2Ca1mxtmzvyTwDr6K2uqyW80PraHwZqn7BbM5lQGIiy7biXNxjLG9gJ71MSZTcvi7eeKKPJBLIN5mVSMeRsnLnzbDpw9vtrgTOqyeHT00x826p9zjpJthZ-3nX299B5pryZnfavheEFwbHupd-iASOQMXwlLQK0&t=637824974880000000">....</script><script type="text/javascript">...(function() { TrackingConsentManager.init(''); })();..</script> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <title>...Safenames - Global Domain Search, Registration and Protection..</title> Google Tag Manager --> <script>.. (function (w, d, s, l, i) {.. w[l] = w[l] \|\| []; w[l].push({.. 'gtm.start':.. new Date().getTime(), event: 'gtm.js'.. }); var f = d.getElementsByTagName(s)[0],..

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2601
Entropy (8bit):	5.179764967459329
Encrypted:	false
SSDEEP:	48:F1ySkuwoQpoU10oUSQQs1QUQRcs0mOWO5irJvdR:FccQpT0EQQs1QUQRcs0mOWO5yJvdR
MD5:	97EBC9CB289EDE4C54584315A09B09D2
SHA1:	4E5DA6F3E0B9687C9B39E16CED75F69BF0CAA4D2
SHA-256:	27538D6AE38B2DBFD94397E1B8E4DA7BDEE3D035AF41C836DFA881CD28F6899E
SHA-512:	6648718F83385A811213EECDFC0477E95C74236D6ACB30CFC61EF70A097AADA29FEA5BB2308328C87297618356E253F149546E6EFBF6CB03C7BBA0AB34DD07EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" viewBox="0 0 60 60" width="60" height="60"><title>Exported from Streamline App (https://app.streamlineicons.com)</title><g transform="matrix(2.5,0,0,2.5,0,0)"><path d="M 23.047,5.219L19.09,1.113C18.713,0.722,18.193,0.5,17.65,0.5H6.35c-0.543,0-1.063,0.221-1.44,0.612 L0.953,5.219 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 23.5,8.5c0,1.105-0.895,2-2,2h-19c-1.105,0-2-0.895-2-2v-2c0-1.105,0.895-2,2-2h19c1.105,0,2,0.895,2,2V8.5z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 23.5,14.5c0,1.105-0.895,2-2,2h-19c-1.105,0-2-0.895-2-2v-2c0-1.105,0.895-2,2-2h19c1.105,0,2,0.895,2,2V14.5z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 4.75,7.25 C4.612,7.25,4.5,7.362,4.5,

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20359), with no line terminators
Category:	dropped
Size (bytes):	20359
Entropy (8bit):	5.211108295473236
Encrypted:	false
SSDEEP:	384:94hLSLf4UzgCyKnxRsyPMbOXrEQAkxHOxvqAQD75zfS5vIXm3YzGp/ARdOgHhgzo:WLSLAUzgCpRMbcxHOxvwD7pS5vezy/A9
MD5:	9BF5A03B1750920E9269D18DF7F2D1CC
SHA1:	397DA8DBE84F5B8FE6405E71E865C56BBAA8E684
SHA-256:	8BC4BD8DA3CD43294D524E6C4C5DBF78DC5AED742BA68F08FB1A56C6ADE7C1A1
SHA-512:	708DA965E40B118E01173AB4380B6261BDD4BF66B5E1CA6210CF56A8F3DC285EDAF631EFB78268371D29622A58F9116EE9EE17BC4C1482E6FEE1F3D6E81C5F27
Malicious:	false
Reputation:	low
Preview:	(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return/(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function r(e){return 11===e?re:10===e?pe:re\|\|pe}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.body:null,n=e.offsetParent;n===o&&e.nextElementSibling;)n=(e=e.nextElementSibling).offsetParent;var i=n&&n.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(n.nodeName)&&'static'===t(n,'position')?p(n):n:e?e.owne

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5232
Entropy (8bit):	4.486210242453492
Encrypted:	false
SSDEEP:	96:6h/XqxafLr/YeWE+LYKG1MO7Sj7h6oN7nBOLe:6JTLcjE+LYQ4ScoN7n
MD5:	1DF5D198B80A6389762E9533E15D6D54
SHA1:	379DABAF752D5BF532467B389673701C80E8398A
SHA-256:	4EA91ED7073AAC5BFCC527A36195613A1B4A961F1153C01EB2FD0F6472B07112
SHA-512:	82BEC184FAFBF41EAE6C6D96118EFFC956C475BFABA6CC460E4ABADD58570EBAAD89DBC5FE11E90B81BD67891C0D3F25B82302CBDD7961552FDD59F53E04236C
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ResourcePackages/Safenames/assets/dist/images/safenames-logo-white.svg
Preview:	<svg id="SAFENAMES_LOGO" data-name="SAFENAMES LOGO" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 677.17 167.42"><defs><style>.cls-1{fill:#fff;}</style></defs><title>safenames-logo-white</title><g id="Safenames"><path class="cls-1" d="M248.44,94.42v2.14h-6.95V95.13c0-9.29-5.41-15.94-19.82-15.94-14.61,0-20.23,5.52-20.23,13.7v.81c0,10.63,8.79,11.75,22.28,14.82,12.87,2.86,25,6.13,25,21.66V131c0,11.54-9.1,20.23-27.38,20.23-19.83,0-28.1-8.79-28.1-22.07V126.7h7v1.84c0,8.48,4,16,20.94,16,15.84,0,20.13-7.05,20.13-13.48v-1.33c0-9.5-8.58-12-21.86-14.92-13.8-3.06-25.44-5.21-25.44-21.35v-.61c0-12.57,9.09-20.44,27.38-20.44C240.17,72.45,248.44,81.24,248.44,94.42Z" transform="translate(-38.06 -33)"/><path class="cls-1" d="M256.2,132c0-11.24,5.93-18,23.3-18,8.58,0,15.22,1.53,18,5v-9.3c0-8.48-4.6-14.71-16.14-14.71-9.1,0-16,3.58-16,11.75h-7.05c0-11.54,7.56-18.39,22.47-18.39h1.95c14.81,0,22.17,8.58,22.17,21.56v22.17c0,12.36-10.32,19-23.5,19h-2.15c-14.2,0-23-5.72-23-17.77Zm41.28-.21c0-8.07-4.5-11.75-17.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 140, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1054
Entropy (8bit):	7.020921442272497
Encrypted:	false
SSDEEP:	24:xYVll0b3aL//bNx62XNf1MS22hzRppWOMI/OtUcYmVMGfHA5hs:6P//Jx6WN9rRppuvRRzA5O
MD5:	55A9F91BE33F83BB9F1ABDBACE3E6627
SHA1:	E94545C528CC59A2FECF96A43941FC3ECCA766EB
SHA-256:	6375AEFDB85710FCC5A036A216CAA8B955B7D63EFCF7CF345EB1A0E0E8E617EF
SHA-512:	E5D5C94115374356A166B6A7EFE2CA3F660F7A3A4644000A46F491A9111957CB878D479AD295E13ACEB2086253BCB8A1D4B6060B6BE9E3601A4C6F8620F249C0
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/vision-statement-icon.png?sfvrsn=8023281a_2
Preview:	.PNG........IHDR.....................PLTE..................................................................................................................................................................................................................................................................I^M....StRNS........... !')06:<?@OP]_`dgmppv\|..................................................:......xIDATx..{[.0....@..eNPA.7.7..v.M@@l...._E.)..e9g....{.X.4M..].S.................n.,Y..ra=.ij$K..]..%.....H..v,t..zk....-{?.......n...~..H.j...bS1.".e.m'.....r....W..r~Z.D24\|....Ltv.>."c/-.vE..h..).20..A&&....L....c.2t..[z..\.Yu..z.TC..Tq.....\y>.....`.\e....r.._......>f..}...ZC...23.\..=..>..dV....zVw....fo....F...H..\6*...D2w..W...;....R.;.w.b>..72z....F.......E...2S...@.2...d ...@.2.(...........FfG/nL..^lL.L1%24.6..w.\:$.W........k.m4.i45.......;.&.>MJE;.d..eT.......R._...1F".[...'(.cM.zJ~.p...'..2.......'L.(B..N%;.....4..F.t.'..../......q....6.Ib....g...L'.._

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3311), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	67453
Entropy (8bit):	5.1596416594448735
Encrypted:	false
SSDEEP:	768:qhtwRMfP3Pu8IHZUj8ZkrbKwuehQBF8K1Ie4hkI9ckm4tbaFs:owRMfPEeHVkgmYos
MD5:	C2DEBE0A4BD8578A602CA3C0C5A36B6E
SHA1:	577538B0F5A04F19F85BFD265472A80E42102202
SHA-256:	E5FDDBFA7161C76202F3F1D71D69C501A4592AF9FE19DB0F50E3D41163B46199
SHA-512:	9B1102A5E51520863009C0CB2B73CC4C0479B2075462248F2520FAA78503E9E98F83B78ADA9CF13B6AE267B7B1FBA89B8FE70173B7CCBE42193CBF111E157EBD
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/?ref=lndrdr
Preview:	<!DOCTYPE html> <html lang="en"> <head> <link rel="shortcut icon" href="/ResourcePackages/Safenames/assets/dist/images/favicon.ico" /> <meta charset="utf-8" /><script type="text/javascript" src="/WebResource.axd?d=DzHrpQl5URXarFHAtrmzFvvwtxERElSZ_b2Ca1mxtmzvyTwDr6K2uqyW80PraHwZqn7BbM5lQGIiy7biXNxjLG9gJ71MSZTcvi7eeKKPJBLIN5mVSMeRsnLnzbDpw9vtrgTOqyeHT00x826p9zjpJthZ-3nX299B5pryZnfavheEFwbHupd-iASOQMXwlLQK0&t=637824974880000000">....</script><script type="text/javascript">...(function() { TrackingConsentManager.init(''); })();..</script> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <title>...Safenames - Global Domain Search, Registration and Protection..</title> Google Tag Manager --> <script>.. (function (w, d, s, l, i) {.. w[l] = w[l] \|\| []; w[l].push({.. 'gtm.start':.. new Date().getTime(), event: 'gtm.js'.. }); var f = d.getElementsByTagName(s)[0],..

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1165 x 720, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	46479
Entropy (8bit):	7.842070529004446
Encrypted:	false
SSDEEP:	768:/X/+boML118d8W53g394PSEHD4a0T2L5zCe55S9zDsYjRR+q:3+hU8W5Q3KTjnLWDsG7
MD5:	9326632D47E707DFFE4DD7381116CA37
SHA1:	F7EB03E6AF40C4203FC8EFAD6EC0EAE8BFF9C782
SHA-256:	FE6363E1595A69F773BACE1912CF4EA4A7067A432EC3D14826B20D9BE35715BA
SHA-512:	B69FC3977A38B3FC26B181FEDFF2F21B5C5B9EDE0CF4E8186FE75D890DC2B9CC773AAF6DEF2EA2A31BAD973DD16CF22E1C4D62E31CF539564A2A57DD70A8807C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................'....gAMA......a... .IDATx.....Gb.Y^.-i%......JZ.V......{u.u..fli...!g.v..1.H....O.....8H..!@..I\.A.... .....\|x...pxa.angUWwVVfUuw.../.........;3.q................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................C.!..B...........B.!..B..........B.!..B..........B.!..B..........B.!..B........"..B.!.......).aA.!..B.!T}.@.Rt..B.!..B.....Ptc..B.!..B.....Rt...B.!..B....9P..B.!..B..%.H../h..B.!..B(-.@..}.v..;..B.!...PE.y.I..../.nR.7...B.!.Pw..>O7..,.}qb. ..B.!...Q.}L.$..(...4B.!..B........F.1.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 302 x 170, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6228
Entropy (8bit):	7.947970045393425
Encrypted:	false
SSDEEP:	96:AHZ4/cjtsZQUTYyd863TWPVxlJmNWKVEdf5kDlF7nk1bdAIpNKmn:AHIcjtsZl0y+ETKlJmNxVSxM7nYbdBDn
MD5:	438ABB572D83B1C60730E22AB218F8C1
SHA1:	EAEC73182CAA98B4CE8B215CB29580B059A438B1
SHA-256:	5A0381E6DBC1FDC6B57A6CBDDE1D911543602DFB2B500265BD9E8871C51D51B4
SHA-512:	46627712D9B70A6164EC55ACEF0E255F221201466659D27B85C3A61AC6BC9D36FD5F9EF84CF5298CA754D954357C21768FC2CF7B0A0713F781CD00BEBF91604F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............$.R.....PLTE..............E $!>)#\+,/U0001.K5/e6,V61f9:8:::?:e@@@A;mB?_C6QD?pGHGLHvOJuPKyPPPQL{TQnVVUXT.ZU.[W.]HE_Z.```d`.dbpddclh.pl.pppqn.rrqxw.yv.\|x.}z.............................................................................................................................%...............................................................................................................s........V.............:........................l..\|..... ..^.....@..P..`..........................lD....IDATx.....U..ST.q.@.\|..V.9.........!.p`.....c.`.%,.B.....z..+..B....I..-...>~.YZi4^}..7o.F.r...y...K..j..W-9.%G\....q.#.Z..5.R&.\Z.(e..YG.Q...n...G\u...q.#.Zr.UK..j..W-9.%G\..p...{JrM...Bl.OI........t.zp-:..!..$.+.1Q.,..k.5.y5Yd.OI.....!.!8.%.b.n%.o........X)_..\.5D4Hm....pyB..q.]....8.j-..%..k.EA....._Uq..QX..u..RB.5.Um.T..Tx.R6.Ye.R......^/......o......R...!W7.......&.4.T.zqa.GK.i..S3_...g....ng....xs-

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7988, version 1.0
Category:	downloaded
Size (bytes):	7988
Entropy (8bit):	7.976634341327701
Encrypted:	false
SSDEEP:	192:YF5+QNNaoq2GlZe983e2+sJqksOyM3RNgeViT65fGPhl:yZADf+0HQKYQ5SX
MD5:	E8794816C5EAEAA9DD20A6D77EA3B272
SHA1:	B9020008AA06C82044F461E85590D5D69FB4568A
SHA-256:	0FE2AA289162AF5650C4A5AD04948ED0872B83982060632F75B9DBD8520D2C8B
SHA-512:	192FCBCDC780B6394AA891D91F4429BDC2A3745CFA88988D0884183B073BAE188E7CF0342011FCD88493630BD3F29C0027CF38346B34DB0F8E9967C1B1D825CA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v8/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
Preview:	wOF2.......4......>.............................. .0.`..T....(.Z..6..6.$..h. ........1.#.l.....N....f.U.M..?h.I..}c...Z. 0@I..6... h...9.&....#.1.<..~.......d<.M..9Tu.$R......xB.......,&..9G.B.TZ...\.Eh..uVLW...w...U...7\|..U-..^T../]..J......RT..M.(3..=..(Lj...`.2.2F."3mU.6...".g.=.1...g......Q...A... ..D..r..E..cq.o.l..Z..Q..4........6...7. ..YK..L$y}s{...B.LO...\eR...C...r...M..B.2..c...."y.....ac...)..I...{.(.....,.'......$.......,............aw?......8....n.).l.)...I9..6.(.s..gv@.....<.....lo....jX...U..=.I.%.....[nd:.....R.).D!..D$....BI...,p......g:)..w\.j...~..t.l.........z...'.N<..d...G}.......i.\|.g.....G..:1.(Y..V......:.b.2........7o....M..w.........[./.c.....z.hnaC../.#z.'dA.K-V..K..z..v...ME...pI&..\..$BZ6)en..9.....9....f.Y.hi.6911.ab......(..Oi.%f,'.3..#$%..p..8\..V....i;........QW..T..du..I.s&.FrQ^R..ci).I.&. qb.PL....y.pi.oDqq..'O..l. ..r.&.........p....Kq....S.&.R.^._...\|........6cTY.F.Q.."1/.0.G....a.X.D.'@.+U.A....V=..7.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6614
Entropy (8bit):	5.460526399716248
Encrypted:	false
SSDEEP:	48:4ecQtomLjGNkoZOktoMjGNkoACuOtomRNkoAitomNkoAqtogNkoK:lopNpovNc6oMNc0omNcMogNG
MD5:	113204824FCA3A3AA9F122883C8663F1
SHA1:	F894F1B2094A210975A86CEB53C16CBAEBF0AA68
SHA-256:	4BD6CA70739EA49133D54ADA3CB87AB96B5C16952AB45F0C393EE4599C851EF1
SHA-512:	8B187E50ADFCFFAB838AA7B4ADE10EFDADD173D4F422C46B0F16C9500AEF81CBA4582D4BAE19E7ABDAA2408B16B8CA3B47C4E44C395357AB987AD0E97FD80E3C
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ResourcePackages/Safenames/assets/dist/css/fonts.css?vrs=115
Preview:	.@import url('https://fonts.googleapis.com/css2?family=Poppins:wght@500;600&display=swap');..@import url('https://fonts.googleapis.com/css2?family=Nunito+Sans:wght@300&display=swap');..../* devanagari /..@font-face {.. font-family: 'Poppins';.. font-style: normal;.. font-weight: 300;.. font-display: swap;.. src: local('Poppins Light'), local('Poppins-Light'), url(https://fonts.gstatic.com/s/poppins/v8/pxiByp8kv8JHgFVrLDz8Z11lFc-K.woff2) format('woff2');.. unicode-range: U+0900-097F, U+1CD0-1CF6, U+1CF8-1CF9, U+200C-200D, U+20A8, U+20B9, U+25CC, U+A830-A839, U+A8E0-A8FB;..}../ latin-ext */..@font-face {.. font-family: 'Poppins';.. font-style: normal;.. font-weight: 300;.. font-display: swap;.. src: local('Poppins Light'), local('Poppins-Light'), url(https://fonts.gstatic.com/s/poppins/v8/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');.. unicode-range: U+0100-024F, U+0259, U+1E00-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1234x722, components 3
Category:	dropped
Size (bytes):	156418
Entropy (8bit):	7.9740084215086995
Encrypted:	false
SSDEEP:	3072:jsR+QgOyxC+4Bi42egp6+EeVGUZN5MZPGJI5kGDoKQzMDSZNB6lUGliR:wRQOyMfBg9DGENSwUHliR
MD5:	9EEF3FD87930DC1A57659BA85D369778
SHA1:	B87B00F620077D788D42F70EFB356358786D3D76
SHA-256:	5503D3004E75D6E893C2379D6E74E3BE354033AF801B7937355DBFD1D751EF4E
SHA-512:	38CDAD8755B0896F0EC44E77E58EE682E2AED8554CCBC5BBC447BAC68EA42C299AB754C7644C1126391CD6AB8B05D19C4C18A8EB40C4016708E9843FB946F43E
Malicious:	false
Reputation:	low
Preview:	.....C....................................................................C.....................................................................................................................^.........................!1.AQq.."24ar..#3B....$5Rbs.......%CDc.....St..&6Edu..Te.......U..................................9......................1.A!.2Qa."q.....B..#Rbr..3.................?..<m.....i...b........Eq.0TS.`'n..Ew. ..p....)......j+..y.J.....5.....u.;{`8........O..9..z#...........N.....v.N.vik.i.z..x.f.&......!..d.....).R.g.. m`..."...... .M...U..A{...`,.......m...S.M.j...yT..t....}.....@H..U....$...b...gy. ...H...}...6.....:......S...Gfz.$.s.T.....Y..p..H.W..U]u.YS....^Z......fJ...u..e.6..d.........m..8m..T.h$......t..F.@w$....\|...iZ..;...$...@\-.. {......8@H.?..8e...............o...8.....p.......M...>.H..H*4...........R.. .....F.J.@...:../`...N.l....N...a.....'..NT...`,.f..$.q.......#......r.....F...p..hj; ,. 8.Z..<.@.m%.~..../!. .XZ.yr..z.....U

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	316100
Entropy (8bit):	7.9879407039106285
Encrypted:	false
SSDEEP:	6144:sdsak/r+heTd9FpDJIxugXEcOOpCWGooz3f4WXubIUKGD0MMlMSUMK50:sdFkiUh9rDG5sOpyoobxIIV60MMlNUMD
MD5:	C0F7FFB88A1E9D9B514957143E7F10DD
SHA1:	C1EFF6698B97FEB3B53DA920395B789E788655A4
SHA-256:	A9B07F7BF20A950DDD027B83D8094EF374A1530F2AEBBFC43617493FEE4E5F87
SHA-512:	4803BFC28210A01305EA2773608503AEC028F1918651F63210BB85FB8545B4B9B2A407EBBD8453041B776BFC2A3991BBC39D08438EC7A909B85B74BAAB728425
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/sn-25.png
Preview:	.PNG........IHDR.......8.......1q....PLTE.....................+W.<........;........-s.q..=J\X.....NV^FNW@FNG...................=..4..'S.1[.?EOl..U[cRY`OV]...IOWLRZ...X^e]ckZaiGMU<_.7X.>EM...AHP9AJ...........9<B...2Q.......Bh.CKU>AF.......... ........-39...agn...47<.........HJOUZ_.....-I..........w..~........CFJ)-2..........................9/:FVe...w}}...nz.33....%4 ...!....):%.A...$%+...rxz~..u.....z.....hr~...19B...........hno....'.'?.nss<.....3G2.-..........PSV...O[j..#......`lx"2....3=J.........>) .{L:M&.7@.p...........5..qD7>.M..;O:...vi...@IOu#....r.%N.EYFF2(...S:...gvh=0..+...d.`..Udr8Qmq....`Ck.5H]egb`x.Q....A~3?Z0RiV....yig\9..}1$.P.:ZL)..JG<<.Z.U~.M_.....Fi.......V...yLS.Y'...r5<`EI.4G>_.@..Od>.ia......e3.R[._...\|L!Rm.d.0.....g.J........n..}...].....y.T..b{...i.P.:....#tRNS... ,8C..V#..h..q<S.^..........}$9...PIDATx.........................................................................`..@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
Category:	downloaded
Size (bytes):	8000
Entropy (8bit):	7.97130996744173
Encrypted:	false
SSDEEP:	192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ
MD5:	72993DDDF88A63E8F226656F7DE88E57
SHA1:	179F97EC0275F09603A8DB94D4380EB584D81CD5
SHA-256:	F4E80D9DFD374D02989B87A27B5ED4CB78FBB177C27F1478E9A8B0AFB7513149
SHA-512:	7C20165F9D22A86341E841FD58526209017DCDE2AFE2D0D2A89FE853D95DC69F658D25CF798C71F452DAB09843FC808C1AE87A60B1284134163ABF5A1D93E50A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
Preview:	wOF2.......@......?@.................................`..T..t...6..6.$..h. ..T.....1E.r.8...KD......2.>L.......0..c.h...y_)s...N..(._C,/.v...7B...Z..gT@....u*.\t.9....{.&.;<...j.2.H-...A.S......E..)..f.Y8vuw^.^_.n{.Z..U.h..Kcm.........E..........'.J.-.-.......=.."...E...../R.8P....>?.]...R..Ag:.Pt..j..s..pG. .!f?.Q.T.".O.....D.r......3>gJN!V.\.!....+.......X.B.v....c9.&iW-[.,.. ...Q.k%I.s.%...d...8q..._~.C.n".v0..6B.eT..?..7.....l....3..7...M...5......k......^.....F.v~\|.....3N=.....[.!......}....F(...fA..c)0X$,FYL..=).(h<4...M5..<3.c....K/.{.p....3+'W...Z.[..;.w.....X....nx..v.(c;._.W......\|.b.....{...9..A6...V\|.N...Z?+\|H/.#.W%.._.8,...>._..w...RP..-.?.k7X..".._S.3,J.........&.8Gs.?yH.Yx......I_....._o.0K......(e.Q.W....=...J.7.\k.n.pd.....s..%...sD......_..&-...(.7..6.U..&<~8...9......uV..\|h.#m\.d./!....s.......b.j. ."...wX...B.`..Bj=......VnM....p..k.%..U.F..-VN).Y........_..W.p...B..\|.j..f..7....).~....n......c.3....t.......s..>...

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	84671
Entropy (8bit):	5.280749760123156
Encrypted:	false
SSDEEP:	1536:8HyXWWcWdcBNieNO8DDejT5UKxfIzbFWX7Qp64Ai1n4aBgcl8705eZGXm:u8jWKxfI3+7v
MD5:	6B513BAAF4C77CDDC702F596C3DD62D9
SHA1:	3419650A06EE0A9BF9398EB3CF6792B202E6432C
SHA-256:	6B0FDAA32FEFFBDBD15BDA3619624E0AA8E1D647FD720E31B7645654E7FB551E
SHA-512:	F690B93FFF5D046F5EDBB806C7D09EF3EF89713F972AE613AFCC66A20A1CCBF0B520FA87AF973984D98B539CFC6E5AFA3A99F237D60B2DB155D8C359858FBF21
Malicious:	false
Reputation:	low
URL:	https://js-eu1.hubspot.com/web-interactives-embed.js
Preview:	!function(){"use strict";const e={RECEIVED_ANALYTICS:"HS_CTA_PARENT_RECEIVED_ANALYTICS",DEVICE_TYPE:"HS_CTA_PARENT_DEVICE_TYPE",PROXY_ANALYTICS_FN_CALLBACK:"HS_CTA_PARENT_PROXY_ANALYTICS_FN",INIT:"HS_CTA_PARENT_INIT",SHOWING_CTA:"HS_CTA_SHOWING_CTA",SEND_EXTRACTED_STYLES:"HS_SEND_EXTRACTED_STYLES",STARTED:"HS_CTA_STARTED",NAVIGATE_PAGE:"HS_CTA_NAVIGATE_PAGE",CLICK_EVENT:"HS_CTA_CLICK_EVENT",CLOSE_INTERACTIVE:"HS_CTA_CLOSE_INTERACTIVE",HAS_CLOSED:"HS_CTA_HAS_CLOSED",NEW_HEIGHT:"HS_CTA_NEW_HEIGHT",DISPLAY_CALL_TO_ACTION:"HS_DISPLAY_CALL_TO_ACTION",PROXY_ANALYTICS:"HS_CTA_PROXY_ANALYTICS",PROXY_ANALYTICS_FN:"HS_CTA_PROXY_ANALYTICS_FN",SEND_FORM_DEFINITION:"HS_SEND_FORM_DEFINITION",SEND_CTA_CONFIG:"HS_SEND_CTA_CONFIG",SEND_EMBED_CONTEXT:"HS_SEND_EMBED_CONTEXT",RECEIVE_FILTERED_STYLESHEETS:"RECEIVE_FILTERED_STYLESHEETS",SEND_STYLESHEETS:"SEND_STYLESHEETS",RENDER_RECAPTCHA:"RENDER_RECAPTCHA",EXECUTE_RECAPTCHA:"EXECUTE_RECAPTCHA",RESET_RECAPTCHA:"RESET_RECAPTCHA",RECAPTCHA_SUCCESS:"RECAPTCHA_

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	89390
Entropy (8bit):	5.288757723460763
Encrypted:	false
SSDEEP:	1536:BjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:BYh8eip3huuf6IidlrvakdtQ47GKl
MD5:	03C6E2AAD4C9AED58B607A23756AFEBE
SHA1:	DA2FF7723E963D7586F53E05C2A34BEF663F99B1
SHA-256:	62BB02FA91C1537EFBCE823D5D1981982D3925BCDAAC667DC6CA64F8469E2284
SHA-512:	F7E5D3AED53092D044154920EE5E0953516E783E8426F8D441ABD82F20681DF0FF3049EF9644897158EF3CC54DEC022022729B3A5FED5351589F5BDBB4CA6F1B
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var f="3.5.1",

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1578
Entropy (8bit):	5.36224331599902
Encrypted:	false
SSDEEP:	48:QOXap8RVc+ukOXap3RN0osOxMapNRVc+ukOxMap4RN0oD:QOXauVc+ukOXaLNQOxMaRVc+ukOxMaqN
MD5:	38EBD4E76856D78EA9054C482743A53B
SHA1:	63C7843CBBDA78B273EFE5FEDE2EE45DD8F7C55A
SHA-256:	995CCB65E6F0A084C4E915475A004558AFDD20E1F1563232C858B47B1E55ADCC
SHA-512:	80C87266916880B7EBE64CE9A28D8E2151213F5ABFEA4BF7259839FC93D8BB3E9605CD50DC4427179AB3F6B4E61E6BBD5DF2DB3C64F20AD8C6CE9B790D1159BB
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@500;600&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 500;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 500;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 600;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2) forma

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	208
Entropy (8bit):	4.728771953766291
Encrypted:	false
SSDEEP:	6:MKb8rRi5rbre5YC8Ga8dVs5SnP90fR0K+1GXnN48rZ658d/:MKOMti5YQxPK9+MGW/
MD5:	CC6477168031AD89E177E55852A28FDA
SHA1:	FA12E61B3ACAEA905F15BA4489B650F6C0329761
SHA-256:	E6CC3F0569EEB994D066AA38A3B3FED55EB9E11C9FC8C00FEFF925AB34CBBE0E
SHA-512:	F183592FE30215BBACFC49582C1A43523C0E2CA3F4BA207753E9B6F78261A984DB3ECE0FAFCB1B6C152EABD7A2B1933F587B359EEA21D05B6AE1C1F4FFE2EE85
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSgAEJaxNtzpTEPWASBQ1sTYUGEgUNCjEwVxIFDXZRZ4ESBQ041EmrEgUNcmzX_RIFDbpygtsSBQ0QiYCtEgUNBhDTCBIFDVRb9uESBQ3sH7baEgUNXT0SvhIFDfLEV1cSBQ3-VYleEgUNlXM7BhIFDUeNPWMSBQ1MKw4pEgUNlI4OGw==?alt=proto
Preview:	CpkBCgcNbE2FBhoACgcNCjEwVxoACgcNdlFngRoACgcNONRJqxoACgcNcmzX/RoACgcNunKC2xoACgcNEImArRoACgcNBhDTCBoACgcNVFv24RoACgcN7B+22hoACgcNXT0SvhoACgcN8sRXVxoACgcN/lWJXhoACgcNlXM7BhoACgcNR409YxoACgcNTCsOKRoACgcNlI4OGxoA

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 383 x 108, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3174
Entropy (8bit):	7.8426068216933675
Encrypted:	false
SSDEEP:	96:UpniK4DgDAZ+CPRjNvOvPheKe0D91F+Ysq4:UpniK4DgDABPRpmHheKe0DXfsq4
MD5:	51065E995F7FE471FFCB65E74CB367A1
SHA1:	E9FB2AF1E71B31594846D9791A97FBC9BCCFE08E
SHA-256:	F31A6556394649637B7524B35CC98F8AF5A77212BA2C5E32119095C925725A41
SHA-512:	46B6DC88239A1DC988622BEF6915662CBEA60B2D75193757F0CAA9A35A61CF9E8C042D24CBC9F0438A64F5B510C1C24BDB6E04D7EA60B2F77CF1BD36A182F8A2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......l.......B....oPLTE.......r........r..............r..........................r..{.... ..0..@..P..`..p.........................D......tRNS.. 0@@P`p.........e;0.....IDATx...b.....Z..,k......q..N..(.........U..t.D=V....Gsx.~.....h..R..XE..U..X...=.e........-....x.h......_h.AE..^ G....m....N............'.q.....B.?^..\]..H./.........P...!m...........j\|Y....r..9...E..+....w.{.^..a...E..H. w...G../..u...Z.J.U/..;1?g......8-D..(m..'....Hg.....Q.~..a...:.._..o..._NW;....N.ys.......+..J.i..Q....../..W9q...q.?otC.....4:xr.VS....St...'.......=.U.v.;j.".G...mH.. ._..U.44.O.?.......z...+_5.z'.o.......h.:..U..U3....F@..A..^.]..`o.l..(\|1....>.#.+...8.1#`.a.k..U..:qh..@d...J..V...W.s\G....8..._C...&...W.3......`QN.m.V1x..{Y.R.B'..y......_...Q.{Z...~.s`............H.7........9.7.....R..........;..._..M.6a.o.......9.Y.z\.%....F.x..w.....?...i....B==..~.......R..?.+........?@Qgd....}Au.?...5.....?._QS..}..x.H.......=;.f..

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1234x722, components 3
Category:	downloaded
Size (bytes):	156418
Entropy (8bit):	7.9740084215086995
Encrypted:	false
SSDEEP:	3072:jsR+QgOyxC+4Bi42egp6+EeVGUZN5MZPGJI5kGDoKQzMDSZNB6lUGliR:wRQOyMfBg9DGENSwUHliR
MD5:	9EEF3FD87930DC1A57659BA85D369778
SHA1:	B87B00F620077D788D42F70EFB356358786D3D76
SHA-256:	5503D3004E75D6E893C2379D6E74E3BE354033AF801B7937355DBFD1D751EF4E
SHA-512:	38CDAD8755B0896F0EC44E77E58EE682E2AED8554CCBC5BBC447BAC68EA42C299AB754C7644C1126391CD6AB8B05D19C4C18A8EB40C4016708E9843FB946F43E
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/who-we-are-headerf9549dc52bbb461a8ef66f0b9e1bc3f6.jpg
Preview:	.....C....................................................................C.....................................................................................................................^.........................!1.AQq.."24ar..#3B....$5Rbs.......%CDc.....St..&6Edu..Te.......U..................................9......................1.A!.2Qa."q.....B..#Rbr..3.................?..<m.....i...b........Eq.0TS.`'n..Ew. ..p....)......j+..y.J.....5.....u.;{`8........O..9..z#...........N.....v.N.vik.i.z..x.f.&......!..d.....).R.g.. m`..."...... .M...U..A{...`,.......m...S.M.j...yT..t....}.....@H..U....$...b...gy. ...H...}...6.....:......S...Gfz.$.s.T.....Y..p..H.W..U]u.YS....^Z......fJ...u..e.6..d.........m..8m..T.h$......t..F.@w$....\|...iZ..;...$...@\-.. {......8@H.?..8e...............o...8.....p.......M...>.H..H*4...........R.. .....F.J.@...:../`...N.l....N...a.....'..NT...`,.f..$.q.......#......r.....F...p..hj; ,. 8.Z..<.@.m%.~..../!. .XZ.yr..z.....U

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	448
Entropy (8bit):	5.014064186738045
Encrypted:	false
SSDEEP:	12:/DlMk7qMzJkCDI7fEVL4xfB0mRhD9vgl11Dqc1Dx7DvUE/:/DlMkDJk+IbE0p0mR19vgPxqcxxHv7/
MD5:	B20060C0F4E8A1CFF60D3FB799D2E3EA
SHA1:	F3B8F09A0046DAE5464101858F14765471FD4EFD
SHA-256:	06EB9C346A84F5100A652882B4E4C449A901206768AA8E93C57FCD2198CD5C0D
SHA-512:	8FA66DDCB2BCEBC4F5009684A42C528BED2E9A6A3537F50687BE4DB32AD82BE583A875542458DD4715F35CD3B1CD5F94C9DDCC0951EABF457A57982451AC6C38
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ResourcePackages/Safenames/assets/dist/js/custom.js
Preview:	$(window).scroll(function(){$('nav').toggleClass('scrolled',$(this).scrollTop()>140);});$(document).ready(function(){var fixHeight=function(){$(".navbar-nav").css("max-height",document.documentElement.clientHeight-150);}.fixHeight();$(window).resize(function(){fixHeight();});$(".navbar .navbar-toggler").on("click",function(){fixHeight();});$(".navbar-toggler, .overlay").on("click",function(){$(".mobileMenu, .overlay").toggleClass("open");});});

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 960x540, components 3
Category:	downloaded
Size (bytes):	148120
Entropy (8bit):	7.966154344422257
Encrypted:	false
SSDEEP:	3072:Vxpeb4CXK1k8BPL7OXSlXq1vNnXSqQZqPf/q+qdDPTCE/6Iswaw:VxGKZPLCX2q1vNX5tfdqxCWAw
MD5:	679CE6139B415DBEA487CF27C6174B12
SHA1:	2420F2C37BD97C09E7DCE8EECCB362DF1E7906D8
SHA-256:	8CD5D3F90024BD719727A6F15EFC60EBFC259E245B87767200E074E448257D0C
SHA-512:	5EA32F89BC9FC4FE456448F99A672026067666D7F2AD2964CBCD7268F90FAEEAC8A1005536A4AE5DF76F457491215503A6554E93A23BB6BCFA9B2FCEE48FB7AF
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/dons-chelsea.jpg
Preview:	.....C....................................................................C............................................................................".........................................\...........................".!1.2ABQ.#Raq.b...$3r....C...S...%4cs..5t....&DT...'6d.EUV.....................................C......................!..1.A."Qa.q..2...#BR....b...$34C..r.%..5E.............?........H.sty.....$....&....4...<F....>....8F..........V..q..2.....un.^../.....X.E./.&e.Oh.oh.?.pc..<....\.:.........~.r.....l.......+.o.E.x....0l...8sM.U.yK2....Q.1...6W.`. RqS...r..n8..9........w^r...4.=Q....$R........4i.zhm....F.S....2.p7.+.c....jK...C.t^..e..k...T.[O..cz....X.V...38b..67.."....ez.=.j_g......".c.m.......<.1.X996q..~.S1.".Re...t.&....V\uG..UT.........X..^.J6.....J`...E..~....R-....74..sC.O.T...h.....U.i.]y...y...sE/X.X........u.{....0.7v.ej.A)..B.,.......G.G.l.^....v.....H].hd..+.....j.a..J.gbL.Y.I.zE...V!.5.Z.S.OL2.gF..G....R,..\...V

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2490
Entropy (8bit):	5.131489400373607
Encrypted:	false
SSDEEP:	48:F1ySkuHsbtsVQC5BoosVUu0SeQwLlvElJdR:FcXsQC7opUu0Se1xElJdR
MD5:	0E6B6E2736543A28462B82AFA561C29C
SHA1:	DDC7EE9E19AF45184FF41DB41291B296A630CE9B
SHA-256:	912026C7DE684D9F1611DDE45901575A2E252D12CEF7C5A501A4EC9426C04F06
SHA-512:	DA9B52AB8827BC598B8261AFB6A4CAAEA0054B8AA15ADA1C0A9B2FBD539DB47674012DDB5B3CB1C6E068D8ADF987413F08FE92F901E69CEA07B3CE0E0F9EA3E2
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ResourcePackages/Safenames/assets/dist/images/monitor-thin-60.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" viewBox="0 0 60 60" width="60" height="60"><title>Exported from Streamline App (https://app.streamlineicons.com)</title><g transform="matrix(2.5,0,0,2.5,0,0)"><path d="M 6.5,8.501c0.828,0,1.5,0.672,1.5,1.5s-0.672,1.5-1.5,1.5S5,10.829,5,10.001S5.672,8.501,6.5,8.501z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 12,5.501 c0.828,0,1.5,0.672,1.5,1.5s-0.672,1.5-1.5,1.5s-1.5-0.672-1.5-1.5S11.172,5.501,12,5.501z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 6.5,11.501v2 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 12,3.501v2 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 6.5,8.501 v-5 " stroke="#4d

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20359), with no line terminators
Category:	downloaded
Size (bytes):	20359
Entropy (8bit):	5.211108295473236
Encrypted:	false
SSDEEP:	384:94hLSLf4UzgCyKnxRsyPMbOXrEQAkxHOxvqAQD75zfS5vIXm3YzGp/ARdOgHhgzo:WLSLAUzgCpRMbcxHOxvwD7pS5vezy/A9
MD5:	9BF5A03B1750920E9269D18DF7F2D1CC
SHA1:	397DA8DBE84F5B8FE6405E71E865C56BBAA8E684
SHA-256:	8BC4BD8DA3CD43294D524E6C4C5DBF78DC5AED742BA68F08FB1A56C6ADE7C1A1
SHA-512:	708DA965E40B118E01173AB4380B6261BDD4BF66B5E1CA6210CF56A8F3DC285EDAF631EFB78268371D29622A58F9116EE9EE17BC4C1482E6FEE1F3D6E81C5F27
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ResourcePackages/Safenames/assets/dist/js/popper.min.js
Preview:	(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return/(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function r(e){return 11===e?re:10===e?pe:re\|\|pe}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.body:null,n=e.offsetParent;n===o&&e.nextElementSibling;)n=(e=e.nextElementSibling).offsetParent;var i=n&&n.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(n.nodeName)&&'static'===t(n,'position')?p(n):n:e?e.owne

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2299
Entropy (8bit):	5.601530151443562
Encrypted:	false
SSDEEP:	48:kO1bayDeQ0O1bayDnFZO1O1bayD+DO1bayDpRVc+uBO1bayDnN0oD:kO1baySQ0O1bayzFZO1O1bay8O1bay3P
MD5:	FC12256B7A936C6DF654693553FC1532
SHA1:	38074BA1A667C4C44B209D92966F0DB42857660E
SHA-256:	3BA7B02118B8F32E331BC784D86060167A44B464CD559578DEA15A26AA70F0E3
SHA-512:	75279890C4C231F5678614F75C5EE12EDFC236A41B41B259DA15D76A996BBBE875679C2F66B7D115302117A593FDDEAE477D38E8E4C8D8F701444354C3810E33
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Nunito+Sans:wght@300&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Nunito Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunitosans/v15/pe1mMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp5F5bxqqtQ1yiU4GiClXvlUlM_Y.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Nunito Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunitosans/v15/pe1mMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp5F5bxqqtQ1yiU4GiClXt1UlM_Y.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Nunito Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/n

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (1202)
Category:	downloaded
Size (bytes):	3634
Entropy (8bit):	5.152206085293573
Encrypted:	false
SSDEEP:	48:AAD2qqayttKQUkn9XnoeYSZ96UsrXjMoccXnBMQOssFSVxDu5eKUk8ldUfNFjK/k:b2hZSE96UczZxMQyFSV53KGLUrKyOE9
MD5:	82F2E0C491C40B0F5CB9C89017AB8D0B
SHA1:	C20A92275AE748578021F53F95FC95E9B49E46E4
SHA-256:	5FACBB192E6F9FBE9477BF232C223BD3F2A8E4DEA84CBB6703BBACF033232BE5
SHA-512:	9BCF4046124035DDAFD73424DC0C2185FB08EFCAF015C7485ECDE0A2992F72F790912D9794533FEA70E1023EF7A3609858588F06C444C68F99A884D656800A5B
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/Frontend-Assembly/Telerik.Sitefinity.Frontend.Search/Mvc/Scripts/SearchBox/Search-box.js?package=Safenames&v=MTMuMy43NjM5LjA%3d
Preview:	.(function($){$(document).ready(function(){var searchBoxIdFields=$('[data-sf-role="searchTextBoxId"]');for(var i=0;i<searchBoxIdFields.length;i++){var searchBoxIdField=$(searchBoxIdFields[i]);var controlServerData={resultsUrl:searchBoxIdField.siblings('[data-sf-role="resultsUrl"]').first().val(),indexCatalogue:searchBoxIdField.siblings('[data-sf-role="indexCatalogue"]').first().val(),wordsMode:searchBoxIdField.siblings('[data-sf-role="wordsMode"]').first().val(),disableSuggestions:$.parseJSON(searchBoxIdField.siblings('[data-sf-role="disableSuggestions"]').first().val()),minSuggestionLength:searchBoxIdField.siblings('[data-sf-role="minSuggestionLength"]').first().val(),suggestionFields:searchBoxIdField.siblings('[data-sf-role="suggestionFields"]').first().val(),language:searchBoxIdField.siblings('[data-sf-role="language"]').first().val(),siteId:searchBoxIdField.siblings('[data-sf-role="siteId"]').first().val(),suggestionsRoute:searchBoxIdField.siblings('[data-sf-role="suggestionsRout

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	208
Entropy (8bit):	4.711338582706178
Encrypted:	false
SSDEEP:	6:MJrI8rRi5rbre5YC8Ga8dVs5SnP90fR0K+1GXnN48rZ658d/:MJHMti5YQxPK9+MGW/
MD5:	8D283606C46CFB56C76327AE69FD07A9
SHA1:	E74F7671406FA17A223D0EC399728A6DED2675D2
SHA-256:	4159DD1F40AC8E6756CA72F2348E5C30F0EFAC5EB042472020524A47200413D9
SHA-512:	10EB30206325C51196E77540785E8284F1911505F81A06FB453787FB16D66BE7E3333DFBF8BE44BDE2EA4EE1AEC9EB2BB90BB3D921AD8908CD0C7055E092DC91
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSgAEJDUdJ1P4nYEISBQ39yV3BEgUNCjEwVxIFDXZRZ4ESBQ041EmrEgUNcmzX_RIFDbpygtsSBQ0QiYCtEgUNBhDTCBIFDVRb9uESBQ3sH7baEgUNXT0SvhIFDfLEV1cSBQ3-VYleEgUNlXM7BhIFDUeNPWMSBQ1MKw4pEgUNlI4OGw==?alt=proto
Preview:	CpkBCgcN/cldwRoACgcNCjEwVxoACgcNdlFngRoACgcNONRJqxoACgcNcmzX/RoACgcNunKC2xoACgcNEImArRoACgcNBhDTCBoACgcNVFv24RoACgcN7B+22hoACgcNXT0SvhoACgcN8sRXVxoACgcN/lWJXhoACgcNlXM7BhoACgcNR409YxoACgcNTCsOKRoACgcNlI4OGxoA

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2874
Entropy (8bit):	5.118565524006542
Encrypted:	false
SSDEEP:	48:F1ySkuXoPqJdqt5q9qzHYmGky7p5WQYUW9xeTxRR:FcnPOdqt5I+PGky7pwQY19xeTxRR
MD5:	3BA48C2912B3149A87CBBD9F633DF0FF
SHA1:	547A5D613C4E796B12640E904EB7D73412C863EF
SHA-256:	6F7250AE575BDBE720169BE62CDE61264179039C4E2C2D694F85E598D3044D6F
SHA-512:	5843378F936057B7CEACD1222C188CEE5255A9AA0B38E363148224E10E96BC509BF8996FD4BED3A53A16EAD98FDFD4BFF491AE487A195F83DD560B86AA09C718
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" viewBox="0 0 60 60" width="60" height="60"><title>Exported from Streamline App (https://app.streamlineicons.com)</title><g transform="matrix(2.5,0,0,2.5,0,0)"><path d="M 2.504,0.5h19c1.105,0,2,0.895,2,2v18c0,1.105-0.895,2-2,2h-19c-1.105,0-2-0.895-2-2v-18 C0.504,1.395,1.399,0.5,2.504,0.5z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 2.504,22.5v1 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 21.504,22.5v1 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 3.5,16.5v1c0,1.105,0.895,2,2,2h13c1.105,0,2-0.895,2-2v-12 c0-1.105-0.895-2-2-2h-13c-1.105,0-2,0.895-2,2v1 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><pa

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	229380
Entropy (8bit):	5.378011180020537
Encrypted:	false
SSDEEP:	1536:bwmvBwvwtiMwe57D1pTT5OFm7eTX423SDyDbGw5frPSfFse84qaIGG4xQrZBYGCn:1BwvwtiMwa1LOFw/KEFsb9h4yt7bScYx
MD5:	5037370AF8ABCF09B73013E365DCBEB5
SHA1:	8DC50AF04CA5ADFB031312DAD916FF4FE59848B4
SHA-256:	1B49717EE4566C527CE824A1F6DB23DC4B1CEB5D539C0A249CC16010AF88C096
SHA-512:	30ECD805D37FEA8A75F8E78953348452D49B21B6C4FB0F3B79B38BFDA885A0AD7A60A447699AEC99531D516F4191731D9CC6772B8A8C38C4915560EB1F592A7F
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.ca70bc16369dcd35d4ef.js
Preview:	/! For license information please see modules.ca70bc16369dcd35d4ef.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 302 x 170, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6205
Entropy (8bit):	7.948671915394788
Encrypted:	false
SSDEEP:	96:AHZ4UBDyuxXsjUbobNAidMC4Zcuebh1EMXJMQmYa2xwr1fxCA0edp6Hf2m:AHZBygbobjMtZc7Z/d0ij+6HOm
MD5:	1C66167483455DD6AF70ABD7721F94D0
SHA1:	40D51E0E1FFD88A87FC20102062752A8AC4E745E
SHA-256:	C57F84BC42DE530E0D15755B39380974A1471431063F3EDAFEE1C4D142DDD814
SHA-512:	5DB93CA7694A7A4035468F9C2215712DCE4A27A8811FED17081E3F6761A57C40CE2ECFDD5A82ADC417CA04272C312E545411B05AC8CF1745FE46F14E1DB16317
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............$.R.....PLTE..............E $!>)#\+,/U0001.K5/e6,V61f9:8:::?:e@@@A;mB?_C6QD?pGHGLHvOJuPKyPPPQL{TQnVVUXT.ZU.[W.]HE_Z.```d`.dbpddclh.pl.pppqn.rrqxw.yv.\|x.}z.............................................................................................................................%...............................................................................................................s........V.............:........................l..\|..... ..^.....@..P..`..........................lD....IDATx.....Y..ST.q.A.\|....9......... .p`.....c.`.%,.B.....z..+..B...}g$Y?F.$.......-K.....;.3.u.Q5.y.?..#.Z:.#.Z:.#.Z:.#.Z..G...K..U&...<..Q..SxU.&..q...W-.q...W-.q...W-.q...W-.q..u.r....tM...Bl.OI.K.t..9>.]..E......).Zp.2.....u-.&4.&...).:p.Q.....K..+w).v[..@.!/_`.\|=..LZ..B....(..........f..D.Kl..K...t&Zw......R......K..m....A..^3.T..je...K..&.^\i.?C..nu..k3.l%.^\.ru..Ai....kI.J.....~.d..:_+19..W8.Wt..}..I~..\.7.B...

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 80, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1092
Entropy (8bit):	7.509542643444666
Encrypted:	false
SSDEEP:	24:r7abee5i4m/X/EsAYFSDYzva3NqoT4hvpKCHBZj0m7KX9qiXu5M/:r7Ne5i4musjIqoUhxxhvQ9Ze5M/
MD5:	0897456A7C0A7AD12861C95874D5F41F
SHA1:	5D604331565352B9927330B621AB36D6A2A0F962
SHA-256:	3E4D3383E0700F3C2A5CEA51A779A3F4571D0E0D052ABDDC4138B88CC0A34711
SHA-512:	2CD94680906D5D72B4C53438A15EF0B6FF75265EF921AEE2A1EB93E773D88EFB24B7EA9A0596AC3B69FE0BA96053ABCA814FC405C03C27A2B78C9ADCECB7603F
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/digicertpartnerplatinumlogo.png?sfvrsn=9ea9a433_3
Preview:	.PNG........IHDR.......P......+]....?PLTE...............................................................C..j....tRNS... ,0<>@P`p.........%......IDATh....0.@U.jiY.....%%..F..9..&..f4..DG..q.?.p#..7.p#..7.p.A.........W}..y..K.QJ./Y..!.)E.c..N.;..A......\|....9.pJ......Y.p....s+<L...F..b...S..<.b....MU..Xu.."m..C3..D_..2".G..4.3.^....-...../.N....>...=!.....]E..].@.L.....i..T.....4..!.M.T...Au.Y........^.c}.(.p<...-[..a.v.qC #.9.\|u..G).ZQ.3.a...l...=o.,. .9q..V....`...=.8.0..V....5..f....n./v..]...q.....\|........L..sFP....ji.......!.N.~@...@..V.u].RQw2.I2N..R.m.h./.#..K..b.. TUD..,4.c.3...4.....^q.......h.. ..%=!..tsO"...DF..j..d=).#....h..b...q....uQc.;...=...<.jA...\|=B..Z..L\|9....~~...<[..}..B.7.U...J..!..!R...EM.z..L.[.k....9..\..$...V>.(.f..!..h.AD.,!+.(\|....p.....s'..'.......I.;?\|.p..T....B.cw...N!D.KC."..LV[....!@=....U\|..A..ZM. .&E/B8 ...w.xP..F....nE....a>8./C..:.......?.B..).Z.lL...{THQkJW....0.K.."#.2..b......LP}..._~_...9..<...6....*.....$..<.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 582 x 155, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	18031
Entropy (8bit):	7.966353903425636
Encrypted:	false
SSDEEP:	384:s9uWl4fLSozO/Q9bCoN+45doo3Y/0JTpVW0zBJAy:s9usOqCLPTooo/0lpVW0zBJR
MD5:	F2094F5408027766C3BE5CC6723C1742
SHA1:	0B7B0DAAA6EE02F4114135E83447E56B4378D488
SHA-256:	673D6122510419EB77556DB82F099D7678A429459A499DFFC25A7DAAC4A735CB
SHA-512:	7B33A7F5C84E1F970DB79350F6759C25F2E3358348C6EA6422CAA5C37E8FC268B75C26031B962AC512424C76F93275F91DAA549C9E6E6ED9280F2E8A1E02E2C3
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/cushman-wakefield-logo.png?sfvrsn=11e1b817_4
Preview:	.PNG........IHDR...F............... .IDATx...x.........X.s.....Y./...;.%.....S....HU.P..f.(Q..Q..DQ.$.vR$....+A...X..6..g.=......y...NQ..H$...).h...H$..$..i$..D.$"..H$.....F".H.N"B..D".:..i$..D.$"..H$.....F".H.N"B..D".:..i......Y .H$..".YSSiY......D".$..fM......Y].......Z.u#.H.vB.55...~....E.iO>!..H$R{.!.T,..kj......'......,..D".Hm.B...'.CZ.../.Q...........GN.U.H$..d]..gj.z.....~.zi...7.-V.D../j..I.H$..d].5...=..46.}.V..........7......ZePL.G..I$...z......+..>..P..b.b....;%..W...?..q.m.a..D"..yE..e...,y.7:....k..e.%D....]+V.X..Wk.,j.H$...O.=.YeLj....~S..: m...w.H3....^.R..neH\|..F>R..O".Hm...i.5..u/R(J^.C...({..Gx.....'7..........H$....i..[....o.X.+.(..4>t..!u.Wt?x.....Z.vH$.....".!w_..~....'...d..].K.-R\|.:.pF".Hm...iB.4..i. ..P.P...../]m..".H$..:9.....iO.!..V..a..?Z....D".H...Hk..nl.y.a.K.f....A...w.$..D.H{......?.[;m....d9..Un.....7^....Gl.3EI$...H3.~}..o.*....0_..i.AH....+^.......FSGH$...H.N.Q...N....W..r.o].4=...{._../V..l..

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 650 x 650, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	277764
Entropy (8bit):	7.998747296674252
Encrypted:	true
SSDEEP:	6144:VF3hUw3XZwDY2nL0q/YkV67M7fwNC4AFUbh4vRDOg1vsZ:nhUIpwDY2nLl/YkV77fEKcheJL1vy
MD5:	11C9A421C0BB4FAD967036E995E27E2C
SHA1:	082430FDDF46E43AC35ADC88036A12CF26ADF262
SHA-256:	F7DF1B3D2926CF7B443D7305B94A9452522E77FD07E974F15A6268D2054F09E8
SHA-512:	811C4AEED685E429FE85041CE3F0A4927A45FFDC979E56C81222A2EB442AFBB757902FC6BAEC5D8481266718F6E73A5567E42FC4AC1C719C778536EEF313930C
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/safenamesblog/EdgeNextandSafenamesPartnertoEnhanceWebsiteandAppPerformanceSecurityandEdgeComputinghomepage
Preview:	.PNG........IHDR.............5.......tEXtSoftware.Adobe ImageReadyq.e<...qiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f1e2eff-511e-0343-87de-b1f85096cb46" xmpMM:DocumentID="xmp.did:3495E39B2C7711EE85DAE9C635E6CFDC" xmpMM:InstanceID="xmp.iid:3495E39A2C7711EE85DAE9C635E6CFDC" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D99B69291B4611EEB1C4C3CB62864E07" stRef:documentID="xmp.did:D99B692A1B4611EEB1C4C3CB62864E07"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......9)IDATx.....8.+&h.;."..,...H..\|g^

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65297)
Category:	downloaded
Size (bytes):	80698
Entropy (8bit):	5.262089837939735
Encrypted:	false
SSDEEP:	768:u09+zQtNHVGCcWTb7zTuBV4KtkSsMtJQ5C/xd7vPn2JNtFiH5jsHaikKrjRM+PKk:ua+OOkSs2Q5CXnFOpc6RvFvVGGZ5
MD5:	A5334E475209F965B4862F3BEDF32618
SHA1:	FAC45259046DD90B16D251739108002D67A00B54
SHA-256:	394156EE114ED3FAF968419340ECFD17F69740EB7E4F0A88D59E1F6D5BF0C34E
SHA-512:	738C1384F3C2326BB8C6C56E7C91E8928800F57E246B9F1CCBD70461FE6DD78EF04B0D19A38DDFC1D4F2FC80B4935A0BC5771494FBD664C9C3F1B7BAD6CC16EE
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/lib/bootstrap/dist/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v4.4.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],t):t((e=e\|\|self).bootstrap={},e.jQuery)}(this,function(e,p){"use strict";function i(e,t){for(var n=0;n<t.length;n++){var i=t[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(e,i.key,i)}}function s(e,t,n){return t&&i(e.prototype,t),n&&i(e,n),e}function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter(function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})),n.push.apply(n,i)}return n}function l(o){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?argumen

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64990)
Category:	downloaded
Size (bytes):	72407
Entropy (8bit):	5.4125016514290945
Encrypted:	false
SSDEEP:	1536:zyLhbg6b717QRA3iovGlNORlHakoOoz0y5gTNNty4jfKRYGCgGBT3E:ZlNilbo52TNnXy6u
MD5:	C638139166E2A1D5E1A0F0CA55A3E3AB
SHA1:	7E56704BD69DBFC53E7E5C5D346A5C7E7AC8096A
SHA-256:	973361BFE8DA18DB085B671080BFDA26326275E4137DFA18F8F5C4446A3C1FF0
SHA-512:	2BE7A00E298B5F231A171939FFBCD8458C777A697A56883B3F4567F1063A698FC90BB829A61B322697A0B6D65675CDA30F425FCE1B55A40EE92E82B7A8F209B4
Malicious:	false
Reputation:	low
URL:	https://js-eu1.hs-banner.com/v2/26584007/banner.js
Preview:	var _hsp = window['_hsp'] = window['_hsp'] \|\| [];._hsp.push(['setBannerSettings', {}]);._hsp.push(['setCustomizationSettings', {}]);._hsp.push(['addCookieDomain', '.hubspotpagebuilder.eu']);._hsp.push(['addCookieDomain', '.hsforms.com']);._hsp.push(['addCookieDomain', '.hubspot.com']);._hsp.push(['addCookieDomain', '.safenames.net']);._hsp.push(['addCookieDomain', '.hs-sites-eu1.com']);._hsp.push(['setApiBaseUrl', 'https://js-eu1.hs-banner.com/v2']);./*. HubSpot Cookie Banner Code Copyright 2024 HubSpot, Inc. http://www.hubspot.com. */.!function(e){var t={};function n(o){if(t[o])return t[o].exports;var i=t[o]={i:o,l:!1,exports:{}};e[o].call(i.exports,i,i.exports,n);i.l=!0;return i.exports}n.m=e;n.c=t;n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})};n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};n.t=function(e,t){1&t&&(e=n(e))

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2588)
Category:	downloaded
Size (bytes):	87556
Entropy (8bit):	5.422257805660468
Encrypted:	false
SSDEEP:	1536:lcO6062iW2hRZAhgZ+R3bggBKP5RZnCtRGXRk7tlWQcewnHlVYDO2hgVh+g:gzXi/39GKLUYOAgvB
MD5:	68857600BBF639B39498BAD51141B661
SHA1:	4C5FCC826CFD4D4CB2812AC5DCB762DBF7D733D7
SHA-256:	0DDF3F45213FEB92AEF849AF0F743C4676D8C1BBA71BDD67EED60112C0E1B64C
SHA-512:	01FE4848B3CF8075A166D88D705CE04B334B9AB8485F84CE1932A2398F4272EAA461966FD226B81C4EAF41804A4FFF95627AA2D509088607A9138AE89569BC6E
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ResourcePackages/Safenames/assets/dist/js/bootstrap.js
Preview:	(function(global,factory){typeof exports==='object'&&typeof module!=='undefined'?factory(exports,require('jquery'),require('popper.js')):typeof define==='function'&&define.amd?define(['exports','jquery','popper.js'],factory):(global=global\|\|self,factory(global.bootstrap={},global.jQuery,global.Popper));}(this,function(exports,$,Popper){'use strict';$=$&&$.hasOwnProperty('default')?$['default']:$;Popper=Popper&&Popper.hasOwnProperty('default')?Popper['default']:Popper;function _defineProperties(target,props){for(var i=0;i<props.length;i++){var descriptor=props[i];descriptor.enumerable=descriptor.enumerable\|\|false;descriptor.configurable=true;if("value"in descriptor)descriptor.writable=true;Object.defineProperty(target,descriptor.key,descriptor);}}.function _createClass(Constructor,protoProps,staticProps){if(protoProps)_defineProperties(Constructor.prototype,protoProps);if(staticProps)_defineProperties(Constructor,staticProps);return Constructor;}.function _defineProperty(obj,key,value){

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	741
Entropy (8bit):	7.305905854600736
Encrypted:	false
SSDEEP:	12:6v/7+sdfTdduMOFRGvfmFJh466Gv619sHQ1sGgklyxDRT+qhs7fnKwUvkl/N:IfTiPfGnyw6nv6KQ1NTyx5I7KjstN
MD5:	77201A61A374CA65E4716E1E6339116C
SHA1:	4A650B4CC33ADE24ACF3E54B0661FE2EC40490F7
SHA-256:	4CA23AFD320E3733B1C49C6A4BAB755BA638007158AE61AB720819F0903005AB
SHA-512:	EE861B9E186CA5EA0BEA368ED5876A97CC9FC8693D295679563ED4720C2953EDD321A61D6EBB9A89FA1A8C64FD242FECB30A855634A5470B48568FE3C55E5F4E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`.......tEXtSoftware.Adobe ImageReadyq.e<....PLTE...&J....5V.Rn.Cb....J=jo.........._b...>=m...............}...FJ`z..x{.........o..1>q....SV.ko...`{.........wn.....w{}....kn.>x.:>........BJ...2tRNS...................................................P......IDATx...b.0.E.....Um..@....LT......y.{Hr3Y,i(..K.tx..`>......f.>f......P......L..Z....t@.\.T.p..P4.p...R.`.`.K.7yW...N5.......E..Ik.<r+....h.....V.......)]."..C.o...w..B....x....e$.V..J.....&.".....#.C&....".J.#.Z<1..3K...R...{z.}..,R.C........z8 .q.~..bA)m.....^...PJ..>O...\|(.\..U.M'....4..]..........3.......@`...~....q..4U_..0..\|..........j...h..2ND..A..4..R.....[t,..==..z...o.8hV.*H.^32.m2..f.t...`.X...C_.....IEND.B`.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Category:	downloaded
Size (bytes):	7748
Entropy (8bit):	7.975193180895361
Encrypted:	false
SSDEEP:	96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7
MD5:	A09F2FCCFEE35B7247B08A1A266F0328
SHA1:	0DA2D17E738F46D2A09E6FB7969DA451719A9820
SHA-256:	CD36DE204ACA2D5FA263A731F7C20009B5E3D754BA1F1E03C33E93A48F3E7446
SHA-512:	5E3F9A298003B84250EC6801E08AD2A4FF8845D4C3E13EA61BEC37DA24D26EDE13B436257882124CC0C27E9A323BA92E7D23C6AD3F48A7B75535F5ED98813A0E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
Preview:	wOF2.......D......?p.................................`..T..0....6..6.$..h. ..H....82EF.....E...........W...b.....b..l...Qc/.....G4.]Rc..C...9J....>W..A.#..~.$.-.....}.......$-.........B1..;<....=.FO... R..%......9.E.s..M6.k.-_.^.?...._...lI..59Y.f\|..&..J..<8....e.zip".......q...u.?Y.....I.:MA.d.Y....0>..E.....a...H...:.....A.j.h.P.......A.+.l/j........d....r)Y>..V..@E\Q.k.E..(....6..yf.)s..O..z..........`Q.La'N.t V$.. t".ZDb......U.A.........p~.TW.K....y..^.(.;....K.TO.l... {s..M$ ....!....a..^.y...._...H..e.lKD.#..9.$...!&.19.9I..R-..b...TD&...j...xol.[...~.!.q.%..M..>...k.K.{5......+..U....34........[R.GZF.s}&...#g.P..Y..zF..-&..Y.i.3...I_3..Q.....`i....F{.z..>0....N...16.i.@.........5D3..>.._o.0M+5qI.ds..o...1v.!zx..T..b.w.:.....z$...s..x...v...e.&.[.qb.P..Gt....D.3.. ..W.^f.C(...t..`.\|..0.Z.C\|..)...0....Y.Q...m.k...-VmS..6p..%7.o(0p..4..S7..i\.....v.k.+S)J....+..../....xv.9.W..nR.CG..f..\|....Y...'W.....\|b<.wN@....-[....l.P4#..=...[

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1469
Entropy (8bit):	4.92190616617412
Encrypted:	false
SSDEEP:	24:tuLx/jHxM3vFHx8G/GuBCh06KREyCstw+xQo7vPo8CZbSx5+d1NwI:sxLKdHJOutRvC8xQo7nxCdSx5uH
MD5:	A9027DA743C92D75CACDF7A99EF33605
SHA1:	90E4DCF19FFC2D9274FCC7942C1696AAEFF3C38B
SHA-256:	45DB0C237CF2B34DD6565DA3D6894DCCFB942341F66CD8C86965CD8380453708
SHA-512:	3FC6F2B86F6A2494A6D5CD68AB3BCAE42E853A8C634CCBE067A9EC9C7E1B2075DEC56108372F0F09718A70330804B8D10A3430ADDBDF2DCEE6F57FCFB1FC5BE9
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 364.27 361.41"><defs><style>.cls-1{fill:url(#linear-gradient);}</style><linearGradient id="linear-gradient" x1="-96.15" y1="312.11" x2="160.26" y2="55.7" gradientTransform="matrix(1, 0, 0, -1, 156.09, 364)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#00aeef"/><stop offset="1" stop-color="#00a8e7"/></linearGradient></defs><title>cog</title><path class="cls-1" d="M323.74,151.76c-2.93-14.64,8.83-31,30.9-46.47a180.85,180.85,0,0,0-24.71-40.63C306,77.13,286.1,80,274.45,70.66s-13.16-29.4-6.22-55.43A182.18,182.18,0,0,0,223.22,0c-10.29,24.92-23.68,40-38.61,40.31s-29-14.07-40.39-38.46A180.85,180.85,0,0,0,99.9,19.08c8.14,25.7,7.55,45.83-3.67,55.69S65,82.62,40.56,71.27A183.71,183.71,0,0,0,17.69,113c22.74,14.46,35.23,30.26,33,45S31.8,184.1,5.78,191.11a184.49,184.49,0,0,0,9.31,46.61c26.72-3.54,46.43.55,54.19,13.3s2.31,32.14-13.13,54.23A182.67,182.67,0,0,0,

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	316100
Entropy (8bit):	7.9879407039106285
Encrypted:	false
SSDEEP:	6144:sdsak/r+heTd9FpDJIxugXEcOOpCWGooz3f4WXubIUKGD0MMlMSUMK50:sdFkiUh9rDG5sOpyoobxIIV60MMlNUMD
MD5:	C0F7FFB88A1E9D9B514957143E7F10DD
SHA1:	C1EFF6698B97FEB3B53DA920395B789E788655A4
SHA-256:	A9B07F7BF20A950DDD027B83D8094EF374A1530F2AEBBFC43617493FEE4E5F87
SHA-512:	4803BFC28210A01305EA2773608503AEC028F1918651F63210BB85FB8545B4B9B2A407EBBD8453041B776BFC2A3991BBC39D08438EC7A909B85B74BAAB728425
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8.......1q....PLTE.....................+W.<........;........-s.q..=J\X.....NV^FNW@FNG...................=..4..'S.1[.?EOl..U[cRY`OV]...IOWLRZ...X^e]ckZaiGMU<_.7X.>EM...AHP9AJ...........9<B...2Q.......Bh.CKU>AF.......... ........-39...agn...47<.........HJOUZ_.....-I..........w..~........CFJ)-2..........................9/:FVe...w}}...nz.33....%4 ...!....):%.A...$%+...rxz~..u.....z.....hr~...19B...........hno....'.'?.nss<.....3G2.-..........PSV...O[j..#......`lx"2....3=J.........>) .{L:M&.7@.p...........5..qD7>.M..;O:...vi...@IOu#....r.%N.EYFF2(...S:...gvh=0..+...d.`..Udr8Qmq....`Ck.5H]egb`x.Q....A~3?Z0RiV....yig\9..}1$.P.:ZL)..JG<<.Z.U~.M_.....Fi.......V...yLS.Y'...r5<`EI.4G>_.@..Od>.ia......e3.R[._...\|L!Rm.d.0.....g.J........n..}...].....y.T..b{...i.P.:....#tRNS... ,8C..V#..h..q<S.^..........}$9...PIDATx.........................................................................`..@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 338 x 199, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10786
Entropy (8bit):	7.957551317790417
Encrypted:	false
SSDEEP:	192:AANxBSKw4/M64bk/qM5GuvDjWQks1Gw7JjDc3/lN6/iQ5JuLgNYhm4Rl9WTVm6m5:tNxMX4oK5uqb6Yi7Lga3N2VPHU
MD5:	E50B3CF2886A7A230C8A703DF23F236D
SHA1:	38624E0FA732BC4F97CA25ABB8278F6907EFCF72
SHA-256:	B91DD9BFDFE240A2ADD18A0E33CFA7859B6B7E3B42A5171CA4E070172694573F
SHA-512:	CE7A735DB0D80A4F12A4D3BD100E44B16B98DA3DDC5BCD775C221BB92F3C6335C7588C1D87F02E2886E4B5DD69FF8CE2769728505C83B2675FB27521B48E0A01
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R.........K.... .IDATx...t\....z.,...v.j.-i............?.. ...B.$....w...P~..@0.......$..[.{.........O.[..yw....9...cf...7w...S....&..t.k.M.6XY....V.\...." ...y..(.../9.p...s..?..a/...T..jJN./=...+.un.f............1...........A...(#U.\..2.......6j.d..F.3.7p...g..P.3.%.H...zW..vy..v.z.R.0w.O..WU........9.LS.#.H...._..o.V...U\|`..B=M..q.K9'r2.2';..TI.%p.2...i.`.=0.W.+..J.,..h....If..]PF.$...).V..q6l6g......i\|.Yh.Q.2R%)U...gL.....P........)..8..99f...(#U.Zu...D.GK..^...Fi.....SY...L..e.J...u.CM....!...?H`N.t3.K&...F.).pMA...;.QlF.K`&N.7f..,(#U......T..6.......^.3q:.md.(#U..2...J\.............H`&N'.V.{...W.,.i.....d...\|u.0.v..==C.#Q.Z..aj...v.S%...AI)z.$&..y.08Z..w....$}9..27.....HN.)...JJ..!5../...tG./..t..F.p.>#..._..'LQF..G:9.H;...R...bu...F.p...mt".....7?).z.+)...i.....t...lg.U..Q.Z_.mv"..i....!1.z.+)..IS.`)nF..=......F.....M1R..pQ~).PWR....D....Xm...5.L+$0....v+..,......I..\I..-...W5k..k._K.E.#q:.8.V.a...?..Z...^.AJ....

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2690), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	70658
Entropy (8bit):	5.106764042769359
Encrypted:	false
SSDEEP:	768:qhEwRMfeLzHZUj8ZD2HL8ugCE94sLV9EIwPvmLQBF8K1KSkm4tbr:fwRMfdnOtVCvmlmYv
MD5:	FCABA5921DE9449EEA3901493C296061
SHA1:	3714D02B68F83AEDD553B77DB401A70A2A3EC760
SHA-256:	A57B53C92F1529B0E945805E3B9773D5EDA5E9A6B08BAD24ED28818531C8ACD0
SHA-512:	AAF5BD3106A3DB05620344258BBC66348A03509038E409EF08D92E7654958F8C0C0A9F777D33AAACD6F9A412F22BC4FADC119921881DD375677F67547A315BEA
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/about-us/contact
Preview:	<!DOCTYPE html> <html lang="en"> <head> <link rel="shortcut icon" href="/ResourcePackages/Safenames/assets/dist/images/favicon.ico" /> <meta charset="utf-8" /><script type="text/javascript" src="/WebResource.axd?d=DzHrpQl5URXarFHAtrmzFvvwtxERElSZ_b2Ca1mxtmzvyTwDr6K2uqyW80PraHwZqn7BbM5lQGIiy7biXNxjLG9gJ71MSZTcvi7eeKKPJBLIN5mVSMeRsnLnzbDpw9vtrgTOqyeHT00x826p9zjpJthZ-3nX299B5pryZnfavheEFwbHupd-iASOQMXwlLQK0&t=637824974880000000">....</script><script type="text/javascript">...(function() { TrackingConsentManager.init(''); })();..</script> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <title>...Contact Us \| Safenames..</title> Google Tag Manager --> <script>.. (function (w, d, s, l, i) {.. w[l] = w[l] \|\| []; w[l].push({.. 'gtm.start':.. new Date().getTime(), event: 'gtm.js'.. }); var f = d.getElementsByTagName(s)[0],.. j = d.createElement(s), dl =

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1113x778, components 3
Category:	dropped
Size (bytes):	205002
Entropy (8bit):	7.977396900927704
Encrypted:	false
SSDEEP:	6144:m98zpJ3GnNUS30znJ7f6HyDYl9DGmNN1SNbs8M:mwpJ3GnPEzJ7SkYa5Y
MD5:	6BFDDAB9EEA1E4F4C9B6C8649250853F
SHA1:	2020FE05DB5A7F81D56F94CFD350B1F2B7C5FDDA
SHA-256:	C0533A992907C3FC2CBCC6C6C72B08ADAD70688E0807911127471EE4D829CFFF
SHA-512:	9592435193BC2CCA55F07B790D466AAD8C360EC19434D0EFDB8A59D7414FEC2679F290F4D7CB3C8D965A33A8CBD42DFCE0E5C20D04E204F97B306EF0C879015F
Malicious:	false
Reputation:	low
Preview:	.....C....................................................................C.........................................................................Y...........................................b.........................!1.."AQ.2aq.#B...3Rb...4Cr.....$Ss..&56Tct.....%Dd.....'E..Ueu..7...V..................................>.......................!1.A.Qa"2q........#3BRr...b..4C.$................?..U.....T(y... .....l(AP.(......T(P...P...P........@.(P.....P.@..@........(.B..U(T .......P.@.@T.@.@...P...@.(,(P.A...P....@!T....A`h...P.(..t(.B........<...@b.1...P.... b.(..t.........@..B......P..1@.....1@<P.1B..(b...u@P......P...1@...(P..0(P..(@...B.(.....<P.P:.1B..(b... b.x..P....hZ..GaP.(...,P.(..........,(QP.....P..B..P.....R....a@,P.P....P.........((1B.(P.b.......@#.......B...4.B...b......C. P....(.....U.P..aT.Aa@....P..P..P.......1@..............b...1T..1@..@<P......P.(....P. ...x........h.....b.x..P.(.@<P.(Q.(......,t".(...t PX.[.(....t.....CB.r:..(P....DP...,1@*.1B.. ...(...

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 140, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2361
Entropy (8bit):	7.641630482993319
Encrypted:	false
SSDEEP:	48:/DQnwriYBdQ6MUaZWmDDxrqq6CVe8DCC7Myq5xDfS6xeljU9u:iY7Q6MemDDxAt8DCC7yK6wljD
MD5:	6FB42B36E3548616D1BEBCD819B682DB
SHA1:	3E1894AB9B292ACEC0C0C5B70FCED78CAAB05D7B
SHA-256:	7EDC82E7C4B64B486944D7E1DC21A4C2CCEB5FF920485E16AD2DBDE1E01F76BA
SHA-512:	E2B5D02C8882596471D64618C7CD00F70F57EC35BF0084A36DF6BCA968EB3A866EA2ABCB50830CF2A47EDB6EC155A677D27C0FFE17A91AC72EAEEAC3993B9742
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................8PLTE........................................................................................................................................................................................................................................................................................................................v......dtRNS............... &(.078?@COPTWX[_`cdhlmopsxy}~..............................................................LIDATx..Y..4....R.6.!fC!..M..p%.........,g......:l.3.7V.<.<tweY...iF......8I.<_&.d.kW...-.....8...x,...<..@ar.e..oY.E..,...M.e..oY..:.[...<....{......R~..ZK"UZ..?...;L-.u....d..Q..F..p..7u..o.g-...Ke.si....h........z....aN....t..h.)..vG.=....6...m..T8..g.....Lm.\.....Xv..<...!v...t.U>"...El.E.Ma..eC^%....hO.!J".......i..P2}..wl......0.o.Y...H.Q0E..?0A....I.u.*m..s.T8...Ge....a.#._.g@\|..........S.4.$.....Tve.hT...I.Z.A...g.I&....&-..T.]...S.:g..2:3..&ly..a...c\|t6....5..V.......~L~.vd<....4MO8F..q1...`.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1112
Entropy (8bit):	7.728432676395773
Encrypted:	false
SSDEEP:	24:pNxbHhviy8nfT3yDWAYGl+1X2J6G7yGvuZO3p1H+5dkA7EmQBCOM4o/6rs90e9/N:5bHD8fWDWkcNG76ZOAqAomaCx4oCQ9bl
MD5:	32A822DD3254736A59D3FA41F2ABE94F
SHA1:	242EB96A440597F1AFDF3EA54BACCDCAED80AD62
SHA-256:	5A592EFA471F5B29203DF9973BCDF913EE26153D5B6028CE542E83CCBE24399C
SHA-512:	04236566D7EFB17534F2A21B0CE4C9463A4F797166E49A0F8AF4F5462F1FE77E91AA0B881272F80667BDD1E5F5E74A019B2D178AC5D811B8284BCE39A83CD962
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/images/twitter-48.png
Preview:	.PNG........IHDR...0...0.......%.....IDATx..YHTQ...LEFQ3.h...-.!3.@+[.\|)..E.b.L.L.D.2..L.I.......V.....-0.}3...........{.9r.^~......w9.w.&....,..{.f'...N......0;..a.X.....7/....33..)..w..1...].^n..\|.'']sb...........'.C.......Wf.!!^.`` ..H....V.'...d.....7m....wn.?...^.....T5..yEG...../....{.x.....s...z.<_.......hn....4.]]....u...Vh..6}.N'.K../+.Cp.z.%.....11..8\|HY.w......W/..~hPz...Q...F.+4..V]..G.m.1.F7...D.]..B..&.m.......p.R....H......S.D.....0!Q......Z...BO.+4...\|1.O.t..ND.:.N..Cx..a........{......[...T0?...@..C.:.@......(.&:.. ..hf.~0-..d.W......a.....4..)6.D....Q1:.......m.):.Uhl@J....).........btPT.f.7.kb..Q.......6@j.h3OQXRb....J...;..~.V....6.....^.A.......4...F..W.......C .....$7[.f....>. 5..U.A.".7.VEp2 6.4.D...........z*x........3....H.is..p......~KUs.(.pp0H.9T..[P....<..n...t.j............0....d...C`9it.c.~JHC.K......t.}.Ch9..)7W;.....1..R...r..uP..Z9../.N7.=......u.V$.f..Ay..L!.f........D3.s.T..[H...H=;....W.Cx.....64....>..w.aox..

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2490
Entropy (8bit):	5.131489400373607
Encrypted:	false
SSDEEP:	48:F1ySkuHsbtsVQC5BoosVUu0SeQwLlvElJdR:FcXsQC7opUu0Se1xElJdR
MD5:	0E6B6E2736543A28462B82AFA561C29C
SHA1:	DDC7EE9E19AF45184FF41DB41291B296A630CE9B
SHA-256:	912026C7DE684D9F1611DDE45901575A2E252D12CEF7C5A501A4EC9426C04F06
SHA-512:	DA9B52AB8827BC598B8261AFB6A4CAAEA0054B8AA15ADA1C0A9B2FBD539DB47674012DDB5B3CB1C6E068D8ADF987413F08FE92F901E69CEA07B3CE0E0F9EA3E2
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" viewBox="0 0 60 60" width="60" height="60"><title>Exported from Streamline App (https://app.streamlineicons.com)</title><g transform="matrix(2.5,0,0,2.5,0,0)"><path d="M 6.5,8.501c0.828,0,1.5,0.672,1.5,1.5s-0.672,1.5-1.5,1.5S5,10.829,5,10.001S5.672,8.501,6.5,8.501z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 12,5.501 c0.828,0,1.5,0.672,1.5,1.5s-0.672,1.5-1.5,1.5s-1.5-0.672-1.5-1.5S11.172,5.501,12,5.501z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 6.5,11.501v2 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 12,3.501v2 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 6.5,8.501 v-5 " stroke="#4d

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 302 x 170, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	11117
Entropy (8bit):	7.96852720069826
Encrypted:	false
SSDEEP:	192:q9wzSTBBiW1jT/yDDa3N39pTpQ7sh3MI0KY/fFv1/MtRiuMz8MWMk8:aeW16DDa3NMQMI0hfzktRiua9k8
MD5:	3B47A0373BAD59D41978BCC630B1C712
SHA1:	A68F885367C15DAC8C74944E992244AD2D4AD77C
SHA-256:	9B69DFA54CA26B96C1F2A78B54CD7DCECC1B5682D660E28BCB9010BE47C3BE7F
SHA-512:	B2153CE262735A32B18FE85A519386BDE7AC48BD8DE4FE2382EBCC791F2A0065E9BB476C3C6D2F7C89F9AA98DD3B334352E53E45CEE2E42A27BD47CB03324309
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............t5n....tEXtSoftware.Adobe ImageReadyq.e<..+.IDATx..}.pT.f#~.. ...........P......#.F.,..x7.$6.....l<!.#.....j.I....Lfj$. j....dbKN......,.qj....`.h.~.:......nI...UW........9..{......A..f...................................A..s.W[[{..q.....G....o"46l.`......n......y...Q..S....+.B....4.....G.R.....$.......................................#..G.C00T.3N.:UVV...c....b<Q[[{......<..C.......!8i....b...........q@SS..Eu..T.X.f...#.Y..---.F0..4s5.......g..B]..e.T....i...J...Q....FN.j.rrr..<.f........Ztuv.;..Za.8...SU......Ji{{;..L..m.6C3/(,,2..(..@u!.oL.u..7.....7cb....;wV..b....G<.....W-F1...7.>.A........`.!.VP...5H.........b....I.N.vk0''G.d.h......h.C.$..H.,C..v.Z.v-.N.jmm5.?.....Y@!..e.....)......&d..:...KJJ...3......vT}L.}.)444....gdd.&.0.....?j.c.eee......k-.z...GF.+.V.]....@..}{..ef...S...[P.xS1.#..........L}*B..:t("..@.CB....9.rjC>.S.5....A00.............jk......;.Q...d. '...wV...b<......g."..;.yUPw!!kjj.'..0...f.odd

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	695
Entropy (8bit):	7.61542562674215
Encrypted:	false
SSDEEP:	12:6v/7u9qSug+WCEwBR8RneeCivbx7aLP/6LvBzZvqO0j4vQZbhk3iWmIxR7sa+Qf9:p4SL+jEWWX/qCzQO0j/lWxFRN+QX1Ai9
MD5:	1A31EC7C75FB89BCC1C081710374B6A6
SHA1:	F59632DCB3C28E291A7093C87BA248260BCCB742
SHA-256:	E53F35C4C0A13730E3037AEAF669390DA554FFF89CBA0C0F435B65848AF585E0
SHA-512:	C5C7267381161BEFD0BB19DDA3CF159FD86334CDC20C4A7D7202C84FD68CA62BA465F4FEB091C13BA4FDCD5C55E56947740AA487C786A6AA307509519D6F2CD0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......%....~IDATx..;O.A..i5.D=....j..$ZR...O`(.!.F....-).1..%.Y.j......0..%..9..^.x..L.#...........{.\|D...P...T'....@u..P...Tg...vi....)...pm..........O.......0...s.b.k2.;~...w......y.</.'.......ux .<;u.....-..a.C!.a...'.c(T..O..[#.8#..DB....D.VxM.....y.5.2 ..C.j..-.".9...H.2 ..C.j.E-..q9..x......u.-.qi.~..L..B!.^]5.ok.......WC...c...0...D.<_....{x..]X...............G.\|xpt.....O..m..n..V..;.jQ..c.R,.....}.......X,X.<.......0r.0......d^;.J>9..g.=^.S...vLO....eg..`.ry....\;......$.....jm.E8....E..Cq(.C.F...F.Z.8...j..P4...C............My..My.K...Rh0.....h4.K:.&.p...w..u>#h<.160..l.=..9O...N.....T'....@u..P...T'......Hz..I.1....IEND.B`.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24463)
Category:	dropped
Size (bytes):	24601
Entropy (8bit):	5.24038531296125
Encrypted:	false
SSDEEP:	768:MWZ6/8lHJdkMioFpg5SUB2yQEny+zgxV4Ky47Z0z:Q0d3ioFpg5SUB2yQEny+OaKyCiz
MD5:	5861A036C2DE6C2DF26749FE41D57605
SHA1:	514DC9A21607634859963C49BBC773FB57A356DB
SHA-256:	270524B0D27AFD1D3B6622D1A176C678DAED94564C143297E217A63E21CE9820
SHA-512:	AECB48803B34C4F8261BA457D406DAE0A57971625B00C72F442566825A5A9BD4A81D98940B24150DD1F62CF971A07B6BBF5ED759B944FD5FCF3FE4EBD3885BB4
Malicious:	false
Reputation:	low
Preview:	/! jQuery Validation Plugin - v1.19.5 - 7/1/2022. https://jqueryvalidation.org/. * Copyright (c) 2022 J.rn Zaefferer; Licensed MIT */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){a.extend(a.fn,{validate:function(b){if(!this.length)return void(b&&b.debug&&window.console&&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":submit",function(b){c.submitButton=b.currentTarget,a(this).hasClass("cancel")&&(c.cancelSubmit=!0),void 0!==a(this).attr("formnovalidate")&&(c.cancelSubmit=!0)}),this.on("submit.validate",function(b){function d(){var d,e;return c.submitButton&&(c.settings.submitHandler\|\|c.formSubmitted)&&(d=a("<input type='hidden'/>").attr("name",c.subm

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2588)
Category:	dropped
Size (bytes):	87556
Entropy (8bit):	5.422257805660468
Encrypted:	false
SSDEEP:	1536:lcO6062iW2hRZAhgZ+R3bggBKP5RZnCtRGXRk7tlWQcewnHlVYDO2hgVh+g:gzXi/39GKLUYOAgvB
MD5:	68857600BBF639B39498BAD51141B661
SHA1:	4C5FCC826CFD4D4CB2812AC5DCB762DBF7D733D7
SHA-256:	0DDF3F45213FEB92AEF849AF0F743C4676D8C1BBA71BDD67EED60112C0E1B64C
SHA-512:	01FE4848B3CF8075A166D88D705CE04B334B9AB8485F84CE1932A2398F4272EAA461966FD226B81C4EAF41804A4FFF95627AA2D509088607A9138AE89569BC6E
Malicious:	false
Reputation:	low
Preview:	(function(global,factory){typeof exports==='object'&&typeof module!=='undefined'?factory(exports,require('jquery'),require('popper.js')):typeof define==='function'&&define.amd?define(['exports','jquery','popper.js'],factory):(global=global\|\|self,factory(global.bootstrap={},global.jQuery,global.Popper));}(this,function(exports,$,Popper){'use strict';$=$&&$.hasOwnProperty('default')?$['default']:$;Popper=Popper&&Popper.hasOwnProperty('default')?Popper['default']:Popper;function _defineProperties(target,props){for(var i=0;i<props.length;i++){var descriptor=props[i];descriptor.enumerable=descriptor.enumerable\|\|false;descriptor.configurable=true;if("value"in descriptor)descriptor.writable=true;Object.defineProperty(target,descriptor.key,descriptor);}}.function _createClass(Constructor,protoProps,staticProps){if(protoProps)_defineProperties(Constructor.prototype,protoProps);if(staticProps)_defineProperties(Constructor,staticProps);return Constructor;}.function _defineProperty(obj,key,value){

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	712
Entropy (8bit):	7.348488192072825
Encrypted:	false
SSDEEP:	12:6v/7+9TdduMOFRGvLCNIuoRmD6C1pgCGSJBUxcFloyMw8Hw28DM2GE:lTiPfGzbuoLC1TPScJM9jkM2b
MD5:	AB035F28674FD0FE643C4B9169FA7A07
SHA1:	351712A5DFA6651DBBCBF42942B6B12E5007FAD4
SHA-256:	66578E2DA235DE62ED8193911F17C20B954B836C0FFD912E1653DD7975EC6723
SHA-512:	EA2A0A20C4913F2AFA6430A8B25FED03C7AA934257CB6FA3314028AF26F9405032CE53FE70B4A04A6F9687339C87ECD3E71FB89C8E0D8BFE626BE0C5BADF45BA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`.......PLTE...&J....5V.Rn.Cb....J=jo.........._b...>=m...............}...FJ`z..x{.........o..1>q....SV.ko...`{.........wn.....w{}....kn.>x.:>........BJ...2tRNS...................................................P......IDATH....z. ..E.6.fk.6..d....:C.......B./p.@KL..<...T..gC.....s..Ya.......z.........#/0.P#W .,Z.?.9\..u...X.....\.1i..[...@~...3l.ar.Z ...(........I.....q.)UQ..F....}...@!..pi<....N5......@a.......Ps.~..d?.@.@.a..M@>.DP.(%./..7.....".=.moJEa..O..q@....C...Ji...F....0.C).p.<..f..C%..T.6...w....U.......D.).?..BW.RV...".......d.@;N\|.bo.K...2..K.....\|.w..{L...2L..AxC....-....7....5.B.."MK._#.....A....ns..ov....X...x......IEND.B`.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 302 x 170, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6205
Entropy (8bit):	7.948671915394788
Encrypted:	false
SSDEEP:	96:AHZ4UBDyuxXsjUbobNAidMC4Zcuebh1EMXJMQmYa2xwr1fxCA0edp6Hf2m:AHZBygbobjMtZc7Z/d0ij+6HOm
MD5:	1C66167483455DD6AF70ABD7721F94D0
SHA1:	40D51E0E1FFD88A87FC20102062752A8AC4E745E
SHA-256:	C57F84BC42DE530E0D15755B39380974A1471431063F3EDAFEE1C4D142DDD814
SHA-512:	5DB93CA7694A7A4035468F9C2215712DCE4A27A8811FED17081E3F6761A57C40CE2ECFDD5A82ADC417CA04272C312E545411B05AC8CF1745FE46F14E1DB16317
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/sn-iso9001.png
Preview:	.PNG........IHDR.............$.R.....PLTE..............E $!>)#\+,/U0001.K5/e6,V61f9:8:::?:e@@@A;mB?_C6QD?pGHGLHvOJuPKyPPPQL{TQnVVUXT.ZU.[W.]HE_Z.```d`.dbpddclh.pl.pppqn.rrqxw.yv.\|x.}z.............................................................................................................................%...............................................................................................................s........V.............:........................l..\|..... ..^.....@..P..`..........................lD....IDATx.....Y..ST.q.A.\|....9......... .p`.....c.`.%,.B.....z..+..B...}g$Y?F.$.......-K.....;.3.u.Q5.y.?..#.Z:.#.Z:.#.Z:.#.Z..G...K..U&...<..Q..SxU.&..q...W-.q...W-.q...W-.q...W-.q..u.r....tM...Bl.OI.K.t..9>.]..E......).Zp.2.....u-.&4.&...).:p.Q.....K..+w).v[..@.!/_`.\|=..LZ..B....(..........f..D.Kl..K...t&Zw......R......K..m....A..^3.T..je...K..&.^\i.?C..nu..k3.l%.^\.ru..Ai....kI.J.....~.d..:_+19..W8.Wt..}..I~..\.7.B...

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (304), with no line terminators
Category:	downloaded
Size (bytes):	304
Entropy (8bit):	4.8337972774129145
Encrypted:	false
SSDEEP:	6:OWeRu/mFrDGrZFNgdNOYcs5HT/F8rRi5rbre5YC8Ga8dVs5SnP90fR0K+1GXnN4C:UTgVT7Mti5YQxPK9+MGW/
MD5:	0A32D212F03F087EC66280FE9A4F7418
SHA1:	CC537D6EFB17776312FE203B434A1BA8892B09FC
SHA-256:	2449350A8304CA8A6C4815E8D1F96FED99E4EA51E7420432B6D6D22DEC6EB080
SHA-512:	E0E317F44CA1EC1880BBF43F664E50877285639F08FECB35A15A9FAEE109A8B8F59138E49C4BD2AF733E497E22834692CFE8BACB731A67F5BECE02C8E32D7AB2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSuAEJcB2I58AdpcASBQ34xvfdEgUNTKFqcxIFDTiOqR8SBQ2FU5KCEgUN4GEEWRIFDaS7ZXoSBQ2hTirrEgUNeGqXiBIFDdjNaB4SBQ0KMTBXEgUNdlFngRIFDTjUSasSBQ1ybNf9EgUNunKC2xIFDRCJgK0SBQ0GENMIEgUNVFv24RIFDewfttoSBQ1dPRK-EgUN8sRXVxIFDf5ViV4SBQ2VczsGEgUNR409YxIFDUwrDikSBQ2Ujg4b?alt=proto
Preview:	CuEBCgcN+Mb33RoACgcNTKFqcxoACgcNOI6pHxoACgcNhVOSghoACgcN4GEEWRoACgcNpLtlehoACgcNoU4q6xoACgcNeGqXiBoACgcN2M1oHhoACgcNCjEwVxoACgcNdlFngRoACgcNONRJqxoACgcNcmzX/RoACgcNunKC2xoACgcNEImArRoACgcNBhDTCBoACgcNVFv24RoACgcN7B+22hoACgcNXT0SvhoACgcN8sRXVxoACgcN/lWJXhoACgcNlXM7BhoACgcNR409YxoACgcNTCsOKRoACgcNlI4OGxoA

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1457
Entropy (8bit):	7.816438616008456
Encrypted:	false
SSDEEP:	24:pcICo1M419/+pBk13AEUNoBhmwBuGygjrX0UqlflhXf9vQImFCD6rWEtTQBf6tIE:t1B+pBkxHHBryorkU8FYImFDpc3K3
MD5:	C177944CDC91022D5E1D9AC15DC9E2C5
SHA1:	9C82E7693EAD006F9A3C3D372967281CE02243AE
SHA-256:	7CA703290D5624DDE4ECF456FA361A511E86A79CCE8D11ABD286C1E8245C9B18
SHA-512:	3B4C371038D85CFFA260132BC79721DA90D901AAB1D2A9148DC6A72009A88A75A4359585788D844ABEA8EF135D08C3C80F4F87D1F2B7112BF5D3401FBCD29D34
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......%....xIDATx..{LSW.....pc.F.aSA."..m.2.C..m......J.24...Q.E.D...A.c..\.7m.Z[..8..."STD.......%.b{Po.....{....'==..!.'..G..b.....r....t..D.e..x...$..).f......Hs,..+..d.....p7.3CW.P..n...\|..s..7j.4Y.s..[.bM...6G0..=....c.as...R..au..?..kEL.@..~..B..8..>....(.yv...PRT.4[....h.S....q....T/5...e.qs..K.b^..)@....[...{J..'.........}..\|..?D.<..~..B.mh....Q`...x4.O..~.......T..r..I....%..[. ...{...;.f...@H..j.~..).............r...\z.sh...+<L.#......N..'K.0......@._.^.7 ...h.~.<.....X..:...,5......N~...[`s.6@.[i..Z..]Y....,.\@.....-*......@3...:.I.....6...h..t.6.+]...&K.....X...y..p..on.04...5uz.t.>.H.h8.....?...n..B.r.s..../o..m......_.~;...V..\.6.@.O..j9.....r.o.od.....}..>y..N...z.....N.....S... ....s.8./...u..p.....Ob.3........5'G5..~.VxP.Zu.....m.....p............(q.`.l..y.5j"...k.>.....M..O/.i=?.EN...L..vu4.N...`D.._^?...`.Oa.....>K........K.?N..[.Z{"..O<.x>......{....Zh1}<.m.}...6/x^.!..p...l.]Iir.]s1.._X..&\|..

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1366x768, components 3
Category:	downloaded
Size (bytes):	116528
Entropy (8bit):	7.898034475454796
Encrypted:	false
SSDEEP:	3072:kyPbLLErsSU2+kn9gh68++LstzyfmOXbKtV:kiLqsSDah6Myv/
MD5:	5F5045F6AA7F4CD1A0A2B350A7059287
SHA1:	8A7E646A74723538C36548756ECBF3A4CED2267E
SHA-256:	B714270F20F4EA23CD1DBBA1B89C8B1181736DD07D7335AA2DEFB6D61C136E83
SHA-512:	EC20BCDE0D736F42687913904D18FB36163CCBFBDAEB8B6CE9471D82D4987C0AE148B972C2860E93F3038B288D01024199A42A105BE7351AD7D76BF8858AE6E3
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/sn-dots-background.jpg
Preview:	.....C....................................................................C.........................................................................V...........................................9..........................!1A..Q."2aq.B.#3R....r...$Cb................................./.........................!1.."A.2Q.a#.q.3BR..............?...nP.6q.xx..yX...Q.r...........s...S.N.y.9.^......*..........+"...r...;.Yw.N.=w.m.>..UZ.V)\|......q...n2..e..dk.....N..z.[,........7...[g.y....}>'=..k...<nu.y1.8..h.M..o.....?...p..%&.-...CM{......Z.zk.a/..m...,.u.u.K.Y.?+<...._......a3........[.pQ.<}.n9.....~7...d`.~7O....r./."..l....JO.6y.o.m....~EdR...{.z.#....S\T.Z.7.>g...\...\|.=j.......EB0_.......O....f>.<....{....O.}IW......m..t.7..^\...1._#W'......3..^.+S.....x...^w.~.f...>D......@...}...N...]..yt.>y..^~..]..V.........2.~{....<.U./....zI..P.3.S....8.......f%5....fy}..#.....t...w..zi..s....g...W.b.>.'..=...........X.5p....OHx.....Y.......JO........~.M.7...^

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2535x924, components 3
Category:	dropped
Size (bytes):	509361
Entropy (8bit):	7.977911231444655
Encrypted:	false
SSDEEP:	12288:Sew83k717xn6X0bpoJWH4h39FlOnAS7evl2kwElJdl1V+vq:Sejk3nesOWU3rlKwv1lJdl1H
MD5:	E440370E09309B0342469CF581426290
SHA1:	0E44DA8624981FFF5D6EE5A9FD4AB22AD112780F
SHA-256:	109B5AF587CA0DBC47A25001D8C282F9AF9BE3FD3D220837A05C0E5A2292D04A
SHA-512:	1527260F549744279871F727FAF63BEC90BF6327108934BBC24ACBF8E5BDBDA63C8401980DE5C7FD23F355FD5C19B0CE41C321B7C98B2BB427CA556B20E7766D
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:FCB9ADBC11FC11EA8264FF1699D00032" xmpMM:InstanceID="xmp.iid:FCB9ADBB11FC11EA8264FF1699D00032" xmp:CreatorTool="Adobe Photoshop CC 2019 Windows"> <xmpMM:DerivedFrom stRef:instanceID="40688B9CEAA4362AA863F260B8A03CF6" stRef:documentID="40688B9CEAA4362AA863F260B8A03CF6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................................................................................................................

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.746439344671015
Encrypted:	false
SSDEEP:	3:q84C0svCm:ssam
MD5:	66E176CBB74E26C1EA7F3BF0857CF62A
SHA1:	BA31DBCC0C92080A7DA5F42249FADFA5F22140DC
SHA-256:	4F6C47C1B7C0C87A59C73129C4F59219CA6F0A7A97850D1211CDDBB0C27A9F8F
SHA-512:	DBAA75231D76698F0EF2111350DF5EC0493A51FA0FAE547DD62887B597FB9A13191C0020432F17271159241459F57870A82DBAF38C9109590E64CE0402BC85F7
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkpgsit54lEJBIFDaGVjY8=?alt=proto
Preview:	Cg0KCw2hlY2PGgQIZBgC

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	4.286585024642417
Encrypted:	false
SSDEEP:	96:dj/1RtQDxuop7TvAP5M6as17j21ZgtRhM:djNRGT7cRM6h1KZoy
MD5:	D436CBC3C5CB49C47418CC306CD7DA90
SHA1:	091EBEA7EE615153071DEC3ED65A4484AC211F00
SHA-256:	D996EB6DA76A1FBFB802137A15513F3F18FC6A982F36605A3D0FA649BC990076
SHA-512:	6C38408024E5215D23E6B41D946CEA2689B0670EC5B24674D864A920CA46711FB3737D141A721D1C2D15F4D13B24CEF932018D8CE56254508FDFD5A2692C4A6B
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... ....................................................................................H.................................b...\.a.W..{R.}wO............................................................9........x.............\|...z...u...........b...]...X..{R..wO...............................................................S..h................\|...z...t...........d...\.:.W..{S.LwO........................................@........8.................................}...y..u.E.........d...]...X..{R..wO........................................S........I...............................6.}..y...u.w.............[...W..\|T..vN...........................................<..9....................................}.K.y.`.u...........b...Z...W..}T..wO............................................................'........G.............}...y...u...........b...].{.W..{R..wO....................................................

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	135
Entropy (8bit):	4.915756686255547
Encrypted:	false
SSDEEP:	3:YVKBEi9QZV6HWQoMRL2KIhfwcP2xR2GXEqRWJ6jLZHJqaDcc:YiTQZEBbU2mn6jLZp9/
MD5:	39A139867EE5BD9EC6698C43E61D401B
SHA1:	DDBBCF9B96BBFE0FF529ADA13401105B3F4E7F25
SHA-256:	1EEED5D7B98ADF51D7E3B287A36194747C8D47267DC14ADC4F97CD85D35F486E
SHA-512:	AA92162DBE6ACD6BC3E695B76D2FCDDE3606B4D189A3EADCAC4EB3F1C6D6CD9F6B917BDAB6BE1572A46CBFDC731F641DDA7421510C1D3BAFDE57461CB1D451E1
Malicious:	false
Reputation:	low
Preview:	{"portalId":26584007,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":-606939824}

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 13724, version 1.0
Category:	downloaded
Size (bytes):	13724
Entropy (8bit):	7.982078007980641
Encrypted:	false
SSDEEP:	384:qnPzBlSv9/Zw26qJM0YcTTspFlc7ZuM3ZTEyBTA:qyv9/Zw9qQcTT0u7oM3pE8TA
MD5:	561D401D959B578CBA366DD708B5DAAD
SHA1:	748F95E67BE056D09374ED3EB9F481FE24B0E74F
SHA-256:	B5B7090ADEC01FE538F614831A5B06096A80F095D9F4096911410E7F867DBFCC
SHA-512:	4B0A93F20BE8811401D593594E83CD93D6B33E0354286C49AC64BE6F04AAF94E008141F4B607A1D16DD32D4734945D5B641FC1BD7DF1A57F4204A514541F3E6B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunitosans/v15/pe1mMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp5F5bxqqtQ1yiU4GiClXs1Ul.woff2
Preview:	wOF2......5...........5:..........................D..v....`?STAT....2.....,.i..N..6.$.... ..F../....pE#b.8....`DQ&V;#Rq>..?&=.........U..D.gu.l.s.....$.e}.......6$!)...,.....?...t....1.c....2B>....p'....._......L.p.RQ.K.jc..9...v%....a.<..?.>.=....{F~G.1.....c.Wp...J#.U\|.:.........v.ce..{/I...M..H".d....T..l.^.u,.....{..bEgnV.....0gv.jy~F....A.P.".....H..f..0..h..>$V......u..-.S@....r.#...d=....J.4e...........Z.x.BI.G.$.7.....'.....f.!......&.............<.o.DZ%tB$..*.Ln..e..}..W\|..G....\R...M,.+r..!wg.#. Q.,.:...dh..,. U.=.s.z.-...6s.z.)..D.R).>.e\|.D.C.......-0l..[.-.h...U...5.`.}<.}.{....6.7. A...K......>.[D..H."!.P.......L..d.R.r......,.8.X......1.t...E....a#c0...XBPH.`.. X.z.......B.../.7o..pH.dH.".V5.V-.N..\K.@..K.I...f.HB.?....].B..3......h@`...:.8.........I.....N.c..5..A..@....[C...v.)P.e....Q...p.1O.e........1......a0.......X..0....">...\...n.%b...? ..qx...B..i}..V.1h~....]..C..OA....?I.3.....F.......<.C...2.D...c..io.l........Z.x

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	135
Entropy (8bit):	4.915756686255547
Encrypted:	false
SSDEEP:	3:YVKBEi9QZV6HWQoMRL2KIhfwcP2xR2GXEqRWJ6jLZHJqaDcc:YiTQZEBbU2mn6jLZp9/
MD5:	39A139867EE5BD9EC6698C43E61D401B
SHA1:	DDBBCF9B96BBFE0FF529ADA13401105B3F4E7F25
SHA-256:	1EEED5D7B98ADF51D7E3B287A36194747C8D47267DC14ADC4F97CD85D35F486E
SHA-512:	AA92162DBE6ACD6BC3E695B76D2FCDDE3606B4D189A3EADCAC4EB3F1C6D6CD9F6B917BDAB6BE1572A46CBFDC731F641DDA7421510C1D3BAFDE57461CB1D451E1
Malicious:	false
Reputation:	low
Preview:	{"portalId":26584007,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":-606939824}

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	459
Entropy (8bit):	5.092040953399108
Encrypted:	false
SSDEEP:	6:tI9mc4sli84QzvvT+4BIi6bE43mTSXVj8JLzcJeBJAJHSLrdGo7Uef7QQ2EJSS0D:t4I84sOvl8JT/ZcefUO8XlHrScem
MD5:	12B90E15358013C0A0147C845C57F15A
SHA1:	22CD201B127A51EC0F1B2841E1BA106C317215D1
SHA-256:	654B0FD8864BB7462F9D4C5B48B86FC63AC7E5D2DCCA1816A426E09F2EF5AE63
SHA-512:	7642DD356FCC8DCFA3ACEABDACB74340F3DCA082B6D95DBC26FA8059E54B14D0491175F055E5DFD39813A3083973B449B872E5040E529D8AB5E10B703AB62B0D
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ResourcePackages/Safenames/assets/dist/images/mag-glass-sm.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="#ffffff" viewBox="0 0 52.23 52.17"><title>mag-glass-sm</title><g id="Layer_14" data-name="Layer 14"><path d="M22.87,40.3A18.09,18.09,0,1,1,35.66,9.41h0A18.1,18.1,0,0,1,22.87,40.3Zm0-33.84A15.74,15.74,0,1,0,34,11.06,15.73,15.73,0,0,0,22.87,6.46Z" transform="translate(-4.77 -4.11)"/><path d="M55.29,56.28c.55-.54,1.12-1.08,1.71-1.6L35.66,33.34A1.17,1.17,0,1,0,34,35Z" transform="translate(-4.77 -4.11)"/></g></svg>

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 471 x 116, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3990
Entropy (8bit):	7.916822688003428
Encrypted:	false
SSDEEP:	96:aYDCsj75TIUEeQ+CMdLoWdCJP4p44UFpWd8ak5Jc:3nIUEXGLVCJQypWiLC
MD5:	4AE77BA9F7393A30A777FFA292EB9DA8
SHA1:	382D00C87842696651D6A8EA06DA92C952B20AB2
SHA-256:	0D8363BA2289DCB81BE6F9761774D776EF3251DBBBC95CA9482C3C7D9959BC65
SHA-512:	3EB0DC9B2C4D70980CC86BCEC5C39F19BB834228D9479B19E1696B355D65DF22BDFF2C51DD428B80484E6EDBA52D85AEA515C0B6C7CECF166315E5468C446CEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......t..........3PLTE..........................................................tRNS.. 0@P`p........#.......IDATx..].. .-.......H.V.jo;m-.a...IB...[AAAAAAAAAAAAA.EQW......n..^.~..w.P.t.y.'.n)...q.uV...P..b.W....b..C......$.O..-.w.R.D.....u.xZ..^.6h.{-t!..~.8...c.w.T....b....S......w......yhW..s.n.....-..Peh..q..b..A.B..a...y..'.1^.N....7.:..O.p.A._...u.?......l.u....5.4..[`.^.......\|......^.vL.x-...1bcD.4d.>...-z.`..W.......{..u......z..kyec.c...-..;.Z^UD..'......z..Ky...!......c.^.kh.S..d......s..52P.f8=n...c.^.kh.2?.t.`..Zw....h........n....7........Q+IGY.cE..@./......n..L.M..M\|..a..m.;.}.)^...iR...55tE...G......9OL.B.....5...x.n..8.O..m..u..n...M."&g..W.m..5..L....."..wxMO..&.i......N'...W.eJ.~.x..F[.....A...4..`........E.0^....a....I.=.+....{S./....D.x v..\.9XQ....[.?.._.WJ...=W.a..A......=W.a^..m-.S.]X9.....].#.......y..&..L<<.=..[.f.>....5.cJ.;....F!.M.".s.....E.... ...Q..S..1...fMQ1vx....=C.'....AS...7.>....A^..>.

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305)
Category:	dropped
Size (bytes):	46274
Entropy (8bit):	5.48786904450865
Encrypted:	false
SSDEEP:	768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m
MD5:	E9372F0EBBCF71F851E3D321EF2A8E5A
SHA1:	2C7D19D1AF7D97085C977D1B69DCB8B84483D87C
SHA-256:	1259EA99BD76596239BFD3102C679EB0A5052578DC526B0452F4D42F8BCDD45F
SHA-512:	C3A1C74AC968FC2FA366D9C25442162773DB9AF1289ADFB165FC71E7750A7E62BD22F424F241730F3C2427AFFF8A540C214B3B97219A360A231D4875E6DDEE6F
Malicious:	false
Reputation:	low
Preview:	(function(){var E;var g=window,n=document,p=function(a){var b=g._gaUserPrefs;if(b&&b.ioo&&b.ioo()\|\|a&&!0===g["ga-disable-"+a])return!0;try{var c=g.external;if(c&&c._gaUserPrefs&&"oo"==c._gaUserPrefs)return!0}catch(f){}a=[];b=n.cookie.split(";");c=/^\sAMP_TOKEN=\s(.?)\s$/;for(var d=0;d<b.length;d++){var e=b[d].match(c);e&&a.push(e[1])}for(b=0;b<a.length;b++)if("$OPT_OUT"==decodeURIComponent(a[b]))return!0;return!1};var q=function(a){return encodeURIComponent?encodeURIComponent(a).replace(/$/g,"%28").replace(/$/g,"%29"):a},r=/^(www\.)?google(\.com?)?(\.[a-z]{2})?$/,u=/(^\|\.)doubleclick\.net$/i;function Aa(a,b){switch(b){case 0:return""+a;case 1:return 1a;case 2:return!!a;case 3:return 1E3a}return a}function Ba(a){return"function"==typeof a}function Ca(a){return void 0!=a&&-1<(a.constructor+"").indexOf("String")}function F(a,b){return void 0==a\|\|"-"==a&&!b\|\|""==a}function Da(a){if(!a\|\|""==a)return"";for(;a&&-1<" \n\r\t".indexOf(a.charAt(0));)a=a.substring(1);for(;a&&-1<" \n\r\t".i

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 25, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	487
Entropy (8bit):	6.731006523547025
Encrypted:	false
SSDEEP:	12:6v/7azPrf56ZxjqK6uRUHlgAJYW88HsKrZ7k:1zPlMzXUHlgNisKrW
MD5:	38962D9D031981976B270236F0AAF14C
SHA1:	F27BBD74749CC9864CEA27AE9B2ACF4466539131
SHA-256:	6AB2146D8E4229D6D5CD929F39C7BA9CC00193EFE230E7FEFACA2524C0D338E3
SHA-512:	23744887877840E6E55E0C5EA7760E69B3CBC099059BE823246EFA67AA22516B3BD7437A86FDEB0A639E9CBB3F872F6152B9AAB162A857A894C7B1CCC9B30F62
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTE........................................................................................................................J..Q..b..f..j..k..l..m..s......................................E.... tRNS.....QRSTUV[\...........................IDAT(......0.EW....Q..Q.{Wl...2....'....3.l.J..O.[r..q.T..,.e.9..".".c.2....ZcP.C.41..k.u......5...>!.......0[Mo.<\|....0bv..{.....x..G.....`.K...6mB/k......o.Y+^][d..o..-Y..!..l.......B].=2.....IEND.B`.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17008, version 1.0
Category:	downloaded
Size (bytes):	17008
Entropy (8bit):	7.986748283068388
Encrypted:	false
SSDEEP:	384:tbyIILhx8E82VT48R8OMxX4tscj0JTlIlZ8Ohz893:tbyIiDm2VceXMxX8scj0TkZtK3
MD5:	D0B6D0F05C00552A21519D6BDB3E5ED7
SHA1:	88F4DC3C65FD919C575032A781580C63E66E94C2
SHA-256:	90767FABD53FE6949C8E19F3AB9D3DA69CFC52C7BBFAFE42739ED14C2E837920
SHA-512:	E15DC42461182A8F45886ED6A11B007D53D59B1ACD24DA0C5DD86C0D563F10C94BB96873556FD8229D24FD81D743CA41DED79FFD01FF20FA088317E01057F52D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunitosans/v5/pe03MImSLYBIv1o4X1M8cc8GBs5tU1E.woff2
Preview:	wOF2......Bp.......8..B..........................4.....\.`..............d........6.$.... ..H..f..#.....6.....Pw.....t..`. .....6.@l....S..1....f......y.$.3.a.s....wEN(.&&...@.S.\7N.............a.x...............t.......,u;..6.......mI..f...on....F..U/..L{fO).&...L..33.f.(&..O.......Sr.......YJL.VxFf.....>g...}O.g.....Z.v)..^).F!Z.......c?^....h..\"V.....t'.d....\......^......([.l..#.....6 ..6....K.....a.......\..J...D.G.....FaM1.....3."Bv..."B]...w..Szo...?#&I.#5....t@.b..sI!.!S.'.d......e.a....m..sn..P.....>....c.Z..oAH...n....!..L.b.H....&W6K.......^.M..K.....CS.u8q.B(.k....P....h..b..Hg6#...A.....iAp...a..Ji.A$.........R....;..H.p.] c......-.h2e...`.....z.......u5..._N...cF`.j..T..y2...6....{n.....o...l.........p..."Y......y.".B<m....rH.p=,T.w......T..R.Oa.BR..P.......D.?.M...J.r.Ji...JC.QN......I..b.q?3..'3g.NR.O..w..`.1B. . .{....X.a9.."...?..t.....Sl;....."bQ%0.{.Q.tV.....@7...\|..m......$..d......!.t.... @;.l..sr.A....;... C..+....];....0

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 383 x 108, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3174
Entropy (8bit):	7.8426068216933675
Encrypted:	false
SSDEEP:	96:UpniK4DgDAZ+CPRjNvOvPheKe0D91F+Ysq4:UpniK4DgDABPRpmHheKe0DXfsq4
MD5:	51065E995F7FE471FFCB65E74CB367A1
SHA1:	E9FB2AF1E71B31594846D9791A97FBC9BCCFE08E
SHA-256:	F31A6556394649637B7524B35CC98F8AF5A77212BA2C5E32119095C925725A41
SHA-512:	46B6DC88239A1DC988622BEF6915662CBEA60B2D75193757F0CAA9A35A61CF9E8C042D24CBC9F0438A64F5B510C1C24BDB6E04D7EA60B2F77CF1BD36A182F8A2
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/nhsbloodandtransplant.png?sfvrsn=77d6694d_6
Preview:	.PNG........IHDR.......l.......B....oPLTE.......r........r..............r..........................r..{.... ..0..@..P..`..p.........................D......tRNS.. 0@@P`p.........e;0.....IDATx...b.....Z..,k......q..N..(.........U..t.D=V....Gsx.~.....h..R..XE..U..X...=.e........-....x.h......_h.AE..^ G....m....N............'.q.....B.?^..\]..H./.........P...!m...........j\|Y....r..9...E..+....w.{.^..a...E..H. w...G../..u...Z.J.U/..;1?g......8-D..(m..'....Hg.....Q.~..a...:.._..o..._NW;....N.ys.......+..J.i..Q....../..W9q...q.?otC.....4:xr.VS....St...'.......=.U.v.;j.".G...mH.. ._..U.44.O.?.......z...+_5.z'.o.......h.:..U..U3....F@..A..^.]..`o.l..(\|1....>.#.+...8.1#`.a.k..U..:qh..@d...J..V...W.s\G....8..._C...&...W.3......`QN.m.V1x..{Y.R.B'..y......_...Q.{Z...~.s`............H.7........9.7.....R..........;..._..M.6a.o.......9.Y.z\.%....F.x..w.....?...i....B==..~.......R..?.+........?@Qgd....}Au.?...5.....?._QS..}..x.H.......=;.f..

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1955), with no line terminators
Category:	dropped
Size (bytes):	1955
Entropy (8bit):	5.195891970049035
Encrypted:	false
SSDEEP:	48:SOdkpwuIpuIbphjkpw4rIipsdqOwmpk4kpwoul5jIF:x+ercSpie4sIsdqpIueTmF
MD5:	18680C7A4046693DE38012C975B15C1A
SHA1:	40AF4E1B4BE241335E0817879CDA62D9FFF1AFD7
SHA-256:	5DBE5D758AD3AE417F09F033D810668BE7266761DBA6EC1FA31140256E3D5CD7
SHA-512:	3BA924AFB2439DF94698A56ABC1A5B5ADE1696857F766F2FF90B947F86776D4148C166624F383464334EB55AD50C99BAD000EC96206BA2B3E40037756AC3F94A
Malicious:	false
Reputation:	low
Preview:	!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js-eu1.hubspot.com/web-interactives-embed.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("hubspot-web-interactives-loader",0,{"crossorigin":"anonymous","data-loader":"hs-scriptloader","data-hsjs-portal":26584007,"data-hsjs-env":"prod","data-hsjs-hublet":"eu1"});var _hsp=window._hsp=window._hsp\|\|[];_hsp.push(['addEnabledFeatureGates',[]]);_hsp.push(['setBusinessUnitId',0]);!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js-eu1.hs-banner.com/v2/26584007/banner.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("cookieBanner-26584007",0,{"data-cookieconsent":"ignore","data-hs-ignore

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	712
Entropy (8bit):	7.348488192072825
Encrypted:	false
SSDEEP:	12:6v/7+9TdduMOFRGvLCNIuoRmD6C1pgCGSJBUxcFloyMw8Hw28DM2GE:lTiPfGzbuoLC1TPScJM9jkM2b
MD5:	AB035F28674FD0FE643C4B9169FA7A07
SHA1:	351712A5DFA6651DBBCBF42942B6B12E5007FAD4
SHA-256:	66578E2DA235DE62ED8193911F17C20B954B836C0FFD912E1653DD7975EC6723
SHA-512:	EA2A0A20C4913F2AFA6430A8B25FED03C7AA934257CB6FA3314028AF26F9405032CE53FE70B4A04A6F9687339C87ECD3E71FB89C8E0D8BFE626BE0C5BADF45BA
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/icons/usa-flag.png
Preview:	.PNG........IHDR...0...0.....`.......PLTE...&J....5V.Rn.Cb....J=jo.........._b...>=m...............}...FJ`z..x{.........o..1>q....SV.ko...`{.........wn.....w{}....kn.>x.:>........BJ...2tRNS...................................................P......IDATH....z. ..E.6.fk.6..d....:C.......B./p.@KL..<...T..gC.....s..Ya.......z.........#/0.P#W .,Z.?.9\..u...X.....\.1i..[...@~...3l.ar.Z ...(........I.....q.)UQ..F....}...@!..pi<....N5......@a.......Ps.~..d?.@.@.a..M@>.DP.(%./..7.....".=.moJEa..O..q@....C...Ji...F....0.C).p.<..f..C%..T.6...w....U.......D.).?..BW.RV...".......d.@;N\|.bo.K...2..K.....\|.w..{L...2L..AxC....-....7....5.B.."MK._#.....A....ns..ov....X...x......IEND.B`.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24463)
Category:	downloaded
Size (bytes):	24601
Entropy (8bit):	5.24038531296125
Encrypted:	false
SSDEEP:	768:MWZ6/8lHJdkMioFpg5SUB2yQEny+zgxV4Ky47Z0z:Q0d3ioFpg5SUB2yQEny+OaKyCiz
MD5:	5861A036C2DE6C2DF26749FE41D57605
SHA1:	514DC9A21607634859963C49BBC773FB57A356DB
SHA-256:	270524B0D27AFD1D3B6622D1A176C678DAED94564C143297E217A63E21CE9820
SHA-512:	AECB48803B34C4F8261BA457D406DAE0A57971625B00C72F442566825A5A9BD4A81D98940B24150DD1F62CF971A07B6BBF5ED759B944FD5FCF3FE4EBD3885BB4
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/lib/jquery/jquery.validate.min.js
Preview:	/! jQuery Validation Plugin - v1.19.5 - 7/1/2022. https://jqueryvalidation.org/. * Copyright (c) 2022 J.rn Zaefferer; Licensed MIT */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){a.extend(a.fn,{validate:function(b){if(!this.length)return void(b&&b.debug&&window.console&&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":submit",function(b){c.submitButton=b.currentTarget,a(this).hasClass("cancel")&&(c.cancelSubmit=!0),void 0!==a(this).attr("formnovalidate")&&(c.cancelSubmit=!0)}),this.on("submit.validate",function(b){function d(){var d,e;return c.submitButton&&(c.settings.submitHandler\|\|c.formSubmitted)&&(d=a("<input type='hidden'/>").attr("name",c.subm

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1366x768, components 3
Category:	dropped
Size (bytes):	116528
Entropy (8bit):	7.898034475454796
Encrypted:	false
SSDEEP:	3072:kyPbLLErsSU2+kn9gh68++LstzyfmOXbKtV:kiLqsSDah6Myv/
MD5:	5F5045F6AA7F4CD1A0A2B350A7059287
SHA1:	8A7E646A74723538C36548756ECBF3A4CED2267E
SHA-256:	B714270F20F4EA23CD1DBBA1B89C8B1181736DD07D7335AA2DEFB6D61C136E83
SHA-512:	EC20BCDE0D736F42687913904D18FB36163CCBFBDAEB8B6CE9471D82D4987C0AE148B972C2860E93F3038B288D01024199A42A105BE7351AD7D76BF8858AE6E3
Malicious:	false
Reputation:	low
Preview:	.....C....................................................................C.........................................................................V...........................................9..........................!1A..Q."2aq.B.#3R....r...$Cb................................./.........................!1.."A.2Q.a#.q.3BR..............?...nP.6q.xx..yX...Q.r...........s...S.N.y.9.^......*..........+"...r...;.Yw.N.=w.m.>..UZ.V)\|......q...n2..e..dk.....N..z.[,........7...[g.y....}>'=..k...<nu.y1.8..h.M..o.....?...p..%&.-...CM{......Z.zk.a/..m...,.u.u.K.Y.?+<...._......a3........[.pQ.<}.n9.....~7...d`.~7O....r./."..l....JO.6y.o.m....~EdR...{.z.#....S\T.Z.7.>g...\...\|.=j.......EB0_.......O....f>.<....{....O.}IW......m..t.7..^\...1._#W'......3..^.+S.....x...^w.~.f...>D......@...}...N...]..yt.>y..^~..]..V.........2.~{....<.U./....zI..P.3.S....8.......f%5....fy}..#.....t...w..zi..s....g...W.b.>.'..=...........X.5p....OHx.....Y.......JO........~.M.7...^

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1955), with no line terminators
Category:	downloaded
Size (bytes):	1955
Entropy (8bit):	5.195891970049035
Encrypted:	false
SSDEEP:	48:SOdkpwuIpuIbphjkpw4rIipsdqOwmpk4kpwoul5jIF:x+ercSpie4sIsdqpIueTmF
MD5:	18680C7A4046693DE38012C975B15C1A
SHA1:	40AF4E1B4BE241335E0817879CDA62D9FFF1AFD7
SHA-256:	5DBE5D758AD3AE417F09F033D810668BE7266761DBA6EC1FA31140256E3D5CD7
SHA-512:	3BA924AFB2439DF94698A56ABC1A5B5ADE1696857F766F2FF90B947F86776D4148C166624F383464334EB55AD50C99BAD000EC96206BA2B3E40037756AC3F94A
Malicious:	false
Reputation:	low
URL:	https://js-eu1.hs-scripts.com/26584007.js
Preview:	!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js-eu1.hubspot.com/web-interactives-embed.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("hubspot-web-interactives-loader",0,{"crossorigin":"anonymous","data-loader":"hs-scriptloader","data-hsjs-portal":26584007,"data-hsjs-env":"prod","data-hsjs-hublet":"eu1"});var _hsp=window._hsp=window._hsp\|\|[];_hsp.push(['addEnabledFeatureGates',[]]);_hsp.push(['setBusinessUnitId',0]);!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js-eu1.hs-banner.com/v2/26584007/banner.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("cookieBanner-26584007",0,{"data-cookieconsent":"ignore","data-hs-ignore

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89493
Entropy (8bit):	5.289599913770796
Encrypted:	false
SSDEEP:	1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakF:YYh8eip3hXuf6IidlrvakdtQ47GK1
MD5:	12108007906290015100837A6A61E9F4
SHA1:	1D6AE46F2FFA213DEDE37A521B011EC1CD8D1AD3
SHA-256:	C4DCCDD9AE25B64078E0C73F273DE94F8894D5C99E4741645ECE29AEEFC9C5A4
SHA-512:	93658F3EB4A044523A7136871E125D73C9005DA44CE09045103A35A4F18695888ECAFE2F9C0D0FA741B95CC618C6000F9AD9AFFC821A400EA7E5F2C0C8968530
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/lib/jquery/dist/jquery.min.js
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1195
Entropy (8bit):	7.738107912968781
Encrypted:	false
SSDEEP:	24:pkIEgPUHigofLoAvNoyQ1pDAPyAY8v02xT8ZHIFVckP1CEo3+AFMCrS:1nQojoSNJDTYGGuP16MCrS
MD5:	BECCE6992EE9BE4B92D32D000A41FEDF
SHA1:	7969825FA2461A4EC4157B6A4FEC1B35F3D102D5
SHA-256:	6E9293B32AED0D06EBFC420AFA7C1C03DC0D3FCE1120AD11336A5F204315BC85
SHA-512:	2D8E54A7BBF40EBD532FDA4A20FA872054CA33551E8BB6EDC4F2873703E96BA2DAD25A701B3A4206491F28CD0E8E05031A8A9CD657672677486D66F35F445C34
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/images/facebook-48.png
Preview:	.PNG........IHDR...0...0.......%....rIDATx..KO.Q..]R....c.......kw.H.&}......q.EC......Ak..R.._.PE...A..T{...c..=..2..9.......F...Q...J%h..t..j..n.@.C..X..q..~...Ui.K-.....6....P....y....'...UV..._..G..d.ya..U..K9 .k...]....'S...VH._..kjA..l..m.jji.}...Z....a..u...o.a.mm..7....D.PC.P.5.C...o.....Z..(.?x...p,/....\|>.I....V.....kw.L.f.k.?3.............7..\|CC....[..>ep....t..YMmm...h4:>.....l..1....c...o.0...N..[..W.".....Z_..[,;..........-......+;.(.J....80......@.......R......@`.&....@5....M2vz57nvt...F....m..k........G..{;...........zw7..D....j.y<;.9..u..D..j.......idf......n.b.x.Z....:g<n..N..m..C......5......u$V.R..;E....8&........rm.......d...t.._.......N(..X,.....P.......2......`#.\|..........T.%.z....h%,.. L...=. nJ.L.4......7...q......Y.p]u....d...Mx..4.U..p......8....w..vA.thH..!.`......:k%.@.9..&..Y....f...N..?;dp.....u..).....F.r...)......-Iy.@_......Ll$,7.&.......2.......X.L. .Do............P(@.=.....7."e.. ..@.?.........O...

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1112
Entropy (8bit):	7.728432676395773
Encrypted:	false
SSDEEP:	24:pNxbHhviy8nfT3yDWAYGl+1X2J6G7yGvuZO3p1H+5dkA7EmQBCOM4o/6rs90e9/N:5bHD8fWDWkcNG76ZOAqAomaCx4oCQ9bl
MD5:	32A822DD3254736A59D3FA41F2ABE94F
SHA1:	242EB96A440597F1AFDF3EA54BACCDCAED80AD62
SHA-256:	5A592EFA471F5B29203DF9973BCDF913EE26153D5B6028CE542E83CCBE24399C
SHA-512:	04236566D7EFB17534F2A21B0CE4C9463A4F797166E49A0F8AF4F5462F1FE77E91AA0B881272F80667BDD1E5F5E74A019B2D178AC5D811B8284BCE39A83CD962
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......%.....IDATx..YHTQ...LEFQ3.h...-.!3.@+[.\|)..E.b.L.L.D.2..L.I.......V.....-0.}3...........{.9r.^~......w9.w.&....,..{.f'...N......0;..a.X.....7/....33..)..w..1...].^n..\|.'']sb...........'.C.......Wf.!!^.`` ..H....V.'...d.....7m....wn.?...^.....T5..yEG...../....{.x.....s...z.<_.......hn....4.]]....u...Vh..6}.N'.K../+.Cp.z.%.....11..8\|HY.w......W/..~hPz...Q...F.+4..V]..G.m.1.F7...D.]..B..&.m.......p.R....H......S.D.....0!Q......Z...BO.+4...\|1.O.t..ND.:.N..Cx..a........{......[...T0?...@..C.:.@......(.&:.. ..hf.~0-..d.W......a.....4..)6.D....Q1:.......m.):.Uhl@J....).........btPT.f.7.kb..Q.......6@j.h3OQXRb....J...;..~.V....6.....^.A.......4...F..W.......C .....$7[.f....>. 5..U.A.".7.VEp2 6.4.D...........z*x........3....H.is..p......~KUs.(.pp0H.9T..[P....<..n...t.j............0....d...C`9it.c.~JHC.K......t.}.Ch9..)7W;.....1..R...r..uP..Z9../.N7.=......u.V$.f..Ay..L!.f........D3.s.T..[H...H=;....W.Cx.....64....>..w.aox..

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1195
Entropy (8bit):	7.738107912968781
Encrypted:	false
SSDEEP:	24:pkIEgPUHigofLoAvNoyQ1pDAPyAY8v02xT8ZHIFVckP1CEo3+AFMCrS:1nQojoSNJDTYGGuP16MCrS
MD5:	BECCE6992EE9BE4B92D32D000A41FEDF
SHA1:	7969825FA2461A4EC4157B6A4FEC1B35F3D102D5
SHA-256:	6E9293B32AED0D06EBFC420AFA7C1C03DC0D3FCE1120AD11336A5F204315BC85
SHA-512:	2D8E54A7BBF40EBD532FDA4A20FA872054CA33551E8BB6EDC4F2873703E96BA2DAD25A701B3A4206491F28CD0E8E05031A8A9CD657672677486D66F35F445C34
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......%....rIDATx..KO.Q..]R....c.......kw.H.&}......q.EC......Ak..R.._.PE...A..T{...c..=..2..9.......F...Q...J%h..t..j..n.@.C..X..q..~...Ui.K-.....6....P....y....'...UV..._..G..d.ya..U..K9 .k...]....'S...VH._..kjA..l..m.jji.}...Z....a..u...o.a.mm..7....D.PC.P.5.C...o.....Z..(.?x...p,/....\|>.I....V.....kw.L.f.k.?3.............7..\|CC....[..>ep....t..YMmm...h4:>.....l..1....c...o.0...N..[..W.".....Z_..[,;..........-......+;.(.J....80......@.......R......@`.&....@5....M2vz57nvt...F....m..k........G..{;...........zw7..D....j.y<;.9..u..D..j.......idf......n.b.x.Z....:g<n..N..m..C......5......u$V.R..;E....8&........rm.......d...t.._.......N(..X,.....P.......2......`#.\|..........T.%.z....h%,.. L...=. nJ.L.4......7...q......Y.p]u....d...Mx..4.U..p......8....w..vA.thH..!.`......:k%.@.9..&..Y....f...N..?;dp.....u..).....F.r...)......-Iy.@_......Ll$,7.&.......2.......X.L. .Do............P(@.=.....7."e.. ..@.?.........O...

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 871 x 228, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7213
Entropy (8bit):	7.93382888473239
Encrypted:	false
SSDEEP:	192:+5D0mcHxcRBoItGY2PLSgeNtd1jiLCeYiIdDfgixC1:eD0ONsYcm1SC7iADIm8
MD5:	56180AC3AC570A58BF5AA97BF3382457
SHA1:	8C52FABAFC4EF518A63856930645B43FCB2808A2
SHA-256:	D9431629D8814E0B1FB7C70942BB825DF9A5DCEDC5B5A36E945AB5B5E818D805
SHA-512:	1394B7A58D3B29F6A7235C750BAD384E2156BAAA73ECE83DCA96F6019835A043513148058593EB77F4D33E8C26884774A3E92319BD573E499DD3FF8D8B8E382D
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/nhs-blood-logo.png?sfvrsn=6c326917_2
Preview:	.PNG........IHDR...g.........+Y.....6PLTE.......................................................c......tRNS... 0@P`p..........p.....IDATx..mw.(.F{\|/.5...N......[..{.9..s..<..........g...3....@~.. ?x...<..........g...}........y.:....gx...3<.....A~... ?x.g..<.3.......?...fydrn.3..!.6....M8mQ/y..3.Y......mx.%.y6.O..1.O8...Hn......6<.R.%.J..w.%..5..C...n.3(C.V9.=.=...m8^#..kS:....!....476.....m:\#...uv.3(C..E..$...A.......e"+.A...M...@.Ad>!....+hR...@!.......b.W%.u.3(D.3}.hS.T{........}]....x..6sNu\|Y.?...q..'.Z.~...sr...:%.\.gzv.z....A)....Y.5.:9.-y...5.tu.3(..yF....t.'. .~.'..o.bH .0p..U.b.....x..p..\..j#....}-:<.gP..g....{...&[Z..Y.Y...l...L...../..!..(:(.e.bm...!.&......<.rHxr.\..>..;......}.}usx......V.......h..il.... .[.oO.Vm.M-.....9.3.Q.?9...b.g.j....mx..F.....QF....Q.@[.+.WF...TQs*u.M........:\|..."b.FUwL.A...V$.X......g. .2u.....D..7..h.!..O7...gpa$.....Qj.%.k.o.iU.....HT.........K.Az.{....x......}+...RZ.i1H.-.......H.r.?i..d.R..

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1457
Entropy (8bit):	7.816438616008456
Encrypted:	false
SSDEEP:	24:pcICo1M419/+pBk13AEUNoBhmwBuGygjrX0UqlflhXf9vQImFCD6rWEtTQBf6tIE:t1B+pBkxHHBryorkU8FYImFDpc3K3
MD5:	C177944CDC91022D5E1D9AC15DC9E2C5
SHA1:	9C82E7693EAD006F9A3C3D372967281CE02243AE
SHA-256:	7CA703290D5624DDE4ECF456FA361A511E86A79CCE8D11ABD286C1E8245C9B18
SHA-512:	3B4C371038D85CFFA260132BC79721DA90D901AAB1D2A9148DC6A72009A88A75A4359585788D844ABEA8EF135D08C3C80F4F87D1F2B7112BF5D3401FBCD29D34
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/images/linkedin-48.png
Preview:	.PNG........IHDR...0...0.......%....xIDATx..{LSW.....pc.F.aSA."..m.2.C..m......J.24...Q.E.D...A.c..\.7m.Z[..8..."STD.......%.b{Po.....{....'==..!.'..G..b.....r....t..D.e..x...$..).f......Hs,..+..d.....p7.3CW.P..n...\|..s..7j.4Y.s..[.bM...6G0..=....c.as...R..au..?..kEL.@..~..B..8..>....(.yv...PRT.4[....h.S....q....T/5...e.qs..K.b^..)@....[...{J..'.........}..\|..?D.<..~..B.mh....Q`...x4.O..~.......T..r..I....%..[. ...{...;.f...@H..j.~..).............r...\z.sh...+<L.#......N..'K.0......@._.^.7 ...h.~.<.....X..:...,5......N~...[`s.6@.[i..Z..]Y....,.\@.....-*......@3...:.I.....6...h..t.6.+]...&K.....X...y..p..on.04...5uz.t.>.H.h8.....?...n..B.r.s..../o..m......_.~;...V..\.6.@.O..j9.....r.o.od.....}..>y..N...z.....N.....S... ....s.8./...u..p.....Ob.3........5'G5..~.VxP.Zu.....m.....p............(q.`.l..y.5j"...k.>.....M..O/.i=?.EN...L..vu4.N...`D.._^?...`.Oa.....>K........K.?N..[.Z{"..O<.x>......{....Zh1}<.m.}...6/x^.!..p...l.]Iir.]s1.._X..&\|..

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 302 x 170, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	11117
Entropy (8bit):	7.96852720069826
Encrypted:	false
SSDEEP:	192:q9wzSTBBiW1jT/yDDa3N39pTpQ7sh3MI0KY/fFv1/MtRiuMz8MWMk8:aeW16DDa3NMQMI0hfzktRiua9k8
MD5:	3B47A0373BAD59D41978BCC630B1C712
SHA1:	A68F885367C15DAC8C74944E992244AD2D4AD77C
SHA-256:	9B69DFA54CA26B96C1F2A78B54CD7DCECC1B5682D660E28BCB9010BE47C3BE7F
SHA-512:	B2153CE262735A32B18FE85A519386BDE7AC48BD8DE4FE2382EBCC791F2A0065E9BB476C3C6D2F7C89F9AA98DD3B334352E53E45CEE2E42A27BD47CB03324309
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/images/sn-iso9001.png
Preview:	.PNG........IHDR..............t5n....tEXtSoftware.Adobe ImageReadyq.e<..+.IDATx..}.pT.f#~.. ...........P......#.F.,..x7.$6.....l<!.#.....j.I....Lfj$. j....dbKN......,.qj....`.h.~.:......nI...UW........9..{......A..f...................................A..s.W[[{..q.....G....o"46l.`......n......y...Q..S....+.B....4.....G.R.....$.......................................#..G.C00T.3N.:UVV...c....b<Q[[{......<..C.......!8i....b...........q@SS..Eu..T.X.f...#.Y..---.F0..4s5.......g..B]..e.T....i...J...Q....FN.j.rrr..<.f........Ztuv.;..Za.8...SU......Ji{{;..L..m.6C3/(,,2..(..@u!.oL.u..7.....7cb....;wV..b....G<.....W-F1...7.>.A........`.!.VP...5H.........b....I.N.vk0''G.d.h......h.C.$..H.,C..v.Z.v-.N.jmm5.?.....Y@!..e.....)......&d..:...KJJ...3......vT}L.}.)444....gdd.&.0.....?j.c.eee......k-.z...GF.+.V.]....@..}{..ef...S...[P.xS1.#..........L}*B..:t("..@.CB....9.rjC>.S.5....A00.............jk......;.Q...d. '...wV...b<......g."..;.yUPw!!kjj.'..0...f.odd

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1457
Entropy (8bit):	7.816438616008456
Encrypted:	false
SSDEEP:	24:pcICo1M419/+pBk13AEUNoBhmwBuGygjrX0UqlflhXf9vQImFCD6rWEtTQBf6tIE:t1B+pBkxHHBryorkU8FYImFDpc3K3
MD5:	C177944CDC91022D5E1D9AC15DC9E2C5
SHA1:	9C82E7693EAD006F9A3C3D372967281CE02243AE
SHA-256:	7CA703290D5624DDE4ECF456FA361A511E86A79CCE8D11ABD286C1E8245C9B18
SHA-512:	3B4C371038D85CFFA260132BC79721DA90D901AAB1D2A9148DC6A72009A88A75A4359585788D844ABEA8EF135D08C3C80F4F87D1F2B7112BF5D3401FBCD29D34
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/linkedin-48.png
Preview:	.PNG........IHDR...0...0.......%....xIDATx..{LSW.....pc.F.aSA."..m.2.C..m......J.24...Q.E.D...A.c..\.7m.Z[..8..."STD.......%.b{Po.....{....'==..!.'..G..b.....r....t..D.e..x...$..).f......Hs,..+..d.....p7.3CW.P..n...\|..s..7j.4Y.s..[.bM...6G0..=....c.as...R..au..?..kEL.@..~..B..8..>....(.yv...PRT.4[....h.S....q....T/5...e.qs..K.b^..)@....[...{J..'.........}..\|..?D.<..~..B.mh....Q`...x4.O..~.......T..r..I....%..[. ...{...;.f...@H..j.~..).............r...\z.sh...+<L.#......N..'K.0......@._.^.7 ...h.~.<.....X..:...,5......N~...[`s.6@.[i..Z..]Y....,.\@.....-*......@3...:.I.....6...h..t.6.+]...&K.....X...y..p..on.04...5uz.t.>.H.h8.....?...n..B.r.s..../o..m......_.~;...V..\.6.@.O..j9.....r.o.od.....}..>y..N...z.....N.....S... ....s.8./...u..p.....Ob.3........5'G5..~.VxP.Zu.....m.....p............(q.`.l..y.5j"...k.>.....M..O/.i=?.EN...L..vu4.N...`D.._^?...`.Oa.....>K........K.?N..[.Z{"..O<.x>......{....Zh1}<.m.}...6/x^.!..p...l.]Iir.]s1.._X..&\|..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	63728
Entropy (8bit):	4.796086936813976
Encrypted:	false
SSDEEP:	1536:FXQOHS7yqAjXfwrTonL54PZhA+kJXT//z0UO/nwa1jbJusePqr47wHnE6c8y/XgW:ZQOHS7yvjXfOTonLGPgZpJFwmT
MD5:	68933B72D138F86A2F28543268D909A9
SHA1:	8B7071A0EC29C17B5466BA88BE9795CA0DF1BED5
SHA-256:	C9CB5CA94BE81F87B0E88F2455344AC0120EF88F3DCE00AC6246A242DAA458A0
SHA-512:	40527172DB6704B5013458050DF46421D205D98045995F6BF3A24ECDA2CF77979ECABD08CC8FE6C995B654E363AF91B72CE8489116EF271340411B559A1CBBD5
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ResourcePackages/Safenames/assets/dist/css/styles.css?vrs=115
Preview:	.BODY {. color: #3B505C;. counter-reset: list;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;.}...text-default {. color: #3B505C !important;.}...text-lightblue {. color: #009FE3 !important;.}..@media (max-width: 991.98px) {. .img--fit-on-mobile {. width: 100%;. }.}../* inner pages top bar colors /...top-bar-domains {. background: linear-gradient(120deg, #00496d 0%, #00aeef 100%);. /background: linear-gradient(120deg, #d53369 0%, #daae51 100%);/.}...top-bar-ssl {. background: linear-gradient(120deg, #00496d 0%, #00aeef 100%);. /background: linear-gradient(120deg, #F1E871 0%, #10BBB9 100%);/.}...top-bar-bp {. background: linear-gradient(120deg, #00496d 0%, #00aeef 100%);. /background: linear-gradient(120deg, #FFCE3C 0%, #F68A4C 100%);/.}...top-bar-hosting {. background: linear-gradient(120deg, #00496d 0%, #00aeef 100%);. /background: linear-gradient(120deg,

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	690
Entropy (8bit):	7.274774598213589
Encrypted:	false
SSDEEP:	12:6v/7+sSJdESah3+WUMi1gV82S725xu99gi8XO9LU4veUsbgVS+ez:RT2h3+JuV8NFvgeLvZQmShz
MD5:	F39EE91DDD4D65F1F44621A3A1CBAFE2
SHA1:	EF66BD27407C8D566E839771A72AE910A8E0B3DB
SHA-256:	7EA111F9265E3BB62554AF224E00FCAA2B22E5021EA51B73B5C5DE115EC3B5F4
SHA-512:	D5380303B9F1B2918063C9E0661848F8AC25D50DAC6D1DE8148D34FF149E14892450EF61C4EB90D87BB18157D67622FA8443D99A463173A638376BC974E9EAD2
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/images/uk-flag.png
Preview:	.PNG........IHDR...0...0.....`.......tEXtSoftware.Adobe ImageReadyq.e<....PLTE..Ze]b.........1>PU~BGt.?K.....v~.........5:j.LXx\|........PT~..............hr....................hqko...................'-`....#1......p...0tRNS................................................b..x...\|IDATx....r.0..`......=N/.........K.fi.1.._.-....p^2YiT.......W.._.@....j:I\|`WR..4[..:.[n@.......".H.......-...x..5..7A...X..=..'x...)+...8q>8.....Z..`{o.`...1A.....9..A..8.J..........z..0...sk..}....K.H.C.`..........?8\|..y.0.T./..$...+..S}...?T.c_..~..>..b.Mn.b.Lv..X...TE..>W.DG.A...Uf...Mz.,......\|...;.n$..I.d..K.k.n..d....>.s....9.....jk.,........+..A.~q)].....IEND.B`.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	316820
Entropy (8bit):	5.576806474154779
Encrypted:	false
SSDEEP:	6144:i4RlIGKlqjBZ1MvO5K1x72Dej7NsYFVVl2pP:rRlwUjBZQl6
MD5:	605B4955AED6B4CFC760BDB1D1946E47
SHA1:	23A80A629834C2D4ABE6FE3EEC8A6722DACCC8D8
SHA-256:	55D14DA90A7E993C749E3903F1032526BFDFE3958E8C06430BE78D8C22976F32
SHA-512:	5CE87327DA1013E32ABEE7C5F51CFFC2162E4CAEF528BF1FCAD2B477343915A03FD3D43A2D48CFA866ED24A279F46ABA28C0A48040E778A0EB825F8567AC73CE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-S2Q2NMTHK4&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":25,"vtp_rules":["list","^safenames\\.net$"],"tag_id":8},{"function":"__ogt_1p_data_v2","priority":15,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_las

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	135
Entropy (8bit):	4.915756686255547
Encrypted:	false
SSDEEP:	3:YVKBEi9QZV6HWQoMRL2KIhfwcP2xR2GXEqRWJ6jLZHJqaDcc:YiTQZEBbU2mn6jLZp9/
MD5:	39A139867EE5BD9EC6698C43E61D401B
SHA1:	DDBBCF9B96BBFE0FF529ADA13401105B3F4E7F25
SHA-256:	1EEED5D7B98ADF51D7E3B287A36194747C8D47267DC14ADC4F97CD85D35F486E
SHA-512:	AA92162DBE6ACD6BC3E695B76D2FCDDE3606B4D189A3EADCAC4EB3F1C6D6CD9F6B917BDAB6BE1572A46CBFDC731F641DDA7421510C1D3BAFDE57461CB1D451E1
Malicious:	false
Reputation:	low
URL:	https://forms-eu1.hscollectedforms.net/collected-forms/v1/config/json?portalId=26584007&utk=b0d8d964aeb6481607376bb169425680
Preview:	{"portalId":26584007,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":-606939824}

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 650 x 650, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	328640
Entropy (8bit):	7.996659375654859
Encrypted:	true
SSDEEP:	6144:QNAX8ielPNBYk5/iqTQ9Ee7TteQrJP9WyG8PQaWT6MdLcqt1rWmZ267y:J8ieVd5/fM9Ee7cQr9oH89WeMpZ1rVQ
MD5:	310BBC442D7C1F3CF54E68E61DC2F705
SHA1:	B4F0825F18E281C4E49A660E119F8698690BA0CB
SHA-256:	E1C96C9AAD0BD42EF2B8236577BE1D5347E818B9AA3FB21E769166FEBFABD4DC
SHA-512:	3D0A02C3368B186A9CEABD18B5861D8E82A734FCAC4C2A4C73EF485445E0A142290EC34A67A557E1CE76254C6847420CEE87713B2566720DE0EC0BA92B1C3BE2
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/safenamesblog/AShortReviewofURSRecommendationsandProposedChangeshomepage
Preview:	.PNG........IHDR..............tz.....pHYs.................sRGB.........gAMA......a....UIDATx...kz3I.$J...g.g..11mU..@..o....Ln..y......?n.f.....n.zZ.....7.I......x.C.o..`.n.\|G......v...&.._.W.....E...\|.2{xY.}......w.9.X8..#^....-..u.....'..........._.l.....6)s.m.....6.I...m.....NZb....=..}..(.a....d..P?4=^?2iW....G.s.q.i.pm.o.P.>e.>]}.9..Aoic\.x..^=r..Z.......[}.].....^...xm..?.n......>4...08M..e..n...]>...).lO...5Hy.....m..Q...6.JUO~.Fg.L.8C..Y.C..,.....b..y.C..wW....E.....z.Lb#.0...ng.3..4s'}f[..i3p.......W.....^.P.C...cr`..._s..%.^.y...]..uy:...... ]3..w=>.h.f....<..q..../...a'..-.u.R..].l..M^G......$.(.'..8......x.8....@..?.....ZaM....r....Rl.._..=..k....I.A...-B.j.f....6C....r}9N..2...?....E>.....=......e.P.?.8}`.....o...".38........p.1.3F.}......u..q..G..\|.\|.e*5.=.FI...........q4\..m..2.=..........s..E..)...}.[......LM.3i.eqEe.;?..~P...b... ..}}.r..7(!0......+..t...0.,Y./H..C_pc+..&.Qv..N1.:P,fL...X.K.^.;...k>1.........CM[...9L.".84

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	84671
Entropy (8bit):	5.280749760123156
Encrypted:	false
SSDEEP:	1536:8HyXWWcWdcBNieNO8DDejT5UKxfIzbFWX7Qp64Ai1n4aBgcl8705eZGXm:u8jWKxfI3+7v
MD5:	6B513BAAF4C77CDDC702F596C3DD62D9
SHA1:	3419650A06EE0A9BF9398EB3CF6792B202E6432C
SHA-256:	6B0FDAA32FEFFBDBD15BDA3619624E0AA8E1D647FD720E31B7645654E7FB551E
SHA-512:	F690B93FFF5D046F5EDBB806C7D09EF3EF89713F972AE613AFCC66A20A1CCBF0B520FA87AF973984D98B539CFC6E5AFA3A99F237D60B2DB155D8C359858FBF21
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";const e={RECEIVED_ANALYTICS:"HS_CTA_PARENT_RECEIVED_ANALYTICS",DEVICE_TYPE:"HS_CTA_PARENT_DEVICE_TYPE",PROXY_ANALYTICS_FN_CALLBACK:"HS_CTA_PARENT_PROXY_ANALYTICS_FN",INIT:"HS_CTA_PARENT_INIT",SHOWING_CTA:"HS_CTA_SHOWING_CTA",SEND_EXTRACTED_STYLES:"HS_SEND_EXTRACTED_STYLES",STARTED:"HS_CTA_STARTED",NAVIGATE_PAGE:"HS_CTA_NAVIGATE_PAGE",CLICK_EVENT:"HS_CTA_CLICK_EVENT",CLOSE_INTERACTIVE:"HS_CTA_CLOSE_INTERACTIVE",HAS_CLOSED:"HS_CTA_HAS_CLOSED",NEW_HEIGHT:"HS_CTA_NEW_HEIGHT",DISPLAY_CALL_TO_ACTION:"HS_DISPLAY_CALL_TO_ACTION",PROXY_ANALYTICS:"HS_CTA_PROXY_ANALYTICS",PROXY_ANALYTICS_FN:"HS_CTA_PROXY_ANALYTICS_FN",SEND_FORM_DEFINITION:"HS_SEND_FORM_DEFINITION",SEND_CTA_CONFIG:"HS_SEND_CTA_CONFIG",SEND_EMBED_CONTEXT:"HS_SEND_EMBED_CONTEXT",RECEIVE_FILTERED_STYLESHEETS:"RECEIVE_FILTERED_STYLESHEETS",SEND_STYLESHEETS:"SEND_STYLESHEETS",RENDER_RECAPTCHA:"RENDER_RECAPTCHA",EXECUTE_RECAPTCHA:"EXECUTE_RECAPTCHA",RESET_RECAPTCHA:"RESET_RECAPTCHA",RECAPTCHA_SUCCESS:"RECAPTCHA_

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305)
Category:	downloaded
Size (bytes):	46274
Entropy (8bit):	5.48786904450865
Encrypted:	false
SSDEEP:	768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m
MD5:	E9372F0EBBCF71F851E3D321EF2A8E5A
SHA1:	2C7D19D1AF7D97085C977D1B69DCB8B84483D87C
SHA-256:	1259EA99BD76596239BFD3102C679EB0A5052578DC526B0452F4D42F8BCDD45F
SHA-512:	C3A1C74AC968FC2FA366D9C25442162773DB9AF1289ADFB165FC71E7750A7E62BD22F424F241730F3C2427AFFF8A540C214B3B97219A360A231D4875E6DDEE6F
Malicious:	false
Reputation:	low
URL:	https://ssl.google-analytics.com/ga.js
Preview:	(function(){var E;var g=window,n=document,p=function(a){var b=g._gaUserPrefs;if(b&&b.ioo&&b.ioo()\|\|a&&!0===g["ga-disable-"+a])return!0;try{var c=g.external;if(c&&c._gaUserPrefs&&"oo"==c._gaUserPrefs)return!0}catch(f){}a=[];b=n.cookie.split(";");c=/^\sAMP_TOKEN=\s(.?)\s$/;for(var d=0;d<b.length;d++){var e=b[d].match(c);e&&a.push(e[1])}for(b=0;b<a.length;b++)if("$OPT_OUT"==decodeURIComponent(a[b]))return!0;return!1};var q=function(a){return encodeURIComponent?encodeURIComponent(a).replace(/$/g,"%28").replace(/$/g,"%29"):a},r=/^(www\.)?google(\.com?)?(\.[a-z]{2})?$/,u=/(^\|\.)doubleclick\.net$/i;function Aa(a,b){switch(b){case 0:return""+a;case 1:return 1a;case 2:return!!a;case 3:return 1E3a}return a}function Ba(a){return"function"==typeof a}function Ca(a){return void 0!=a&&-1<(a.constructor+"").indexOf("String")}function F(a,b){return void 0==a\|\|"-"==a&&!b\|\|""==a}function Da(a){if(!a\|\|""==a)return"";for(;a&&-1<" \n\r\t".indexOf(a.charAt(0));)a=a.substring(1);for(;a&&-1<" \n\r\t".i

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 206 x 206, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17400
Entropy (8bit):	7.958969125508256
Encrypted:	false
SSDEEP:	384:vZ1Mz/WgxpK8iRyqTrYpvVtZyQjQ+zyWevIf2mSpjb6AR:R1Mz/WCpK8iRbr+dtAg8E2R
MD5:	E504F256E0F7223414A0A88108990DA0
SHA1:	663F681A82E13AAE377D175B626366CB83EE82C9
SHA-256:	AEE6D4044A09182C73E1E30A6C839B365DBB1EA34330B4EC384F6119F781BD78
SHA-512:	8B3EDD7EDFD46522DEE6933D34BC9749F5C8B51E3EA87BBE1921F263D7F4577BBA493F891A9B20BBACDA66385FA5CC0AC9B7BB4C6AF8FD90D2BE4DE071D7D010
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/gsk-logo.png?sfvrsn=86c1b0a5_7
Preview:	.PNG........IHDR.............v.=.....tEXtSoftware.Adobe ImageReadyq.e<...BiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.3 (20231127.m.2415 28b0a5c) (Windows)" xmpMM:InstanceID="xmp.iid:A909FC1B92AE11EEA75FC32A62E568C6" xmpMM:DocumentID="xmp.did:A909FC1C92AE11EEA75FC32A62E568C6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A909FC1992AE11EEA75FC32A62E568C6" stRef:documentID="xmp.did:A909FC1A92AE11EEA75FC32A62E568C6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>m..'..@LIDATx..}..-Eu.>.N^......DQ.E..9..AE.h.....2\|..c&ML.1..5_.....(....OqB#.......

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	695
Entropy (8bit):	7.61542562674215
Encrypted:	false
SSDEEP:	12:6v/7u9qSug+WCEwBR8RneeCivbx7aLP/6LvBzZvqO0j4vQZbhk3iWmIxR7sa+Qf9:p4SL+jEWWX/qCzQO0j/lWxFRN+QX1Ai9
MD5:	1A31EC7C75FB89BCC1C081710374B6A6
SHA1:	F59632DCB3C28E291A7093C87BA248260BCCB742
SHA-256:	E53F35C4C0A13730E3037AEAF669390DA554FFF89CBA0C0F435B65848AF585E0
SHA-512:	C5C7267381161BEFD0BB19DDA3CF159FD86334CDC20C4A7D7202C84FD68CA62BA465F4FEB091C13BA4FDCD5C55E56947740AA487C786A6AA307509519D6F2CD0
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/youtube-48.png
Preview:	.PNG........IHDR...0...0.......%....~IDATx..;O.A..i5.D=....j..$ZR...O`(.!.F....-).1..%.Y.j......0..%..9..^.x..L.#...........{.\|D...P...T'....@u..P...Tg...vi....)...pm..........O.......0...s.b.k2.;~...w......y.</.'.......ux .<;u.....-..a.C!.a...'.c(T..O..[#.8#..DB....D.VxM.....y.5.2 ..C.j..-.".9...H.2 ..C.j.E-..q9..x......u.-.qi.~..L..B!.^]5.ok.......WC...c...0...D.<_....{x..]X...............G.\|xpt.....O..m..n..V..;.jQ..c.R,.....}.......X,X.<.......0r.0......d^;.J>9..g.=^.S...vLO....eg..`.ry....\;......$.....jm.E8....E..Cq(.C.F...F.Z.8...j..P4...C............My..My.K...Rh0.....h4.K:.&.p...w..u>#h<.160..l.=..9O...N.....T'....@u..P...T'......Hz..I.1....IEND.B`.

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	459
Entropy (8bit):	5.092040953399108
Encrypted:	false
SSDEEP:	6:tI9mc4sli84QzvvT+4BIi6bE43mTSXVj8JLzcJeBJAJHSLrdGo7Uef7QQ2EJSS0D:t4I84sOvl8JT/ZcefUO8XlHrScem
MD5:	12B90E15358013C0A0147C845C57F15A
SHA1:	22CD201B127A51EC0F1B2841E1BA106C317215D1
SHA-256:	654B0FD8864BB7462F9D4C5B48B86FC63AC7E5D2DCCA1816A426E09F2EF5AE63
SHA-512:	7642DD356FCC8DCFA3ACEABDACB74340F3DCA082B6D95DBC26FA8059E54B14D0491175F055E5DFD39813A3083973B449B872E5040E529D8AB5E10B703AB62B0D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="#ffffff" viewBox="0 0 52.23 52.17"><title>mag-glass-sm</title><g id="Layer_14" data-name="Layer 14"><path d="M22.87,40.3A18.09,18.09,0,1,1,35.66,9.41h0A18.1,18.1,0,0,1,22.87,40.3Zm0-33.84A15.74,15.74,0,1,0,34,11.06,15.73,15.73,0,0,0,22.87,6.46Z" transform="translate(-4.77 -4.11)"/><path d="M55.29,56.28c.55-.54,1.12-1.08,1.71-1.6L35.66,33.34A1.17,1.17,0,1,0,34,35Z" transform="translate(-4.77 -4.11)"/></g></svg>

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65327)
Category:	dropped
Size (bytes):	70475
Entropy (8bit):	5.380996746038723
Encrypted:	false
SSDEEP:	1536:ZKblURHpp4V2JLxcbvM/9mU7C7Az6v0j861:ZmlgJpEvM/9D9z6cI61
MD5:	48BB5C8A01043ECEAF45E65D5C98950B
SHA1:	4603360883DD66F7254CD5DB17777748226DC657
SHA-256:	77080938572095BDDC311784E1C284E7CD12268F46946AFF94D04A43A53DFFC9
SHA-512:	3A03DD060953E790E8ECB40DBE64F2CE4980DAE93433209C40C56910231663660306FE5FCD3D8D3041CC2BAECACA1E3DB1E5C27C39B1A23381D633CA432992DD
Malicious:	false
Reputation:	low
Preview:	/! For license information please see project.js.LICENSE.txt /.!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t:"function"==typeof t},i=function(t){if(null==t)throw TypeError("Can't call method on "+t);return t},o=function(t){return Object(i(t))},s=Math.ceil,a=Math.floor,u=function(t){return isNaN(t=+t)?0:(t>0?a:s)(t)},c=Math.min,l=function(t){return t>0?c(u(t),9007199254740991):0},f=function(t,e){if(!n(t))return t;var r,i;if(e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;if("function"==typeof(r=t.valueOf)&&!n(i=r.call(t)))return i;if(!e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;throw TypeError("Can't convert object to primitive value")},d=function(t){try{return!!t()}catch(t){return!0}},h=!d((function(){return 7!=Object.defineProperty({},"a",{get:function(){return 7}}).a})),p="object"==typeof window&&window&&window.Ma

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 156 x 124, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	4664
Entropy (8bit):	7.961871216575725
Encrypted:	false
SSDEEP:	96:OIwVDCvTK3gjmFjd2Cad63QcKXQMjcg8p1PYWvb0yMAJG:cV+jaKkAcKXQMogIFvYaJG
MD5:	CA1887C02AEF9A12EC5C2654F8BC9ABD
SHA1:	72C6B1FFA555B67011DE2894FA9324C6AC5C77FB
SHA-256:	AA06527B867F625EA57359E7D19D416B042E237530776BE58391C6BD967964B1
SHA-512:	27D8D32F97348646E2EDE800EB12940D5D0DA4CE96159148CE07D49D530FF3C2AB66DEDD71C99AC6D15C2D6DD752969539B67975541F733EC2056CBEEA382E3B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......\|.....6..D....IDATx..].\T..?u..~...[.^EsC..\.."....q..$..7.FDD..C.b..%'4.2..#"..5.Vf..i.vS.n..3.3g.6.:..\|....y..y..y.a..<....<....<p...#........O.>......t+..%8.?`..a..ox..5v92.`... L.\|..y.....]......&........o#...Y......\-DMc..).Bt}......j~kL.b..]......l.].\..XO..D50~.x......SI.....[.L.]....y...a..`}....b.. .+...jK.....[......-...K...E.~...;@. ...W..V.O.E..... .......?9..n...x..;.......R.u~.{J.l.LE..U..quv.l.KS..6.........OY/.4..4w1f...u;v:.....a.`.Z.z.z...cg..e...z0.#..C2..v.#+.:l....H.z.V.T.Zzm....5.{.F.Qo.w9u..+.KP....8...V.r...A3.T.b\...6#...l.u.J..+E....N.....a.o~...A.....#&Y.C...Pt}m..#.QwRgS...;[.}P.$....7.[......%S.a2..j\....g2.t...&P...buH3c.v46...'.f..AE.@sH....hK..b'..9I...D..T3(N...W.}.C.....6..a0.r.M.\.=n..6............r..r>JF.+N..`~.R...#..'..Q.Cy...h..p.$.mC....!.`.$.m.RGK.t..............+...A..gq...c2...F.(W.>..>..;ah. .j..W.#W..AM...CQ......(..U...>h.-...cH{`Qj.:...(Z..4.1.V?b_9.M.&..X.c!}PC,.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 650 x 650, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	215573
Entropy (8bit):	7.998103821264098
Encrypted:	true
SSDEEP:	6144:oiA/SeGSxLscAXxfTK/lWyJEUWKarSDw3cT3rB9I:oDqoR0fSuUPWS0eB9I
MD5:	20F05F0C6786F9DE10FD494C228D6257
SHA1:	68BB4E1F74197EF532BA8157F00C1F9C7F1FA0A4
SHA-256:	50EFD7F3A559EDBD6597889F10102D0C82B20F27F9712B315C019A868B3ABAD5
SHA-512:	7D12D8A8480CD897C48F23C5070E47083527CD540CD61B2CE9A6C068E1BAD9C5ADAD1B107BD18C8857878317B07B7607C8861B7DAAEADF09E04B0E06A4C5AF9B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............5.......tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f1e2eff-511e-0343-87de-b1f85096cb46" xmpMM:DocumentID="xmp.did:8C858CF989B711EAA1F687D6D80519EA" xmpMM:InstanceID="xmp.iid:8C858CF889B711EAA1F687D6D80519EA" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:842e727b-08d7-1342-97c7-ff7b8778de48" stRef:documentID="xmp.did:6f1e2eff-511e-0343-87de-b1f85096cb46"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>5.Z...F5IDATx.......HP.......U...T

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1778
Entropy (8bit):	7.770287121974757
Encrypted:	false
SSDEEP:	48:ZsruaO4dZXwlyfjOVqyZe15ccylFPuSVRd7:Zc9BdRwayVqya/KluSt7
MD5:	370836ACBD6C1B2C489CB42896E65C04
SHA1:	866A3B17594CDFBDFD4FD467E7BF6F1D55EA4E85
SHA-256:	7056ACEBB53F421C5514029A1262015E8ECFC4291271FF1428D6461F186FBD7C
SHA-512:	3DFF3D97EC820295E1C713E0EB36648918B4F4F83CA2904CA7A273A4D147487820B6FC74AA603A9E7A1E78B3CE823B7FCA1CD725E3F8092B4CA1E92CF85EB70C
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/images/digicertpartnerplatinumlogo.png?sfvrsn=9ea9a433_0
Preview:	.PNG........IHDR.......P.............tEXtSoftware.Adobe ImageReadyq.e<....IDATx..\.y.<.6}.......n.N.2A..........(..N...2...\|.\|'.(.....y......Y.N..%..............................{..l6.........d.^ov }Ek].Z.......H.Mg9.~.r.C.u[.@_.<.....2g...\|.P...A%.....I..e\....w.I.}x.Z.#..PG.pE.....jk8S..j....u)....._....%P(P.T2...I....S.m..r..}..;.v...W..2h.,:h..d.Z.E.+-.HAK.....}..S...d].....B.%&.o.\|...Z..t...7..t&....lLm...n..!r..)qx.Zq.I+.h...H.~.K.'..U.M=2]E...1....-.v.VR...$..U...E...q/...(.,v.J..mrm..%.....=.......C.eB.+.-..4...93N.....!..e.+.FH.M.a...@.@...R.D...'.F.lLp..p.C..>uh.>.C...... .....O,{...........F...2..6..n..G....,...#D.f.\|.-.).Y}q......g....6...V]+.\.#...3IW...5..FD.mk.b..`yN.......J\.AKN\|j.@4.0.........-.8:gRe..y..>....*..d...e>....b.V..P.H&zH.M.\Z"M.(.X.]c....[:.i.z.}..Dk..V.L...Z.-.3x.#.....3..k.. &..k...-J..r.3-.D.D..J...FV-cu...k......8..J..%..^)..+f.e..{.Jq+.....V.SDqd..F.,.?..j..=...eD..E..<..K..}..A..-X...DG._}..x.#..Zd.%..0O/Y..

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 650 x 650, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	378790
Entropy (8bit):	7.99419206037213
Encrypted:	true
SSDEEP:	6144:PxLxIxyDaVza4HDPGaXYxfDeqHksxBU9WPLDZw9X1gIFP89/aytuv7s:rVDx2eaXYpDeodxBkWPLFw9XC889/ayz
MD5:	D95BFC3D74325ED52482C75F6C53CF1B
SHA1:	B15F90E709AD7591C7375F222FD98B9D4AAA1086
SHA-256:	F0F5D5CCE4DB3593D05BDC88B0F54D9E4226BBDBA3266FF6F7F464187C68171F
SHA-512:	F8A720B244E52258F7AD616C8A05A793850D4509AFB797D8B8444C9060BF2B177F716E2C7790FC081A0444EF078C0395D6B6C1402096E721DB5A28BE3F7783D0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............tz.....pHYs.................sRGB.........gAMA......a....;IDATx.....dWv....Lx.I....@.U...."E..%...f.v3.=..Z.Z......3-..=kZ#..I.TQd..=PU.......{o.?s..s..H.<....DF.0/..w....}.~..F.i..F.i..`(.b#....,.4..p.F.i..F.7i.t..H...$...;...H#.4.H.&.M...2.i.. B....#..i..F....p.V@.C....8Y....UDM...BS......N.z...W..(..F.i..#.;..K../`"...9......... ....v.[..g.{.G...........4..D.\|3B....#..i....>........v...2.,..cM.<,a..5B.#K...1...Zpt...!,.hp..:;ic. ..;....3."$.2.4...)d...s.f."J..^;TZ..F.i..#C.SD ....,N..s....u..t.....N..x...y.g.K.ANu... B3p.J.P..i.....2..=L.c.....p...\:E...H..4.H.}.R....f7.....A.'.q...u...\|b...%3.....H..O...D.Z>.....X. .}.%....C....<DKK....=4...i!..!R..F.i.....x...F............`.Ag..X.j.@.k.b.et...U..;s....=.e...H....N.p.=.+..V3U<.......u./;..P9 ....H.........f...s.i...M.y..~w.wz...vb.....u7.#....!.8.%..%6.sb...W..h.e..y..8\|.L+!.P..F..h....q<.....a\...ES../......F.o<r..C..0.y.b.(..F.i...L..w._.>.G./I~X...!.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1113x778, components 3
Category:	downloaded
Size (bytes):	205002
Entropy (8bit):	7.977396900927704
Encrypted:	false
SSDEEP:	6144:m98zpJ3GnNUS30znJ7f6HyDYl9DGmNN1SNbs8M:mwpJ3GnPEzJ7SkYa5Y
MD5:	6BFDDAB9EEA1E4F4C9B6C8649250853F
SHA1:	2020FE05DB5A7F81D56F94CFD350B1F2B7C5FDDA
SHA-256:	C0533A992907C3FC2CBCC6C6C72B08ADAD70688E0807911127471EE4D829CFFF
SHA-512:	9592435193BC2CCA55F07B790D466AAD8C360EC19434D0EFDB8A59D7414FEC2679F290F4D7CB3C8D965A33A8CBD42DFCE0E5C20D04E204F97B306EF0C879015F
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/safenames-mk-front.jpg
Preview:	.....C....................................................................C.........................................................................Y...........................................b.........................!1.."AQ.2aq.#B...3Rb...4Cr.....$Ss..&56Tct.....%Dd.....'E..Ueu..7...V..................................>.......................!1.A.Qa"2q........#3BRr...b..4C.$................?..U.....T(y... .....l(AP.(......T(P...P...P........@.(P.....P.@..@........(.B..U(T .......P.@.@T.@.@...P...@.(,(P.A...P....@!T....A`h...P.(..t(.B........<...@b.1...P.... b.(..t.........@..B......P..1@.....1@<P.1B..(b...u@P......P...1@...(P..0(P..(@...B.(.....<P.P:.1B..(b... b.x..P....hZ..GaP.(...,P.(..........,(QP.....P..B..P.....R....a@,P.P....P.........((1B.(P.b.......@#.......B...4.B...b......C. P....(.....U.P..aT.Aa@....P..P..P.......1@..............b...1T..1@..@<P......P.(....P. ...x........h.....b.x..P.(.@<P.(Q.(......,t".(...t PX.[.(....t.....CB.r:..(P....DP...,1@*.1B.. ...(...

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5232
Entropy (8bit):	4.486210242453492
Encrypted:	false
SSDEEP:	96:6h/XqxafLr/YeWE+LYKG1MO7Sj7h6oN7nBOLe:6JTLcjE+LYQ4ScoN7n
MD5:	1DF5D198B80A6389762E9533E15D6D54
SHA1:	379DABAF752D5BF532467B389673701C80E8398A
SHA-256:	4EA91ED7073AAC5BFCC527A36195613A1B4A961F1153C01EB2FD0F6472B07112
SHA-512:	82BEC184FAFBF41EAE6C6D96118EFFC956C475BFABA6CC460E4ABADD58570EBAAD89DBC5FE11E90B81BD67891C0D3F25B82302CBDD7961552FDD59F53E04236C
Malicious:	false
Reputation:	low
Preview:	<svg id="SAFENAMES_LOGO" data-name="SAFENAMES LOGO" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 677.17 167.42"><defs><style>.cls-1{fill:#fff;}</style></defs><title>safenames-logo-white</title><g id="Safenames"><path class="cls-1" d="M248.44,94.42v2.14h-6.95V95.13c0-9.29-5.41-15.94-19.82-15.94-14.61,0-20.23,5.52-20.23,13.7v.81c0,10.63,8.79,11.75,22.28,14.82,12.87,2.86,25,6.13,25,21.66V131c0,11.54-9.1,20.23-27.38,20.23-19.83,0-28.1-8.79-28.1-22.07V126.7h7v1.84c0,8.48,4,16,20.94,16,15.84,0,20.13-7.05,20.13-13.48v-1.33c0-9.5-8.58-12-21.86-14.92-13.8-3.06-25.44-5.21-25.44-21.35v-.61c0-12.57,9.09-20.44,27.38-20.44C240.17,72.45,248.44,81.24,248.44,94.42Z" transform="translate(-38.06 -33)"/><path class="cls-1" d="M256.2,132c0-11.24,5.93-18,23.3-18,8.58,0,15.22,1.53,18,5v-9.3c0-8.48-4.6-14.71-16.14-14.71-9.1,0-16,3.58-16,11.75h-7.05c0-11.54,7.56-18.39,22.47-18.39h1.95c14.81,0,22.17,8.58,22.17,21.56v22.17c0,12.36-10.32,19-23.5,19h-2.15c-14.2,0-23-5.72-23-17.77Zm41.28-.21c0-8.07-4.5-11.75-17.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 156 x 124, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	4664
Entropy (8bit):	7.961871216575725
Encrypted:	false
SSDEEP:	96:OIwVDCvTK3gjmFjd2Cad63QcKXQMjcg8p1PYWvb0yMAJG:cV+jaKkAcKXQMogIFvYaJG
MD5:	CA1887C02AEF9A12EC5C2654F8BC9ABD
SHA1:	72C6B1FFA555B67011DE2894FA9324C6AC5C77FB
SHA-256:	AA06527B867F625EA57359E7D19D416B042E237530776BE58391C6BD967964B1
SHA-512:	27D8D32F97348646E2EDE800EB12940D5D0DA4CE96159148CE07D49D530FF3C2AB66DEDD71C99AC6D15C2D6DD752969539B67975541F733EC2056CBEEA382E3B
Malicious:	false
Reputation:	low
URL:	https://identity.safenames.com/images/icann-logo.png
Preview:	.PNG........IHDR.......\|.....6..D....IDATx..].\T..?u..~...[.^EsC..\.."....q..$..7.FDD..C.b..%'4.2..#"..5.Vf..i.vS.n..3.3g.6.:..\|....y..y..y.a..<....<....<p...#........O.>......t+..%8.?`..a..ox..5v92.`... L.\|..y.....]......&........o#...Y......\-DMc..).Bt}......j~kL.b..]......l.].\..XO..D50~.x......SI.....[.L.]....y...a..`}....b.. .+...jK.....[......-...K...E.~...;@. ...W..V.O.E..... .......?9..n...x..;.......R.u~.{J.l.LE..U..quv.l.KS..6.........OY/.4..4w1f...u;v:.....a.`.Z.z.z...cg..e...z0.#..C2..v.#+.:l....H.z.V.T.Zzm....5.{.F.Qo.w9u..+.KP....8...V.r...A3.T.b\...6#...l.u.J..+E....N.....a.o~...A.....#&Y.C...Pt}m..#.QwRgS...;[.}P.$....7.[......%S.a2..j\....g2.t...&P...buH3c.v46...'.f..AE.@sH....hK..b'..9I...D..T3(N...W.}.C.....6..a0.r.M.\.=n..6............r..r>JF.+N..`~.R...#..'..Q.Cy...h..p.$.mC....!.`.$.m.RGK.t..............+...A..gq...c2...F.(W.>..>..;ah. .j..W.#W..AM...CQ......(..U...>h.-...cH{`Qj.:...(Z..4.1.V?b_9.M.&..X.c!}PC,.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 471 x 116, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3990
Entropy (8bit):	7.916822688003428
Encrypted:	false
SSDEEP:	96:aYDCsj75TIUEeQ+CMdLoWdCJP4p44UFpWd8ak5Jc:3nIUEXGLVCJQypWiLC
MD5:	4AE77BA9F7393A30A777FFA292EB9DA8
SHA1:	382D00C87842696651D6A8EA06DA92C952B20AB2
SHA-256:	0D8363BA2289DCB81BE6F9761774D776EF3251DBBBC95CA9482C3C7D9959BC65
SHA-512:	3EB0DC9B2C4D70980CC86BCEC5C39F19BB834228D9479B19E1696B355D65DF22BDFF2C51DD428B80484E6EDBA52D85AEA515C0B6C7CECF166315E5468C446CEB
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/horwath-htl-logo-white.png?sfvrsn=98c8ee06_4
Preview:	.PNG........IHDR.......t..........3PLTE..........................................................tRNS.. 0@P`p........#.......IDATx..].. .-.......H.V.jo;m-.a...IB...[AAAAAAAAAAAAA.EQW......n..^.~..w.P.t.y.'.n)...q.uV...P..b.W....b..C......$.O..-.w.R.D.....u.xZ..^.6h.{-t!..~.8...c.w.T....b....S......w......yhW..s.n.....-..Peh..q..b..A.B..a...y..'.1^.N....7.:..O.p.A._...u.?......l.u....5.4..[`.^.......\|......^.vL.x-...1bcD.4d.>...-z.`..W.......{..u......z..kyec.c...-..;.Z^UD..'......z..Ky...!......c.^.kh.S..d......s..52P.f8=n...c.^.kh.2?.t.`..Zw....h........n....7........Q+IGY.cE..@./......n..L.M..M\|..a..m.;.}.)^...iR...55tE...G......9OL.B.....5...x.n..8.O..m..u..n...M."&g..W.m..5..L....."..wxMO..&.i......N'...W.eJ.~.x..F[.....A...4..`........E.0^....a....I.=.+....{S./....D.x v..\.9XQ....[.?.._.WJ...=W.a..A......=W.a^..m-.S.]X9.....].#.......y..&..L<<.=..[.f.>....5.cJ.;....F!.M.".s.....E.... ...Q..S..1...fMQ1vx....=C.'....AS...7.>....A^..>.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2601
Entropy (8bit):	5.179764967459329
Encrypted:	false
SSDEEP:	48:F1ySkuwoQpoU10oUSQQs1QUQRcs0mOWO5irJvdR:FccQpT0EQQs1QUQRcs0mOWO5yJvdR
MD5:	97EBC9CB289EDE4C54584315A09B09D2
SHA1:	4E5DA6F3E0B9687C9B39E16CED75F69BF0CAA4D2
SHA-256:	27538D6AE38B2DBFD94397E1B8E4DA7BDEE3D035AF41C836DFA881CD28F6899E
SHA-512:	6648718F83385A811213EECDFC0477E95C74236D6ACB30CFC61EF70A097AADA29FEA5BB2308328C87297618356E253F149546E6EFBF6CB03C7BBA0AB34DD07EE
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ResourcePackages/Safenames/assets/dist/images/server-thin-60.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" viewBox="0 0 60 60" width="60" height="60"><title>Exported from Streamline App (https://app.streamlineicons.com)</title><g transform="matrix(2.5,0,0,2.5,0,0)"><path d="M 23.047,5.219L19.09,1.113C18.713,0.722,18.193,0.5,17.65,0.5H6.35c-0.543,0-1.063,0.221-1.44,0.612 L0.953,5.219 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 23.5,8.5c0,1.105-0.895,2-2,2h-19c-1.105,0-2-0.895-2-2v-2c0-1.105,0.895-2,2-2h19c1.105,0,2,0.895,2,2V8.5z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 23.5,14.5c0,1.105-0.895,2-2,2h-19c-1.105,0-2-0.895-2-2v-2c0-1.105,0.895-2,2-2h19c1.105,0,2,0.895,2,2V14.5z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 4.75,7.25 C4.612,7.25,4.5,7.362,4.5,

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64735)
Category:	dropped
Size (bytes):	69912
Entropy (8bit):	5.298035931392097
Encrypted:	false
SSDEEP:	1536:qn9kVMDaEXVAnZXYNtWu2scVDXYRClzlIgQXyjXlkaioEFWOqDw6usT5aXsdtkVV:END2LlzlIgQX28XsYce
MD5:	B3D801B2FEFFF6430208F0A7300CC743
SHA1:	891EFE1142A3C0C3F3B265FFA90CE3A5CBC337FB
SHA-256:	B0248268D558E402C7C60E210633DF35EAE77890BCAD7072E285CCF4079AF039
SHA-512:	1DD42CD5D7EB8240AA5079A4AA6D1C66D3D949CBEE7BA8401C2529AAC318FC806457DF54B8E96C491C74BB88AA088E671BC26E04B33A955118DA74535D058109
Malicious:	false
Reputation:	low
Preview:	/** . * HubSpot Analytics Tracking Code Build Number 1.993. * Copyright 2024 HubSpot, Inc. http://www.hubspot.com. /.var _hsq = _hsq \|\| [];._hsq.push(['setPortalId', 26584007]);._hsq.push(['trackPageView']);._hsq.push(['setLegacy', false]);._hsq.push(['addHashedCookieDomain', '115452825']);._hsq.push(['addHashedCookieDomain', '205882892']);._hsq.push(['addHashedCookieDomain', '165226720']);._hsq.push(['addHashedCookieDomain', '20629287']);._hsq.push(['addHashedCookieDomain', '251652889']);._hsq.push(['embedHubSpotScript', 'https://js-eu1.hs-scripts.com/26584007.js', 'hs-script-loader']);._hsq.push(['initEventVisualizerScript']);._hsq.push(['setTrackingDomain', 'track-eu1.hubspot.com']);./* _anon_wrapper_ */ (function() {./! For license information please see hsa-prod.js.LICENSE.txt */.(hstc=hstc\|\|{}).JS_VERSION=1.1;hstc.ANALYTICS_HOST="track.hubspot.com";(hstc=hstc\|\|{}).Math={uuid:function(){if(window.navigator.userAgent.indexOf("googleweblight")>-1)return hstc.Math._mathRandomUui

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3473
Entropy (8bit):	5.031903472224529
Encrypted:	false
SSDEEP:	96:Fra4L0rAzNrSny1aRzqJRC424CN/AD/APe7:Fr0kzNrSyARIRCHq7
MD5:	57949C6AF7EA090551D63BBF0D5A636F
SHA1:	7EBEFCE09C18F53B6505EA0A0F64E3350C7F2E0F
SHA-256:	FF99878833B36D14A259F3E68F6DECD9A6FB2D1A10C7E3C9381C3F30DCDDEC35
SHA-512:	A0C0D095154CEA4A29EC12069BF7D206C3CE7B4F86C2DB90FC2839791362D7B04E5300B8BA21A80CD74D5F8BA6C9B78176165E485319EC609A065F2BD4814F64
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/WebResource.axd?d=DzHrpQl5URXarFHAtrmzFvvwtxERElSZ_b2Ca1mxtmzvyTwDr6K2uqyW80PraHwZqn7BbM5lQGIiy7biXNxjLG9gJ71MSZTcvi7eeKKPJBLIN5mVSMeRsnLnzbDpw9vtrgTOqyeHT00x826p9zjpJthZ-3nX299B5pryZnfavheEFwbHupd-iASOQMXwlLQK0&t=637824974880000000
Preview:	TrackingConsentManager=(function(){var consentCookieName="sf-tracking-consent";.var consentDialogHtml="";.var consentDialog=null;.var eventListeners={AfterDialogDisplayed:[],BeforeDialogClosed:[],ConsentChanged:[],};.function closeConsentDialog(){if(consentDialog==null){return;.}invokeEventListeners("BeforeDialogClosed",[consentDialog]);.document.body.removeChild(consentDialog);.consentDialog=null;.}function openConsentDialog(){if(!document.body){return;.}closeConsentDialog();.consentDialog=document.createElement("div");.consentDialog.innerHTML=consentDialogHtml;.document.body.insertBefore(consentDialog,document.body.childNodes[0]);.var scripts=consentDialog.getElementsByTagName("script");.for(var idx=0;.idx<scripts.length;.idx++){try{eval(scripts[idx].textContent);.}catch(err){console.error(err);.}}invokeEventListeners("AfterDialogDisplayed",[consentDialog]);.}function openDialogIfConsentNotProvided(){var userConsent=readCookie(consentCookieName);.if(userConsent!=null){return;.}openCo

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	dropped
Size (bytes):	229380
Entropy (8bit):	5.378011180020537
Encrypted:	false
SSDEEP:	1536:bwmvBwvwtiMwe57D1pTT5OFm7eTX423SDyDbGw5frPSfFse84qaIGG4xQrZBYGCn:1BwvwtiMwa1LOFw/KEFsb9h4yt7bScYx
MD5:	5037370AF8ABCF09B73013E365DCBEB5
SHA1:	8DC50AF04CA5ADFB031312DAD916FF4FE59848B4
SHA-256:	1B49717EE4566C527CE824A1F6DB23DC4B1CEB5D539C0A249CC16010AF88C096
SHA-512:	30ECD805D37FEA8A75F8E78953348452D49B21B6C4FB0F3B79B38BFDA885A0AD7A60A447699AEC99531D516F4191731D9CC6772B8A8C38C4915560EB1F592A7F
Malicious:	false
Reputation:	low
Preview:	/! For license information please see modules.ca70bc16369dcd35d4ef.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11884)
Category:	dropped
Size (bytes):	13147
Entropy (8bit):	5.402527204034866
Encrypted:	false
SSDEEP:	192:wpbvcZud5tmjHCR/UeHjXWb2pTOnBwatCp0NeCW1WMMTMm53NI5:ybvcu4jURHjXo20wwCd8MMYm53NI5
MD5:	09C4EC72766BB999CCB9806F23995AB4
SHA1:	8799D7482F3061DBF9F606E2D59D4ED3DECEEDF2
SHA-256:	0959C784D9DA5F90439688862D23ECFD898A5A08522479FDD6168DBA5FB79F9B
SHA-512:	6C09812A2BD54668FA377B32E72D99B5A21D49D75487C508A80522C3303E14732153D5A9671E8A0BD2E92A30E7ACD8D9F5B61C389E863727DDF7FB8521F96D40
Malicious:	false
Reputation:	low
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1425002,"r":1.0,"rec_value":1.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":true,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":true,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"google_analytics":{"hjuid_dimension_index":null,"tag_sessions":true,"send_hotjar_id":true},"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"google_optimize":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["survey.image_question","client_scr

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 871 x 228, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7213
Entropy (8bit):	7.93382888473239
Encrypted:	false
SSDEEP:	192:+5D0mcHxcRBoItGY2PLSgeNtd1jiLCeYiIdDfgixC1:eD0ONsYcm1SC7iADIm8
MD5:	56180AC3AC570A58BF5AA97BF3382457
SHA1:	8C52FABAFC4EF518A63856930645B43FCB2808A2
SHA-256:	D9431629D8814E0B1FB7C70942BB825DF9A5DCEDC5B5A36E945AB5B5E818D805
SHA-512:	1394B7A58D3B29F6A7235C750BAD384E2156BAAA73ECE83DCA96F6019835A043513148058593EB77F4D33E8C26884774A3E92319BD573E499DD3FF8D8B8E382D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...g.........+Y.....6PLTE.......................................................c......tRNS... 0@P`p..........p.....IDATx..mw.(.F{\|/.5...N......[..{.9..s..<..........g...3....@~.. ?x...<..........g...}........y.:....gx...3<.....A~... ?x.g..<.3.......?...fydrn.3..!.6....M8mQ/y..3.Y......mx.%.y6.O..1.O8...Hn......6<.R.%.J..w.%..5..C...n.3(C.V9.=.=...m8^#..kS:....!....476.....m:\#...uv.3(C..E..$...A.......e"+.A...M...@.Ad>!....+hR...@!.......b.W%.u.3(D.3}.hS.T{........}]....x..6sNu\|Y.?...q..'.Z.~...sr...:%.\.gzv.z....A)....Y.5.:9.-y...5.tu.3(..yF....t.'. .~.'..o.bH .0p..U.b.....x..p..\..j#....}-:<.gP..g....{...&[Z..Y.Y...l...L...../..!..(:(.e.bm...!.&......<.rHxr.\..>..;......}.}usx......V.......h..il.... .[.oO.Vm.M-.....9.3.Q.?9...b.g.j....mx..F.....QF....Q.@[.+.WF...TQs*u.M........:\|..."b.FUwL.A...V$.X......g. .2u.....D..7..h.!..O7...gpa$.....Qj.%.k.o.iU.....HT.........K.Az.{....x......}+...RZ.i1H.-.......H.r.?i..d.R..

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	448
Entropy (8bit):	5.014064186738045
Encrypted:	false
SSDEEP:	12:/DlMk7qMzJkCDI7fEVL4xfB0mRhD9vgl11Dqc1Dx7DvUE/:/DlMkDJk+IbE0p0mR19vgPxqcxxHv7/
MD5:	B20060C0F4E8A1CFF60D3FB799D2E3EA
SHA1:	F3B8F09A0046DAE5464101858F14765471FD4EFD
SHA-256:	06EB9C346A84F5100A652882B4E4C449A901206768AA8E93C57FCD2198CD5C0D
SHA-512:	8FA66DDCB2BCEBC4F5009684A42C528BED2E9A6A3537F50687BE4DB32AD82BE583A875542458DD4715F35CD3B1CD5F94C9DDCC0951EABF457A57982451AC6C38
Malicious:	false
Reputation:	low
Preview:	$(window).scroll(function(){$('nav').toggleClass('scrolled',$(this).scrollTop()>140);});$(document).ready(function(){var fixHeight=function(){$(".navbar-nav").css("max-height",document.documentElement.clientHeight-150);}.fixHeight();$(window).resize(function(){fixHeight();});$(".navbar .navbar-toggler").on("click",function(){fixHeight();});$(".navbar-toggler, .overlay").on("click",function(){$(".mobileMenu, .overlay").toggleClass("open");});});

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11884)
Category:	downloaded
Size (bytes):	13147
Entropy (8bit):	5.402527204034866
Encrypted:	false
SSDEEP:	192:wpbvcZud5tmjHCR/UeHjXWb2pTOnBwatCp0NeCW1WMMTMm53NI5:ybvcu4jURHjXo20wwCd8MMYm53NI5
MD5:	09C4EC72766BB999CCB9806F23995AB4
SHA1:	8799D7482F3061DBF9F606E2D59D4ED3DECEEDF2
SHA-256:	0959C784D9DA5F90439688862D23ECFD898A5A08522479FDD6168DBA5FB79F9B
SHA-512:	6C09812A2BD54668FA377B32E72D99B5A21D49D75487C508A80522C3303E14732153D5A9671E8A0BD2E92A30E7ACD8D9F5B61C389E863727DDF7FB8521F96D40
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-1425002.js?sv=6
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1425002,"r":1.0,"rec_value":1.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":true,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":true,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"google_analytics":{"hjuid_dimension_index":null,"tag_sessions":true,"send_hotjar_id":true},"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"google_optimize":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["survey.image_question","client_scr

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 338 x 199, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10786
Entropy (8bit):	7.957551317790417
Encrypted:	false
SSDEEP:	192:AANxBSKw4/M64bk/qM5GuvDjWQks1Gw7JjDc3/lN6/iQ5JuLgNYhm4Rl9WTVm6m5:tNxMX4oK5uqb6Yi7Lga3N2VPHU
MD5:	E50B3CF2886A7A230C8A703DF23F236D
SHA1:	38624E0FA732BC4F97CA25ABB8278F6907EFCF72
SHA-256:	B91DD9BFDFE240A2ADD18A0E33CFA7859B6B7E3B42A5171CA4E070172694573F
SHA-512:	CE7A735DB0D80A4F12A4D3BD100E44B16B98DA3DDC5BCD775C221BB92F3C6335C7588C1D87F02E2886E4B5DD69FF8CE2769728505C83B2675FB27521B48E0A01
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/g4s-logo.png?sfvrsn=8e1596ff_4
Preview:	.PNG........IHDR...R.........K.... .IDATx...t\....z.,...v.j.-i............?.. ...B.$....w...P~..@0.......$..[.{.........O.[..yw....9...cf...7w...S....&..t.k.M.6XY....V.\...." ...y..(.../9.p...s..?..a/...T..jJN./=...+.un.f............1...........A...(#U.\..2.......6j.d..F.3.7p...g..P.3.%.H...zW..vy..v.z.R.0w.O..WU........9.LS.#.H...._..o.V...U\|`..B=M..q.K9'r2.2';..TI.%p.2...i.`.=0.W.+..J.,..h....If..]PF.$...).V..q6l6g......i\|.Yh.Q.2R%)U...gL.....P........)..8..99f...(#U.Zu...D.GK..^...Fi.....SY...L..e.J...u.CM....!...?H`N.t3.K&...F.).pMA...;.QlF.K`&N.7f..,(#U......T..6.......^.3q:.md.(#U..2...J\.............H`&N'.V.{...W.,.i.....d...\|u.0.v..==C.#Q.Z..aj...v.S%...AI)z.$&..y.08Z..w....$}9..27.....HN.)...JJ..!5../...tG./..t..F.p.>#..._..'LQF..G:9.H;...R...bu...F.p...mt".....7?).z.+)...i.....t...lg.U..Q.Z_.mv"..i....!1.z.+)..IS.`)nF..=......F.....M1R..pQ~).PWR....D....Xm...5.L+$0....v+..,......I..\I..-...W5k..k._K.E.#q:.8.V.a...?..Z...^.AJ....

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89493
Entropy (8bit):	5.289599913770796
Encrypted:	false
SSDEEP:	1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakF:YYh8eip3hXuf6IidlrvakdtQ47GK1
MD5:	12108007906290015100837A6A61E9F4
SHA1:	1D6AE46F2FFA213DEDE37A521B011EC1CD8D1AD3
SHA-256:	C4DCCDD9AE25B64078E0C73F273DE94F8894D5C99E4741645ECE29AEEFC9C5A4
SHA-512:	93658F3EB4A044523A7136871E125D73C9005DA44CE09045103A35A4F18695888ECAFE2F9C0D0FA741B95CC618C6000F9AD9AFFC821A400EA7E5F2C0C8968530
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 16-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	695
Entropy (8bit):	7.61542562674215
Encrypted:	false
SSDEEP:	12:6v/7u9qSug+WCEwBR8RneeCivbx7aLP/6LvBzZvqO0j4vQZbhk3iWmIxR7sa+Qf9:p4SL+jEWWX/qCzQO0j/lWxFRN+QX1Ai9
MD5:	1A31EC7C75FB89BCC1C081710374B6A6
SHA1:	F59632DCB3C28E291A7093C87BA248260BCCB742
SHA-256:	E53F35C4C0A13730E3037AEAF669390DA554FFF89CBA0C0F435B65848AF585E0
SHA-512:	C5C7267381161BEFD0BB19DDA3CF159FD86334CDC20C4A7D7202C84FD68CA62BA465F4FEB091C13BA4FDCD5C55E56947740AA487C786A6AA307509519D6F2CD0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......%....~IDATx..;O.A..i5.D=....j..$ZR...O`(.!.F....-).1..%.Y.j......0..%..9..^.x..L.#...........{.\|D...P...T'....@u..P...Tg...vi....)...pm..........O.......0...s.b.k2.;~...w......y.</.'.......ux .<;u.....-..a.C!.a...'.c(T..O..[#.8#..DB....D.VxM.....y.5.2 ..C.j..-.".9...H.2 ..C.j.E-..q9..x......u.-.qi.~..L..B!.^]5.ok.......WC...c...0...D.<_....{x..]X...............G.\|xpt.....O..m..n..V..;.jQ..c.R,.....}.......X,X.<.......0r.0......d^;.J>9..g.=^.S...vLO....eg..`.ry....\;......$.....jm.E8....E..Cq(.C.F...F.Z.8...j..P4...C............My..My.K...Rh0.....h4.K:.&.p...w..u>#h<.160..l.=..9O...N.....T'....@u..P...T'......Hz..I.1....IEND.B`.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 166 x 168, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	23750
Entropy (8bit):	7.984514027351092
Encrypted:	false
SSDEEP:	384:0u1oe9Z8b6W96n0/cgt2b9AzhJBVUEYZRyPnX5BOk+/N72UHCqOFcxTL6KMlOA1:R139C2W/Z29AtJBVW0nX58VicCq8coKY
MD5:	EA8B1B59CC4B8C9EF7AC9FB51CEA809D
SHA1:	222AE6539F271ED0497315516E6AC398EF9288DA
SHA-256:	9F6B2BADFBAF35B22389CAF8D8E5DBE9A36896E8A50EA173BDDE32AA3CB13612
SHA-512:	C6A0274232742BA654EF3FD2D34A8CDD74E2C5CA89952BB8D9AD7E138B1D01AB843476AB785CA27F187E073E80055FA77B7E1A476F49B09763849AA1B0E2DB82
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/images/default-source/default-album/icann-acc.png
Preview:	.PNG........IHDR.............j..... .IDATx..].X...g6.^...S.DD.i.....;.[l@E@.T..k.5.um.z....;gv..e..............oN...+.z.......{....v..:.G....}f.......(....F={.gt..Y.K.6.];...6....WP.....S..\.....=.'m.V.61y.,#.....<..0.D.N..j.A....B..7V....W.v..VT1..k..m.s..?-.X\.%M....j..to..tk...HYK..(%=R7.^............1. .....EGG.?0ib.Z.Y....0^A.x..Dz..@....`..Tem.FS.y...La.~..W.1...e.......u.I..>...86k.b..D(..Weo.....\|....@...4..Ne....Z...._..X.........S.L_.2F^..z..F.....i.I..c.e.[-....O. .....l..'..6..3I.U....._Q.[.0i.i.....u..F.D....c...e.[m.....E#=..x.C'.4.l.o..w..n>...{RV.NQ...#u=.[V.L.p.2U,.pMB.!r.1..u...m..J.}.f...I(.4....[v.....-i...x.....@.iBe.V6.l.!....J.g...,;..4...h...8`...&SM.t.{.-J~.. ....d.Wm......i....<. ..@@].'..7.Aj..o..}...0UT]....5p&].=d..g..B.....x.=.$.?".Z:.k.....R.~qK..u...e(.....L..0...[..R...y.W.....n...u,.G.{.\;?....M.....2xl. .F..&t.r...7.....3po?...u..&^.{B#.9f.Ux...6.o.L...h...L............e..B..!g....6.H./.....c.r`u..X}...*~..5..L

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	89478
Entropy (8bit):	5.2899182577550565
Encrypted:	false
SSDEEP:	1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvaks:/Yh8eip3huuf6IidlrvakdtQ47GK8
MD5:	B61AA6E2D68D21B3546B5B418BF0E9C3
SHA1:	9C1398F0DE4C869DACB1C9AB1A8CC327F5421FF7
SHA-256:	F36844906AD2309877AAE3121B87FB15B9E09803CB4C333ADC7E1E35AC92E14B
SHA-512:	5882735D9A0239C5C63C5C87B81618E3C8DC09D7D743C3444C535B9547B9B65DEFA509D7804552C581CB84B61DD1225E2ADD5DCA6B120868EC201FA979504F4B
Malicious:	false
Reputation:	low
URL:	https://www.safenames.net/ScriptResource.axd?d=okuX3IVIBwfJlfEQK32K3gK8Aiu7WHWoEQUncQG3Me4qBC8PqUDSanqR6Ahd3omIkuFu6Ev7Gv2ttmV6KR9lcUWQL5405Mpb6ScB6eSmJaIA5nR_TYEYPDplnGHHWqwmBd4glDQQ9ZyBTvYu1QllxjvyMDdS9h2GGbjDGaL0WIFEOosa2oyc6d64gO7VfnRz0&t=fffffffffa5b9a95
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 01:00:08.182537079 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 7, 2024 01:00:11.057487011 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:00:11.057519913 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:00:11.229357958 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:00:12.198795080 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 01:00:12.573127031 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 01:00:12.995011091 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 7, 2024 01:00:13.323163986 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 01:00:15.010649920 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 01:00:18.010631084 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 01:00:18.327780962 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:18.327805996 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:18.328095913 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:18.339195967 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:18.339222908 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.012187004 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.012255907 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.446518898 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.446535110 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.447583914 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.461332083 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.507392883 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.562521935 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.562561035 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.562592030 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.562627077 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.562638998 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.562679052 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.562697887 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.651912928 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.651940107 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.651999950 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.652007103 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.652056932 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.653175116 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.653197050 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.653259993 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.653264999 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.653311014 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.742477894 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.742511034 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.742567062 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.742575884 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.742619991 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.743318081 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.743340969 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.743391991 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.743395090 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.743423939 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.743443012 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.744143009 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.744194984 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.744271994 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.744277954 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.744318962 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.745264053 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.745289087 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.745371103 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.745376110 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.745398998 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.745423079 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.833620071 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.833642006 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.833704948 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.833714008 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.833756924 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.833772898 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.834105968 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.834125042 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.834166050 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.834172010 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.834202051 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.834217072 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.834640980 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.834659100 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.834702969 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.834707022 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.834739923 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.834753990 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.835216045 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.835232019 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.835284948 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.835289955 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.835333109 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.835666895 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.835685015 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.835757971 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.835763931 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.835814953 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.836206913 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.836225033 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.836283922 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.836303949 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.836308002 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.836318970 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.836344957 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.836380005 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.836427927 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.846611023 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.847529888 CEST	49699	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.847537041 CEST	443	49699	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.936156034 CEST	49703	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.936206102 CEST	443	49703	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.936266899 CEST	49703	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.937464952 CEST	49704	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.937505960 CEST	443	49704	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.937562943 CEST	49704	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.938627958 CEST	49705	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.938664913 CEST	443	49705	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.938688993 CEST	49706	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.938697100 CEST	443	49706	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.938724995 CEST	49705	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.938755035 CEST	49706	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.939086914 CEST	49706	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.939102888 CEST	443	49706	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.939332008 CEST	49705	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.939357996 CEST	443	49705	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.939486027 CEST	49703	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.939497948 CEST	443	49703	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.939735889 CEST	49704	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.939748049 CEST	443	49704	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.940946102 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.940958023 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:19.941009998 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.941353083 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:19.941360950 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.597254038 CEST	443	49703	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.597786903 CEST	49703	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.597804070 CEST	443	49703	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.598270893 CEST	49703	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.598275900 CEST	443	49703	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.601175070 CEST	443	49706	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.601486921 CEST	49706	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.601505995 CEST	443	49706	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.601938009 CEST	49706	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.601943970 CEST	443	49706	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.610430002 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.614022970 CEST	443	49704	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.614809990 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.614830971 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.615348101 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.615354061 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.627928019 CEST	49704	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.627943039 CEST	443	49704	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.628480911 CEST	49704	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.628487110 CEST	443	49704	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.629618883 CEST	443	49705	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.629972935 CEST	49705	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.629985094 CEST	443	49705	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.630574942 CEST	49705	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.630580902 CEST	443	49705	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.696444988 CEST	443	49703	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.696465015 CEST	443	49703	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.696525097 CEST	49703	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.696535110 CEST	443	49703	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.696595907 CEST	49703	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.696600914 CEST	443	49703	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.696644068 CEST	443	49703	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.696681976 CEST	49703	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.696969032 CEST	49703	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.696980000 CEST	443	49703	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.696994066 CEST	49703	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.697000027 CEST	443	49703	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.698683977 CEST	443	49706	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.698715925 CEST	443	49706	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.698770046 CEST	49706	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.698777914 CEST	443	49706	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.698996067 CEST	443	49706	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.699044943 CEST	49706	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.700251102 CEST	49706	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.700265884 CEST	443	49706	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.700275898 CEST	49706	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.700280905 CEST	443	49706	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.704710007 CEST	49710	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.704729080 CEST	443	49710	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.704788923 CEST	49710	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.704833984 CEST	49711	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.704869986 CEST	443	49711	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.704926014 CEST	49711	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.706836939 CEST	49710	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.706850052 CEST	443	49710	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.708683968 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:00:20.708702087 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:00:20.710112095 CEST	49711	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.710127115 CEST	443	49711	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.713068962 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.713093996 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.713145018 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.713156939 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.713170052 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.713228941 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.715060949 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.715060949 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.715075016 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.715081930 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.720999002 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.721023083 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.721105099 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.721420050 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.721431017 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.729773045 CEST	443	49704	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.729943037 CEST	443	49704	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.730031967 CEST	49704	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.737198114 CEST	443	49705	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.737272024 CEST	443	49705	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.737314939 CEST	49705	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.745613098 CEST	49705	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.745639086 CEST	443	49705	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.745662928 CEST	49705	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.745676994 CEST	443	49705	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.750144005 CEST	49704	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.750163078 CEST	443	49704	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.750221014 CEST	49704	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.750226974 CEST	443	49704	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.772236109 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.772264957 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.772336006 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.773689985 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.773699045 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.773756027 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.774290085 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.774290085 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:20.774316072 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.774337053 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:20.917020082 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:00:21.345748901 CEST	443	49711	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:21.346257925 CEST	49711	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:21.346282959 CEST	443	49711	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:21.346776009 CEST	49711	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:21.346781969 CEST	443	49711	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:21.366578102 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:21.366995096 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:21.367014885 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:21.367403984 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:21.367408991 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:21.382842064 CEST	443	49710	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:21.383259058 CEST	49710	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:21.383269072 CEST	443	49710	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:21.383699894 CEST	49710	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:21.383704901 CEST	443	49710	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:21.409343004 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:21.409761906 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:21.409776926 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 01:00:21.410147905 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 7, 2024 01:00:21.410154104 CEST	443	49714	13.107.246.45	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 01:00:21.584309101 CEST	192.168.2.7	1.1.1.1	0xcef4	Standard query (0)	ykbdmz.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:21.584681034 CEST	192.168.2.7	1.1.1.1	0xfaf0	Standard query (0)	ykbdmz.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:22.593852043 CEST	192.168.2.7	1.1.1.1	0x9926	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:22.594589949 CEST	192.168.2.7	1.1.1.1	0xea9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:23.305982113 CEST	192.168.2.7	1.1.1.1	0x673c	Standard query (0)	ykbdmz.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:23.306307077 CEST	192.168.2.7	1.1.1.1	0xe227	Standard query (0)	ykbdmz.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:34.702627897 CEST	192.168.2.7	1.1.1.1	0xcf12	Standard query (0)	www.safenames.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:34.703573942 CEST	192.168.2.7	1.1.1.1	0x4ac	Standard query (0)	www.safenames.net	65	IN (0x0001)	false
Oct 7, 2024 01:00:36.646507978 CEST	192.168.2.7	1.1.1.1	0x8b66	Standard query (0)	www.safenames.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:36.646759987 CEST	192.168.2.7	1.1.1.1	0x8088	Standard query (0)	www.safenames.net	65	IN (0x0001)	false
Oct 7, 2024 01:00:39.093663931 CEST	192.168.2.7	1.1.1.1	0xb30	Standard query (0)	www.safenames.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:39.093935966 CEST	192.168.2.7	1.1.1.1	0xf6ef	Standard query (0)	www.safenames.net	65	IN (0x0001)	false
Oct 7, 2024 01:00:40.611937046 CEST	192.168.2.7	1.1.1.1	0xfaae	Standard query (0)	js-eu1.hs-scripts.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:40.612210035 CEST	192.168.2.7	1.1.1.1	0x1cb7	Standard query (0)	js-eu1.hs-scripts.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:40.616430044 CEST	192.168.2.7	1.1.1.1	0x3642	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:40.616611004 CEST	192.168.2.7	1.1.1.1	0xb9ab	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:41.488967896 CEST	192.168.2.7	1.1.1.1	0xfb4a	Standard query (0)	js-eu1.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:41.489424944 CEST	192.168.2.7	1.1.1.1	0xc1de	Standard query (0)	js-eu1.hubspot.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:41.489823103 CEST	192.168.2.7	1.1.1.1	0xb1a1	Standard query (0)	js-eu1.hs-banner.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:41.490029097 CEST	192.168.2.7	1.1.1.1	0xde	Standard query (0)	js-eu1.hs-banner.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:41.490500927 CEST	192.168.2.7	1.1.1.1	0xfb8d	Standard query (0)	js-eu1.hs-analytics.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:41.490818024 CEST	192.168.2.7	1.1.1.1	0xf27c	Standard query (0)	js-eu1.hs-analytics.net	65	IN (0x0001)	false
Oct 7, 2024 01:00:41.491916895 CEST	192.168.2.7	1.1.1.1	0x8ddb	Standard query (0)	js-eu1.hs-scripts.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:41.492229939 CEST	192.168.2.7	1.1.1.1	0xf939	Standard query (0)	js-eu1.hs-scripts.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:41.928599119 CEST	192.168.2.7	1.1.1.1	0x969d	Standard query (0)	js-eu1.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:41.928780079 CEST	192.168.2.7	1.1.1.1	0xaa3	Standard query (0)	js-eu1.hscollectedforms.net	65	IN (0x0001)	false
Oct 7, 2024 01:00:43.081522942 CEST	192.168.2.7	1.1.1.1	0x25fe	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.081669092 CEST	192.168.2.7	1.1.1.1	0x905e	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:43.421643972 CEST	192.168.2.7	1.1.1.1	0x953	Standard query (0)	forms-eu1.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.421770096 CEST	192.168.2.7	1.1.1.1	0x6c32	Standard query (0)	forms-eu1.hscollectedforms.net	65	IN (0x0001)	false
Oct 7, 2024 01:00:43.502546072 CEST	192.168.2.7	1.1.1.1	0x6f7	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.502737045 CEST	192.168.2.7	1.1.1.1	0xad1b	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:43.573959112 CEST	192.168.2.7	1.1.1.1	0xae60	Standard query (0)	js-eu1.hs-banner.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.574337959 CEST	192.168.2.7	1.1.1.1	0xcec0	Standard query (0)	js-eu1.hs-banner.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:43.574959040 CEST	192.168.2.7	1.1.1.1	0x9436	Standard query (0)	js-eu1.hs-analytics.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.575320005 CEST	192.168.2.7	1.1.1.1	0xa632	Standard query (0)	js-eu1.hs-analytics.net	65	IN (0x0001)	false
Oct 7, 2024 01:00:43.576010942 CEST	192.168.2.7	1.1.1.1	0x7bf9	Standard query (0)	js-eu1.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.576234102 CEST	192.168.2.7	1.1.1.1	0xbc4f	Standard query (0)	js-eu1.hubspot.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:43.579066992 CEST	192.168.2.7	1.1.1.1	0x816d	Standard query (0)	js-eu1.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.579510927 CEST	192.168.2.7	1.1.1.1	0xecb6	Standard query (0)	js-eu1.hscollectedforms.net	65	IN (0x0001)	false
Oct 7, 2024 01:00:44.364329100 CEST	192.168.2.7	1.1.1.1	0x3dbc	Standard query (0)	forms-eu1.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.364645958 CEST	192.168.2.7	1.1.1.1	0x9e17	Standard query (0)	forms-eu1.hscollectedforms.net	65	IN (0x0001)	false
Oct 7, 2024 01:00:44.528573036 CEST	192.168.2.7	1.1.1.1	0x29d5	Standard query (0)	ws.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.528573036 CEST	192.168.2.7	1.1.1.1	0x100b	Standard query (0)	ws.hotjar.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:44.547802925 CEST	192.168.2.7	1.1.1.1	0x26fc	Standard query (0)	vc.hotjar.io	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.547802925 CEST	192.168.2.7	1.1.1.1	0xd883	Standard query (0)	vc.hotjar.io	65	IN (0x0001)	false
Oct 7, 2024 01:00:44.592787981 CEST	192.168.2.7	1.1.1.1	0x8ff5	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.594054937 CEST	192.168.2.7	1.1.1.1	0x29f0	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:44.594055891 CEST	192.168.2.7	1.1.1.1	0x3d02	Standard query (0)	content.hotjar.io	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.594391108 CEST	192.168.2.7	1.1.1.1	0x5d42	Standard query (0)	content.hotjar.io	65	IN (0x0001)	false
Oct 7, 2024 01:00:45.560875893 CEST	192.168.2.7	1.1.1.1	0xf8ee	Standard query (0)	track-eu1.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:45.561034918 CEST	192.168.2.7	1.1.1.1	0x5b47	Standard query (0)	track-eu1.hubspot.com	65	IN (0x0001)	false
Oct 7, 2024 01:00:46.021766901 CEST	192.168.2.7	1.1.1.1	0x301b	Standard query (0)	content.hotjar.io	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:46.021945000 CEST	192.168.2.7	1.1.1.1	0x929a	Standard query (0)	content.hotjar.io	65	IN (0x0001)	false
Oct 7, 2024 01:00:46.675184965 CEST	192.168.2.7	1.1.1.1	0x14dd	Standard query (0)	track-eu1.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:46.675724030 CEST	192.168.2.7	1.1.1.1	0x5d7a	Standard query (0)	track-eu1.hubspot.com	65	IN (0x0001)	false
Oct 7, 2024 01:01:07.160306931 CEST	192.168.2.7	1.1.1.1	0xe007	Standard query (0)	idp.safenames.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:01:07.160696030 CEST	192.168.2.7	1.1.1.1	0x6f21	Standard query (0)	idp.safenames.com	65	IN (0x0001)	false
Oct 7, 2024 01:01:08.524569035 CEST	192.168.2.7	1.1.1.1	0x1ddb	Standard query (0)	identity.safenames.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:01:08.525177956 CEST	192.168.2.7	1.1.1.1	0x8ce1	Standard query (0)	identity.safenames.com	65	IN (0x0001)	false
Oct 7, 2024 01:01:11.936841011 CEST	192.168.2.7	1.1.1.1	0x8ff	Standard query (0)	identity.safenames.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:01:11.937201977 CEST	192.168.2.7	1.1.1.1	0x38fa	Standard query (0)	identity.safenames.com	65	IN (0x0001)	false
Oct 7, 2024 01:01:32.348964930 CEST	192.168.2.7	1.1.1.1	0x4d80	Standard query (0)	idp.safenames.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:01:32.350112915 CEST	192.168.2.7	1.1.1.1	0xf03e	Standard query (0)	idp.safenames.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 01:00:21.647160053 CEST	1.1.1.1	192.168.2.7	0xcef4	No error (0)	ykbdmz.com		217.19.248.132	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:22.837167025 CEST	1.1.1.1	192.168.2.7	0x9926	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:22.837553024 CEST	1.1.1.1	192.168.2.7	0xea9	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 01:00:23.315747976 CEST	1.1.1.1	192.168.2.7	0x673c	No error (0)	ykbdmz.com		217.19.248.132	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:34.713646889 CEST	1.1.1.1	192.168.2.7	0xcf12	No error (0)	www.safenames.net	a8kw3tn.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:34.713646889 CEST	1.1.1.1	192.168.2.7	0xcf12	No error (0)	a8kw3tn.impervadns.net		45.223.61.112	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:34.716103077 CEST	1.1.1.1	192.168.2.7	0x4ac	No error (0)	www.safenames.net	a8kw3tn.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:36.658219099 CEST	1.1.1.1	192.168.2.7	0x8b66	No error (0)	www.safenames.net	a8kw3tn.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:36.658219099 CEST	1.1.1.1	192.168.2.7	0x8b66	No error (0)	a8kw3tn.impervadns.net		45.223.61.112	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:36.659125090 CEST	1.1.1.1	192.168.2.7	0x8088	No error (0)	www.safenames.net	a8kw3tn.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:39.106523991 CEST	1.1.1.1	192.168.2.7	0xb30	No error (0)	www.safenames.net	a8kw3tn.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:39.106523991 CEST	1.1.1.1	192.168.2.7	0xb30	No error (0)	a8kw3tn.impervadns.net		45.223.61.112	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:39.132632017 CEST	1.1.1.1	192.168.2.7	0xf6ef	No error (0)	www.safenames.net	a8kw3tn.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:40.619451046 CEST	1.1.1.1	192.168.2.7	0xfaae	No error (0)	js-eu1.hs-scripts.com	api-fra04-origin.spectrum.hs-scripts.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:40.619451046 CEST	1.1.1.1	192.168.2.7	0xfaae	No error (0)	api-fra04-origin.spectrum.hs-scripts.com	2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:40.619451046 CEST	1.1.1.1	192.168.2.7	0xfaae	No error (0)	2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com		172.65.208.22	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:40.619458914 CEST	1.1.1.1	192.168.2.7	0x1cb7	No error (0)	js-eu1.hs-scripts.com	api-fra04-origin.spectrum.hs-scripts.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:40.619458914 CEST	1.1.1.1	192.168.2.7	0x1cb7	No error (0)	api-fra04-origin.spectrum.hs-scripts.com	2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:40.623764038 CEST	1.1.1.1	192.168.2.7	0x3642	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:40.623764038 CEST	1.1.1.1	192.168.2.7	0x3642	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:40.623764038 CEST	1.1.1.1	192.168.2.7	0x3642	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:40.623764038 CEST	1.1.1.1	192.168.2.7	0x3642	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:40.623764038 CEST	1.1.1.1	192.168.2.7	0x3642	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:40.624151945 CEST	1.1.1.1	192.168.2.7	0xb9ab	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.495879889 CEST	1.1.1.1	192.168.2.7	0xfb4a	No error (0)	js-eu1.hubspot.com	app-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.495879889 CEST	1.1.1.1	192.168.2.7	0xfb4a	No error (0)	app-fra04-origin.spectrum.hubspot.com	a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.495879889 CEST	1.1.1.1	192.168.2.7	0xfb4a	No error (0)	a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com		172.65.236.181	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:41.496376991 CEST	1.1.1.1	192.168.2.7	0xc1de	No error (0)	js-eu1.hubspot.com	app-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.496376991 CEST	1.1.1.1	192.168.2.7	0xc1de	No error (0)	app-fra04-origin.spectrum.hubspot.com	a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.497170925 CEST	1.1.1.1	192.168.2.7	0xfb8d	No error (0)	js-eu1.hs-analytics.net	js-fra04-origin.spectrum.hs-analytics.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.497170925 CEST	1.1.1.1	192.168.2.7	0xfb8d	No error (0)	js-fra04-origin.spectrum.hs-analytics.net	18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.497170925 CEST	1.1.1.1	192.168.2.7	0xfb8d	No error (0)	18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com		172.65.238.60	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:41.497176886 CEST	1.1.1.1	192.168.2.7	0xde	No error (0)	js-eu1.hs-banner.com	js-fra04-origin.spectrum.hs-banner.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.497176886 CEST	1.1.1.1	192.168.2.7	0xde	No error (0)	js-fra04-origin.spectrum.hs-banner.com	7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.497522116 CEST	1.1.1.1	192.168.2.7	0xb1a1	No error (0)	js-eu1.hs-banner.com	js-fra04-origin.spectrum.hs-banner.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.497522116 CEST	1.1.1.1	192.168.2.7	0xb1a1	No error (0)	js-fra04-origin.spectrum.hs-banner.com	7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.497522116 CEST	1.1.1.1	192.168.2.7	0xb1a1	No error (0)	7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com		172.65.202.201	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:41.498070955 CEST	1.1.1.1	192.168.2.7	0xf27c	No error (0)	js-eu1.hs-analytics.net	js-fra04-origin.spectrum.hs-analytics.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.498070955 CEST	1.1.1.1	192.168.2.7	0xf27c	No error (0)	js-fra04-origin.spectrum.hs-analytics.net	18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.499260902 CEST	1.1.1.1	192.168.2.7	0xf939	No error (0)	js-eu1.hs-scripts.com	api-fra04-origin.spectrum.hs-scripts.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.499260902 CEST	1.1.1.1	192.168.2.7	0xf939	No error (0)	api-fra04-origin.spectrum.hs-scripts.com	2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.499339104 CEST	1.1.1.1	192.168.2.7	0x8ddb	No error (0)	js-eu1.hs-scripts.com	api-fra04-origin.spectrum.hs-scripts.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.499339104 CEST	1.1.1.1	192.168.2.7	0x8ddb	No error (0)	api-fra04-origin.spectrum.hs-scripts.com	2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.499339104 CEST	1.1.1.1	192.168.2.7	0x8ddb	No error (0)	2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com		172.65.208.22	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:41.937769890 CEST	1.1.1.1	192.168.2.7	0xaa3	No error (0)	js-eu1.hscollectedforms.net	app-fra04-origin.spectrum.hscollectedforms.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.937769890 CEST	1.1.1.1	192.168.2.7	0xaa3	No error (0)	app-fra04-origin.spectrum.hscollectedforms.net	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.938879013 CEST	1.1.1.1	192.168.2.7	0x969d	No error (0)	js-eu1.hscollectedforms.net	app-fra04-origin.spectrum.hscollectedforms.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.938879013 CEST	1.1.1.1	192.168.2.7	0x969d	No error (0)	app-fra04-origin.spectrum.hscollectedforms.net	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:41.938879013 CEST	1.1.1.1	192.168.2.7	0x969d	No error (0)	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		172.65.192.122	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.088741064 CEST	1.1.1.1	192.168.2.7	0x25fe	No error (0)	script.hotjar.com		3.164.206.63	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.088741064 CEST	1.1.1.1	192.168.2.7	0x25fe	No error (0)	script.hotjar.com		3.164.206.92	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.088741064 CEST	1.1.1.1	192.168.2.7	0x25fe	No error (0)	script.hotjar.com		3.164.206.76	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.088741064 CEST	1.1.1.1	192.168.2.7	0x25fe	No error (0)	script.hotjar.com		3.164.206.79	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.428734064 CEST	1.1.1.1	192.168.2.7	0x6c32	No error (0)	forms-eu1.hscollectedforms.net	app-fra04-origin.spectrum.hscollectedforms.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.428734064 CEST	1.1.1.1	192.168.2.7	0x6c32	No error (0)	app-fra04-origin.spectrum.hscollectedforms.net	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.428755999 CEST	1.1.1.1	192.168.2.7	0x953	No error (0)	forms-eu1.hscollectedforms.net	app-fra04-origin.spectrum.hscollectedforms.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.428755999 CEST	1.1.1.1	192.168.2.7	0x953	No error (0)	app-fra04-origin.spectrum.hscollectedforms.net	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.428755999 CEST	1.1.1.1	192.168.2.7	0x953	No error (0)	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		172.65.192.122	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.509207964 CEST	1.1.1.1	192.168.2.7	0x6f7	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.509207964 CEST	1.1.1.1	192.168.2.7	0x6f7	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.509207964 CEST	1.1.1.1	192.168.2.7	0x6f7	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.509207964 CEST	1.1.1.1	192.168.2.7	0x6f7	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.509207964 CEST	1.1.1.1	192.168.2.7	0x6f7	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.509679079 CEST	1.1.1.1	192.168.2.7	0xad1b	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.581341028 CEST	1.1.1.1	192.168.2.7	0xcec0	No error (0)	js-eu1.hs-banner.com	js-fra04-origin.spectrum.hs-banner.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.581341028 CEST	1.1.1.1	192.168.2.7	0xcec0	No error (0)	js-fra04-origin.spectrum.hs-banner.com	7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.581469059 CEST	1.1.1.1	192.168.2.7	0x9436	No error (0)	js-eu1.hs-analytics.net	js-fra04-origin.spectrum.hs-analytics.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.581469059 CEST	1.1.1.1	192.168.2.7	0x9436	No error (0)	js-fra04-origin.spectrum.hs-analytics.net	18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.581469059 CEST	1.1.1.1	192.168.2.7	0x9436	No error (0)	18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com		172.65.238.60	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.582324028 CEST	1.1.1.1	192.168.2.7	0xa632	No error (0)	js-eu1.hs-analytics.net	js-fra04-origin.spectrum.hs-analytics.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.582324028 CEST	1.1.1.1	192.168.2.7	0xa632	No error (0)	js-fra04-origin.spectrum.hs-analytics.net	18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.582734108 CEST	1.1.1.1	192.168.2.7	0xae60	No error (0)	js-eu1.hs-banner.com	js-fra04-origin.spectrum.hs-banner.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.582734108 CEST	1.1.1.1	192.168.2.7	0xae60	No error (0)	js-fra04-origin.spectrum.hs-banner.com	7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.582734108 CEST	1.1.1.1	192.168.2.7	0xae60	No error (0)	7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com		172.65.202.201	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.583106041 CEST	1.1.1.1	192.168.2.7	0x7bf9	No error (0)	js-eu1.hubspot.com	app-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.583106041 CEST	1.1.1.1	192.168.2.7	0x7bf9	No error (0)	app-fra04-origin.spectrum.hubspot.com	a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.583106041 CEST	1.1.1.1	192.168.2.7	0x7bf9	No error (0)	a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com		172.65.236.181	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.583741903 CEST	1.1.1.1	192.168.2.7	0xbc4f	No error (0)	js-eu1.hubspot.com	app-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.583741903 CEST	1.1.1.1	192.168.2.7	0xbc4f	No error (0)	app-fra04-origin.spectrum.hubspot.com	a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.586184978 CEST	1.1.1.1	192.168.2.7	0x816d	No error (0)	js-eu1.hscollectedforms.net	app-fra04-origin.spectrum.hscollectedforms.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.586184978 CEST	1.1.1.1	192.168.2.7	0x816d	No error (0)	app-fra04-origin.spectrum.hscollectedforms.net	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.586184978 CEST	1.1.1.1	192.168.2.7	0x816d	No error (0)	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		172.65.192.122	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:43.586998940 CEST	1.1.1.1	192.168.2.7	0xecb6	No error (0)	js-eu1.hscollectedforms.net	app-fra04-origin.spectrum.hscollectedforms.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:43.586998940 CEST	1.1.1.1	192.168.2.7	0xecb6	No error (0)	app-fra04-origin.spectrum.hscollectedforms.net	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:44.371596098 CEST	1.1.1.1	192.168.2.7	0x3dbc	No error (0)	forms-eu1.hscollectedforms.net	app-fra04-origin.spectrum.hscollectedforms.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:44.371596098 CEST	1.1.1.1	192.168.2.7	0x3dbc	No error (0)	app-fra04-origin.spectrum.hscollectedforms.net	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:44.371596098 CEST	1.1.1.1	192.168.2.7	0x3dbc	No error (0)	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		172.65.192.122	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.374403000 CEST	1.1.1.1	192.168.2.7	0x9e17	No error (0)	forms-eu1.hscollectedforms.net	app-fra04-origin.spectrum.hscollectedforms.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:44.374403000 CEST	1.1.1.1	192.168.2.7	0x9e17	No error (0)	app-fra04-origin.spectrum.hscollectedforms.net	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:44.535479069 CEST	1.1.1.1	192.168.2.7	0x29d5	No error (0)	ws.hotjar.com	wsky-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:44.535479069 CEST	1.1.1.1	192.168.2.7	0x29d5	No error (0)	wsky-live.live.eks.hotjar.com		52.209.84.30	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.535479069 CEST	1.1.1.1	192.168.2.7	0x29d5	No error (0)	wsky-live.live.eks.hotjar.com		52.210.250.156	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.535479069 CEST	1.1.1.1	192.168.2.7	0x29d5	No error (0)	wsky-live.live.eks.hotjar.com		52.30.61.80	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.535479069 CEST	1.1.1.1	192.168.2.7	0x29d5	No error (0)	wsky-live.live.eks.hotjar.com		54.171.50.66	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.535479069 CEST	1.1.1.1	192.168.2.7	0x29d5	No error (0)	wsky-live.live.eks.hotjar.com		54.73.171.69	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.535479069 CEST	1.1.1.1	192.168.2.7	0x29d5	No error (0)	wsky-live.live.eks.hotjar.com		54.194.83.240	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.535479069 CEST	1.1.1.1	192.168.2.7	0x29d5	No error (0)	wsky-live.live.eks.hotjar.com		54.246.57.204	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.535479069 CEST	1.1.1.1	192.168.2.7	0x29d5	No error (0)	wsky-live.live.eks.hotjar.com		99.80.39.116	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.535574913 CEST	1.1.1.1	192.168.2.7	0x100b	No error (0)	ws.hotjar.com	wsky-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:44.554560900 CEST	1.1.1.1	192.168.2.7	0x26fc	No error (0)	vc.hotjar.io	vc-live-cf.hotjar.io		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:44.554560900 CEST	1.1.1.1	192.168.2.7	0x26fc	No error (0)	vc-live-cf.hotjar.io		18.66.112.79	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.554560900 CEST	1.1.1.1	192.168.2.7	0x26fc	No error (0)	vc-live-cf.hotjar.io		18.66.112.15	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.554560900 CEST	1.1.1.1	192.168.2.7	0x26fc	No error (0)	vc-live-cf.hotjar.io		18.66.112.19	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.554560900 CEST	1.1.1.1	192.168.2.7	0x26fc	No error (0)	vc-live-cf.hotjar.io		18.66.112.110	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.554572105 CEST	1.1.1.1	192.168.2.7	0xd883	No error (0)	vc.hotjar.io	vc-live-cf.hotjar.io		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:44.599756956 CEST	1.1.1.1	192.168.2.7	0x8ff5	No error (0)	script.hotjar.com		3.164.206.76	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.599756956 CEST	1.1.1.1	192.168.2.7	0x8ff5	No error (0)	script.hotjar.com		3.164.206.63	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.599756956 CEST	1.1.1.1	192.168.2.7	0x8ff5	No error (0)	script.hotjar.com		3.164.206.92	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.599756956 CEST	1.1.1.1	192.168.2.7	0x8ff5	No error (0)	script.hotjar.com		3.164.206.79	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.601207972 CEST	1.1.1.1	192.168.2.7	0x3d02	No error (0)	content.hotjar.io	pacman-content-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:44.601207972 CEST	1.1.1.1	192.168.2.7	0x3d02	No error (0)	pacman-content-live.live.eks.hotjar.com		54.73.193.221	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.601207972 CEST	1.1.1.1	192.168.2.7	0x3d02	No error (0)	pacman-content-live.live.eks.hotjar.com		34.251.154.115	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.601207972 CEST	1.1.1.1	192.168.2.7	0x3d02	No error (0)	pacman-content-live.live.eks.hotjar.com		52.215.101.83	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:44.601468086 CEST	1.1.1.1	192.168.2.7	0x5d42	No error (0)	content.hotjar.io	pacman-content-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:45.567883968 CEST	1.1.1.1	192.168.2.7	0xf8ee	No error (0)	track-eu1.hubspot.com	track-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:45.567883968 CEST	1.1.1.1	192.168.2.7	0xf8ee	No error (0)	track-fra04-origin.spectrum.hubspot.com	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:45.567883968 CEST	1.1.1.1	192.168.2.7	0xf8ee	No error (0)	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com		172.65.240.166	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:45.568078995 CEST	1.1.1.1	192.168.2.7	0x5b47	No error (0)	track-eu1.hubspot.com	track-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:45.568078995 CEST	1.1.1.1	192.168.2.7	0x5b47	No error (0)	track-fra04-origin.spectrum.hubspot.com	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:46.028732061 CEST	1.1.1.1	192.168.2.7	0x929a	No error (0)	content.hotjar.io	pacman-content-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:46.028928995 CEST	1.1.1.1	192.168.2.7	0x301b	No error (0)	content.hotjar.io	pacman-content-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:46.028928995 CEST	1.1.1.1	192.168.2.7	0x301b	No error (0)	pacman-content-live.live.eks.hotjar.com		52.215.101.83	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:46.028928995 CEST	1.1.1.1	192.168.2.7	0x301b	No error (0)	pacman-content-live.live.eks.hotjar.com		34.251.154.115	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:46.028928995 CEST	1.1.1.1	192.168.2.7	0x301b	No error (0)	pacman-content-live.live.eks.hotjar.com		54.73.193.221	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:46.682040930 CEST	1.1.1.1	192.168.2.7	0x14dd	No error (0)	track-eu1.hubspot.com	track-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:46.682040930 CEST	1.1.1.1	192.168.2.7	0x14dd	No error (0)	track-fra04-origin.spectrum.hubspot.com	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:46.682040930 CEST	1.1.1.1	192.168.2.7	0x14dd	No error (0)	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com		172.65.240.166	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:00:46.683109999 CEST	1.1.1.1	192.168.2.7	0x5d7a	No error (0)	track-eu1.hubspot.com	track-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:00:46.683109999 CEST	1.1.1.1	192.168.2.7	0x5d7a	No error (0)	track-fra04-origin.spectrum.hubspot.com	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:01:07.173155069 CEST	1.1.1.1	192.168.2.7	0xe007	No error (0)	idp.safenames.com		31.3.66.52	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:01:08.537905931 CEST	1.1.1.1	192.168.2.7	0x1ddb	No error (0)	identity.safenames.com		31.3.66.53	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:01:11.945549965 CEST	1.1.1.1	192.168.2.7	0x8ff	No error (0)	identity.safenames.com		31.3.66.53	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:01:12.384557009 CEST	1.1.1.1	192.168.2.7	0x993d	No error (0)	windowsupdatebg.s.llnwi.net		87.248.205.0	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:01:32.357454062 CEST	1.1.1.1	192.168.2.7	0x4d80	No error (0)	idp.safenames.com		31.3.66.52	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49721	217.19.248.132	80	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:00:21.712941885 CEST	439	OUT	GET /php/php.exe?c: HTTP/1.1 Host: ykbdmz.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:00:22.832916021 CEST	1236	IN	HTTP/1.1 200 OK Server: Unknown web server Cache-control: no-cache, no-store Content-Type: text/html; charset=utf-8 Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; Date: Sun, 06 Oct 2024 23:00:21 GMT Expires: 0 X-XSS-Protection: value=1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Length: 2111 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 6f 6d 61 69 6e 20 52 65 67 69 73 74 65 72 65 64 20 61 74 20 53 61 66 65 6e 61 6d 65 73 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 43 6f 6e 74 65 6e 74 2f 73 74 79 6c 65 73 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 62 6f 64 79 3e 0d 0a 0d 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 74 6f 70 64 6f 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 79 6b 62 64 6d 7a 2e 63 6f 6d 0d 0a 20 20 20 20 3c [TRUNCATED] Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head> <title>Domain Registered at Safenames</title> <link href="/Content/styles.css" rel="stylesheet" type="text/css" /></head><body> <div id="topdomain"> ykbdmz.com </div> <div id="wrapper"> <table width="524" border="0" cellspacing="0" cellpadding="0" class="holdertable"> <tr> <td class="holdertable_header"><a href="http://www.safenames.net?ref=lndrdr"><img src="/Content/header.png" alt="Safenames" width="524" height="75" class="holdertable_image" /></a></td> </tr> <tr> <td class="holdertable_content"> <br /><br /><br />
Oct 7, 2024 01:00:22.832931995 CEST	224	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 75 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 44 6f 6d 61 69 6e 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 69 6e 20 6f 76 65 72 20 31 2c 34 30 30 20 64 69 66 66 65 72 Data Ascii: <ul> <li>Domain Registration in over 1,400 different extensions</li> <li>Enterprise Domain Management since 1999</li> <li>Mark Protect<sup>TM
Oct 7, 2024 01:00:22.832937956 CEST	1064	IN	Data Raw: 3c 2f 73 75 70 3e 20 4f 6e 6c 69 6e 65 20 42 72 61 6e 64 20 4d 6f 6e 69 74 6f 72 69 6e 67 20 61 6e 64 20 45 6e 66 6f 72 63 65 6d 65 6e 74 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 44 Data Ascii: </sup> Online Brand Monitoring and Enforcement</li> <li>Domain Consultancy and Strategy</li> <li>Domain Name Acquisition</li> <li>Domain Disputes and Recovery</li>
Oct 7, 2024 01:00:22.833668947 CEST	1064	IN	Data Raw: 3c 2f 73 75 70 3e 20 4f 6e 6c 69 6e 65 20 42 72 61 6e 64 20 4d 6f 6e 69 74 6f 72 69 6e 67 20 61 6e 64 20 45 6e 66 6f 72 63 65 6d 65 6e 74 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 44 Data Ascii: </sup> Online Brand Monitoring and Enforcement</li> <li>Domain Consultancy and Strategy</li> <li>Domain Name Acquisition</li> <li>Domain Disputes and Recovery</li>
Oct 7, 2024 01:00:22.833801985 CEST	1236	IN	HTTP/1.1 200 OK Server: Unknown web server Cache-control: no-cache, no-store Content-Type: text/html; charset=utf-8 Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; Date: Sun, 06 Oct 2024 23:00:21 GMT Expires: 0 X-XSS-Protection: value=1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Length: 2111 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 6f 6d 61 69 6e 20 52 65 67 69 73 74 65 72 65 64 20 61 74 20 53 61 66 65 6e 61 6d 65 73 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 43 6f 6e 74 65 6e 74 2f 73 74 79 6c 65 73 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 62 6f 64 79 3e 0d 0a 0d 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 74 6f 70 64 6f 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 79 6b 62 64 6d 7a 2e 63 6f 6d 0d 0a 20 20 20 20 3c [TRUNCATED] Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head> <title>Domain Registered at Safenames</title> <link href="/Content/styles.css" rel="stylesheet" type="text/css" /></head><body> <div id="topdomain"> ykbdmz.com </div> <div id="wrapper"> <table width="524" border="0" cellspacing="0" cellpadding="0" class="holdertable"> <tr> <td class="holdertable_header"><a href="http://www.safenames.net?ref=lndrdr"><img src="/Content/header.png" alt="Safenames" width="524" height="75" class="holdertable_image" /></a></td> </tr> <tr> <td class="holdertable_content"> <br /><br /><br />
Oct 7, 2024 01:00:23.011792898 CEST	339	OUT	GET /Content/styles.css HTTP/1.1 Host: ykbdmz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://ykbdmz.com/php/php.exe?c: Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:00:23.180907011 CEST	1236	IN	HTTP/1.1 200 OK Server: Unknown web server Cache-control: no-cache, no-store Content-Type: text/css Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; Date: Sun, 06 Oct 2024 23:00:22 GMT Expires: 0 X-XSS-Protection: value=1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Length: 1809 Data Raw: ef bb bf 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 0d 0a 48 54 4d 4c 2c 20 42 4f 44 59 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 34 34 34 34 34 3b 0d 0a 7d 0d 0a 0d 0a 61 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 39 66 65 33 3b 0d 0a 7d 0d 0a 0d 0a 20 20 20 20 61 20 69 6d 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 61 3a 76 69 73 69 74 65 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 38 45 43 41 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 23 74 6f 70 64 6f 6d 61 69 6e 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 35 34 33 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 47 65 6e 65 76 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 66 6f 6e [TRUNCATED] Data Ascii: /* CSS Document */HTML, BODY { padding-top: 0px; color: #444444;}a { color: #009fe3;} a img { border: 0px; } a:visited { color: #008ECA; }#topdomain { width: 543px; height: 40px; margin: auto; font-family: Tahoma, Geneva, sans-serif; font-size: 16px; text-align: center; padding-top: 10px;}#wrapper { width: 524px; margin: auto; margin-top: 10px; -webkit-box-shadow: 0px 0px 40px rgba(50, 50, 50, 0.3); -moz-box-shadow: 0px 0px 40px rgba(50, 50, 50, 0.3); box-shadow: 0px 0px 40px rgba(50, 50, 50, 0.3);}UL { font-family: Tahoma, Geneva, sans-serif; font-size: 17px;}LI { list-style-type: none; margin: 8px; margin-left: 3px;}UL LI::before { co
Oct 7, 2024 01:00:23.180963039 CEST	970	IN	Data Raw: 6e 74 65 6e 74 3a 20 22 5c 32 30 32 32 22 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 39 66 65 33 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d Data Ascii: ntent: "\2022"; color: #009fe3; font-weight: bold; display: inline-block; width: 1em; margin-left: -1em;}SUP { font-size: 8px;}#contact { background-color: #EAEAEA; width: 89.5%; posit
Oct 7, 2024 01:00:23.200439930 CEST	392	OUT	GET /Content/cont_back.png HTTP/1.1 Host: ykbdmz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ykbdmz.com/Content/styles.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:00:23.394774914 CEST	1236	IN	HTTP/1.1 200 OK Server: Unknown web server Cache-control: no-cache, no-store Content-Type: image/png Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; Date: Sun, 06 Oct 2024 23:00:22 GMT Expires: 0 X-XSS-Protection: value=1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Length: 68412 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 0c 00 00 00 e9 08 02 00 00 00 c7 f2 f8 40 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 7f 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 65 64 61 32 62 33 66 61 63 2c 20 32 30 32 31 2f 31 31 2f 31 37 2d 31 37 3a 32 33 3a 31 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a [TRUNCATED] Data Ascii: PNGIHDR@tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:9ACEB5CEE55F11E1AF648B17A1A9A7A5" xmpMM:DocumentID="xmp.did:A8B9040D7AC611ECAFD68CE376322CCD" xmpMM:InstanceID="xmp.iid:A8B9040C7AC611ECAFD68CE376322CCD" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8b6eacda-efbd-634c-b852-3cb7cb773841" stRef:
Oct 7, 2024 01:00:23.394783974 CEST	1236	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 66 34 33 32 63 37 62 2d 36 37 62 61 2d 32 62 34 61 2d 62 30 33 61 2d 31 34 63 64 66 32 62 34 66 62 32 37 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 Data Ascii: documentID="adobe:docid:photoshop:6f432c7b-67ba-2b4a-b03a-14cdf2b4fb27"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>SIDATxeUu.[}TQE[HT`Aa;h4ySEWaLF_H$o"1EHU@h
Oct 7, 2024 01:00:23.394800901 CEST	1236	IN	Data Raw: 05 bc 91 ad 9c 37 fa d2 f0 02 82 db b3 fc 13 fc 5d b9 d3 e4 e7 ad d5 fe e9 b6 a9 97 0c 27 56 2c 9c 68 bd 67 10 e3 cc 1e 9e b7 15 98 0c 21 89 5e d1 bd 0b 48 02 b2 e4 0c ba bf 6f 9f ca 1b 1e 9a 98 72 45 f1 3e 9d 6d fa 94 a8 d7 5b 3e 3a e2 ec 98 5d Data Ascii: 7]'V,hg!^HorE>m[>:]3pSzeFPV%DH#{+XQfI##T;hR<}~-gk&%QH'Hyob"@)!mC&ZtS&l1%d
Oct 7, 2024 01:00:23.394844055 CEST	1236	IN	Data Raw: 5e cb 46 fa f7 6c dd 7f ea 61 b3 27 33 dd 54 93 28 38 a1 03 67 50 c3 fb 8e 26 ac 0d be a4 ef 4f 17 04 9c b5 6f 62 23 31 20 39 41 be 61 57 ee 33 86 ec 1d 9a da ed ea 8e 85 f0 40 15 80 14 90 24 e0 4d 8a c0 8c 44 71 de 0b 82 66 71 35 a8 6b fb 7a 04 Data Ascii: ^Fla'3T(8gP&Oob#1 9AaW3@$MDqfq5kz+{2=`iAV9i CuEny~.R(PUz>C^;`5\n^+(/TMZ`-5<hf6:J0,VvfbCxJ~
Oct 7, 2024 01:00:23.394853115 CEST	1236	IN	Data Raw: b6 4d ff 0d 28 99 3d cc 1a d3 b2 44 19 b7 4f 78 3e 5c 92 a0 2f 0b 4e ef 39 18 b5 9e 9d ab d6 05 27 01 c9 cf 23 fa 0b 9a 11 35 b9 90 0b 62 20 35 09 01 d4 c8 5f 00 db 5c 2c 62 8a c2 81 09 a5 42 39 9f 7e 47 33 b5 5c f7 38 9f d6 54 c9 28 e4 6e 73 55 Data Ascii: M(=DOx>\/N9'#5b 5_\,bB9~G3\8T(nsUyB\aI'y3YMb\w{maD0"\!uu6i4e@Q6'=2Brf2{Pb.X[c,\6I2#
Oct 7, 2024 01:00:23.395270109 CEST	1236	IN	Data Raw: a9 a4 01 35 d3 73 e5 e2 1f bb 01 8c 0b 5c 51 3a 99 ba 44 24 66 7e 70 fd 26 0e a4 1e 1b 37 38 ff 54 b8 3a ae 68 2b 40 87 b1 c6 16 0a 0e b7 2f 52 59 25 23 95 1d 2d c6 ca e6 87 1a c9 a6 6b c8 5d bd 0a da 1b 7d 5a 71 6f be 3d 5a d6 a2 50 fb a7 a4 35 Data Ascii: 5s\Q:D$f~p&78T:h+@/RY%#-k]}Zqo=ZP5LFFHNskGxrnFIm7jM6=uqOrm4rX8VJ;'zL&3,,:R\|zLw^tL} 4phR5\Sb"
Oct 7, 2024 01:00:23.395277977 CEST	1236	IN	Data Raw: 1b bb 4c 0a 99 b9 51 dc 35 a0 3a 96 a9 23 c6 8d 99 af 19 af b3 54 50 76 4c ac 4d f4 52 e4 a2 e5 ca 31 35 f9 11 fb ba 39 59 0f 40 35 06 17 0d 85 b9 2b f2 e3 1a 62 97 03 f1 47 8d 0b 85 a3 f5 68 c6 e5 b7 4f e5 3f df 3b 3c 66 5e 3f b9 5b 9d a4 e8 e8 Data Ascii: LQ5:#TPvLMR159Y@5+bGhO?;<f^?[&x1Z[r3qV{+#+k/~P^;g'v%\Y@8{S950pz_s4!F<%.<@a%h&`&5eT%D&`oD~=R~BWJ]i
Oct 7, 2024 01:00:24.037384987 CEST	378	OUT	GET /favicon.ico HTTP/1.1 Host: ykbdmz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ykbdmz.com/php/php.exe?c: Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:00:24.206228971 CEST	1236	IN	HTTP/1.1 200 OK Server: Unknown web server Cache-control: no-cache, no-store Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; Date: Sun, 06 Oct 2024 23:00:23 GMT Expires: 0 X-XSS-Protection: value=1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Length: 4286 Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 c3 0e 00 00 c3 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 92 00 1e cf 91 00 b5 cb 8f 00 d2 c8 8c 00 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 62 00 02 87 5c 00 61 81 57 00 c6 7b 52 00 7d 77 4f 00 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 df 9c 00 00 de 9b 00 00 dd 9b 00 00 dc 9a 00 00 00 00 00 00 00 00 00 00 d0 92 00 39 cf 91 00 f0 cb 8e 00 ff c8 8c 00 78 00 00 00 00 00 00 00 00 b7 81 00 00 b0 7c 00 00 ad 7a 00 00 a9 75 00 00 00 00 00 00 00 00 00 00 8e 62 00 07 88 5d 00 b3 81 58 00 ff 7b 52 00 d3 77 4f 00 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: ( @ Hb\aW{R}wO9x\|zub]X{RwOSh\|ztd\:W{SLwO@8}yuEd]X{RwOSI6}yuw[W\|TvN<9}Ky`ubZW}TwO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49720	217.19.248.132	80	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:00:23.029803038 CEST	385	OUT	GET /Content/header.png HTTP/1.1 Host: ykbdmz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ykbdmz.com/php/php.exe?c: Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:00:23.197298050 CEST	1236	IN	HTTP/1.1 200 OK Server: Unknown web server Cache-control: no-cache, no-store Content-Type: image/png Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; Date: Sun, 06 Oct 2024 23:00:22 GMT Expires: 0 X-XSS-Protection: value=1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Length: 7938 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 0c 00 00 00 4b 08 06 00 00 00 1c 44 df f2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 7f 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 65 64 61 32 62 33 66 61 63 2c 20 32 30 32 31 2f 31 31 2f 31 37 2d 31 37 3a 32 33 3a 31 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a [TRUNCATED] Data Ascii: PNGIHDRKDtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0E80EE783B9911EA92A3BB06FA9F936D" xmpMM:DocumentID="xmp.did:F890EE2B7AC411EC99C28D35A2010672" xmpMM:InstanceID="xmp.iid:F890EE2A7AC411EC99C28D35A2010672" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:01c82206-cbdf-af4b-a03c-26a6e6ae12c5" stRef:d
Oct 7, 2024 01:00:23.197365046 CEST	1236	IN	Data Raw: 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 62 39 39 36 32 39 66 2d 66 65 39 65 2d 62 37 34 34 2d 38 63 35 64 2d 65 33 61 38 66 34 63 63 63 32 63 64 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 Data Ascii: ocumentID="adobe:docid:photoshop:8b99629f-fe9e-b744-8c5d-e3a8f4ccc2cd"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>lEIDATxU UhEQA=DhxiYh1$i@h&tat{p[(?{O{
Oct 7, 2024 01:00:23.197380066 CEST	1236	IN	Data Raw: 48 27 99 f1 d1 f2 80 1a f5 77 8b 1b e4 a6 e1 a9 1e 41 f0 7a 89 f1 16 04 62 62 4f 8f d8 c0 90 43 a0 cd 0e d4 35 cb bd 1b ab 4c ce 87 0b 7b 24 c8 b3 9f 1f 29 db 19 2a 58 be 36 28 45 4e cb 8a 33 f1 08 48 1e b5 b5 a2 51 9e 56 01 f2 cf 2f 3d d7 1a bf Data Ascii: H'wAzbbOC5L{$)*X6(EN3HQV/=]B<m+0_qdk$KArW,+vOfyYtOzRtT\|xAZmJ\|0CPw {zyr{irIDcD&Y\|<Oy^~
Oct 7, 2024 01:00:23.197485924 CEST	672	IN	Data Raw: f7 f0 2e d8 fb 39 f7 0d d5 06 ce 73 d9 db e1 f9 0a a7 9d dd 3c 27 fe ae 0d ea 60 97 17 fb 39 9f 9b a7 cf c9 30 df 1b 23 34 da f3 bc e3 3b b7 34 34 7b ff 3f 18 30 06 af 4f ca 93 bf a9 71 84 91 fc 9f b5 15 f2 23 15 0c be f1 09 25 2a 10 0a d5 a8 d8 Data Ascii: .9s<'`90#4;44{?0Oq#%*jC-<h'6[='n{C&J0X,\1= J/`UL'knBhchB3WO6`&/o7a@V\`0q~`MIA ]u^bn0x
Oct 7, 2024 01:00:23.197501898 CEST	1236	IN	Data Raw: c0 6d 06 97 fd e5 cb 4b e5 ed 03 fe dd e0 bb b5 9c 30 98 c3 32 dc 39 8d e1 76 37 43 5d 41 62 5c de d8 77 d8 aa 77 9c b5 8f e7 d8 af 04 d9 07 bf 41 03 0d b6 8c 2f da fb 2a bd 1f 9b 02 e8 a8 15 96 5b df de be a7 35 04 b3 a1 cc 7f ea ed 8f 2d b1 b4 Data Ascii: mK029v7C]Ab\wwA/*[5-!P<q_2%\|ZcE}1$V:MP`L2/v>nnJyQ{nXn9=M4{r'`{\wq~,oY6^"!<u0s?^)
Oct 7, 2024 01:00:23.197518110 CEST	1236	IN	Data Raw: 07 0a 33 33 86 3d 53 24 b3 fb 27 99 69 9b 18 66 ba 5e 3b 3b d7 8b 67 68 6d 6d a9 67 58 69 7d 59 e4 09 87 88 4c dc 84 de 32 3e 18 6f 9d ac 37 05 c6 61 cf 5c 5f 21 d7 af 3f b6 f3 ab a3 97 07 b7 32 7a 8a 4e 63 78 3c 94 cb 04 ac 2e 2d 32 e3 e0 e3 d5 Data Ascii: 33=S$'if^;;ghmmgXi}YL2>o7a\_!?2zNcx<.-2C0_";:WmJr=n}QvhrY8Gb~j4w">{ErT@A{?_bW_f@C'SuM,Tc@
Oct 7, 2024 01:00:23.197534084 CEST	1236	IN	Data Raw: 08 0b dc a3 dd c1 df f7 78 3c 18 48 c6 34 4d 45 b9 6f 7b a3 0c 98 f1 02 c7 10 62 13 e0 49 c1 cc 93 39 fd 3d 6b 8b 1c f4 d3 2e d7 58 f9 55 aa 1a 23 6c 3c e2 78 10 0c b6 2b d4 ed ef 81 b6 b7 bf c7 0b 06 89 64 d0 ab b3 03 e7 30 55 cc 9e 6b 1e 08 b8 Data Ascii: x<H4MEo{bI9=k.XU#l<x+d0Ukzx9Wc)m92\|&(7X)z@D,b~hPNb@\|=Q\1E,p\vy~s.3S(h>GWa;+}e^*{u
Oct 7, 2024 01:00:23.197554111 CEST	104	IN	Data Raw: 18 08 21 c4 07 e4 5e 80 f7 e1 67 1f 57 99 24 46 a1 b8 ef ac 0c 93 6d f1 c6 d5 e5 11 b9 ec 31 89 0c e8 61 20 84 10 1f 1e 3a 27 d3 0c 3f 60 ca e4 f4 10 29 cc b1 aa e3 6d a7 79 62 20 ae 1f 92 22 37 ad 3e c4 06 24 27 24 8c 61 20 84 10 1f b0 5e 03 32 Data Ascii: !^gW$Fm1a :'?`)myb "7>$'$a ^29,l<r
Oct 7, 2024 01:00:23.284184933 CEST	144	IN	Data Raw: c2 21 09 42 08 21 84 84 84 1e 06 42 08 21 84 50 30 10 42 08 21 84 82 81 10 42 08 21 14 0c 84 10 42 08 a1 60 20 84 10 42 08 05 03 21 84 10 42 28 18 08 21 84 10 42 c1 40 08 21 84 10 42 c1 40 08 21 84 10 0a 06 42 08 21 84 50 30 10 42 08 21 84 82 81 Data Ascii: !B!B!P0B!B!B` B!B(!B@!B@!B!P0B!B!B` B!B(!B(!'lh\IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49730	217.19.248.132	80	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:00:23.346913099 CEST	281	OUT	GET /Content/header.png HTTP/1.1 Host: ykbdmz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:00:23.933415890 CEST	1236	IN	HTTP/1.1 200 OK Server: Unknown web server Cache-control: no-cache, no-store Content-Type: image/png Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; Date: Sun, 06 Oct 2024 23:00:22 GMT Expires: 0 X-XSS-Protection: value=1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Length: 7938 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 0c 00 00 00 4b 08 06 00 00 00 1c 44 df f2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 7f 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 65 64 61 32 62 33 66 61 63 2c 20 32 30 32 31 2f 31 31 2f 31 37 2d 31 37 3a 32 33 3a 31 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a [TRUNCATED] Data Ascii: PNGIHDRKDtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0E80EE783B9911EA92A3BB06FA9F936D" xmpMM:DocumentID="xmp.did:F890EE2B7AC411EC99C28D35A2010672" xmpMM:InstanceID="xmp.iid:F890EE2A7AC411EC99C28D35A2010672" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:01c82206-cbdf-af4b-a03c-26a6e6ae12c5" stRef:d
Oct 7, 2024 01:00:23.933458090 CEST	200	IN	Data Raw: 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 62 39 39 36 32 39 66 2d 66 65 39 65 2d 62 37 34 34 2d 38 63 35 64 2d 65 33 61 38 66 34 63 63 63 32 63 64 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 Data Ascii: ocumentID="adobe:docid:photoshop:8b99629f-fe9e-b744-8c5d-e3a8f4ccc2cd"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>lEIDATxU UhEQA=DhxiYh1$i@
Oct 7, 2024 01:00:23.933464050 CEST	1236	IN	Data Raw: 84 18 bb c6 02 a8 a8 68 90 26 82 74 14 85 61 98 c2 74 a6 bf f5 ed 7b ce 70 ee 9d 5b ce 9d f2 28 f7 fb fb bb 3f 87 7b 4f d9 7b 9f b2 be bd f6 da 6b 47 b5 b6 b6 4a d4 53 5f 3c 26 22 f3 85 10 42 08 21 c4 9b 57 5b e7 f5 9e 12 25 0b f7 2e d3 7f 5c c1 Data Ascii: h&tat{p[(?{O{kGJS_<&"B!W[%.\ BH v BH0B` B!B(!B@!B!P0B!B!B!B` B!B(!B@!B!P0B!P0B!B:cfI),>+H`
Oct 7, 2024 01:00:23.933490038 CEST	1236	IN	Data Raw: 7b e6 aa e2 7a 79 72 7b ad 69 1f 1c e3 da 81 c9 72 49 af 44 e9 99 1c 63 44 db 8e ca 26 59 bc bb b6 ad 1d 7c cb 3c 4f eb 79 5e 7e 82 11 7a c8 b9 b5 b7 a6 49 b7 ad 97 25 ba cf 61 9f 8b 91 1e 17 2d d7 ea f6 e3 0b 12 4c 7c 0a ea 80 32 bc 77 b0 5e 16 Data Ascii: {zyr{irIDcD&Y\|<Oy^~zI%a-L\|2w^nL`8FyY7J n+?0:(e?.q;7>te}f=/OIc@luu\<5_~a&mBoo}Y0h6(NM3pKccCZ
Oct 7, 2024 01:00:23.933499098 CEST	1236	IN	Data Raw: ab a4 40 85 dc a5 56 5c 08 86 60 30 04 71 9f 7e ef 14 0b 60 4d 49 83 19 aa 41 20 ea a2 5d 75 5e 62 c1 6e 07 db b3 30 bd 8f e7 78 5f d5 f6 80 98 99 ff 5e b9 97 58 b0 db f8 f1 6d 35 f2 7b fd 9c af 75 44 ea 6f 30 be 47 bc ac 28 aa 6f 27 16 8c f0 d4 Data Ascii: @V\`0q~`MIA ]u^bn0x_^Xm5{uDo0G(o'2AIJ\T>q!izs"BnQ01Wo}Wf:{4(KAUn6xRnu}%be'\|pqc\WlZzq:jeii
Oct 7, 2024 01:00:23.933516026 CEST	1236	IN	Data Raw: 49 09 7e db aa 23 f7 70 b8 6d 00 0f 8b ef b0 49 a8 ba b8 7d 4e dc 60 b7 01 da 27 5c 71 10 0e 18 63 47 ce 83 f9 43 53 8c 60 00 08 74 bc 6b 5d a5 fc 49 45 ce 3e 2b eb 22 02 fb 46 f8 04 62 8f ca 3d e2 4d d8 ef c8 ce 08 ef 41 b4 89 04 08 6c a4 f6 ab Data Ascii: I~#pmI}N`'\qcGCS`tk]IE>+"Fb=MAlx;$}L''U<D\|&/NUa]rG 0i!^g 0tcjhk}cy(\ux""zizp>m0/^/ueYG}cOTV
Oct 7, 2024 01:00:23.933552980 CEST	1236	IN	Data Raw: 87 8c 88 43 d4 90 e6 25 06 6f 93 a1 56 c4 3e 82 03 c5 88 91 d6 80 53 30 41 94 78 02 07 dd 66 20 fc c2 12 1e ce 21 16 5f f0 db ba 19 05 32 bb 7f c7 ee 19 fb 0d 10 1b 44 c4 a4 5a c6 bc b4 be 7b 0c ef 81 c3 cd 26 de 63 64 76 e0 44 80 98 fa 89 7a 9e Data Ascii: C%oV>S0Axf !_2DZ{&cdvDz_o)wEGE0;sp1p5og8h\eb~x)^wt;TzzqHRpS#ppC@3lQ\t>L{qq3C{Q#==.cq\|\g
Oct 7, 2024 01:00:23.933562040 CEST	720	IN	Data Raw: 10 fc b9 ec b3 5a 2f f1 86 f4 dd 37 0e 4f 35 b9 32 12 ad 42 c0 db 80 c5 a4 b0 06 c7 8b 3e 69 ba 2f b1 da 05 8b 55 a5 59 6d 8d d9 24 6b 4a 1b 8d e0 7b 4a cf 1d 89 86 93 82 81 90 a3 08 d2 2f 17 69 6f 6f 91 be 9c 4b 2d 17 bc ed 92 ef a1 3d 9a 82 a5 Data Ascii: Z/7O52B>i/UYm$kJ{J/iooK-=Eln{Y7_bLk6l0.1"b{8ve@X~^3P&>QR0v,,MZ@LZVRoigb<0sz@AU]3G/8B
Oct 7, 2024 01:00:24.125977993 CEST	284	OUT	GET /Content/cont_back.png HTTP/1.1 Host: ykbdmz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:00:24.315644979 CEST	1236	IN	HTTP/1.1 200 OK Server: Unknown web server Cache-control: no-cache, no-store Content-Type: image/png Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; Date: Sun, 06 Oct 2024 23:00:23 GMT Expires: 0 X-XSS-Protection: value=1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Length: 68412 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 0c 00 00 00 e9 08 02 00 00 00 c7 f2 f8 40 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 7f 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 65 64 61 32 62 33 66 61 63 2c 20 32 30 32 31 2f 31 31 2f 31 37 2d 31 37 3a 32 33 3a 31 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a [TRUNCATED] Data Ascii: PNGIHDR@tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:9ACEB5CEE55F11E1AF648B17A1A9A7A5" xmpMM:DocumentID="xmp.did:A8B9040D7AC611ECAFD68CE376322CCD" xmpMM:InstanceID="xmp.iid:A8B9040C7AC611ECAFD68CE376322CCD" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8b6eacda-efbd-634c-b852-3cb7cb773841" stRef:
Oct 7, 2024 01:00:24.315653086 CEST	1236	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 66 34 33 32 63 37 62 2d 36 37 62 61 2d 32 62 34 61 2d 62 30 33 61 2d 31 34 63 64 66 32 62 34 66 62 32 37 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 Data Ascii: documentID="adobe:docid:photoshop:6f432c7b-67ba-2b4a-b03a-14cdf2b4fb27"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>SIDATxeUu.[}TQE[HT`Aa;h4ySEWaLF_H$o"1EHU@h
Oct 7, 2024 01:00:24.315665007 CEST	448	IN	Data Raw: 05 bc 91 ad 9c 37 fa d2 f0 02 82 db b3 fc 13 fc 5d b9 d3 e4 e7 ad d5 fe e9 b6 a9 97 0c 27 56 2c 9c 68 bd 67 10 e3 cc 1e 9e b7 15 98 0c 21 89 5e d1 bd 0b 48 02 b2 e4 0c ba bf 6f 9f ca 1b 1e 9a 98 72 45 f1 3e 9d 6d fa 94 a8 d7 5b 3e 3a e2 ec 98 5d Data Ascii: 7]'V,hg!^HorE>m[>:]3pSzeFPV%DH#{+XQfI##T;hR<}~-gk&%QH'Hyob"@)!mC&ZtS&l1%d
Oct 7, 2024 01:00:24.315807104 CEST	1236	IN	Data Raw: c8 ec 33 62 4c 4d 72 c3 c7 13 bb 07 fb 86 e6 e4 c5 b3 74 f3 46 34 f2 ba 9c a0 f0 c3 b6 56 95 37 31 db 34 13 11 88 e4 c5 ea 50 d8 ce e9 a2 25 8e 63 d7 a5 74 35 55 d1 0e 60 89 ce 1d 62 d8 5e f1 91 f5 e3 87 84 b6 59 23 6e dd 03 7b 5f cd 26 40 42 4c Data Ascii: 3bLMrtF4V714P%ct5U`b^Y#n{_&@BLW(Skh\ I_zsTCrk'h(%&_Dhqn\|hXxoF ^X[irY#(SP{X6Ay,;G
Oct 7, 2024 01:00:25.598592997 CEST	274	OUT	GET /favicon.ico HTTP/1.1 Host: ykbdmz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:00:25.765736103 CEST	1236	IN	HTTP/1.1 200 OK Server: Unknown web server Cache-control: no-cache, no-store Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; Date: Sun, 06 Oct 2024 23:00:24 GMT Expires: 0 X-XSS-Protection: value=1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Length: 4286 Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 c3 0e 00 00 c3 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 92 00 1e cf 91 00 b5 cb 8f 00 d2 c8 8c 00 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 62 00 02 87 5c 00 61 81 57 00 c6 7b 52 00 7d 77 4f 00 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 df 9c 00 00 de 9b 00 00 dd 9b 00 00 dc 9a 00 00 00 00 00 00 00 00 00 00 d0 92 00 39 cf 91 00 f0 cb 8e 00 ff c8 8c 00 78 00 00 00 00 00 00 00 00 b7 81 00 00 b0 7c 00 00 ad 7a 00 00 a9 75 00 00 00 00 00 00 00 00 00 00 8e 62 00 07 88 5d 00 b3 81 58 00 ff 7b 52 00 d3 77 4f 00 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: ( @ Hb\aW{R}wO9x\|zub]X{RwOSh\|ztd\:W{SLwO@8}yuEd]X{RwOSI6}yuw[W\|TvN<9}Ky`ubZW}TwO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49789	45.223.61.112	80	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:00:34.738306999 CEST	443	OUT	GET /?ref=lndrdr HTTP/1.1 Host: www.safenames.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:00:36.222239017 CEST	121	IN	HTTP/1.1 301 Moved Permanently Location: https://www.safenames.net/?ref=lndrdr Content-Length: 0 Connection: close
Oct 7, 2024 01:00:36.223820925 CEST	121	IN	HTTP/1.1 301 Moved Permanently Location: https://www.safenames.net/?ref=lndrdr Content-Length: 0 Connection: close
Oct 7, 2024 01:00:36.224775076 CEST	121	IN	HTTP/1.1 301 Moved Permanently Location: https://www.safenames.net/?ref=lndrdr Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49790	45.223.61.112	80	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:01:19.861180067 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.7	49699	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:19 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:19 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:19 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230019Z-1657d5bbd48vhs7r2p1ky7cs5w000000031g0000000018fp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:19 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-06 23:00:19 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-06 23:00:19 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-06 23:00:19 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-06 23:00:19 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-06 23:00:19 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-06 23:00:19 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-06 23:00:19 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-06 23:00:19 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-06 23:00:19 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.7	49703	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:20 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:20 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:20 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230020Z-1657d5bbd48sqtlf1huhzuwq7000000002a000000000npwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:20 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.7	49706	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:20 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:20 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:20 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c59bb0f9-701e-0097-2d01-17b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230020Z-1657d5bbd48jwrqbupe3ktsx9w00000002tg00000000m5ud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:20 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49707	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:20 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:20 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:20 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230020Z-1657d5bbd48762wn1qw4s5sd3000000002e000000000qn3d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:20 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49704	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:20 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:20 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230020Z-1657d5bbd48xdq5dkwwugdpzr00000000310000000004n28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:20 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49705	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:20 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:20 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 28f6fc08-301e-0020-466a-176299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230020Z-1657d5bbd48sqtlf1huhzuwq70000000028g00000000wwhk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:20 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49711	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:21 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:21 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230021Z-1657d5bbd48vlsxxpe15ac3q7n00000002pg0000000053wh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:21 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.7	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:21 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:21 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230021Z-1657d5bbd48xlwdx82gahegw4000000002xg000000002dwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:21 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.7	49710	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:21 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230021Z-1657d5bbd48dfrdj7px744zp8s00000002e00000000075xk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:21 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:21 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230021Z-1657d5bbd48dfrdj7px744zp8s00000002dg000000009636 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:21 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:21 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:21 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230021Z-1657d5bbd48qjg85buwfdynm5w00000002q000000000humb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:21 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:23 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230023Z-1657d5bbd48gqrfwecymhhbfm800000001gg000000006nmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:23 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:23 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230023Z-1657d5bbd48sqtlf1huhzuwq7000000002e0000000004z61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:23 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:23 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230023Z-1657d5bbd48762wn1qw4s5sd3000000002hg000000008d5h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:23 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.7	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:23 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:23 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230023Z-1657d5bbd48sqtlf1huhzuwq7000000002cg00000000bm20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:23 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:23 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230023Z-1657d5bbd48xsz2nuzq4vfrzg800000002kg000000003y42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:23 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:23 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230023Z-1657d5bbd48t66tjar5xuq22r800000002r0000000000psw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:23 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:23 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:23 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230023Z-1657d5bbd48cpbzgkvtewk0wu000000002t000000000676e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:23 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:23 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:23 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230023Z-1657d5bbd48dfrdj7px744zp8s00000002bg00000000gtgx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:23 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:23 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230023Z-1657d5bbd48tnj6wmberkg2xy800000002rg00000000byzp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:23 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:23 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:23 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230023Z-1657d5bbd482tlqpvyz9e93p5400000002s0000000009q6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:23 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:24 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230024Z-1657d5bbd48p2j6x2quer0q02800000002qg00000000wh8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:24 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230024Z-1657d5bbd48tqvfc1ysmtbdrg000000002e000000000pw9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:24 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:24 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230024Z-1657d5bbd48brl8we3nu8cxwgn0000000310000000003m2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:24 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:24 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:24 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230024Z-1657d5bbd48762wn1qw4s5sd3000000002fg00000000h4a1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:24 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:24 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230024Z-1657d5bbd48t66tjar5xuq22r800000002fg00000000wkmp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:25 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230025Z-1657d5bbd48sqtlf1huhzuwq70000000029000000000ucw5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:25 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:25 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230025Z-1657d5bbd48gqrfwecymhhbfm800000001ag00000000zw81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:25 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:25 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230025Z-1657d5bbd48xlwdx82gahegw4000000002vg00000000a4kf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:25 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230025Z-1657d5bbd48762wn1qw4s5sd3000000002h0000000009t9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:25 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:25 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 7c825ef0-601e-0001-5f02-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230025Z-1657d5bbd482tlqpvyz9e93p5400000002t0000000006h54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:25 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:26 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-06 23:00:26 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=236716 Date: Sun, 06 Oct 2024 23:00:26 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:26 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230026Z-1657d5bbd48vlsxxpe15ac3q7n00000002gg00000000sr7h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:26 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230026Z-1657d5bbd48jwrqbupe3ktsx9w00000002ug00000000fbvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:26 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:26 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 4c0632d0-601e-0097-4413-17f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230026Z-1657d5bbd48brl8we3nu8cxwgn00000002zg000000008mzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:26 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:26 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230026Z-1657d5bbd48gqrfwecymhhbfm800000001hg0000000037d0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:26 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:26 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:26 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230026Z-1657d5bbd482tlqpvyz9e93p5400000002ug000000000m4k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:26 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:27 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:27 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230027Z-1657d5bbd48xdq5dkwwugdpzr000000002yg00000000d6gq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:27 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:27 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:27 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2c548d6-d01e-0082-4f03-17e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230027Z-1657d5bbd48xdq5dkwwugdpzr000000002x000000000mt4a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:27 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:27 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:27 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230027Z-1657d5bbd48gqrfwecymhhbfm800000001k0000000001ukm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:27 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	49754	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:27 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-06 23:00:27 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=236651 Date: Sun, 06 Oct 2024 23:00:27 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-06 23:00:27 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:27 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:27 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 53f69819-801e-0048-7802-17f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230027Z-1657d5bbd48wd55zet5pcra0cg00000002pg000000005g6d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:27 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:27 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230027Z-1657d5bbd487nf59mzf5b3gk8n000000026000000000q3c8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:27 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:27 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 678daa67-201e-00aa-3f60-173928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230027Z-1657d5bbd48tqvfc1ysmtbdrg000000002gg00000000c2s8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:28 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:27 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:27 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230027Z-1657d5bbd48brl8we3nu8cxwgn00000002ug00000000xcnv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:28 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:27 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:27 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5a5a1e5c-a01e-001e-18f5-1649ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230027Z-1657d5bbd48xsz2nuzq4vfrzg800000002g000000000e9nz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:28 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:27 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:27 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230027Z-1657d5bbd482tlqpvyz9e93p5400000002t0000000006ha8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:28 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:27 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:27 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230027Z-1657d5bbd48sqtlf1huhzuwq7000000002eg000000003k9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:28 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:29 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:29 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230029Z-1657d5bbd482lxwq1dp2t1zwkc00000002cg00000000dqy5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:29 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:29 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: cc92db4a-701e-0053-3460-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230029Z-1657d5bbd482krtfgrg72dfbtn00000002c000000000f38d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:29 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230029Z-1657d5bbd48wd55zet5pcra0cg00000002g000000000t033 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:29 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230029Z-1657d5bbd48f7nlxc7n5fnfzh0000000025000000000ytg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:29 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:29 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230029Z-1657d5bbd48jwrqbupe3ktsx9w00000002wg000000007k32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:29 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:30 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 938e68e0-901e-0029-0160-17274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230030Z-1657d5bbd48sqtlf1huhzuwq7000000002ag00000000kxfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:30 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230030Z-1657d5bbd48wd55zet5pcra0cg00000002kg00000000gx2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:30 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230030Z-1657d5bbd48762wn1qw4s5sd3000000002e000000000qnph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:30 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:30 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230030Z-1657d5bbd482lxwq1dp2t1zwkc00000002fg000000001vde x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:30 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:30 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230030Z-1657d5bbd4824mj9d6vp65b6n400000002rg00000000uz9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:31 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:31 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230031Z-1657d5bbd48p2j6x2quer0q02800000002rg00000000sb2y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:31 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:31 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230031Z-1657d5bbd48jwrqbupe3ktsx9w00000002wg000000007k8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:31 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:31 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230031Z-1657d5bbd48tqvfc1ysmtbdrg000000002e000000000pwur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:31 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:31 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:31 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230031Z-1657d5bbd48f7nlxc7n5fnfzh0000000025000000000ytkf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:31 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:31 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:31 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230031Z-1657d5bbd48p2j6x2quer0q02800000002s000000000rmqu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:31 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:31 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:31 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230031Z-1657d5bbd48p2j6x2quer0q02800000002sg00000000pwua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:31 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:31 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:31 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230031Z-1657d5bbd48lknvp09v995n790000000027000000000muxh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:32 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:31 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:31 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230031Z-1657d5bbd48762wn1qw4s5sd3000000002e000000000qntn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:31 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:31 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 821e4157-c01e-0014-3301-17a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230031Z-1657d5bbd48f7nlxc7n5fnfzh000000002ag000000007vpq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:32 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:31 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:31 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230031Z-1657d5bbd48f7nlxc7n5fnfzh0000000026g00000000rmdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:32 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:34 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:34 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230034Z-1657d5bbd48dfrdj7px744zp8s00000002fg000000001vft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:34 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:34 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230034Z-1657d5bbd48jwrqbupe3ktsx9w00000002sg00000000ry8n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:34 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230034Z-1657d5bbd48q6t9vvmrkd293mg00000002gg00000000rwqs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:34 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:34 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 897bc565-f01e-0096-5e60-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230034Z-1657d5bbd48f7nlxc7n5fnfzh0000000027000000000nk36 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:34 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:34 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:34 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230034Z-1657d5bbd4824mj9d6vp65b6n400000002sg00000000qrhz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:34 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:36 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 3c7823fd-401e-0015-0c60-170e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230036Z-1657d5bbd48dfrdj7px744zp8s00000002cg00000000eyvz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:36 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:36 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0607cd43-401e-0078-1b00-174d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230036Z-1657d5bbd48brl8we3nu8cxwgn00000002wg00000000ncpr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:36 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:36 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 2f576d96-401e-0047-3902-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230036Z-1657d5bbd48tqvfc1ysmtbdrg000000002mg000000000pwk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:36 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:36 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb96d6a-f01e-003f-17e5-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230036Z-1657d5bbd48lknvp09v995n790000000026000000000t72w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:36 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:36 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230036Z-1657d5bbd48762wn1qw4s5sd3000000002g000000000ergf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:37 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:37 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0c165d1d-a01e-000d-7dfe-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230037Z-1657d5bbd48jwrqbupe3ktsx9w00000002tg00000000m7a6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:37 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:37 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:37 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 33b4d0ae-a01e-0032-35ff-161949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230037Z-1657d5bbd482lxwq1dp2t1zwkc00000002e0000000007mua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:37 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:37 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:37 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 960edd56-701e-005c-4100-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230037Z-1657d5bbd48t66tjar5xuq22r800000002r0000000000r9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:37 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:37 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:37 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5ff6bd9-301e-005d-3af2-16e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230037Z-1657d5bbd482lxwq1dp2t1zwkc00000002b000000000mb6u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:37 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.7	49801	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:37 UTC	651	OUT	GET /?ref=lndrdr HTTP/1.1 Host: www.safenames.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:00:37 UTC	170	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319
2024-10-06 23:00:37 UTC	2721	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 69 6e 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 77 73 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6e 61 6c 79 74 69 63 Data Ascii: Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.googletagmanager.com https://.hotjar.com https://in.hotjar.com https://.hotjar.io wss://.hotjar.com https://.google-analytics.com https://.analytic
2024-10-06 23:00:37 UTC	95	IN	Data Raw: 58 2d 49 69 6e 66 6f 3a 20 31 34 2d 34 38 31 38 34 39 32 31 2d 34 38 31 38 34 39 34 36 20 4e 4e 4e 4e 20 43 54 28 37 37 20 31 36 30 20 30 29 20 52 54 28 31 37 32 38 32 35 35 36 33 36 30 33 35 20 32 35 32 29 20 71 28 30 20 30 20 33 20 31 29 20 72 28 34 20 34 29 20 55 31 32 0d 0a 0d 0a Data Ascii: X-Iinfo: 14-48184921-48184946 NNNN CT(77 160 0) RT(1728255636035 252) q(0 0 3 1) r(4 4) U12
2024-10-06 23:00:37 UTC	1452	IN	Data Raw: 33 36 61 65 0d 0a 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 52 65 73 6f 75 72 63 65 50 61 63 6b 61 67 65 73 2f 53 61 66 65 6e 61 6d 65 73 2f 61 73 73 65 74 73 2f 64 69 73 74 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 57 65 62 52 65 73 6f 75 72 63 65 2e 61 78 64 3f 64 3d 44 7a 48 72 70 51 6c 35 55 52 58 61 72 46 48 41 74 72 6d 7a 46 76 76 77 74 78 45 52 45 6c 53 5a 5f 62 Data Ascii: 36ae <!DOCTYPE html> <html lang="en"> <head> <link rel="shortcut icon" href="/ResourcePackages/Safenames/assets/dist/images/favicon.ico" /> <meta charset="utf-8" /><script type="text/javascript" src="/WebResource.axd?d=DzHrpQl5URXarFHAtrmzFvvwtxERElSZ_b
2024-10-06 23:00:37 UTC	1452	IN	Data Raw: 2e 68 6a 2e 71 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 2e 5f 68 6a 53 65 74 74 69 6e 67 73 20 3d 20 7b 20 68 6a 69 64 3a 20 31 34 32 35 30 30 32 2c 20 68 6a 73 76 3a 20 36 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 20 3d 20 6f 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 20 3d 20 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 20 72 2e 61 73 79 6e 63 20 3d 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 2e 73 72 63 20 3d 20 74 20 2b 20 68 2e 5f 68 6a 53 65 74 74 69 6e 67 73 2e 68 6a 69 64 20 2b 20 6a 20 2b 20 68 2e 5f 68 6a 53 65 Data Ascii: .hj.q \|\| []).push(arguments) }; h._hjSettings = { hjid: 1425002, hjsv: 6 }; a = o.getElementsByTagName('head')[0]; r = o.createElement('script'); r.async = 1; r.src = t + h._hjSettings.hjid + j + h._hjSe
2024-10-06 23:00:37 UTC	1452	IN	Data Raw: 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 54 72 61 63 6b 69 6e 67 43 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 54 72 61 63 6b 69 6e 67 43 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 43 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 27 2c 20 6c 6f 61 64 41 6e 64 54 72 61 63 6b 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 61 64 41 6e 64 54 72 61 63 6b 28 54 72 61 63 6b 69 6e 67 43 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 72 2e 63 61 6e 54 72 61 63 6b 43 75 72 72 65 6e 74 55 73 65 72 28 29 29 3b 0d 0a 20 20 Data Ascii: nd', 'pageview'); } if (window.TrackingConsentManager) { TrackingConsentManager.addEventListener('ConsentChanged', loadAndTrack); loadAndTrack(TrackingConsentManager.canTrackCurrentUser());
2024-10-06 23:00:37 UTC	1452	IN	Data Raw: 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 52 65 73 6f 75 72 63 65 50 61 63 6b 61 67 65 73 2f 53 61 66 65 6e 61 6d 65 73 2f 61 73 73 65 74 73 2f 64 69 73 74 2f 6a 73 2f 70 6f 70 70 65 72 2e 6d 69 6e 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 52 65 73 6f 75 72 63 65 50 61 63 6b 61 67 65 73 2f 53 61 66 65 6e 61 6d 65 73 2f 61 73 73 65 74 73 2f 64 69 73 74 2f 6a 73 2f 63 6f 72 65 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 53 63 72 69 70 74 52 65 73 6f 75 72 63 65 2e 61 78 Data Ascii: xt/javascript"></script><script src="/ResourcePackages/Safenames/assets/dist/js/popper.min.js" type="text/javascript"></script><script src="/ResourcePackages/Safenames/assets/dist/js/core.js" type="text/javascript"></script><script src="/ScriptResource.ax
2024-10-06 23:00:37 UTC	1452	IN	Data Raw: 77 65 62 73 69 74 65 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 73 61 66 65 6e 61 6d 65 73 2d 6e 65 74 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 74 65 66 69 6e 69 74 79 20 31 33 2e 33 2e 37 36 33 39 2e 30 20 50 45 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 61 66 65 6e 61 6d 65 73 2e 6e 65 74 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 61 66 65 6e 61 6d 65 73 20 68 61 73 20 62 65 65 6e 20 61 20 6c 65 61 64 69 6e 67 20 70 72 6f 76 69 64 65 Data Ascii: website" /><meta property="og:site_name" content="safenames-net" /><meta name="Generator" content="Sitefinity 13.3.7639.0 PE" /><link rel="canonical" href="https://www.safenames.net" /><meta name="description" content="Safenames has been a leading provide
2024-10-06 23:00:37 UTC	1452	IN	Data Raw: 20 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 27 53 65 61 72 63 68 49 6e 66 6f 2d 31 27 2f 3e 0a 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 6d 6c 2d 32 22 20 69 64 3d 22 30 30 63 66 33 61 61 36 2d 30 39 62 63 2d 34 63 33 63 2d 61 61 35 39 2d 38 34 64 32 39 65 38 62 38 64 62 30 22 20 3e 20 3c 73 70 61 6e 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 52 65 73 6f 75 72 63 65 50 61 63 6b 61 67 65 73 2f 53 61 66 65 6e 61 6d 65 73 2f 61 73 73 65 74 73 2f 64 69 73 74 2f 69 6d 61 67 65 73 2f 6d 61 67 2d 67 6c 61 73 73 2d 73 6d 2e 73 76 67 22 20 61 6c 74 3d 22 53 65 61 72 63 68 22 20 68 65 69 67 68 74 3d 22 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 Data Ascii: aria-describedby='SearchInfo-1'/> <button type="button" class="btn ml-2" id="00cf3aa6-09bc-4c3c-aa59-84d29e8b8db0" > <span><img src="/ResourcePackages/Safenames/assets/dist/images/mag-glass-sm.svg" alt="Search" height="18px;"></span></button>
2024-10-06 23:00:37 UTC	1452	IN	Data Raw: 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 61 66 65 6e 61 6d 65 73 2e 6e 65 74 2f 22 3e 0a 09 09 3c 69 6d 67 20 73 72 63 3d 22 2f 52 65 73 6f 75 72 63 65 50 61 63 6b 61 67 65 73 2f 53 61 66 65 6e 61 6d 65 73 2f 61 73 73 65 74 73 2f 64 69 73 74 2f 69 6d 61 67 65 73 2f 73 61 66 65 6e 61 6d 65 73 2d 6c 6f 67 6f 2d 77 68 69 74 65 2e 73 76 67 22 20 61 6c 74 3d 22 53 61 66 65 6e 61 6d 65 73 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 3b 22 20 2f 3e 0a 09 09 3c 21 2d 2d 3c 69 6d 67 20 73 72 63 3d 22 7e 2f 52 65 73 6f 75 72 63 65 50 61 63 6b 61 67 65 73 2f 53 61 66 65 6e 61 6d 65 73 2f 61 73 73 65 74 73 2f 64 69 73 74 2f 69 6d 61 67 65 73 2f 73 74 2d 73 61 66 65 6e 61 6d 65 73 2d 6c 6f 67 6f 2d 77 68 69 74 65 2e 73 76 67 22 20 61 6c 74 3d 22 53 61 66 65 6e Data Ascii: ef="https://www.safenames.net/"><img src="/ResourcePackages/Safenames/assets/dist/images/safenames-logo-white.svg" alt="Safenames" height="42px;" />...<img src="~/ResourcePackages/Safenames/assets/dist/images/st-safenames-logo-white.svg" alt="Safen
2024-10-06 23:00:37 UTC	1452	IN	Data Raw: 6e 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 61 66 65 6e 61 6d 65 73 2e 6e 65 74 2f 64 6f 6d 61 69 6e 2d 6e 61 6d 65 73 2f 64 6f 6d 61 69 6e 2d 6d 61 6e 61 67 65 6d 65 6e 74 22 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 3e 44 6f 6d 61 69 6e 20 4d 61 6e 61 67 65 6d 65 6e 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 61 66 65 6e 61 Data Ascii: n class="dropdown-item"> <a href="https://www.safenames.net/domain-names/domain-management" target="_self">Domain Management</a> </button> <button class="dropdown-item"> <a href="https://www.safena

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:37 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:37 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230037Z-1657d5bbd48xdq5dkwwugdpzr000000002u0000000010zx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:37 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:38 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: db28c537-d01e-0065-47fe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230038Z-1657d5bbd4824mj9d6vp65b6n400000002u000000000gy5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:38 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:38 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 0480ed94-801e-00ac-5102-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230038Z-1657d5bbd48762wn1qw4s5sd3000000002k0000000005vta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:38 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:38 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230038Z-1657d5bbd48vhs7r2p1ky7cs5w000000030g000000005dpa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:38 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:38 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230038Z-1657d5bbd482lxwq1dp2t1zwkc00000002c000000000fmq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:38 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:38 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: b738acd5-401e-0067-1502-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230038Z-1657d5bbd4824mj9d6vp65b6n400000002tg00000000kr97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:38 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.7	49807	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	889	OUT	GET /ResourcePackages/Safenames/assets/dist/css/bootstrap.css?vrs=115 HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:38 UTC	416	IN	HTTP/1.1 200 OK Etag: "0db76b3a4a0d61:0" Last-Modified: Mon, 12 Oct 2020 14:33:50 GMT Content-Type: text/css Content-Length: 207268 Cache-Control: max-age=571154, public Expires: Sun, 13 Oct 2024 13:39:51 GMT Date: Sun, 06 Oct 2024 23:00:37 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 13-37543168-37494371 2CNN RT(1728255637474 377) q(0 0 0 -1) r(0 0) U18
2024-10-06 23:00:38 UTC	1036	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0d 0a 20 20 20 20 2d 2d 62 6c 75 65 3a 20 23 30 30 37 62 66 66 3b 0d 0a 20 20 20 20 2d 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 0d 0a 20 20 20 20 2d 2d 70 75 72 70 6c 65 3a 20 23 36 66 34 32 63 31 3b 0d 0a 20 20 20 20 2d 2d 70 69 6e 6b 3a 20 23 65 38 33 65 38 63 3b 0d 0a 20 20 20 20 2d 2d 72 65 64 3a 20 23 64 63 33 35 34 35 3b 0d 0a 20 20 20 20 2d 2d 6f 72 61 6e 67 65 3a 20 23 66 64 37 65 31 34 3b 0d 0a 20 20 20 20 2d 2d 79 65 6c 6c 6f 77 3a 20 23 66 66 63 31 30 37 3b 0d 0a 20 20 20 20 2d 2d 67 72 65 65 6e 3a 20 23 32 38 61 37 34 35 3b 0d 0a 20 20 20 20 2d 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 0d 0a 20 20 20 20 2d 2d 63 79 61 6e 3a 20 23 31 37 61 32 62 38 3b 0d 0a 20 20 20 20 2d 2d 77 68 69 74 65 3a 20 23 66 66 66 3b Data Ascii: :root { --blue: #007bff; --indigo: #6610f2; --purple: #6f42c1; --pink: #e83e8c; --red: #dc3545; --orange: #fd7e14; --yellow: #ffc107; --green: #28a745; --teal: #20c997; --cyan: #17a2b8; --white: #fff;
2024-10-06 23:00:38 UTC	60	IN	Data Raw: 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 41 72 69 61 6c 2c 20 22 4e 6f 74 6f 20 53 61 6e 73 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 2c 20 22 41 70 70 6c 65 20 43 6f 6c Data Ascii: "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Col
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 6f 72 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 20 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 31 32 35 32 39 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 5b 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 5d 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 20 Data Ascii: or Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 1rem; font-weight: 300; line-height: 1.5; color: #212529; text-align: left; background-color: #fff;}[tabindex="-1"]:focus { outline: 0
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 6c 6f 72 3a 20 23 30 30 35 36 62 33 3b 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 5d 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 5d 29 3a 68 6f 76 65 72 2c 20 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 5d 29 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 20 20 20 20 20 Data Ascii: lor: #0056b3; text-decoration: underline; } a:not([href]):not([tabindex]) { color: inherit; text-decoration: none; } a:not([href]):not([tabindex]):hover, a:not([href]):not([tabindex]):focus {
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 0a 7d 0d 0a 0d 0a 62 75 74 74 6f 6e 2c 0d 0a 73 65 6c 65 63 74 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 73 65 6c 65 63 74 20 7b 0d 0a 20 20 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 7d 0d 0a 0d 0a 62 75 74 74 6f 6e 2c 0d 0a 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 0d 0a 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2c 0d 0a 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0d 0a 7d 0d 0a 0d 0a 20 20 20 20 62 75 74 74 6f 6e 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 0d 0a 20 20 20 20 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 3a 6e 6f 74 28 3a 64 69 73 61 62 Data Ascii: }button,select { text-transform: none;}select { word-wrap: normal;}button,[type="button"],[type="reset"],[type="submit"] { -webkit-appearance: button;} button:not(:disabled), [type="button"]:not(:disab
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0d 0a 7d 0d 0a 0d 0a 6f 75 74 70 75 74 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 73 75 6d 6d 61 72 79 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6c 69 73 74 2d 69 74 65 6d 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b Data Ascii: -search-decoration { -webkit-appearance: none; }::-webkit-file-upload-button { font: inherit; -webkit-appearance: button;}output { display: inline-block;}summary { display: list-item; cursor: pointer;
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 79 6c 65 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 69 73 74 2d 69 6e 6c 69 6e 65 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 69 73 74 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 20 20 20 20 2e 6c 69 73 74 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 2e 35 72 65 6d 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 2e 69 6e 69 74 69 61 6c 69 73 6d 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 30 25 3b 0d 0a Data Ascii: yle: none;}.list-inline { padding-left: 0; list-style: none;}.list-inline-item { display: inline-block;} .list-inline-item:not(:last-child) { margin-right: 0.5rem; }.initialism { font-size: 90%;
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 65 61 6b 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 2e 70 72 65 2d 73 63 72 6f 6c 6c 61 62 6c 65 20 7b 0d 0a 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 33 34 30 70 78 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 Data Ascii: word-break: normal; }.pre-scrollable { max-height: 340px; overflow-y: scroll;}.container { width: 100%; padding-right: 15px; padding-left: 15px; margin-right: auto; margin-left: auto;}@media
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 20 2e 63 6f 6c 2d 6c 67 2d 31 2c 20 2e 63 6f 6c 2d 6c 67 2d 32 2c 20 2e 63 6f 6c 2d 6c 67 2d 33 2c 20 2e 63 6f 6c 2d 6c 67 2d 34 2c 20 2e 63 6f 6c 2d 6c 67 2d 35 2c 20 2e 63 6f 6c 2d 6c 67 2d 36 2c 20 2e 63 6f 6c 2d 6c 67 2d 37 2c 20 2e 63 6f 6c 2d 6c 67 2d 38 2c 20 2e 63 6f 6c 2d 6c 67 2d 39 2c 20 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 20 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 20 2e 63 6f 6c 2d 6c 67 2d 31 32 2c 20 2e 63 6f 6c 2d 6c 67 2c 0d 0a 2e 63 6f 6c 2d 6c 67 2d 61 75 74 6f 2c 20 2e 63 6f 6c 2d 78 6c 2d 31 2c 20 2e 63 6f 6c 2d 78 6c 2d 32 2c 20 2e 63 6f 6c 2d 78 6c 2d 33 2c 20 2e 63 6f 6c 2d 78 6c 2d 34 2c 20 2e 63 6f 6c 2d 78 6c 2d 35 2c 20 2e 63 6f 6c 2d 78 6c 2d 36 2c 20 2e 63 6f 6c 2d 78 6c 2d 37 2c 20 2e 63 6f 6c 2d 78 Data Ascii: col-md-auto, .col-lg-1, .col-lg-2, .col-lg-3, .col-lg-4, .col-lg-5, .col-lg-6, .col-lg-7, .col-lg-8, .col-lg-9, .col-lg-10, .col-lg-11, .col-lg-12, .col-lg,.col-lg-auto, .col-xl-1, .col-xl-2, .col-xl-3, .col-xl-4, .col-xl-5, .col-xl-6, .col-xl-7, .col-x
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 72 64 65 72 2d 31 20 7b 0d 0a 20 20 20 20 6f 72 64 65 72 3a 20 31 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 72 64 65 72 2d 32 20 7b 0d 0a 20 20 20 20 6f 72 64 65 72 3a 20 32 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 72 64 65 72 2d 33 20 7b 0d 0a 20 20 20 20 6f 72 64 65 72 3a 20 33 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 72 64 65 72 2d 34 20 7b 0d 0a 20 20 20 20 6f 72 64 65 72 3a 20 34 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 72 64 65 72 2d 35 20 7b 0d 0a 20 20 20 20 6f 72 64 65 72 3a 20 35 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 72 64 65 72 2d 36 20 7b 0d 0a 20 20 20 20 6f 72 64 65 72 3a 20 36 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 72 64 65 72 2d 37 20 7b 0d 0a 20 20 20 20 6f 72 64 65 72 3a 20 37 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 72 64 65 72 2d 38 20 7b 0d 0a 20 20 20 20 6f 72 64 65 72 3a Data Ascii: 0;}.order-1 { order: 1;}.order-2 { order: 2;}.order-3 { order: 3;}.order-4 { order: 4;}.order-5 { order: 5;}.order-6 { order: 6;}.order-7 { order: 7;}.order-8 { order:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.7	49812	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	885	OUT	GET /ResourcePackages/Safenames/assets/dist/css/fonts.css?vrs=115 HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:38 UTC	413	IN	HTTP/1.1 200 OK Etag: "075907146ad71:0" Last-Modified: Wed, 24 Feb 2021 00:46:10 GMT Content-Type: text/css Content-Length: 6614 Cache-Control: max-age=571153, public Expires: Sun, 13 Oct 2024 13:39:51 GMT Date: Sun, 06 Oct 2024 23:00:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 14-48185052-48182457 2CNN RT(1728255637475 364) q(0 0 0 -1) r(0 0) U18
2024-10-06 23:00:38 UTC	1039	IN	Data Raw: ef bb bf 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 50 6f 70 70 69 6e 73 3a 77 67 68 74 40 35 30 30 3b 36 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 75 6e 69 74 6f 2b 53 61 6e 73 3a 77 67 68 74 40 33 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0d 0a 0d 0a 2f 2a 20 64 65 76 61 6e 61 67 61 72 69 20 2a 2f 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 6f 70 70 69 6e 73 27 3b 0d 0a 20 20 20 20 66 Data Ascii: @import url('https://fonts.googleapis.com/css2?family=Poppins:wght@500;600&display=swap');@import url('https://fonts.googleapis.com/css2?family=Nunito+Sans:wght@300&display=swap');/* devanagari */@font-face { font-family: 'Poppins'; f
2024-10-06 23:00:38 UTC	64	IN	Data Raw: 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 6f 70 70 69 6e 73 27 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 66 6f 6e 74 Data Ascii: font-family: 'Poppins'; font-style: normal; font
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0d 0a 20 20 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 50 6f 70 70 69 6e 73 20 4c 69 67 68 74 27 29 2c 20 6c 6f 63 61 6c 28 27 50 6f 70 70 69 6e 73 2d 4c 69 67 68 74 27 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 70 6f 70 70 69 6e 73 2f 76 38 2f 70 78 69 42 79 70 38 6b 76 38 4a 48 67 46 56 72 4c 44 7a 38 5a 31 78 6c 46 51 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0d 0a 20 20 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 Data Ascii: -weight: 300; font-display: swap; src: local('Poppins Light'), local('Poppins-Light'), url(https://fonts.gstatic.com/s/poppins/v8/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02B
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0d 0a 20 20 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0d 0a 7d 0d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4e 75 6e 69 74 Data Ascii: 2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* vietnamese */@font-face { font-family: 'Nunit
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0d 0a 7d 0d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4e 75 6e 69 74 6f 20 53 61 6e 73 27 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0d 0a 20 20 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 4e 75 6e 69 74 6f 20 53 61 6e 73 20 42 6f 6c 64 27 29 2c 20 6c 6f 63 61 6c 28 27 4e 75 6e 69 74 6f 53 61 6e 73 2d 42 6f 6c 64 27 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e Data Ascii: U+2212, U+2215, U+FEFF, U+FFFD;}/* vietnamese */@font-face { font-family: 'Nunito Sans'; font-style: normal; font-weight: 700; font-display: swap; src: local('Nunito Sans Bold'), local('NunitoSans-Bold'), url(https://fonts.
2024-10-06 23:00:38 UTC	1155	IN	Data Raw: 77 61 70 3b 0d 0a 20 20 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 4e 75 6e 69 74 6f 20 53 61 6e 73 20 42 6c 61 63 6b 27 29 2c 20 6c 6f 63 61 6c 28 27 4e 75 6e 69 74 6f 53 61 6e 73 2d 42 6c 61 63 6b 27 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 6e 75 6e 69 74 6f 73 61 6e 73 2f 76 35 2f 70 65 30 33 4d 49 6d 53 4c 59 42 49 76 31 6f 34 58 31 4d 38 63 63 38 2d 42 4d 35 69 55 31 45 51 56 67 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0d 0a 20 20 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0d 0a 7d 0d 0a 2f 2a 20 6c 61 74 69 6e 2d Data Ascii: wap; src: local('Nunito Sans Black'), local('NunitoSans-Black'), url(https://fonts.gstatic.com/s/nunitosans/v5/pe03MImSLYBIv1o4X1M8cc8-BM5iU1EQVg.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+1EA0-1EF9, U+20AB;}/* latin-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.7	49810	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	1043	OUT	GET /WebResource.axd?d=DzHrpQl5URXarFHAtrmzFvvwtxERElSZ_b2Ca1mxtmzvyTwDr6K2uqyW80PraHwZqn7BbM5lQGIiy7biXNxjLG9gJ71MSZTcvi7eeKKPJBLIN5mVSMeRsnLnzbDpw9vtrgTOqyeHT00x826p9zjpJthZ-3nX299B5pryZnfavheEFwbHupd-iASOQMXwlLQK0&t=637824974880000000 HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:39 UTC	223	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Sun, 05 Oct 2025 22:28:27 GMT Last-Modified: Thu, 10 Mar 2022 08:24:48 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319
2024-10-06 23:00:39 UTC	2228	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 69 6e 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 77 73 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6e 61 6c 79 74 69 63 Data Ascii: Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.googletagmanager.com https://.hotjar.com https://in.hotjar.com https://.hotjar.io wss://.hotjar.com https://.google-analytics.com https://.analytic
2024-10-06 23:00:39 UTC	453	IN	Data Raw: 54 72 61 63 6b 69 6e 67 43 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 72 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6f 6e 73 65 6e 74 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 73 66 2d 74 72 61 63 6b 69 6e 67 2d 63 6f 6e 73 65 6e 74 22 3b 0a 76 61 72 20 63 6f 6e 73 65 6e 74 44 69 61 6c 6f 67 48 74 6d 6c 3d 22 22 3b 0a 76 61 72 20 63 6f 6e 73 65 6e 74 44 69 61 6c 6f 67 3d 6e 75 6c 6c 3b 0a 76 61 72 20 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 7b 41 66 74 65 72 44 69 61 6c 6f 67 44 69 73 70 6c 61 79 65 64 3a 5b 5d 2c 42 65 66 6f 72 65 44 69 61 6c 6f 67 43 6c 6f 73 65 64 3a 5b 5d 2c 43 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 3a 5b 5d 2c 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 63 6c 6f 73 65 43 6f 6e 73 65 6e 74 44 69 61 6c 6f 67 28 29 7b 69 66 28 63 6f 6e 73 65 Data Ascii: TrackingConsentManager=(function(){var consentCookieName="sf-tracking-consent";var consentDialogHtml="";var consentDialog=null;var eventListeners={AfterDialogDisplayed:[],BeforeDialogClosed:[],ConsentChanged:[],};function closeConsentDialog(){if(conse
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 74 75 72 6e 3b 0a 7d 63 6c 6f 73 65 43 6f 6e 73 65 6e 74 44 69 61 6c 6f 67 28 29 3b 0a 63 6f 6e 73 65 6e 74 44 69 61 6c 6f 67 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 0a 63 6f 6e 73 65 6e 74 44 69 61 6c 6f 67 2e 69 6e 6e 65 72 48 54 4d 4c 3d 63 6f 6e 73 65 6e 74 44 69 61 6c 6f 67 48 74 6d 6c 3b 0a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 6f 6e 73 65 6e 74 44 69 61 6c 6f 67 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 29 3b 0a 76 61 72 20 73 63 72 69 70 74 73 3d 63 6f 6e 73 65 6e 74 44 69 61 6c 6f 67 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 0a 66 6f 72 28 76 61 72 20 69 Data Ascii: turn;}closeConsentDialog();consentDialog=document.createElement("div");consentDialog.innerHTML=consentDialogHtml;document.body.insertBefore(consentDialog,document.body.childNodes[0]);var scripts=consentDialog.getElementsByTagName("script");for(var i
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 6d 65 5d 3b 0a 69 66 28 21 63 6f 6c 6c 65 63 74 69 6f 6e 29 7b 72 65 74 75 72 6e 3b 0a 7d 66 6f 72 28 76 61 72 20 69 6e 64 65 78 3d 30 3b 0a 69 6e 64 65 78 3c 63 6f 6c 6c 65 63 74 69 6f 6e 2e 6c 65 6e 67 74 68 3b 0a 69 6e 64 65 78 2b 2b 29 7b 74 72 79 7b 63 6f 6c 6c 65 63 74 69 6f 6e 5b 69 6e 64 65 78 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 73 29 3b 0a 7d 63 61 74 63 68 28 65 72 72 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 54 72 61 63 6b 69 6e 67 43 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 72 3a 20 45 76 65 6e 74 20 6c 69 73 74 65 6e 65 72 20 6f 66 20 22 2b 65 76 65 6e 74 4e 61 6d 65 2b 22 20 65 76 65 6e 74 20 74 68 65 77 20 65 72 72 6f 72 3a 20 22 2b 65 72 72 29 3b 0a 7d 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: me];if(!collection){return;}for(var index=0;index<collection.length;index++){try{collection[index].apply(this,args);}catch(err){console.error("TrackingConsentManager: Event listener of "+eventName+" event thew error: "+err);}}}if(window.addEventList
2024-10-06 23:00:39 UTC	116	IN	Data Raw: 65 63 74 69 6f 6e 29 7b 72 65 74 75 72 6e 3b 0a 7d 76 61 72 20 69 6e 64 65 78 3d 63 6f 6c 6c 65 63 74 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 6c 69 73 74 65 6e 65 72 29 3b 0a 69 66 28 69 6e 64 65 78 3c 30 29 7b 72 65 74 75 72 6e 3b 0a 7d 63 6f 6c 6c 65 63 74 69 6f 6e 2e 73 70 6c 69 63 65 28 69 6e 64 65 78 2c 31 29 3b 0a 7d 7d 3b 0a 7d 29 28 29 3b 0a Data Ascii: ection){return;}var index=collection.indexOf(listener);if(index<0){return;}collection.splice(index,1);}};})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.7	49808	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	886	OUT	GET /ResourcePackages/Safenames/assets/dist/css/styles.css?vrs=115 HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:38 UTC	415	IN	HTTP/1.1 200 OK Etag: "5ef2355e3d1da1:0" Last-Modified: Tue, 09 Jul 2024 09:35:27 GMT Content-Type: text/css Content-Length: 63728 Cache-Control: max-age=571153, public Expires: Sun, 13 Oct 2024 13:39:51 GMT Date: Sun, 06 Oct 2024 23:00:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 14-48185043-48179884 2CNN RT(1728255637417 425) q(0 0 0 -1) r(0 0) U18
2024-10-06 23:00:38 UTC	1037	IN	Data Raw: 0a 42 4f 44 59 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 42 35 30 35 43 3b 0a 20 20 20 20 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 20 6c 69 73 74 3b 0a 20 20 20 20 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 20 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 7d 0a 0a 2e 74 65 78 74 2d 64 65 66 61 75 6c 74 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 42 35 30 35 43 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 74 65 78 74 2d 6c 69 67 68 74 62 6c 75 65 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a Data Ascii: BODY { color: #3B505C; counter-reset: list; text-rendering: optimizeLegibility; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale;}.text-default { color: #3B505C !important;}.text-lightblue { color:
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 2d 62 61 72 2d 63 79 62 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 32 30 64 65 67 2c 20 23 30 30 34 39 36 64 20 30 25 2c 20 23 30 30 61 65 65 66 20 31 30 30 25 29 3b 0a 20 20 20 20 2f 2a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 32 30 64 65 67 2c 20 23 66 31 65 38 37 31 20 30 25 2c 20 23 36 63 62 66 35 62 20 31 30 30 25 29 3b 2a 2f 0a 7d 0a 0a 2e 74 6f 70 2d 62 61 72 2d 64 65 66 61 75 6c 74 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 32 30 64 65 67 2c 20 23 30 30 34 39 36 64 20 30 25 2c 20 23 30 30 61 65 65 66 20 31 30 30 25 29 3b 0a 20 20 20 20 2f 2a 62 61 63 6b 67 72 6f 75 6e Data Ascii: -bar-cyber { background: linear-gradient(120deg, #00496d 0%, #00aeef 100%); /background: linear-gradient(120deg, #f1e871 0%, #6cbf5b 100%);/}.top-bar-default { background: linear-gradient(120deg, #00496d 0%, #00aeef 100%); /*backgroun
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 32 46 36 46 38 3b 0a 7d 0a 0a 23 70 72 6f 64 75 63 74 2d 68 69 67 68 6c 69 67 68 74 2d 62 61 72 20 7b 0a 7d 0a 0a 0a 23 61 62 6f 75 74 2d 73 61 66 65 6e 61 6d 65 73 20 7b 0a 7d 0a 0a 23 69 64 70 2d 66 65 61 74 75 72 65 73 20 7b 0a 7d 0a 0a 23 69 6e 64 75 73 74 72 79 2d 63 6c 69 65 6e 74 73 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 0a 23 66 69 76 65 2d 6b 65 79 2d 66 65 61 74 75 72 65 73 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 0a 23 63 61 6c 6c 74 6f 61 63 74 69 6f 6e 2d 62 6f 74 74 6f 6d 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 Data Ascii: kground-color: #F2F6F8;}#product-highlight-bar {}#about-safenames {}#idp-features {}#industry-clients { background-color: #ffffff;}#five-key-features { background-color: #ffffff;}#calltoaction-bottom { background: linear-gra
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 20 20 20 2e 73 6f 63 69 61 6c 2d 69 63 6f 6e 20 3e 20 61 3a 68 6f 76 65 72 20 3e 20 69 6d 67 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 74 65 72 3a 20 67 72 61 79 73 63 61 6c 65 28 30 25 29 3b 0a 20 20 20 20 7d 0a 0a 2e 70 61 67 65 2d 6c 69 6e 6b 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 39 46 45 33 3b 0a 7d 0a 0a 2e 62 67 2d 66 39 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 39 66 39 66 39 3b 0a 7d 0a 0a 2e 62 61 64 67 65 2d 6c 69 6e 6b 2d 2d 67 72 65 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 39 64 39 64 39 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 37 35 37 35 37 35 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 7d 0a 0a 2e 70 61 67 69 6e 61 74 Data Ascii: .social-icon > a:hover > img { filter: grayscale(0%); }.page-link { color: #009FE3;}.bg-f9 { background-color: #f9f9f9;}.badge-link--grey { background-color: #d9d9d9; color: #757575; font-weight: 300;}.paginat
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 20 72 67 62 61 28 35 30 2c 35 30 2c 39 33 2c 2e 32 35 29 2c 20 30 20 38 70 78 20 31 36 70 78 20 2d 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 29 2c 20 30 20 2d 36 70 78 20 31 36 70 78 20 2d 36 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 32 35 29 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 66 66 66 3b 0a 7d 0a 0a 2e 61 2d 61 72 72 6f 77 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 65 61 73 65 20 30 2e 33 73 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 65 61 73 65 20 30 2e 33 73 3b 0a 20 20 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 65 61 73 65 20 30 2e 33 73 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f Data Ascii: rgba(50,50,93,.25), 0 8px 16px -8px rgba(0,0,0,.3), 0 -6px 16px -6px rgba(0,0,0,.025); border: 1px solid #ffffff;}.a-arrow { -webkit-transition: all ease 0.3s; -moz-transition: all ease 0.3s; -o-transition: all ease 0.3s; transitio
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 20 20 20 7d 0a 7d 0a 0a 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 20 20 2e 66 6f 75 72 2d 62 6f 78 65 73 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 39 65 39 65 39 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 39 65 39 65 39 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 66 6f 75 72 2d 62 6f 78 65 73 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 Data Ascii: }}@media (min-width: 768px) { .four-boxes:nth-child(1) { border-right: 1px solid #e9e9e9; border-bottom: 1px solid #e9e9e9; border-left: 0px; border-top: 0px; } .four-boxes:nth-child(2) { border
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2f 69 6d 61 67 65 73 2f 64 65 66 61 75 6c 74 2d 73 6f 75 72 63 65 2f 64 65 66 61 75 6c 74 2d 61 6c 62 75 6d 2f 74 69 63 6b 2e 70 6e 67 22 29 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 35 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 2e 39 65 6d 3b 0a 7d 0a 0a 2e 74 69 63 6b 2d 6c 69 73 74 5f 5f 69 74 65 6d 2d 2d 63 69 72 63 6c 65 20 7b 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2f 69 6d 61 67 65 73 2f 64 65 66 61 75 6c 74 2d 73 6f 75 72 63 65 2f 64 65 66 61 75 6c 74 2d 61 6c 62 Data Ascii: list-style-image: url("/images/default-source/default-album/tick.png"); padding-left: 5px; margin-bottom: 0.9em;}.tick-list__item--circle { list-style-type: none !important; list-style-image: url("/images/default-source/default-alb
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 73 6e 2d 69 63 6f 6e 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 32 70 78 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 3b 0a 7d 0a 0a 2e 69 63 6f 6e 2d 62 75 62 62 6c 65 73 2d 6c 65 66 74 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 30 46 35 46 41 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 69 63 6f 6e 2d 62 75 62 62 6c 65 73 2d 72 69 67 68 74 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 62 61 Data Ascii: !important; border-radius: none !important;}.sn-icon { width: 42px; opacity: 0.7;}.icon-bubbles-left { position: relative; background-color: #E0F5FA; border-radius: 50%;}.icon-bubbles-right { position: relative; ba
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 61 72 64 2e 6c 31 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 34 70 78 20 73 6f 6c 69 64 20 23 32 39 37 66 62 38 3b 0a 7d 0a 0a 2e 68 6f 73 74 69 6e 67 2d 70 72 6f 64 75 63 74 2d 63 61 72 64 2e 6c 32 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 34 70 78 20 73 6f 6c 69 64 20 23 31 36 61 30 38 36 3b 0a 7d 0a 0a 2e 68 6f 73 74 69 6e 67 2d 70 72 6f 64 75 63 74 2d 63 61 72 64 2e 6c 33 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 34 70 78 20 73 6f 6c 69 64 20 23 66 33 39 63 31 31 3b 0a 7d 0a 0a 2e 68 6f 73 74 69 6e 67 2d 70 72 6f 64 75 63 74 2d 63 61 72 64 2e 6c 34 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 34 70 78 20 73 6f 6c 69 64 20 23 38 34 31 42 41 30 3b 0a 7d 0a 0a 2e 62 74 6e 2d 74 31 20 7b 0a 20 20 20 Data Ascii: ard.l1 { border-top: 4px solid #297fb8;}.hosting-product-card.l2 { border-top: 4px solid #16a086;}.hosting-product-card.l3 { border-top: 4px solid #f39c11;}.hosting-product-card.l4 { border-top: 4px solid #841BA0;}.btn-t1 {
2024-10-06 23:00:38 UTC	1452	IN	Data Raw: 65 6e 61 6d 65 73 2f 61 73 73 65 74 73 2f 64 69 73 74 2f 69 6d 61 67 65 73 2f 62 69 67 2d 6e 6f 64 65 73 2e 73 76 67 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 2c 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 70 78 20 30 70 78 2c 20 74 6f 70 20 2d 31 35 30 70 78 20 6c 65 66 74 20 2d 32 30 30 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 30 30 25 2c 20 31 30 30 30 70 78 3b 0a 7d 0a 0a 2e 62 67 2d 6d 61 70 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 30 64 65 67 2c 20 72 67 62 61 28 31 31 34 2c 31 38 39 2c 32 30 35 2c 30 2e 39 34 29 Data Ascii: enames/assets/dist/images/big-nodes.svg); background-repeat: no-repeat, no-repeat; background-position: 0px 0px, top -150px left -200px; background-size: 100%, 1000px;}.bg-map { background: linear-gradient(130deg, rgba(114,189,205,0.94)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.7	49811	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	1044	OUT	GET /ScriptResource.axd?d=okuX3IVIBwfJlfEQK32K3gK8Aiu7WHWoEQUncQG3Me4qBC8PqUDSanqR6Ahd3omIkuFu6Ev7Gv2ttmV6KR9lcUWQL5405Mpb6ScB6eSmJaIA5nR_TYEYPDplnGHHWqwmBd4glDQQ9ZyBTvYu1QllxjvyMDdS9h2GGbjDGaL0WIFEOosa2oyc6d64gO7VfnRz0&t=fffffffffa5b9a95 HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:39 UTC	238	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript; charset=utf-8 Expires: Sun, 05 Oct 2025 22:28:27 GMT Last-Modified: Sat, 05 Oct 2024 21:28:27 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319
2024-10-06 23:00:39 UTC	2228	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 69 6e 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 77 73 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6e 61 6c 79 74 69 63 Data Ascii: Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.googletagmanager.com https://.hotjar.com https://in.hotjar.com https://.hotjar.io wss://.hotjar.com https://.google-analytics.com https://.analytic
2024-10-06 23:00:39 UTC	438	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return nul
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 53 2e 65 78 74 65 6e 64 3d 53 2e 66 6e 2e 65 78 74 Data Ascii: hStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.ext
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 70 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 Data Ascii: r(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 46 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 49 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 57 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 46 29 2c 43 48 49 4c 44 3a 6e 65 77 20 Data Ascii: z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+""),U=new RegExp(M+"\|>"),X=new RegExp(F),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"\|[*])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+F),CHILD:new
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 21 72 26 26 28 54 28 65 29 2c 65 3d 65 7c 7c 43 2c 45 29 29 7b 69 66 28 31 31 21 3d 3d 70 26 26 28 75 3d 5a 2e 65 78 65 63 28 74 29 29 29 69 66 28 69 3d 75 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 70 29 7b 69 66 28 21 28 61 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 61 2e 69 64 3d 3d 3d 69 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 61 29 2c 6e 7d 65 6c 73 65 20 69 66 28 Data Ascii: u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof t\|\|!t\|\|1!==p&&9!==p&&11!==p)return n;if(!r&&(T(e),e=e\|\|C,E)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.getElementById(i)))return n;if(a.id===i)return n.push(a),n}else if(
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 65 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 74 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 74 29 26 26 65 2e 74 79 70 65 3d 3d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 74 29 7b 72 65 74 75 72 Data Ascii: ng)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.type===t}}function he(n){return function(e){var t=e.nodeName.toLowerCase();return("input"===t\|\|"button"===t)&&e.type===n}}function ge(t){retur
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 64 2e 67 65 74 42 79 49 64 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 53 2c 21 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 53 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 42 79 49 64 3f 28 62 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 Data Ascii: eComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=ce(function(e){return a.appendChild(e).id=S,!C.getElementsByName\|\|!C.getElementsByName(S).length}),d.getById?(b.filter.ID=function(e){v
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4d 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 52 2b 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 53 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e Data Ascii: pture=''><option selected=''></option></select>",e.querySelectorAll("[msallowcapture^='']").length&&v.push("[^$]="+M+"(?:''\|\"\")"),e.querySelectorAll("[selected]").length\|\|v.push("\\["+M+"*(?:value\|"+R+")"),e.querySelectorAll("[id~="+S+"-]").length\|\|v.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.7	49809	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	1044	OUT	GET /ScriptResource.axd?d=EydukmxBmDstn7gSYzQESPK2TwG5hv2uqB2Gdl8pAyFIQLWmhmE5_O4YUNZloDdZi8iaO67pF9ggYX5lq9QXH4DU3H3ovw67x2l8oxk1qthswYwdyAZkJyBGs2YdcflDo0Xk-NiDQkpkWzN3McFywnx1bxXHhbpmNH9AuSVoTpA5RdJ4oVevVdYcukTyGML_0&t=fffffffffa5b9a95 HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:39 UTC	238	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript; charset=utf-8 Expires: Sun, 05 Oct 2025 22:28:27 GMT Last-Modified: Sat, 05 Oct 2024 21:28:27 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319
2024-10-06 23:00:39 UTC	2227	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 69 6e 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 77 73 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6e 61 6c 79 74 69 63 Data Ascii: Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.googletagmanager.com https://.hotjar.com https://in.hotjar.com https://.hotjar.io wss://.hotjar.com https://.google-analytics.com https://.analytic
2024-10-06 23:00:39 UTC	439	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 31 2e 32 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 20 3d 3d 3d 20 76 6f 69 64 20 30 20 26 26 20 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 20 3d 20 21 30 29 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 6e 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 20 7b 20 76 61 72 20 72 20 3d 20 74 2e 63 6f 6e 73 6f 6c 65 3b 20 69 5b 6e 5d 20 7c 7c 20 28 69 5b 6e 5d 20 3d 20 21 30 2c 20 65 2e 6d 69 Data Ascii: /! jQuery Migrate v1.2.1 \| (c) 2005, 2013 jQuery Foundation, Inc. and other contributors \| jquery.org/license /jQuery.migrateMute === void 0 && (jQuery.migrateMute = !0), function (e, t, n) { function r(n) { var r = t.console; i[n] \|\| (i[n] = !0, e.mi
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 20 61 2c 20 7b 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 2c 20 65 6e 75 6d 65 72 61 62 6c 65 3a 20 21 30 2c 20 67 65 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 72 65 74 75 72 6e 20 72 28 6f 29 2c 20 69 20 7d 2c 20 73 65 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 20 72 28 6f 29 2c 20 69 20 3d 20 65 20 7d 20 7d 29 2c 20 6e 20 7d 20 63 61 74 63 68 20 28 73 29 20 7b 20 7d 20 65 2e 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 42 72 6f 6b 65 6e 20 3d 20 21 30 2c 20 74 5b 61 5d 20 3d 20 69 20 7d 20 76 61 72 20 69 20 3d 20 7b 7d 3b 20 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 20 3d 20 5b 5d 2c 20 21 65 2e 6d 69 67 72 61 74 65 4d 75 74 Data Ascii: return Object.defineProperty(t, a, { configurable: !0, enumerable: !0, get: function () { return r(o), i }, set: function (e) { r(o), i = e } }), n } catch (s) { } e._definePropertyBroken = !0, t[a] = i } var i = {}; e.migrateWarnings = [], !e.migrateMut
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 74 69 6f 6e 20 28 74 2c 20 72 29 20 7b 20 76 61 72 20 61 2c 20 69 20 3d 20 65 2e 70 72 6f 70 28 74 2c 20 72 29 3b 20 72 65 74 75 72 6e 20 69 20 3d 3d 3d 20 21 30 20 7c 7c 20 22 62 6f 6f 6c 65 61 6e 22 20 21 3d 20 74 79 70 65 6f 66 20 69 20 26 26 20 28 61 20 3d 20 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 72 29 29 20 26 26 20 61 2e 6e 6f 64 65 56 61 6c 75 65 20 21 3d 3d 20 21 31 20 3f 20 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3a 20 6e 20 7d 2c 20 73 65 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 6e 2c 20 72 29 20 7b 20 76 61 72 20 61 3b 20 72 65 74 75 72 6e 20 6e 20 3d 3d 3d 20 21 31 20 3f 20 65 2e 72 65 6d 6f 76 65 41 74 74 72 28 74 2c 20 72 29 20 3a 20 28 61 20 3d 20 65 2e 70 72 6f 70 46 69 78 5b 72 5d 20 7c 7c 20 72 2c 20 61 Data Ascii: tion (t, r) { var a, i = e.prop(t, r); return i === !0 \|\| "boolean" != typeof i && (a = t.getAttributeNode(r)) && a.nodeValue !== !1 ? r.toLowerCase() : n }, set: function (t, n, r) { var a; return n === !1 ? e.removeAttr(t, r) : (a = e.propFix[r] \|\| r, a
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 20 3f 20 76 2e 63 61 6c 6c 28 74 68 69 73 2c 20 65 2e 70 61 72 73 65 48 54 4d 4c 28 69 5b 32 5d 2c 20 6e 2c 20 21 30 29 2c 20 6e 2c 20 61 29 20 3a 20 76 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 20 7d 2c 20 65 2e 66 6e 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 65 2e 66 6e 2c 20 65 2e 70 61 72 73 65 4a 53 4f 4e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 20 72 65 74 75 72 6e 20 65 20 7c 7c 20 6e 75 6c 6c 20 3d 3d 3d 20 65 20 3f 20 6d 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 20 3a 20 28 72 28 22 6a 51 75 65 72 79 2e 70 61 72 73 65 4a 53 4f 4e 20 72 65 71 75 69 72 65 73 20 61 20 76 61 6c 69 64 20 4a 53 4f 4e 20 73 74 72 69 6e 67 22 29 2c 20 6e 75 6c 6c 29 20 7d 2c 20 65 2e 75 61 4d 61 Data Ascii: ? v.call(this, e.parseHTML(i[2], n, !0), n, a) : v.apply(this, arguments) }, e.fn.init.prototype = e.fn, e.parseJSON = function (e) { return e \|\| null === e ? m.apply(this, arguments) : (r("jQuery.parseJSON requires a valid JSON string"), null) }, e.uaMa
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 6f 2c 20 74 29 2c 20 61 20 21 3d 3d 20 6e 20 26 26 20 61 20 21 3d 3d 20 69 20 7c 7c 20 69 20 3d 3d 3d 20 6e 29 20 3f 20 62 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 20 3a 20 28 72 28 22 55 73 65 20 6f 66 20 6a 51 75 65 72 79 2e 66 6e 2e 64 61 74 61 28 27 65 76 65 6e 74 73 27 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 20 69 29 20 7d 3b 20 76 61 72 20 6a 20 3d 20 2f 5c 2f 28 6a 61 76 61 7c 65 63 6d 61 29 73 63 72 69 70 74 2f 69 2c 20 77 20 3d 20 65 2e 66 6e 2e 61 6e 64 53 65 6c 66 20 7c 7c 20 65 2e 66 6e 2e 61 64 64 42 61 63 6b 3b 20 65 2e 66 6e 2e 61 6e 64 53 65 6c 66 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 72 65 74 75 72 6e 20 72 28 22 6a 51 75 65 72 79 2e 66 6e 2e 61 6e 64 53 65 6c 66 28 29 20 72 65 70 6c Data Ascii: o, t), a !== n && a !== i \|\| i === n) ? b.apply(this, arguments) : (r("Use of jQuery.fn.data('events') is deprecated"), i) }; var j = /\/(java\|ecma)script/i, w = e.fn.andSelf \|\| e.fn.addBack; e.fn.andSelf = function () { return r("jQuery.fn.andSelf() repl
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 26 26 20 65 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2e 75 6e 73 68 69 66 74 28 22 61 74 74 72 43 68 61 6e 67 65 22 2c 20 22 61 74 74 72 4e 61 6d 65 22 2c 20 22 72 65 6c 61 74 65 64 4e 6f 64 65 22 2c 20 22 73 72 63 45 6c 65 6d 65 6e 74 22 29 2c 20 65 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 20 26 26 20 61 28 65 2e 65 76 65 6e 74 2c 20 22 68 61 6e 64 6c 65 22 2c 20 65 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 2c 20 22 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 68 61 6e 64 6c 65 20 69 73 20 75 6e 64 6f 63 75 6d 65 6e 74 65 64 20 61 6e 64 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 20 65 2e 65 76 65 6e 74 2e 61 64 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 6e 2c 20 61 2c 20 69 29 20 7b 20 65 20 21 3d 3d 20 64 6f 63 75 6d 65 6e 74 20 26 26 20 43 Data Ascii: && e.event.props.unshift("attrChange", "attrName", "relatedNode", "srcElement"), e.event.dispatch && a(e.event, "handle", e.event.dispatch, "jQuery.event.handle is undocumented and deprecated"), e.event.add = function (e, t, n, a, i) { e !== document && C
2024-10-06 23:00:39 UTC	572	IN	Data Raw: 73 65 6c 65 63 74 6f 72 20 7c 7c 20 22 2a 2a 22 2c 20 6e 29 2c 20 74 68 69 73 29 20 7d 2c 20 65 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 6e 2c 20 61 29 20 7b 20 72 65 74 75 72 6e 20 6e 20 7c 7c 20 43 2e 74 65 73 74 28 65 29 20 7c 7c 20 72 28 22 47 6c 6f 62 61 6c 20 65 76 65 6e 74 73 20 61 72 65 20 75 6e 64 6f 63 75 6d 65 6e 74 65 64 20 61 6e 64 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 20 6b 2e 63 61 6c 6c 28 74 68 69 73 2c 20 65 2c 20 74 2c 20 6e 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2c 20 61 29 20 7d 2c 20 65 2e 65 61 63 68 28 53 2e 73 70 6c 69 74 28 22 7c 22 29 2c 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 6e 29 20 7b 20 65 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 6e 5d 20 3d 20 7b 20 73 65 74 Data Ascii: selector \|\| "**", n), this) }, e.event.trigger = function (e, t, n, a) { return n \|\| C.test(e) \|\| r("Global events are undocumented and deprecated"), k.call(this, e, t, n \|\| document, a) }, e.each(S.split("\|"), function (t, n) { e.event.special[n] = { set

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:38 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 03c3f781-101e-000b-56fe-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230038Z-1657d5bbd48brl8we3nu8cxwgn00000002vg00000000t96k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:38 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:38 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230038Z-1657d5bbd4824mj9d6vp65b6n400000002xg000000003dmw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:39 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:38 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cb759915-201e-003f-5f03-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230038Z-1657d5bbd48jwrqbupe3ktsx9w00000002x0000000005nb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:39 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:38 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76165599-601e-000d-1a02-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230038Z-1657d5bbd48p2j6x2quer0q02800000002y0000000001tha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:39 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:38 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:38 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 84e7aa3f-c01e-008e-74ff-167381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230038Z-1657d5bbd48q6t9vvmrkd293mg00000002p0000000008g94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:39 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.7	49818	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:39 UTC	865	OUT	GET /ResourcePackages/Safenames/assets/dist/js/bootstrap.js HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:39 UTC	427	IN	HTTP/1.1 200 OK Etag: "09449e727fd51:0" Last-Modified: Thu, 10 Oct 2019 13:53:12 GMT Content-Type: application/javascript Content-Length: 87556 Cache-Control: max-age=597768, public Expires: Sun, 13 Oct 2024 21:03:26 GMT Date: Sun, 06 Oct 2024 23:00:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 2-15651037-15625775 2CNN RT(1728255638257 209) q(0 0 0 -1) r(0 0) U18
2024-10-06 23:00:39 UTC	1025	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 2c 66 61 63 74 6f 72 79 29 7b 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 3d 27 6f 62 6a 65 63 74 27 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 66 61 63 74 6f 72 79 28 65 78 70 6f 72 74 73 2c 72 65 71 75 69 72 65 28 27 6a 71 75 65 72 79 27 29 2c 72 65 71 75 69 72 65 28 27 70 6f 70 70 65 72 2e 6a 73 27 29 29 3a 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 27 66 75 6e 63 74 69 6f 6e 27 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 27 65 78 70 6f 72 74 73 27 2c 27 6a 71 75 65 72 79 27 2c 27 70 6f 70 70 65 72 2e 6a 73 27 5d 2c 66 61 63 74 6f 72 79 29 3a 28 67 6c 6f 62 61 6c 3d 67 6c 6f 62 61 6c 7c 7c 73 65 6c 66 2c 66 61 63 74 6f 72 79 28 67 Data Ascii: (function(global,factory){typeof exports==='object'&&typeof module!=='undefined'?factory(exports,require('jquery'),require('popper.js')):typeof define==='function'&&define.amd?define(['exports','jquery','popper.js'],factory):(global=global\|\|self,factory(g
2024-10-06 23:00:39 UTC	59	IN	Data Raw: 69 6e 65 50 72 6f 70 65 72 74 79 28 6f 62 6a 2c 6b 65 79 2c 7b 76 61 6c 75 65 3a 76 61 6c 75 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 74 72 75 65 2c 63 6f 6e 66 69 67 75 72 61 62 Data Ascii: ineProperty(obj,key,{value:value,enumerable:true,configurab
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 6c 65 3a 74 72 75 65 2c 77 72 69 74 61 62 6c 65 3a 74 72 75 65 7d 29 3b 7d 65 6c 73 65 7b 6f 62 6a 5b 6b 65 79 5d 3d 76 61 6c 75 65 3b 7d 0a 72 65 74 75 72 6e 20 6f 62 6a 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 6f 62 6a 65 63 74 53 70 72 65 61 64 28 74 61 72 67 65 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 31 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 73 6f 75 72 63 65 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 21 3d 6e 75 6c 6c 3f 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3a 7b 7d 3b 76 61 72 20 6f 77 6e 4b 65 79 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 6f 75 72 63 65 29 3b 69 66 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3d 3d 3d 27 66 75 6e 63 74 69 6f 6e Data Ascii: le:true,writable:true});}else{obj[key]=value;}return obj;}function _objectSpread(target){for(var i=1;i<arguments.length;i++){var source=arguments[i]!=null?arguments[i]:{};var ownKeys=Object.keys(source);if(typeof Object.getOwnPropertySymbols==='function
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 65 6e 74 28 29 3b 7d 0a 76 61 72 20 55 74 69 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 27 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 27 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 49 44 28 70 72 65 66 69 78 29 7b 64 6f 7b 70 72 65 66 69 78 2b 3d 7e 7e 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 4d 41 58 5f 55 49 44 29 3b 7d 77 68 69 6c 65 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 70 72 65 66 69 78 29 29 3b 72 65 74 75 72 6e 20 70 72 65 66 69 78 3b 7d 2c 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 65 6e 74 29 7b 76 61 72 20 73 65 6c 65 63 74 6f 72 3d 65 6c 65 Data Ascii: ent();}var Util={TRANSITION_END:'bsTransitionEnd',getUID:function getUID(prefix){do{prefix+=~~(Math.random()*MAX_UID);}while(document.getElementById(prefix));return prefix;},getSelectorFromElement:function getSelectorFromElement(element){var selector=ele
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 4e 61 6d 65 2c 63 6f 6e 66 69 67 2c 63 6f 6e 66 69 67 54 79 70 65 73 29 7b 66 6f 72 28 76 61 72 20 70 72 6f 70 65 72 74 79 20 69 6e 20 63 6f 6e 66 69 67 54 79 70 65 73 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 6f 6e 66 69 67 54 79 70 65 73 2c 70 72 6f 70 65 72 74 79 29 29 7b 76 61 72 20 65 78 70 65 63 74 65 64 54 79 70 65 73 3d 63 6f 6e 66 69 67 54 79 70 65 73 5b 70 72 6f 70 65 72 74 79 5d 3b 76 61 72 20 76 61 6c 75 65 3d 63 6f 6e 66 69 67 5b 70 72 6f 70 65 72 74 79 5d 3b 76 61 72 20 76 61 6c 75 65 54 79 70 65 3d 76 61 6c 75 65 26 26 55 74 69 6c 2e 69 73 45 6c 65 6d 65 6e 74 28 76 61 6c 75 65 29 3f 27 65 6c 65 6d 65 6e 74 27 3a 74 6f 54 79 70 65 28 76 61 6c 75 65 29 3b Data Ascii: Name,config,configTypes){for(var property in configTypes){if(Object.prototype.hasOwnProperty.call(configTypes,property)){var expectedTypes=configTypes[property];var value=config[property];var valueType=value&&Util.isElement(value)?'element':toType(value);
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 72 6f 6f 74 45 6c 65 6d 65 6e 74 29 3b 69 66 28 63 75 73 74 6f 6d 45 76 65 6e 74 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 72 65 74 75 72 6e 3b 7d 0a 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 72 6f 6f 74 45 6c 65 6d 65 6e 74 29 3b 7d 3b 5f 70 72 6f 74 6f 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 20 64 69 73 70 6f 73 65 28 29 7b 24 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 44 41 54 41 5f 4b 45 59 29 3b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 3b 7d 3b 5f 70 72 6f 74 6f 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 Data Ascii: is._triggerCloseEvent(rootElement);if(customEvent.isDefaultPrevented()){return;}this._removeElement(rootElement);};_proto.dispose=function dispose(){$.removeData(this._element,DATA_KEY);this._element=null;};_proto._getRootElement=function _getRootElement
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 65 6e 74 29 7b 69 66 28 65 76 65 6e 74 29 7b 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 7d 0a 61 6c 65 72 74 49 6e 73 74 61 6e 63 65 2e 63 6c 6f 73 65 28 74 68 69 73 29 3b 7d 3b 7d 3b 5f 63 72 65 61 74 65 43 6c 61 73 73 28 41 6c 65 72 74 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 28 29 7b 72 65 74 75 72 6e 20 56 45 52 53 49 4f 4e 3b 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 41 6c 65 72 74 3b 7d 28 29 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 45 76 65 6e 74 2e 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 2c 53 65 6c 65 63 74 6f 72 2e 44 49 53 4d 49 53 53 2c 41 6c 65 72 74 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 41 6c 65 72 74 28 29 29 29 3b 24 Data Ascii: ent){if(event){event.preventDefault();}alertInstance.close(this);};};_createClass(Alert,null,[{key:"VERSION",get:function get(){return VERSION;}}]);return Alert;}();$(document).on(Event.CLICK_DATA_API,Selector.DISMISS,Alert._handleDismiss(new Alert()));$
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 53 65 6c 65 63 74 6f 72 24 31 2e 41 43 54 49 56 45 29 3b 69 66 28 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 7b 24 28 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 6c 61 73 73 4e 61 6d 65 24 31 2e 41 43 54 49 56 45 29 3b 7d 7d 7d 0a 69 66 28 74 72 69 67 67 65 72 43 68 61 6e 67 65 45 76 65 6e 74 29 7b 69 66 28 69 6e 70 75 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 27 64 69 73 61 62 6c 65 64 27 29 7c 7c 72 6f 6f 74 45 6c 65 6d 65 6e 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 27 64 69 73 61 62 6c 65 64 27 29 7c 7c 69 6e 70 75 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 27 64 69 73 61 62 6c 65 64 27 29 7c 7c 72 6f 6f 74 45 6c 65 6d 65 6e 74 Data Ascii: ement.querySelector(Selector$1.ACTIVE);if(activeElement){$(activeElement).removeClass(ClassName$1.ACTIVE);}}}if(triggerChangeEvent){if(input.hasAttribute('disabled')\|\|rootElement.hasAttribute('disabled')\|\|input.classList.contains('disabled')\|\|rootElement
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 3b 24 28 62 75 74 74 6f 6e 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 43 6c 61 73 73 4e 61 6d 65 24 31 2e 46 4f 43 55 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 65 76 65 6e 74 2e 74 79 70 65 29 29 3b 7d 29 3b 24 2e 66 6e 5b 4e 41 4d 45 24 31 5d 3d 42 75 74 74 6f 6e 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3b 24 2e 66 6e 5b 4e 41 4d 45 24 31 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 42 75 74 74 6f 6e 3b 24 2e 66 6e 5b 4e 41 4d 45 24 31 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 24 2e 66 6e 5b 4e 41 4d 45 24 31 5d 3d 4a 51 55 45 52 59 5f 4e 4f 5f 43 4f 4e 46 4c 49 43 54 24 31 3b 72 65 74 75 72 6e 20 42 75 74 74 6f 6e 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3b 7d 3b 76 61 72 20 4e 41 4d Data Ascii: ;$(button).toggleClass(ClassName$1.FOCUS,/^focus(in)?$/.test(event.type));});$.fn[NAME$1]=Button._jQueryInterface;$.fn[NAME$1].Constructor=Button;$.fn[NAME$1].noConflict=function(){$.fn[NAME$1]=JQUERY_NO_CONFLICT$1;return Button._jQueryInterface;};var NAM
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 56 3a 27 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 27 2c 49 54 45 4d 3a 27 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 27 2c 50 4f 49 4e 54 45 52 5f 45 56 45 4e 54 3a 27 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 27 7d 3b 76 61 72 20 53 65 6c 65 63 74 6f 72 24 32 3d 7b 41 43 54 49 56 45 3a 27 2e 61 63 74 69 76 65 27 2c 41 43 54 49 56 45 5f 49 54 45 4d 3a 27 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 27 2c 49 54 45 4d 3a 27 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 27 2c 49 54 45 4d 5f 49 4d 47 3a 27 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 20 69 6d 67 27 2c 4e 45 58 54 5f 50 52 45 56 3a 27 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 2c 20 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 27 2c 49 4e 44 49 43 41 Data Ascii: V:'carousel-item-prev',ITEM:'carousel-item',POINTER_EVENT:'pointer-event'};var Selector$2={ACTIVE:'.active',ACTIVE_ITEM:'.active.carousel-item',ITEM:'.carousel-item',ITEM_IMG:'.carousel-item img',NEXT_PREV:'.carousel-item-next, .carousel-item-prev',INDICA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.7	49822	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:39 UTC	862	OUT	GET /ResourcePackages/Safenames/assets/dist/js/custom.js HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:39 UTC	426	IN	HTTP/1.1 200 OK Etag: "083661b727fd51:0" Last-Modified: Thu, 10 Oct 2019 13:53:34 GMT Content-Type: application/javascript Content-Length: 448 Cache-Control: max-age=571153, public Expires: Sun, 13 Oct 2024 13:39:51 GMT Date: Sun, 06 Oct 2024 23:00:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 1-14747180-14726665 2CNN RT(1728255638420 201) q(0 0 0 -1) r(0 0) U18
2024-10-06 23:00:39 UTC	448	IN	Data Raw: 24 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 27 6e 61 76 27 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 73 63 72 6f 6c 6c 65 64 27 2c 24 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3e 31 34 30 29 3b 7d 29 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 69 78 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 22 2e 6e 61 76 62 61 72 2d 6e 61 76 22 29 2e 63 73 73 28 22 6d 61 78 2d 68 65 69 67 68 74 22 2c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2d 31 35 30 29 3b 7d 0a 66 69 78 48 65 69 67 68 74 28 29 3b 24 28 77 69 6e 64 6f 77 29 2e 72 65 73 69 7a 65 28 66 75 6e 63 74 Data Ascii: $(window).scroll(function(){$('nav').toggleClass('scrolled',$(this).scrollTop()>140);});$(document).ready(function(){var fixHeight=function(){$(".navbar-nav").css("max-height",document.documentElement.clientHeight-150);}fixHeight();$(window).resize(funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.7	49825	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:39 UTC	866	OUT	GET /ResourcePackages/Safenames/assets/dist/js/popper.min.js HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:39 UTC	428	IN	HTTP/1.1 200 OK Etag: "0ea5c6a6b7fd51:0" Last-Modified: Thu, 10 Oct 2019 13:05:40 GMT Content-Type: application/javascript Content-Length: 20359 Cache-Control: max-age=571153, public Expires: Sun, 13 Oct 2024 13:39:51 GMT Date: Sun, 06 Oct 2024 23:00:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 1-14747181-14726663 2CNN RT(1728255638461 198) q(0 0 0 -1) r(0 0) U18
2024-10-06 23:00:39 UTC	1024	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 65 2e 50 6f 70 70 65 72 3d 74 28 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 27 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 27 3d 3d 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 Data Ascii: (function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t
2024-10-06 23:00:39 UTC	59	IN	Data Raw: 74 3a 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 72 Data Ascii: t:document.documentElement}function s(e){var t=e.nodeName;r
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 65 74 75 72 6e 27 42 4f 44 59 27 21 3d 3d 74 26 26 28 27 48 54 4d 4c 27 3d 3d 3d 74 7c 7c 70 28 65 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 29 3d 3d 3d 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 3a 64 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 65 7c 7c 21 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 74 7c 7c 21 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 76 61 72 20 6f 3d 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 26 4e 6f 64 65 2e 44 4f 43 55 4d 45 4e 54 5f 50 4f 53 49 54 Data Ascii: eturn'BODY'!==t&&('HTML'===t\|\|p(e.firstElementChild)===e)}function d(e){return null===e.parentNode?e:d(e.parentNode)}function a(e,t){if(!e\|\|!e.nodeType\|\|!t\|\|!t.nodeType)return document.documentElement;var o=e.compareDocumentPosition(t)&Node.DOCUMENT_POSIT
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 2c 65 2c 7b 72 69 67 68 74 3a 65 2e 6c 65 66 74 2b 65 2e 77 69 64 74 68 2c 62 6f 74 74 6f 6d 3a 65 2e 74 6f 70 2b 65 2e 68 65 69 67 68 74 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 6f 3d 7b 7d 3b 74 72 79 7b 69 66 28 72 28 31 30 29 29 7b 6f 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 76 61 72 20 6e 3d 6c 28 65 2c 27 74 6f 70 27 29 2c 69 3d 6c 28 65 2c 27 6c 65 66 74 27 29 3b 6f 2e 74 6f 70 2b 3d 6e 2c 6f 2e 6c 65 66 74 2b 3d 69 2c 6f 2e 62 6f 74 74 6f 6d 2b 3d 6e 2c 6f 2e 72 69 67 68 74 2b 3d 69 7d 65 6c 73 65 20 6f 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 70 3d 7b 6c 65 66 74 3a 6f 2e 6c 65 66 74 2c 74 6f 70 3a 6f 2e Data Ascii: ,e,{right:e.left+e.width,bottom:e.top+e.height})}function u(e){var o={};try{if(r(10)){o=e.getBoundingClientRect();var n=l(e,'top'),i=l(e,'left');o.top+=n,o.left+=i,o.bottom+=n,o.right+=i}else o=e.getBoundingClientRect()}catch(t){}var p={left:o.left,top:o.
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 29 7b 76 61 72 20 6e 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 72 65 74 75 72 6e 27 42 4f 44 59 27 3d 3d 3d 6e 7c 7c 27 48 54 4d 4c 27 3d 3d 3d 6e 3f 21 31 3a 27 66 69 78 65 64 27 3d 3d 3d 74 28 65 2c 27 70 6f 73 69 74 69 6f 6e 27 29 7c 7c 77 28 6f 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 72 28 29 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 66 6f 72 28 76 61 72 20 6f 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 6f 26 26 27 6e 6f 6e 65 27 3d 3d 3d 74 28 6f 2c 27 74 72 61 6e 73 66 6f 72 6d 27 29 3b 29 6f 3d 6f 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 6f 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 Data Ascii: ){var n=e.nodeName;return'BODY'===n\|\|'HTML'===n?!1:'fixed'===t(e,'position')\|\|w(o(e))}function E(e){if(!e\|\|!e.parentElement\|\|r())return document.documentElement;for(var o=e.parentElement;o&&'none'===t(o,'transform');)o=o.parentElement;return o\|\|document.d
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 69 67 68 74 7d 29 2c 6c 3d 30 3c 61 2e 6c 65 6e 67 74 68 3f 61 5b 30 5d 2e 6b 65 79 3a 64 5b 30 5d 2e 6b 65 79 2c 66 3d 65 2e 73 70 6c 69 74 28 27 2d 27 29 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 2b 28 66 3f 27 2d 27 2b 66 3a 27 27 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 74 2c 6f 29 7b 76 61 72 20 6e 3d 33 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 33 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 33 5d 3a 6e 75 6c 6c 2c 69 3d 6e 3f 45 28 74 29 3a 61 28 74 2c 6f 29 3b 72 65 74 75 72 6e 20 62 28 6f 2c 69 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 76 61 72 20 74 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 2c 6f 3d 70 61 72 73 65 46 6c 6f 61 74 28 74 2e 6d 61 72 67 69 6e Data Ascii: ight}),l=0<a.length?a[0].key:d[0].key,f=e.split('-')[1];return l+(f?'-'+f:'')}function L(e,t,o){var n=3<arguments.length&&void 0!==arguments[3]?arguments[3]:null,i=n?E(t):a(t,o);return b(o,i,n)}function S(e){var t=getComputedStyle(e),o=parseFloat(t.margin
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 73 3a 7b 7d 7d 3b 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 4c 28 74 68 69 73 2e 73 74 61 74 65 2c 74 68 69 73 2e 70 6f 70 70 65 72 2c 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 29 2c 65 2e 70 6c 61 63 65 6d 65 6e 74 3d 4f 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 70 6f 70 70 65 72 2c 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 70 61 64 Data Ascii: s:{}};e.offsets.reference=L(this.state,this.popper,this.reference,this.options.positionFixed),e.placement=O(this.options.placement,e.offsets.reference,this.popper,this.reference,this.options.modifiers.flip.boundariesElement,this.options.modifiers.flip.pad
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 4d 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c 69 29 2c 69 2e 70 75 73 68 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6f 2c 69 29 7b 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 3d 69 2c 41 28 65 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 73 69 7a 65 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 4d 28 72 2c 27 73 63 72 6f 6c 6c 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 6f 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 29 2c 6f 2e 73 63 72 6f 6c 6c 45 Data Ascii: defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|M(n(p.parentNode),t,o,i),i.push(p)}function F(e,t,o,i){o.updateBound=i,A(e).addEventListener('resize',o.updateBound,{passive:!0});var r=n(e);return M(r,'scroll',o.updateBound,o.scrollParents),o.scrollE
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 56 28 65 29 7b 76 61 72 20 74 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 6f 3d 6d 65 2e 69 6e 64 65 78 4f 66 28 65 29 2c 6e 3d 6d 65 2e 73 6c 69 63 65 28 6f 2b 31 29 2e 63 6f 6e 63 61 74 28 6d 65 2e 73 6c 69 63 65 28 30 2c 6f 29 29 3b 72 65 74 75 72 6e 20 74 3f 6e 2e 72 65 76 65 72 73 65 28 29 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 65 2c 74 2c 6f 2c 6e 29 7b 76 61 72 20 69 3d 65 2e 6d 61 74 63 68 28 2f 28 28 3f 3a 5c 2d 7c 5c 2b 29 3f 5c 64 2a 5c 2e 3f 5c 64 2a 29 28 2e 2a 29 2f 29 2c 72 3d 2b 69 5b 31 5d 2c 70 3d 69 5b 32 5d 3b 69 66 28 21 72 29 72 65 74 75 72 6e 20 65 3b 69 66 28 30 3d 3d 3d 70 2e Data Ascii: function V(e){var t=1<arguments.length&&void 0!==arguments[1]&&arguments[1],o=me.indexOf(e),n=me.slice(o+1).concat(me.slice(0,o));return t?n.reverse():n}function z(e,t,o,n){var i=e.match(/((?:\-\|\+)?\d\.?\d)(.*)/),r=+i[1],p=i[2];if(!r)return e;if(0===p.
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 64 29 2c 27 6c 65 66 74 27 3d 3d 3d 64 3f 28 70 2e 74 6f 70 2b 3d 6f 5b 30 5d 2c 70 2e 6c 65 66 74 2d 3d 6f 5b 31 5d 29 3a 27 72 69 67 68 74 27 3d 3d 3d 64 3f 28 70 2e 74 6f 70 2b 3d 6f 5b 30 5d 2c 70 2e 6c 65 66 74 2b 3d 6f 5b 31 5d 29 3a 27 74 6f 70 27 3d 3d 3d 64 3f 28 70 2e 6c 65 66 74 2b 3d 6f 5b 30 5d 2c 70 2e 74 6f 70 2d 3d 6f 5b 31 5d 29 3a 27 62 6f 74 74 6f 6d 27 3d 3d 3d 64 26 26 28 70 2e 6c 65 66 74 2b 3d 6f 5b 30 5d 2c 70 2e 74 6f 70 2b 3d 6f 5b 31 5d 29 2c 65 2e 70 6f 70 70 65 72 3d 70 2c 65 7d 66 6f 72 28 76 61 72 20 51 3d 4d 61 74 68 2e 6d 69 6e 2c 5a 3d 4d 61 74 68 2e 72 6f 75 6e 64 2c 24 3d 4d 61 74 68 2e 66 6c 6f 6f 72 2c 4a 3d 4d 61 74 68 2e 6d 61 78 2c 65 65 3d 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f Data Ascii: d),'left'===d?(p.top+=o[0],p.left-=o[1]):'right'===d?(p.top+=o[0],p.left+=o[1]):'top'===d?(p.left+=o[0],p.top-=o[1]):'bottom'===d&&(p.left+=o[0],p.top+=o[1]),e.popper=p,e}for(var Q=Math.min,Z=Math.round,$=Math.floor,J=Math.max,ee='undefined'!=typeof windo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.7	49826	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:39 UTC	860	OUT	GET /ResourcePackages/Safenames/assets/dist/js/core.js HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:39 UTC	428	IN	HTTP/1.1 200 OK Etag: "0c3177727fd51:0" Last-Modified: Thu, 10 Oct 2019 13:56:08 GMT Content-Type: application/javascript Content-Length: 14280 Cache-Control: max-age=625715, public Expires: Mon, 14 Oct 2024 04:49:13 GMT Date: Sun, 06 Oct 2024 23:00:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 11-21477563-21476671 2CNN RT(1728255638474 215) q(0 0 0 -1) r(0 0) U18
2024-10-06 23:00:39 UTC	1024	IN	Data Raw: ef bb bf 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 54 79 70 65 77 72 69 74 65 72 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 54 79 70 65 77 72 69 74 65 72 3d 74 28 29 3a 65 2e 54 79 70 65 77 72 69 74 65 72 3d 74 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 2c 28 66 75 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("Typewriter",[],t):"object"==typeof exports?exports.Typewriter=t():e.Typewriter=t()}("undefined"!=typeof self?self:this,(fu
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 6e 2e 64 28 74 2c 22 61 22 2c 74 29 2c 74 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 6e 2e 70 3d 22 22 2c 6e 28 6e 2e 73 3d 31 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 6e 28 33 29 2c 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 74 3a 77 69 6e 64 6f 77 2c 61 3d 5b 22 6d 6f 7a 22 Data Ascii: odule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=1)}([function(e,t,n){(function(t){for(var r=n(3),o="undefined"==typeof window?t:window,a=["moz"
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 54 45 52 3a 22 54 59 50 45 5f 43 48 41 52 41 43 54 45 52 22 2c 52 45 4d 4f 56 45 5f 43 48 41 52 41 43 54 45 52 3a 22 52 45 4d 4f 56 45 5f 43 48 41 52 41 43 54 45 52 22 2c 52 45 4d 4f 56 45 5f 41 4c 4c 3a 22 52 45 4d 4f 56 45 5f 41 4c 4c 22 2c 52 45 4d 4f 56 45 5f 4c 41 53 54 5f 56 49 53 49 42 4c 45 5f 4e 4f 44 45 3a 22 52 45 4d 4f 56 45 5f 4c 41 53 54 5f 56 49 53 49 42 4c 45 5f 4e 4f 44 45 22 2c 50 41 55 53 45 5f 46 4f 52 3a 22 50 41 55 53 45 5f 46 4f 52 22 2c 43 41 4c 4c 5f 46 55 4e 43 54 49 4f 4e 3a 22 43 41 4c 4c 5f 46 55 4e 43 54 49 4f 4e 22 2c 41 44 44 5f 48 54 4d 4c 5f 54 41 47 5f 45 4c 45 4d 45 4e 54 3a 22 41 44 44 5f 48 54 4d 4c 5f 54 41 47 5f 45 4c 45 4d 45 4e 54 22 2c 52 45 4d 4f 56 45 5f 48 54 4d 4c 5f 54 41 47 5f 45 4c 45 4d 45 4e 54 3a 22 52 Data Ascii: TER:"TYPE_CHARACTER",REMOVE_CHARACTER:"REMOVE_CHARACTER",REMOVE_ALL:"REMOVE_ALL",REMOVE_LAST_VISIBLE_NODE:"REMOVE_LAST_VISIBLE_NODE",PAUSE_FOR:"PAUSE_FOR",CALL_FUNCTION:"CALL_FUNCTION",ADD_HTML_TAG_ELEMENT:"ADD_HTML_TAG_ELEMENT",REMOVE_HTML_TAG_ELEMENT:"R
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 65 29 2c 45 28 74 68 69 73 2c 22 73 74 61 74 65 22 2c 7b 63 75 72 73 6f 72 41 6e 69 6d 61 74 69 6f 6e 3a 6e 75 6c 6c 2c 6c 61 73 74 46 72 61 6d 65 54 69 6d 65 3a 6e 75 6c 6c 2c 70 61 75 73 65 55 6e 74 69 6c 3a 6e 75 6c 6c 2c 65 76 65 6e 74 51 75 65 75 65 3a 5b 5d 2c 65 76 65 6e 74 4c 6f 6f 70 3a 6e 75 6c 6c 2c 65 76 65 6e 74 4c 6f 6f 70 50 61 75 73 65 64 3a 21 31 2c 72 65 76 65 72 73 65 43 61 6c 6c 65 64 45 76 65 6e 74 73 3a 5b 5d 2c 63 61 6c 6c 65 64 45 76 65 6e 74 73 3a 5b 5d 2c 76 69 73 69 62 6c 65 4e 6f 64 65 73 3a 5b 5d 2c 69 6e 69 Data Ascii: tanceof t))throw new TypeError("Cannot call a class as a function")}(this,e),E(this,"state",{cursorAnimation:null,lastFrameTime:null,pauseUntil:null,eventQueue:[],eventLoop:null,eventLoopPaused:!1,reverseCalledEvents:[],calledEvents:[],visibleNodes:[],ini
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 61 75 73 65 46 6f 72 28 31 35 30 30 29 2c 75 29 3a 28 75 2e 6f 70 74 69 6f 6e 73 2e 73 74 72 69 6e 67 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 74 79 70 65 53 74 72 69 6e 67 28 65 29 2e 70 61 75 73 65 46 6f 72 28 31 35 30 30 29 2e 64 65 6c 65 74 65 41 6c 6c 28 29 7d 29 29 2c 75 29 7d 29 29 2c 45 28 74 68 69 73 2c 22 74 79 70 65 53 74 72 69 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6e 75 6c 6c 3b 69 66 28 61 28 65 29 29 72 65 74 75 72 6e 20 75 2e 74 79 70 65 4f 75 74 48 54 4d 4c 53 74 72 69 6e 67 28 65 2c 74 29 3b 69 66 28 65 29 7b 76 Data Ascii: auseFor(1500),u):(u.options.strings.forEach((function(e){u.typeString(e).pauseFor(1500).deleteAll()})),u)})),E(this,"typeString",(function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:null;if(a(e))return u.typeOutHTMLString(e,t);if(e){v
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 65 75 65 28 6c 2e 52 45 4d 4f 56 45 5f 43 48 41 52 41 43 54 45 52 29 3b 72 65 74 75 72 6e 20 75 7d 29 29 2c 45 28 74 68 69 73 2c 22 63 61 6c 6c 46 75 6e 63 74 69 6f 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6c 6c 62 61 6b 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 75 2e 61 64 64 45 76 65 6e 74 54 6f 51 75 65 75 65 28 6c 2e 43 41 4c 4c 5f 46 55 4e 43 54 49 4f 4e 2c 7b 63 62 3a 65 2c 74 68 69 73 41 72 67 3a 74 7d 29 2c 75 7d 29 29 2c 45 28 74 68 69 73 2c 22 74 79 70 65 43 68 61 72 61 63 74 65 72 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 Data Ascii: eue(l.REMOVE_CHARACTER);return u})),E(this,"callFunction",(function(e,t){if(!e\|\|"function"!=typeof e)throw new Error("Callbak must be a function");return u.addEventToQueue(l.CALL_FUNCTION,{cb:e,thisArg:t}),u})),E(this,"typeCharacters",(function(e){var t=a
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 75 2e 6f 70 74 69 6f 6e 73 2e 6c 6f 6f 70 29 72 65 74 75 72 6e 3b 75 2e 73 74 61 74 65 2e 65 76 65 6e 74 51 75 65 75 65 3d 64 28 75 2e 73 74 61 74 65 2e 63 61 6c 6c 65 64 45 76 65 6e 74 73 29 2c 75 2e 73 74 61 74 65 2e 63 61 6c 6c 65 64 45 76 65 6e 74 73 3d 5b 5d 2c 75 2e 6f 70 74 69 6f 6e 73 3d 70 28 7b 7d 2c 75 2e 73 74 61 74 65 2e 69 6e 69 74 69 61 6c 4f 70 74 69 6f 6e 73 29 7d 69 66 28 75 2e 73 74 61 74 65 2e 65 76 65 6e 74 4c 6f 6f 70 3d 6f 28 29 28 75 2e 72 75 6e 45 76 65 6e 74 4c 6f 6f 70 29 2c 21 75 2e 73 74 61 74 65 2e 65 76 65 6e 74 4c 6f 6f 70 50 61 75 73 65 64 29 7b 69 66 28 75 2e 73 74 61 74 65 2e 70 61 75 73 65 55 6e 74 69 6c 29 7b 69 66 28 65 3c 75 2e 73 74 61 74 65 2e 70 61 75 73 65 55 6e 74 69 6c 29 72 65 74 75 72 6e 3b 75 2e 73 74 61 74 Data Ascii: u.options.loop)return;u.state.eventQueue=d(u.state.calledEvents),u.state.calledEvents=[],u.options=p({},u.state.initialOptions)}if(u.state.eventLoop=o()(u.runEventLoop),!u.state.eventLoopPaused){if(u.state.pauseUntil){if(e<u.state.pauseUntil)return;u.stat
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 6f 64 65 73 2c 43 3d 66 2e 73 70 65 65 64 2c 4e 3d 5b 5d 3b 43 26 26 4e 2e 70 75 73 68 28 7b 65 76 65 6e 74 4e 61 6d 65 3a 6c 2e 43 48 41 4e 47 45 5f 44 45 4c 45 54 45 5f 53 50 45 45 44 2c 65 76 65 6e 74 41 72 67 73 3a 7b 73 70 65 65 64 3a 43 2c 74 65 6d 70 3a 21 30 7d 7d 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 2c 4f 3d 4c 2e 6c 65 6e 67 74 68 3b 62 3c 4f 3b 62 2b 2b 29 4e 2e 70 75 73 68 28 7b 65 76 65 6e 74 4e 61 6d 65 3a 6c 2e 52 45 4d 4f 56 45 5f 4c 41 53 54 5f 56 49 53 49 42 4c 45 5f 4e 4f 44 45 2c 65 76 65 6e 74 41 72 67 73 3a 7b 72 65 6d 6f 76 69 6e 67 43 68 61 72 61 63 74 65 72 4e 6f 64 65 3a 21 31 7d 7d 29 3b 43 26 26 4e 2e 70 75 73 68 28 7b 65 76 65 6e 74 4e 61 6d 65 3a 6c 2e 43 48 41 4e 47 45 5f 44 45 4c 45 54 45 5f 53 50 45 45 44 2c 65 76 65 6e Data Ascii: odes,C=f.speed,N=[];C&&N.push({eventName:l.CHANGE_DELETE_SPEED,eventArgs:{speed:C,temp:!0}});for(var b=0,O=L.length;b<O;b++)N.push({eventName:l.REMOVE_LAST_VISIBLE_NODE,eventArgs:{removingCharacterNode:!1}});C&&N.push({eventName:l.CHANGE_DELETE_SPEED,even
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 65 6d 65 6e 74 28 29 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 54 6f 51 75 65 75 65 28 6c 2e 43 48 41 4e 47 45 5f 43 55 52 53 4f 52 2c 7b 63 75 72 73 6f 72 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 75 72 73 6f 72 7d 2c 21 30 29 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 54 6f 51 75 65 75 65 28 6c 2e 52 45 4d 4f 56 45 5f 41 4c 4c 2c 6e 75 6c 6c 2c 21 30 29 2c 21 77 69 6e 64 6f 77 7c 7c 77 69 6e 64 6f 77 2e 5f 5f 5f 54 59 50 45 57 52 49 54 45 52 5f 4a 53 5f 53 54 59 4c 45 53 5f 41 44 44 45 44 5f 5f 5f 7c 7c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 6b 69 70 41 64 64 53 74 79 6c 65 73 7c 7c 28 75 28 22 2e 54 79 70 65 77 72 69 74 65 72 5f 5f 63 75 72 73 6f 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 54 79 70 65 77 72 69 74 65 72 2d 63 75 72 Data Ascii: ement(),this.addEventToQueue(l.CHANGE_CURSOR,{cursor:this.options.cursor},!0),this.addEventToQueue(l.REMOVE_ALL,null,!0),!window\|\|window.___TYPEWRITER_JS_STYLES_ADDED___\|\|this.options.skipAddStyles\|\|(u(".Typewriter__cursor{-webkit-animation:Typewriter-cur
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 73 65 74 54 69 6d 65 6f 75 74 20 68 61 73 20 6e 6f 74 20 62 65 65 6e 20 64 65 66 69 6e 65 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 20 68 61 73 20 6e 6f 74 20 62 65 65 6e 20 64 65 66 69 6e 65 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 6e 3d 3d 3d 73 65 74 54 69 6d 65 6f 75 74 29 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 30 29 3b 69 66 28 28 6e 3d 3d 3d 61 7c 7c 21 6e 29 26 26 73 65 74 54 69 6d 65 6f 75 74 29 72 65 74 75 72 6e 20 6e 3d 73 65 74 54 69 6d 65 6f 75 74 2c 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 30 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 28 65 2c 30 29 7d Data Ascii: ){throw new Error("setTimeout has not been defined")}function i(){throw new Error("clearTimeout has not been defined")}function s(e){if(n===setTimeout)return setTimeout(e,0);if((n===a\|\|!n)&&setTimeout)return n=setTimeout,setTimeout(e,0);try{return n(e,0)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.7	49827	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:39 UTC	855	OUT	GET /ScriptResource.axd?d=EydukmxBmDstn7gSYzQESPK2TwG5hv2uqB2Gdl8pAyFIQLWmhmE5_O4YUNZloDdZi8iaO67pF9ggYX5lq9QXH4DU3H3ovw67x2l8oxk1qthswYwdyAZkJyBGs2YdcflDo0Xk-NiDQkpkWzN3McFywnx1bxXHhbpmNH9AuSVoTpA5RdJ4oVevVdYcukTyGML_0&t=fffffffffa5b9a95 HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:39 UTC	412	IN	HTTP/1.1 200 OK Last-Modified: Sat, 05 Oct 2024 21:28:27 GMT Content-Type: application/x-javascript; charset=utf-8 Content-Length: 7085 Cache-Control: max-age=31447669, public Expires: Sun, 05 Oct 2025 22:28:27 GMT Date: Sun, 06 Oct 2024 23:00:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 4-23092287-0 0CNN RT(1728255638486 219) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:39 UTC	1040	IN	Data Raw: 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 72 3d 74 2e 63 6f 6e 73 6f 6c 65 3b 69 5b 6e 5d 7c 7c 28 69 5b 6e 5d 3d 21 30 2c 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 70 75 73 68 28 6e 29 2c 72 26 26 72 2e 77 61 72 6e 26 26 21 65 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 72 2e 77 61 72 6e 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 22 2b 6e 29 2c 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 72 2e 74 72 61 63 65 26 26 72 2e 74 72 61 63 65 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 61 2c 69 2c 6f 29 7b 69 66 28 4f 62 6a Data Ascii: jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]\|\|(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Obj
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 68 69 64 64 65 6e 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 7c 73 65 6c 65 63 74 65 64 29 24 2f 69 2c 66 3d 2f 5e 28 3f 3a 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 29 24 2f 69 3b 61 28 65 2c 22 61 74 74 72 46 6e 22 2c 6f 7c 7c 7b 7d 2c 22 6a 51 75 65 72 79 2e 61 74 74 72 46 6e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 65 2e 61 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 61 2c 69 2c 75 29 7b 76 61 72 20 63 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 67 3d 74 26 26 74 2e 6e 6f 64 65 54 79 70 65 3b 72 65 74 75 72 6e 20 75 26 26 28 34 3e 73 2e 6c 65 6e 67 74 68 26 26 72 28 22 6a 51 75 65 72 79 2e 66 6e 2e 61 74 74 72 28 20 70 72 6f 70 73 2c 20 70 Data Ascii: hidden\|loop\|multiple\|open\|readonly\|required\|scoped\|selected)$/i,f=/^(?:checked\|selected)$/i;a(e,"attrFn",o\|\|{},"jQuery.attrFn is deprecated"),e.attr=function(t,a,i,u){var c=a.toLowerCase(),g=t&&t.nodeType;return u&&(4>s.length&&r("jQuery.fn.attr( props, p
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 72 69 6d 28 74 29 29 29 26 26 69 5b 30 5d 26 26 28 22 3c 22 21 3d 3d 74 2e 63 68 61 72 41 74 28 30 29 26 26 72 28 22 24 28 68 74 6d 6c 29 20 48 54 4d 4c 20 73 74 72 69 6e 67 73 20 6d 75 73 74 20 73 74 61 72 74 20 77 69 74 68 20 27 3c 27 20 63 68 61 72 61 63 74 65 72 22 29 2c 69 5b 33 5d 26 26 72 28 22 24 28 68 74 6d 6c 29 20 48 54 4d 4c 20 74 65 78 74 20 61 66 74 65 72 20 6c 61 73 74 20 74 61 67 20 69 73 20 69 67 6e 6f 72 65 64 22 29 2c 22 23 22 3d 3d 3d 69 5b 30 5d 2e 63 68 61 72 41 74 28 30 29 26 26 28 72 28 22 48 54 4d 4c 20 73 74 72 69 6e 67 20 63 61 6e 6e 6f 74 20 73 74 61 72 74 20 77 69 74 68 20 61 20 27 23 27 20 63 68 61 72 61 63 74 65 72 22 29 2c 65 2e 65 72 72 6f 72 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 49 6e 76 61 6c 69 64 20 73 65 6c 65 63 74 Data Ascii: rim(t)))&&i[0]&&("<"!==t.charAt(0)&&r("$(html) HTML strings must start with '<' character"),i[3]&&r("$(html) HTML text after last tag is ignored"),"#"===i[0].charAt(0)&&(r("HTML string cannot start with a '#' character"),e.error("JQMIGRATE: Invalid select
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 2e 64 61 74 61 3b 65 2e 66 6e 2e 64 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 2c 69 2c 6f 3d 74 68 69 73 5b 30 5d 3b 72 65 74 75 72 6e 21 6f 7c 7c 22 65 76 65 6e 74 73 22 21 3d 3d 74 7c 7c 31 21 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 7c 7c 28 61 3d 65 2e 64 61 74 61 28 6f 2c 74 29 2c 69 3d 65 2e 5f 64 61 74 61 28 6f 2c 74 29 2c 61 21 3d 3d 6e 26 26 61 21 3d 3d 69 7c 7c 69 3d 3d 3d 6e 29 3f 62 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 72 28 22 55 73 65 20 6f 66 20 6a 51 75 65 72 79 2e 66 6e 2e 64 61 74 61 28 27 65 76 65 6e 74 73 27 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 69 29 7d 3b 76 61 72 20 6a 3d 2f 5c 2f 28 6a 61 76 61 7c 65 63 6d 61 29 73 63 72 69 70 74 2f 69 2c 77 3d 65 Data Ascii: .data;e.fn.data=function(t){var a,i,o=this[0];return!o\|\|"events"!==t\|\|1!==arguments.length\|\|(a=e.data(o,t),i=e._data(o,t),a!==n&&a!==i\|\|i===n)?b.apply(this,arguments):(r("Use of jQuery.fn.data('events') is deprecated"),i)};var j=/\/(java\|ecma)script/i,w=e
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 65 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 26 26 61 28 65 2e 65 76 65 6e 74 2c 22 68 61 6e 64 6c 65 22 2c 65 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 2c 22 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 68 61 6e 64 6c 65 20 69 73 20 75 6e 64 6f 63 75 6d 65 6e 74 65 64 20 61 6e 64 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 65 2e 65 76 65 6e 74 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 61 2c 69 29 7b 65 21 3d 3d 64 6f 63 75 6d 65 6e 74 26 26 43 2e 74 65 73 74 28 74 29 26 26 72 28 22 41 4a 41 58 20 65 76 65 6e 74 73 20 73 68 6f 75 6c 64 20 62 65 20 61 74 74 61 63 68 65 64 20 74 6f 20 64 6f 63 75 6d 65 6e 74 3a 20 22 2b 74 29 2c 51 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 41 28 74 7c 7c 22 22 29 2c 6e 2c 61 2c 69 29 7d 2c 65 2e 65 76 65 6e 74 Data Ascii: e.event.dispatch&&a(e.event,"handle",e.event.dispatch,"jQuery.event.handle is undocumented and deprecated"),e.event.add=function(e,t,n,a,i){e!==document&&C.test(t)&&r("AJAX events should be attached to document: "+t),Q.call(this,e,A(t\|\|""),n,a,i)},e.event
2024-10-06 23:00:39 UTC	237	IN	Data Raw: 6e 20 74 21 3d 3d 64 6f 63 75 6d 65 6e 74 26 26 28 65 2e 65 76 65 6e 74 2e 61 64 64 28 64 6f 63 75 6d 65 6e 74 2c 6e 2b 22 2e 22 2b 65 2e 67 75 69 64 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 28 6e 2c 6e 75 6c 6c 2c 74 2c 21 30 29 7d 29 2c 65 2e 5f 64 61 74 61 28 74 68 69 73 2c 6e 2c 65 2e 67 75 69 64 2b 2b 29 29 2c 21 31 7d 2c 74 65 61 72 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 21 3d 3d 64 6f 63 75 6d 65 6e 74 26 26 65 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 64 6f 63 75 6d 65 6e 74 2c 6e 2b 22 2e 22 2b 65 2e 5f 64 61 74 61 28 74 68 69 73 2c 6e 29 29 2c 21 31 7d 7d 7d 29 7d 28 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 29 3b Data Ascii: n t!==document&&(e.event.add(document,n+"."+e.guid,function(){e.event.trigger(n,null,t,!0)}),e._data(this,n,e.guid++)),!1},teardown:function(){return this!==document&&e.event.remove(document,n+"."+e._data(this,n)),!1}}})}(jQuery,window);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.7	49828	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:39 UTC	854	OUT	GET /WebResource.axd?d=DzHrpQl5URXarFHAtrmzFvvwtxERElSZ_b2Ca1mxtmzvyTwDr6K2uqyW80PraHwZqn7BbM5lQGIiy7biXNxjLG9gJ71MSZTcvi7eeKKPJBLIN5mVSMeRsnLnzbDpw9vtrgTOqyeHT00x826p9zjpJthZ-3nX299B5pryZnfavheEFwbHupd-iASOQMXwlLQK0&t=637824974880000000 HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:39 UTC	397	IN	HTTP/1.1 200 OK Last-Modified: Thu, 10 Mar 2022 08:24:48 GMT Content-Type: application/x-javascript Content-Length: 3399 Cache-Control: max-age=31447669, public Expires: Sun, 05 Oct 2025 22:28:27 GMT Date: Sun, 06 Oct 2024 23:00:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 2-15651042-0 0CNN RT(1728255638511 205) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:39 UTC	1055	IN	Data Raw: 54 72 61 63 6b 69 6e 67 43 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 72 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6f 6e 73 65 6e 74 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 73 66 2d 74 72 61 63 6b 69 6e 67 2d 63 6f 6e 73 65 6e 74 22 3b 76 61 72 20 63 6f 6e 73 65 6e 74 44 69 61 6c 6f 67 48 74 6d 6c 3d 22 22 3b 76 61 72 20 63 6f 6e 73 65 6e 74 44 69 61 6c 6f 67 3d 6e 75 6c 6c 3b 76 61 72 20 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 7b 41 66 74 65 72 44 69 61 6c 6f 67 44 69 73 70 6c 61 79 65 64 3a 5b 5d 2c 42 65 66 6f 72 65 44 69 61 6c 6f 67 43 6c 6f 73 65 64 3a 5b 5d 2c 43 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 3a 5b 5d 2c 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 6f 73 65 43 6f 6e 73 65 6e 74 44 69 61 6c 6f 67 28 29 7b 69 66 28 63 6f 6e 73 65 6e 74 44 69 Data Ascii: TrackingConsentManager=(function(){var consentCookieName="sf-tracking-consent";var consentDialogHtml="";var consentDialog=null;var eventListeners={AfterDialogDisplayed:[],BeforeDialogClosed:[],ConsentChanged:[],};function closeConsentDialog(){if(consentDi
2024-10-06 23:00:39 UTC	1452	IN	Data Raw: 44 61 74 65 28 29 3b 64 61 74 65 2e 73 65 74 54 69 6d 65 28 64 61 74 65 2e 67 65 74 54 69 6d 65 28 29 2b 28 64 61 79 73 2a 32 34 2a 36 30 2a 36 30 2a 31 30 30 30 29 29 3b 76 61 72 20 65 78 70 69 72 65 73 3d 22 3b 20 65 78 70 69 72 65 73 3d 22 2b 64 61 74 65 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 3b 7d 65 6c 73 65 7b 76 61 72 20 65 78 70 69 72 65 73 3d 22 22 3b 7d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 6e 61 6d 65 2b 22 3d 22 2b 76 61 6c 75 65 2b 65 78 70 69 72 65 73 2b 22 3b 20 70 61 74 68 3d 2f 22 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 43 6f 6f 6b 69 65 28 6e 61 6d 65 29 7b 76 61 72 20 6e 61 6d 65 45 51 3d 6e 61 6d 65 2b 22 3d 22 3b 76 61 72 20 63 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 3b 66 Data Ascii: Date();date.setTime(date.getTime()+(days2460601000));var expires="; expires="+date.toGMTString();}else{var expires="";}document.cookie=name+"="+value+expires+"; path=/";}function readCookie(name){var nameEQ=name+"=";var ca=document.cookie.split(";");f
2024-10-06 23:00:39 UTC	892	IN	Data Raw: 2e 63 61 6e 54 72 61 63 6b 43 75 72 72 65 6e 74 55 73 65 72 28 29 3b 63 72 65 61 74 65 43 6f 6f 6b 69 65 28 63 6f 6e 73 65 6e 74 43 6f 6f 6b 69 65 4e 61 6d 65 2c 61 63 63 65 70 74 65 64 2c 39 39 39 39 29 3b 69 66 28 61 63 63 65 70 74 65 64 21 3d 6f 6c 64 53 74 61 74 65 29 7b 69 6e 76 6f 6b 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 22 43 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 22 2c 5b 61 63 63 65 70 74 65 64 5d 29 3b 7d 63 6c 6f 73 65 43 6f 6e 73 65 6e 74 44 69 61 6c 6f 67 28 29 3b 7d 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 64 69 61 6c 6f 67 48 74 6d 6c 29 7b 69 66 28 21 64 69 61 6c 6f 67 48 74 6d 6c 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 54 72 61 63 6b 69 6e 67 43 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 72 20 69 73 20 69 6e 69 74 69 61 Data Ascii: .canTrackCurrentUser();createCookie(consentCookieName,accepted,9999);if(accepted!=oldState){invokeEventListeners("ConsentChanged",[accepted]);}closeConsentDialog();},init:function(dialogHtml){if(!dialogHtml){console.error("TrackingConsentManager is initia

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.7	49829	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:39 UTC	1066	OUT	GET /ScriptResource.axd?d=VKaJmfFWDpQxp1_HxsR1qKyfqr1LoFdI1Larj06AwCrRGITZ0NZSm_gMLZ6jHmmIF30zk8r8VDydl4Hd0d7FZ9PIVI4Kle1brOUAMAyDWepfLOYh0V6vpqj1mJBFx92SzKTkVvuYlX-uO3fZ9ykmpzYqFvEcr5MMYvRo81yJnDqp6rzP6WxevUeNAFj3K6WqcNxIoYGo1-d3_ru3xKsagA2&t=fffffffffa5b9a95 HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:40 UTC	238	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript; charset=utf-8 Expires: Sun, 05 Oct 2025 22:28:27 GMT Last-Modified: Sat, 05 Oct 2024 21:28:27 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319
2024-10-06 23:00:40 UTC	2229	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 69 6e 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 77 73 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6e 61 6c 79 74 69 63 Data Ascii: Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.googletagmanager.com https://.hotjar.com https://in.hotjar.com https://.hotjar.io wss://.hotjar.com https://.google-analytics.com https://.analytic
2024-10-06 23:00:40 UTC	437	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 38 2d 30 32 2d 31 38 0d 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6a 71 75 65 72 79 2d 31 2d 37 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 Data Ascii: /! jQuery UI - v1.12.1 - 2018-02-18 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-1-7.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/d
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 78 72 61 64 69 6f 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 69 61 6c 6f 67 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 6d 65 6e 75 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 6d 6f 75 73 65 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 70 72 6f 67 72 65 73 73 62 61 72 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 73 65 6c 65 63 74 6d 65 6e 75 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 73 6c 69 64 65 72 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 73 70 69 6e 6e 65 72 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 74 61 62 73 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 74 6f 6f 6c 74 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f Data Ascii: xradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/selectmenu.js, widgets/slider.js, widgets/spinner.js, widgets/tabs.js, widgets/tooltip.js, effect.js, effects/
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 65 70 69 63 6b 65 72 2d 75 6e 73 65 6c 65 63 74 61 62 6c 65 22 2c 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 43 6c 61 73 73 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 63 75 72 72 65 6e 74 2d 64 61 79 22 2c 74 68 69 73 2e 5f 64 61 79 4f 76 65 72 43 6c 61 73 73 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 64 61 79 73 2d 63 65 6c 6c 2d 6f 76 65 72 22 2c 74 68 69 73 2e 72 65 67 69 6f 6e 61 6c 3d 5b 5d 2c 74 68 69 73 2e 72 65 67 69 6f 6e 61 6c 5b 22 22 5d 3d 7b 63 6c 6f 73 65 54 65 78 74 3a 22 44 6f 6e 65 22 2c 70 72 65 76 54 65 78 74 3a 22 50 72 65 76 22 2c 6e 65 78 74 54 65 78 74 3a 22 4e 65 78 74 22 2c 63 75 72 72 65 6e 74 54 65 78 74 3a 22 54 6f 64 61 79 22 2c 6d 6f 6e 74 68 4e 61 6d 65 73 3a 5b 22 4a 61 6e 75 61 72 79 22 2c 22 46 65 62 72 75 61 72 79 Data Ascii: epicker-unselectable",this._currentClass="ui-datepicker-current-day",this._dayOverClass="ui-datepicker-days-cell-over",this.regional=[],this.regional[""]={closeText:"Done",prevText:"Prev",nextText:"Next",currentText:"Today",monthNames:["January","February
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 5b 22 22 5d 29 2c 74 68 69 73 2e 72 65 67 69 6f 6e 61 6c 5b 22 65 6e 2d 55 53 22 5d 3d 74 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 74 68 69 73 2e 72 65 67 69 6f 6e 61 6c 2e 65 6e 29 2c 74 68 69 73 2e 64 70 44 69 76 3d 6e 28 74 28 22 3c 64 69 76 20 69 64 3d 27 22 2b 74 68 69 73 2e 5f 6d 61 69 6e 44 69 76 49 64 2b 22 27 20 63 6c 61 73 73 3d 27 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 75 69 2d 77 69 64 67 65 74 20 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 75 69 2d 68 65 6c 70 65 72 2d 63 6c 65 61 72 66 69 78 20 75 69 2d 63 6f 72 6e 65 72 2d 61 6c 6c 27 3e 3c 2f 64 69 76 3e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 69 3d 22 62 75 74 74 6f 6e 2c 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 72 65 76 2c 20 2e 75 69 2d Data Ascii: [""]),this.regional["en-US"]=t.extend(!0,{},this.regional.en),this.dpDiv=n(t("<div id='"+this._mainDivId+"' class='ui-datepicker ui-widget ui-widget-content ui-helper-clearfix ui-corner-all'></div>"))}function n(e){var i="button, .ui-datepicker-prev, .ui-
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 29 7d 7d 28 74 2e 63 6c 65 61 6e 44 61 74 61 29 2c 74 2e 77 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 73 29 7b 76 61 72 20 6e 2c 6f 2c 61 2c 72 3d 7b 7d 2c 68 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 5b 30 5d 3b 65 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 3b 76 61 72 20 6c 3d 68 2b 22 2d 22 2b 65 3b 72 65 74 75 72 6e 20 73 7c 7c 28 73 3d 69 2c 69 3d 74 2e 57 69 64 67 65 74 29 2c 74 2e 69 73 41 72 72 61 79 28 73 29 26 26 28 73 3d 74 2e 65 78 74 65 6e 64 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 7b 7d 5d 2e 63 6f 6e 63 61 74 28 73 29 29 29 2c 74 2e 65 78 70 72 5b 22 3a 22 5d 5b 6c 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 74 2e 64 61 74 61 28 65 2c 6c 29 7d 2c 74 5b 68 5d 3d Data Ascii: )}}(t.cleanData),t.widget=function(e,i,s){var n,o,a,r={},h=e.split(".")[0];e=e.split(".")[1];var l=h+"-"+e;return s\|\|(s=i,i=t.Widget),t.isArray(s)&&(s=t.extend.apply(null,[{}].concat(s))),t.expr[":"][l.toLowerCase()]=function(e){return!!t.data(e,l)},t[h]=
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 74 75 72 6e 20 65 7d 2c 74 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 76 61 72 20 73 3d 69 2e 70 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 46 75 6c 6c 4e 61 6d 65 7c 7c 65 3b 74 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 6f 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 2c 61 3d 6c 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 72 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 6f 3f 74 68 69 73 2e 6c 65 6e 67 74 68 7c 7c 22 69 6e 73 74 61 6e 63 65 22 21 3d 3d 6e 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 6f 3d 74 2e 64 61 74 61 28 74 68 69 73 2c 73 29 3b 72 65 74 75 72 6e 22 69 6e 73 74 61 6e 63 65 22 3d 3d 3d 6e 3f 28 72 3d 6f 2c Data Ascii: turn e},t.widget.bridge=function(e,i){var s=i.prototype.widgetFullName\|\|e;t.fn[e]=function(n){var o="string"==typeof n,a=l.call(arguments,1),r=this;return o?this.length\|\|"instance"!==n?this.each(function(){var i,o=t.data(this,s);return"instance"===n?(r=o,
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 65 74 43 72 65 61 74 65 4f 70 74 69 6f 6e 73 28 29 2c 65 29 2c 74 68 69 73 2e 5f 63 72 65 61 74 65 28 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 69 73 2e 5f 73 65 74 4f 70 74 69 6f 6e 44 69 73 61 62 6c 65 64 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 22 63 72 65 61 74 65 22 2c 6e 75 6c 6c 2c 74 68 69 73 2e 5f 67 65 74 43 72 65 61 74 65 45 76 65 6e 74 44 61 74 61 28 29 29 2c 74 68 69 73 2e 5f 69 6e 69 74 28 29 7d 2c 5f 67 65 74 43 72 65 61 74 65 4f 70 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 2c 5f 67 65 74 43 72 65 61 74 65 45 76 65 6e 74 44 61 74 61 3a 74 2e 6e 6f 6f 70 2c 5f 63 72 65 61 74 65 3a 74 2e 6e 6f 6f Data Ascii: etCreateOptions(),e),this._create(),this.options.disabled&&this._setOptionDisabled(this.options.disabled),this._trigger("create",null,this._getCreateEventData()),this._init()},_getCreateOptions:function(){return{}},_getCreateEventData:t.noop,_create:t.noo
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 2c 69 29 2c 73 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 5f 63 6c 61 73 73 65 73 28 7b 65 6c 65 6d 65 6e 74 3a 73 2c 6b 65 79 73 3a 69 2c 63 6c 61 73 73 65 73 3a 65 2c 61 64 64 3a 21 30 7d 29 29 29 7d 2c 5f 73 65 74 4f 70 74 69 6f 6e 44 69 73 61 62 6c 65 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 68 69 73 2e 77 69 64 67 65 74 28 29 2c 74 68 69 73 2e 77 69 64 67 65 74 46 75 6c 6c 4e 61 6d 65 2b 22 2d 64 69 73 61 62 6c 65 64 22 2c 6e 75 6c 6c 2c 21 21 74 29 2c 74 26 26 28 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 68 6f 76 65 72 61 62 6c 65 2c 6e 75 6c 6c 2c 22 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 22 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 Data Ascii: ,i),s.addClass(this._classes({element:s,keys:i,classes:e,add:!0})))},_setOptionDisabled:function(t){this._toggleClass(this.widget(),this.widgetFullName+"-disabled",null,!!t),t&&(this._removeClass(this.hoverable,null,"ui-state-hover"),this._removeClass(thi
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 68 69 73 3b 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 28 73 3d 69 2c 69 3d 65 2c 65 3d 21 31 29 2c 73 3f 28 69 3d 6e 3d 74 28 69 29 2c 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 3d 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 2e 61 64 64 28 69 29 29 3a 28 73 3d 69 2c 69 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 6e 3d 74 68 69 73 2e 77 69 64 67 65 74 28 29 29 2c 74 2e 65 61 63 68 28 73 2c 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 65 7c 7c 6f 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 21 3d 3d 21 30 26 26 21 74 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 22 29 3f 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 3f Data Ascii: his;"boolean"!=typeof e&&(s=i,i=e,e=!1),s?(i=n=t(i),this.bindings=this.bindings.add(i)):(s=i,i=this.element,n=this.widget()),t.each(s,function(s,a){function r(){return e\|\|o.options.disabled!==!0&&!t(this).hasClass("ui-state-disabled")?("string"==typeof a?

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:39 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:39 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 173e0f62-801e-00a3-24fe-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230039Z-1657d5bbd482lxwq1dp2t1zwkc00000002b000000000mbcu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:39 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:39 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:39 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: a9a45936-c01e-00a1-54f1-167e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230039Z-1657d5bbd48f7nlxc7n5fnfzh000000002bg000000003h89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:39 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:39 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:39 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: c7b66cba-b01e-005c-04ff-164c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230039Z-1657d5bbd48xlwdx82gahegw4000000002v000000000dmz4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:39 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:39 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:39 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230039Z-1657d5bbd48sqtlf1huhzuwq7000000002c000000000dpev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:39 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:39 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:39 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6bee43b5-001e-00a2-2106-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230039Z-1657d5bbd48p2j6x2quer0q02800000002t000000000mqfe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:39 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.7	49830	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:39 UTC	910	OUT	GET /images/default-source/icons/uk-flag.png HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:39 UTC	406	IN	HTTP/1.1 200 OK Etag: "900db357" Last-Modified: Mon, 07 Sep 2020 14:23:02 GMT Content-Type: image/png Content-Length: 658 Cache-Control: max-age=5668753, public Expires: Wed, 11 Dec 2024 13:39:51 GMT Date: Sun, 06 Oct 2024 23:00:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 2-15651049-15642033 2CNN RT(1728255638712 255) q(0 0 0 -1) r(0 0) U18
2024-10-06 23:00:39 UTC	658	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 90 50 4c 54 45 f2 91 98 eb 5a 65 5d 62 88 fd f1 f2 ae b0 c3 f1 f2 f5 e6 31 3e 50 55 7e 42 47 74 e7 3f 4b f1 91 98 f5 ad b2 ee 76 7e fc e4 e5 e4 e5 eb fa d6 d8 35 3a 6a e9 4c 58 78 7c 9c d6 d7 e1 86 89 a6 d7 d8 e1 50 54 7e 93 96 af f5 ac b1 f7 ba be c9 ca d7 f3 9f a5 ec 68 72 bb bd cd f6 ba be fc e4 e6 c9 cb d8 f3 9e a5 f0 83 8b f0 84 8b ec 68 71 6b 6f 92 f2 f2 f5 fc e3 e5 f8 c8 cb f7 bb bf f8 c8 cc c9 cb d7 27 2d 60 ff ff ff e4 23 31 ff ff ff 82 b5 0b 70 00 00 00 30 74 52 4e 53 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 62 a5 d0 78 00 00 01 81 49 44 Data Ascii: PNGIHDR00`PLTEZe]b1>PU~BGt?Kv~5:jLXx\|PT~hrhqko'-`#1p0tRNSbxID

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.7	49831	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	855	OUT	GET /ScriptResource.axd?d=okuX3IVIBwfJlfEQK32K3gK8Aiu7WHWoEQUncQG3Me4qBC8PqUDSanqR6Ahd3omIkuFu6Ev7Gv2ttmV6KR9lcUWQL5405Mpb6ScB6eSmJaIA5nR_TYEYPDplnGHHWqwmBd4glDQQ9ZyBTvYu1QllxjvyMDdS9h2GGbjDGaL0WIFEOosa2oyc6d64gO7VfnRz0&t=fffffffffa5b9a95 HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:40 UTC	413	IN	HTTP/1.1 200 OK Last-Modified: Sat, 05 Oct 2024 21:28:27 GMT Content-Type: application/x-javascript; charset=utf-8 Content-Length: 89390 Cache-Control: max-age=31447668, public Expires: Sun, 05 Oct 2025 22:28:27 GMT Date: Sun, 06 Oct 2024 23:00:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 0-12081059-0 0CNN RT(1728255638716 475) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:40 UTC	1039	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 65 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e Data Ascii: !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?win
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 76 61 72 20 74 3d 21 21 65 26 26 22 6c 65 6e 67 74 68 22 69 6e 20 65 26 26 65 2e 6c 65 6e 67 74 68 2c 6e 3d 77 28 65 29 3b 72 65 74 75 72 6e 21 6d 28 65 29 26 26 21 78 28 65 29 26 26 28 22 61 72 72 61 79 22 3d 3d 3d 6e 7c 7c 30 3d 3d 3d 74 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 30 3c 74 26 26 74 2d 31 20 69 6e 20 65 29 7d 53 2e 66 6e 3d 53 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 66 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 53 2c 6c 65 6e 67 74 68 3a 30 2c 74 6f 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 Data Ascii: t)};function p(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e)}S.fn=S.prototype={jquery:f,constructor:S,length:0,toArray:function(){return s.call(this)},get:function(e){return null==e
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 66 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 65 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 Data Ascii: .extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"const
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 75 65 28 29 2c 4e 3d 75 65 28 29 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 6a 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 74 3d 5b 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 Data Ascii: ue(),N=ue(),D=function(e,t){return e===t&&(l=!0),0},j={}.hasOwnProperty,t=[],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disa
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 2f 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 Data Ascii: /,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 65 29 7b 4e 28 74 2c 21 30 29 7d 66 69 6e 61 6c 6c 79 7b 73 3d 3d 3d 53 26 26 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 67 28 74 2e 72 65 70 6c 61 63 65 28 24 2c Data Ascii: id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(e){N(t,!0)}finally{s===S&&e.removeAttribute("id")}}}return g(t.replace($,
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 59 2e 74 65 73 74 28 74 7c 7c 6e 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 48 54 4d 4c 22 29 7d 2c 54 3d 73 65 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 Data Ascii: sByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e.namespaceURI,n=(e.ownerDocument\|\|e).documentElement;return!Y.test(t\|\|n&&n.nodeName\|\|"HTML")},T=se.setDocument=function(e){var t,n,r=e?e.ownerDocument\|\|e:p;return r!=C&&9===r.nodeType&&r
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 3b 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 65 29 2c 72 3d 30 3b 77 68 69 6c 65 28 6f 3d 69 5b 72 2b 2b 5d 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 Data Ascii: getElementById(e);if(o){if((n=o.getAttributeNode("id"))&&n.value===e)return[o];i=t.getElementsByName(e),r=0;while(o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 Data Ascii: ion/></select>";var t=C.createElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":d
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 65 5d 2c 73 3d 5b 74 5d 3b 69 66 28 21 69 7c 7c 21 6f 29 72 65 74 75 72 6e 20 65 3d 3d 43 3f 2d 31 3a 74 3d 3d 43 3f 31 3a 69 3f 2d 31 3a 6f 3f 31 3a 75 3f 50 28 75 2c 65 29 2d 50 28 75 2c 74 29 3a 30 3b 69 66 28 69 3d 3d 3d 6f 29 72 65 74 75 72 6e 20 70 65 28 65 2c 74 29 3b 6e 3d 65 3b 77 68 69 6c 65 28 6e 3d 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 29 61 2e 75 6e 73 68 69 66 74 28 6e 29 3b 6e 3d 74 3b 77 68 69 6c 65 28 6e 3d 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 29 73 2e 75 6e 73 68 69 66 74 28 6e 29 3b 77 68 69 6c 65 28 61 5b 72 5d 3d 3d 3d 73 5b 72 5d 29 72 2b 2b 3b 72 65 74 75 72 6e 20 72 3f 70 65 28 61 5b 72 5d 2c 73 5b 72 5d 29 3a 61 5b 72 5d 3d 3d 70 3f 2d 31 3a 73 5b 72 5d 3d 3d 70 3f 31 3a 30 7d 29 2c 43 7d 2c 73 65 2e 6d 61 74 63 68 65 73 3d 66 75 6e Data Ascii: e],s=[t];if(!i\|\|!o)return e==C?-1:t==C?1:i?-1:o?1:u?P(u,e)-P(u,t):0;if(i===o)return pe(e,t);n=e;while(n=n.parentNode)a.unshift(n);n=t;while(n=n.parentNode)s.unshift(n);while(a[r]===s[r])r++;return r?pe(a[r],s[r]):a[r]==p?-1:s[r]==p?1:0}),C},se.matches=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.7	49835	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	673	OUT	GET /ResourcePackages/Safenames/assets/dist/js/custom.js HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:40 UTC	419	IN	HTTP/1.1 200 OK Etag: "083661b727fd51:0" Last-Modified: Thu, 10 Oct 2019 13:53:34 GMT Content-Type: application/javascript Content-Length: 448 Cache-Control: max-age=571152, public Expires: Sun, 13 Oct 2024 13:39:51 GMT Date: Sun, 06 Oct 2024 23:00:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 12-29106676-0 0CNN RT(1728255639013 246) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:40 UTC	448	IN	Data Raw: 24 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 27 6e 61 76 27 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 73 63 72 6f 6c 6c 65 64 27 2c 24 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3e 31 34 30 29 3b 7d 29 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 69 78 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 22 2e 6e 61 76 62 61 72 2d 6e 61 76 22 29 2e 63 73 73 28 22 6d 61 78 2d 68 65 69 67 68 74 22 2c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2d 31 35 30 29 3b 7d 0a 66 69 78 48 65 69 67 68 74 28 29 3b 24 28 77 69 6e 64 6f 77 29 2e 72 65 73 69 7a 65 28 66 75 6e 63 74 Data Ascii: $(window).scroll(function(){$('nav').toggleClass('scrolled',$(this).scrollTop()>140);});$(document).ready(function(){var fixHeight=function(){$(".navbar-nav").css("max-height",document.documentElement.clientHeight-150);}fixHeight();$(window).resize(funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.7	49834	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	911	OUT	GET /images/default-source/icons/usa-flag.png HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:40 UTC	407	IN	HTTP/1.1 200 OK Etag: "74dd5a7b" Last-Modified: Mon, 07 Sep 2020 14:23:02 GMT Content-Type: image/png Content-Length: 712 Cache-Control: max-age=5668752, public Expires: Wed, 11 Dec 2024 13:39:51 GMT Date: Sun, 06 Oct 2024 23:00:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 12-29106677-29094154 2CNN RT(1728255639020 244) q(0 0 0 -1) r(0 0) U18
2024-10-06 23:00:40 UTC	712	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 96 50 4c 54 45 f8 ce cf 26 4a 80 8c 9f bc 35 56 89 52 6e 9a 43 62 91 fd f3 f3 4a 3d 6a 6f 86 ab c5 cf dd ec 84 87 a8 b7 cc e7 5f 62 f9 da db 3e 3d 6d fb e6 e7 f4 b5 b6 9a ab c4 f7 ce cf f1 f3 f7 7d 92 b3 e3 46 4a 60 7a a2 ea 78 7b b7 c3 d5 8b 9e bb f0 9c 9e d4 db e6 6f 87 ab 31 3e 71 a8 b6 cc e5 53 56 e9 6b 6f b7 c2 d5 60 7b a2 f7 ce ce a5 9e b4 e2 e7 ee 77 6e 8f ee 91 92 f2 a9 aa f0 9c 9f eb 77 7b 7d 93 b4 f0 9d 9f e9 6b 6e 18 3e 78 e1 3a 3e ff ff ff ff ff ff 9e b8 42 4a 00 00 00 32 74 52 4e 53 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 0d 50 Data Ascii: PNGIHDR00`PLTE&J5VRnCbJ=jo_b>=m}FJ`zx{o1>qSVko`{wnw{}kn>x:>BJ2tRNSP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.7	49836	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	676	OUT	GET /ResourcePackages/Safenames/assets/dist/js/bootstrap.js HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:40 UTC	420	IN	HTTP/1.1 200 OK Etag: "09449e727fd51:0" Last-Modified: Thu, 10 Oct 2019 13:53:12 GMT Content-Type: application/javascript Content-Length: 87556 Cache-Control: max-age=597767, public Expires: Sun, 13 Oct 2024 21:03:26 GMT Date: Sun, 06 Oct 2024 23:00:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 14-48185246-0 0CNN RT(1728255639081 208) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:40 UTC	1032	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 2c 66 61 63 74 6f 72 79 29 7b 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 3d 27 6f 62 6a 65 63 74 27 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 66 61 63 74 6f 72 79 28 65 78 70 6f 72 74 73 2c 72 65 71 75 69 72 65 28 27 6a 71 75 65 72 79 27 29 2c 72 65 71 75 69 72 65 28 27 70 6f 70 70 65 72 2e 6a 73 27 29 29 3a 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 27 66 75 6e 63 74 69 6f 6e 27 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 27 65 78 70 6f 72 74 73 27 2c 27 6a 71 75 65 72 79 27 2c 27 70 6f 70 70 65 72 2e 6a 73 27 5d 2c 66 61 63 74 6f 72 79 29 3a 28 67 6c 6f 62 61 6c 3d 67 6c 6f 62 61 6c 7c 7c 73 65 6c 66 2c 66 61 63 74 6f 72 79 28 67 Data Ascii: (function(global,factory){typeof exports==='object'&&typeof module!=='undefined'?factory(exports,require('jquery'),require('popper.js')):typeof define==='function'&&define.amd?define(['exports','jquery','popper.js'],factory):(global=global\|\|self,factory(g
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 65 72 74 79 28 6f 62 6a 2c 6b 65 79 2c 7b 76 61 6c 75 65 3a 76 61 6c 75 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 74 72 75 65 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 74 72 75 65 2c 77 72 69 74 61 62 6c 65 3a 74 72 75 65 7d 29 3b 7d 65 6c 73 65 7b 6f 62 6a 5b 6b 65 79 5d 3d 76 61 6c 75 65 3b 7d 0a 72 65 74 75 72 6e 20 6f 62 6a 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 6f 62 6a 65 63 74 53 70 72 65 61 64 28 74 61 72 67 65 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 31 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 73 6f 75 72 63 65 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 21 3d 6e 75 6c 6c 3f 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3a 7b 7d 3b 76 61 72 20 6f 77 6e 4b 65 79 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 6f 75 72 63 65 Data Ascii: erty(obj,key,{value:value,enumerable:true,configurable:true,writable:true});}else{obj[key]=value;}return obj;}function _objectSpread(target){for(var i=1;i<arguments.length;i++){var source=arguments[i]!=null?arguments[i]:{};var ownKeys=Object.keys(source
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 65 63 69 61 6c 5b 55 74 69 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 5d 3d 67 65 74 53 70 65 63 69 61 6c 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 45 76 65 6e 74 28 29 3b 7d 0a 76 61 72 20 55 74 69 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 27 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 27 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 49 44 28 70 72 65 66 69 78 29 7b 64 6f 7b 70 72 65 66 69 78 2b 3d 7e 7e 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 4d 41 58 5f 55 49 44 29 3b 7d 77 68 69 6c 65 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 70 72 65 66 69 78 29 29 3b 72 65 74 75 72 6e 20 70 72 65 66 69 78 3b 7d 2c 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 Data Ascii: ecial[Util.TRANSITION_END]=getSpecialTransitionEndEvent();}var Util={TRANSITION_END:'bsTransitionEnd',getUID:function getUID(prefix){do{prefix+=~~(Math.random()*MAX_UID);}while(document.getElementById(prefix));return prefix;},getSelectorFromElement:funct
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 20 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 63 6f 6d 70 6f 6e 65 6e 74 4e 61 6d 65 2c 63 6f 6e 66 69 67 2c 63 6f 6e 66 69 67 54 79 70 65 73 29 7b 66 6f 72 28 76 61 72 20 70 72 6f 70 65 72 74 79 20 69 6e 20 63 6f 6e 66 69 67 54 79 70 65 73 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 6f 6e 66 69 67 54 79 70 65 73 2c 70 72 6f 70 65 72 74 79 29 29 7b 76 61 72 20 65 78 70 65 63 74 65 64 54 79 70 65 73 3d 63 6f 6e 66 69 67 54 79 70 65 73 5b 70 72 6f 70 65 72 74 79 5d 3b 76 61 72 20 76 61 6c 75 65 3d 63 6f 6e 66 69 67 5b 70 72 6f 70 65 72 74 79 5d 3b 76 61 72 20 76 61 6c 75 65 54 79 70 65 3d 76 Data Ascii: },typeCheckConfig:function typeCheckConfig(componentName,config,configTypes){for(var property in configTypes){if(Object.prototype.hasOwnProperty.call(configTypes,property)){var expectedTypes=configTypes[property];var value=config[property];var valueType=v
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 74 3d 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 65 6e 74 29 3b 7d 0a 76 61 72 20 63 75 73 74 6f 6d 45 76 65 6e 74 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 72 6f 6f 74 45 6c 65 6d 65 6e 74 29 3b 69 66 28 63 75 73 74 6f 6d 45 76 65 6e 74 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 72 65 74 75 72 6e 3b 7d 0a 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 72 6f 6f 74 45 6c 65 6d 65 6e 74 29 3b 7d 3b 5f 70 72 6f 74 6f 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 20 64 69 73 70 6f 73 65 28 29 7b 24 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 44 41 54 41 5f 4b 45 59 29 3b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 Data Ascii: t=this._getRootElement(element);}var customEvent=this._triggerCloseEvent(rootElement);if(customEvent.isDefaultPrevented()){return;}this._removeElement(rootElement);};_proto.dispose=function dispose(){$.removeData(this._element,DATA_KEY);this._element=nu
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 69 6f 6e 20 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 61 6c 65 72 74 49 6e 73 74 61 6e 63 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 69 66 28 65 76 65 6e 74 29 7b 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 7d 0a 61 6c 65 72 74 49 6e 73 74 61 6e 63 65 2e 63 6c 6f 73 65 28 74 68 69 73 29 3b 7d 3b 7d 3b 5f 63 72 65 61 74 65 43 6c 61 73 73 28 41 6c 65 72 74 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 28 29 7b 72 65 74 75 72 6e 20 56 45 52 53 49 4f 4e 3b 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 41 6c 65 72 74 3b 7d 28 29 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 45 76 65 6e 74 2e 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 2c 53 Data Ascii: ion _handleDismiss(alertInstance){return function(event){if(event){event.preventDefault();}alertInstance.close(this);};};_createClass(Alert,null,[{key:"VERSION",get:function get(){return VERSION;}}]);return Alert;}();$(document).on(Event.CLICK_DATA_API,S
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 67 67 65 72 43 68 61 6e 67 65 45 76 65 6e 74 3d 66 61 6c 73 65 3b 7d 65 6c 73 65 7b 76 61 72 20 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 72 6f 6f 74 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 53 65 6c 65 63 74 6f 72 24 31 2e 41 43 54 49 56 45 29 3b 69 66 28 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 7b 24 28 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 6c 61 73 73 4e 61 6d 65 24 31 2e 41 43 54 49 56 45 29 3b 7d 7d 7d 0a 69 66 28 74 72 69 67 67 65 72 43 68 61 6e 67 65 45 76 65 6e 74 29 7b 69 66 28 69 6e 70 75 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 27 64 69 73 61 62 6c 65 64 27 29 7c 7c 72 6f 6f 74 45 6c 65 6d 65 6e 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 27 64 69 73 61 62 6c 65 64 27 Data Ascii: ggerChangeEvent=false;}else{var activeElement=rootElement.querySelector(Selector$1.ACTIVE);if(activeElement){$(activeElement).removeClass(ClassName$1.ACTIVE);}}}if(triggerChangeEvent){if(input.hasAttribute('disabled')\|\|rootElement.hasAttribute('disabled'
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 62 75 74 74 6f 6e 3d 24 28 65 76 65 6e 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 53 65 6c 65 63 74 6f 72 24 31 2e 42 55 54 54 4f 4e 29 5b 30 5d 3b 24 28 62 75 74 74 6f 6e 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 43 6c 61 73 73 4e 61 6d 65 24 31 2e 46 4f 43 55 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 65 76 65 6e 74 2e 74 79 70 65 29 29 3b 7d 29 3b 24 2e 66 6e 5b 4e 41 4d 45 24 31 5d 3d 42 75 74 74 6f 6e 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3b 24 2e 66 6e 5b 4e 41 4d 45 24 31 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 42 75 74 74 6f 6e 3b 24 2e 66 6e 5b 4e 41 4d 45 24 31 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 24 2e 66 6e 5b 4e 41 4d 45 24 31 5d 3d 4a 51 55 45 52 59 5f 4e 4f Data Ascii: button=$(event.target).closest(Selector$1.BUTTON)[0];$(button).toggleClass(ClassName$1.FOCUS,/^focus(in)?$/.test(event.type));});$.fn[NAME$1]=Button._jQueryInterface;$.fn[NAME$1].Constructor=Button;$.fn[NAME$1].noConflict=function(){$.fn[NAME$1]=JQUERY_NO
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 54 3a 27 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 27 2c 4e 45 58 54 3a 27 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 27 2c 50 52 45 56 3a 27 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 27 2c 49 54 45 4d 3a 27 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 27 2c 50 4f 49 4e 54 45 52 5f 45 56 45 4e 54 3a 27 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 27 7d 3b 76 61 72 20 53 65 6c 65 63 74 6f 72 24 32 3d 7b 41 43 54 49 56 45 3a 27 2e 61 63 74 69 76 65 27 2c 41 43 54 49 56 45 5f 49 54 45 4d 3a 27 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 27 2c 49 54 45 4d 3a 27 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 27 2c 49 54 45 4d 5f 49 4d 47 3a 27 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 20 69 6d 67 27 2c 4e 45 58 54 5f 50 52 Data Ascii: T:'carousel-item-left',NEXT:'carousel-item-next',PREV:'carousel-item-prev',ITEM:'carousel-item',POINTER_EVENT:'pointer-event'};var Selector$2={ACTIVE:'.active',ACTIVE_ITEM:'.active.carousel-item',ITEM:'.carousel-item',ITEM_IMG:'.carousel-item img',NEXT_PR
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 6c 65 63 74 6f 72 28 53 65 6c 65 63 74 6f 72 24 32 2e 4e 45 58 54 5f 50 52 45 56 29 29 7b 55 74 69 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 63 79 63 6c 65 28 74 72 75 65 29 3b 7d 0a 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 3b 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 3b 7d 3b 5f 70 72 6f 74 6f 2e 63 79 63 6c 65 3d 66 75 6e 63 74 69 6f 6e 20 63 79 63 6c 65 28 65 76 65 6e 74 29 7b 69 66 28 21 65 76 65 6e 74 29 7b 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 66 61 6c 73 65 3b 7d 0a 69 66 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 7b 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 Data Ascii: lector(Selector$2.NEXT_PREV)){Util.triggerTransitionEnd(this._element);this.cycle(true);}clearInterval(this._interval);this._interval=null;};_proto.cycle=function cycle(event){if(!event){this._isPaused=false;}if(this._interval){clearInterval(this._inter

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.7	49837	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	671	OUT	GET /ResourcePackages/Safenames/assets/dist/js/core.js HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:40 UTC	420	IN	HTTP/1.1 200 OK Etag: "0c3177727fd51:0" Last-Modified: Thu, 10 Oct 2019 13:56:08 GMT Content-Type: application/javascript Content-Length: 14280 Cache-Control: max-age=625714, public Expires: Mon, 14 Oct 2024 04:49:13 GMT Date: Sun, 06 Oct 2024 23:00:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 13-37543304-0 0CNN RT(1728255639155 207) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:40 UTC	1032	IN	Data Raw: ef bb bf 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 54 79 70 65 77 72 69 74 65 72 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 54 79 70 65 77 72 69 74 65 72 3d 74 28 29 3a 65 2e 54 79 70 65 77 72 69 74 65 72 3d 74 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 2c 28 66 75 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("Typewriter",[],t):"object"==typeof exports?exports.Typewriter=t():e.Typewriter=t()}("undefined"!=typeof self?self:this,(fu
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 6e 2e 64 28 74 2c 22 61 22 2c 74 29 2c 74 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 6e 2e 70 3d 22 22 2c 6e 28 6e 2e 73 3d 31 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 6e 28 33 29 2c 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 74 3a 77 69 6e 64 6f 77 2c 61 3d 5b 22 6d 6f 7a 22 2c 22 77 65 62 6b 69 74 Data Ascii: nction(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=1)}([function(e,t,n){(function(t){for(var r=n(3),o="undefined"==typeof window?t:window,a=["moz","webkit
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 45 5f 43 48 41 52 41 43 54 45 52 22 2c 52 45 4d 4f 56 45 5f 43 48 41 52 41 43 54 45 52 3a 22 52 45 4d 4f 56 45 5f 43 48 41 52 41 43 54 45 52 22 2c 52 45 4d 4f 56 45 5f 41 4c 4c 3a 22 52 45 4d 4f 56 45 5f 41 4c 4c 22 2c 52 45 4d 4f 56 45 5f 4c 41 53 54 5f 56 49 53 49 42 4c 45 5f 4e 4f 44 45 3a 22 52 45 4d 4f 56 45 5f 4c 41 53 54 5f 56 49 53 49 42 4c 45 5f 4e 4f 44 45 22 2c 50 41 55 53 45 5f 46 4f 52 3a 22 50 41 55 53 45 5f 46 4f 52 22 2c 43 41 4c 4c 5f 46 55 4e 43 54 49 4f 4e 3a 22 43 41 4c 4c 5f 46 55 4e 43 54 49 4f 4e 22 2c 41 44 44 5f 48 54 4d 4c 5f 54 41 47 5f 45 4c 45 4d 45 4e 54 3a 22 41 44 44 5f 48 54 4d 4c 5f 54 41 47 5f 45 4c 45 4d 45 4e 54 22 2c 52 45 4d 4f 56 45 5f 48 54 4d 4c 5f 54 41 47 5f 45 4c 45 4d 45 4e 54 3a 22 52 45 4d 4f 56 45 5f 48 54 Data Ascii: E_CHARACTER",REMOVE_CHARACTER:"REMOVE_CHARACTER",REMOVE_ALL:"REMOVE_ALL",REMOVE_LAST_VISIBLE_NODE:"REMOVE_LAST_VISIBLE_NODE",PAUSE_FOR:"PAUSE_FOR",CALL_FUNCTION:"CALL_FUNCTION",ADD_HTML_TAG_ELEMENT:"ADD_HTML_TAG_ELEMENT",REMOVE_HTML_TAG_ELEMENT:"REMOVE_HT
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 65 29 2c 45 28 74 68 69 73 2c 22 73 74 61 74 65 22 2c 7b 63 75 72 73 6f 72 41 6e 69 6d 61 74 69 6f 6e 3a 6e 75 6c 6c 2c 6c 61 73 74 46 72 61 6d 65 54 69 6d 65 3a 6e 75 6c 6c 2c 70 61 75 73 65 55 6e 74 69 6c 3a 6e 75 6c 6c 2c 65 76 65 6e 74 51 75 65 75 65 3a 5b 5d 2c 65 76 65 6e 74 4c 6f 6f 70 3a 6e 75 6c 6c 2c 65 76 65 6e 74 4c 6f 6f 70 50 61 75 73 65 64 3a 21 31 2c 72 65 76 65 72 73 65 43 61 6c 6c 65 64 45 76 65 6e 74 73 3a 5b 5d 2c 63 61 6c 6c 65 64 45 76 65 6e 74 73 3a 5b 5d 2c 76 69 73 69 62 6c 65 4e 6f 64 65 73 3a 5b 5d 2c 69 6e 69 74 69 61 6c 4f 70 74 69 Data Ascii: t))throw new TypeError("Cannot call a class as a function")}(this,e),E(this,"state",{cursorAnimation:null,lastFrameTime:null,pauseUntil:null,eventQueue:[],eventLoop:null,eventLoopPaused:!1,reverseCalledEvents:[],calledEvents:[],visibleNodes:[],initialOpti
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 31 35 30 30 29 2c 75 29 3a 28 75 2e 6f 70 74 69 6f 6e 73 2e 73 74 72 69 6e 67 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 74 79 70 65 53 74 72 69 6e 67 28 65 29 2e 70 61 75 73 65 46 6f 72 28 31 35 30 30 29 2e 64 65 6c 65 74 65 41 6c 6c 28 29 7d 29 29 2c 75 29 7d 29 29 2c 45 28 74 68 69 73 2c 22 74 79 70 65 53 74 72 69 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6e 75 6c 6c 3b 69 66 28 61 28 65 29 29 72 65 74 75 72 6e 20 75 2e 74 79 70 65 4f 75 74 48 54 4d 4c 53 74 72 69 6e 67 28 65 2c 74 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 75 2e 6f Data Ascii: 1500),u):(u.options.strings.forEach((function(e){u.typeString(e).pauseFor(1500).deleteAll()})),u)})),E(this,"typeString",(function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:null;if(a(e))return u.typeOutHTMLString(e,t);if(e){var n=u.o
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 4d 4f 56 45 5f 43 48 41 52 41 43 54 45 52 29 3b 72 65 74 75 72 6e 20 75 7d 29 29 2c 45 28 74 68 69 73 2c 22 63 61 6c 6c 46 75 6e 63 74 69 6f 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6c 6c 62 61 6b 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 75 2e 61 64 64 45 76 65 6e 74 54 6f 51 75 65 75 65 28 6c 2e 43 41 4c 4c 5f 46 55 4e 43 54 49 4f 4e 2c 7b 63 62 3a 65 2c 74 68 69 73 41 72 67 3a 74 7d 29 2c 75 7d 29 29 2c 45 28 74 68 69 73 2c 22 74 79 70 65 43 68 61 72 61 63 74 65 72 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: MOVE_CHARACTER);return u})),E(this,"callFunction",(function(e,t){if(!e\|\|"function"!=typeof e)throw new Error("Callbak must be a function");return u.addEventToQueue(l.CALL_FUNCTION,{cb:e,thisArg:t}),u})),E(this,"typeCharacters",(function(e){var t=arguments
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 73 2e 6c 6f 6f 70 29 72 65 74 75 72 6e 3b 75 2e 73 74 61 74 65 2e 65 76 65 6e 74 51 75 65 75 65 3d 64 28 75 2e 73 74 61 74 65 2e 63 61 6c 6c 65 64 45 76 65 6e 74 73 29 2c 75 2e 73 74 61 74 65 2e 63 61 6c 6c 65 64 45 76 65 6e 74 73 3d 5b 5d 2c 75 2e 6f 70 74 69 6f 6e 73 3d 70 28 7b 7d 2c 75 2e 73 74 61 74 65 2e 69 6e 69 74 69 61 6c 4f 70 74 69 6f 6e 73 29 7d 69 66 28 75 2e 73 74 61 74 65 2e 65 76 65 6e 74 4c 6f 6f 70 3d 6f 28 29 28 75 2e 72 75 6e 45 76 65 6e 74 4c 6f 6f 70 29 2c 21 75 2e 73 74 61 74 65 2e 65 76 65 6e 74 4c 6f 6f 70 50 61 75 73 65 64 29 7b 69 66 28 75 2e 73 74 61 74 65 2e 70 61 75 73 65 55 6e 74 69 6c 29 7b 69 66 28 65 3c 75 2e 73 74 61 74 65 2e 70 61 75 73 65 55 6e 74 69 6c 29 72 65 74 75 72 6e 3b 75 2e 73 74 61 74 65 2e 70 61 75 73 65 55 Data Ascii: s.loop)return;u.state.eventQueue=d(u.state.calledEvents),u.state.calledEvents=[],u.options=p({},u.state.initialOptions)}if(u.state.eventLoop=o()(u.runEventLoop),!u.state.eventLoopPaused){if(u.state.pauseUntil){if(e<u.state.pauseUntil)return;u.state.pauseU
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 2e 73 70 65 65 64 2c 4e 3d 5b 5d 3b 43 26 26 4e 2e 70 75 73 68 28 7b 65 76 65 6e 74 4e 61 6d 65 3a 6c 2e 43 48 41 4e 47 45 5f 44 45 4c 45 54 45 5f 53 50 45 45 44 2c 65 76 65 6e 74 41 72 67 73 3a 7b 73 70 65 65 64 3a 43 2c 74 65 6d 70 3a 21 30 7d 7d 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 2c 4f 3d 4c 2e 6c 65 6e 67 74 68 3b 62 3c 4f 3b 62 2b 2b 29 4e 2e 70 75 73 68 28 7b 65 76 65 6e 74 4e 61 6d 65 3a 6c 2e 52 45 4d 4f 56 45 5f 4c 41 53 54 5f 56 49 53 49 42 4c 45 5f 4e 4f 44 45 2c 65 76 65 6e 74 41 72 67 73 3a 7b 72 65 6d 6f 76 69 6e 67 43 68 61 72 61 63 74 65 72 4e 6f 64 65 3a 21 31 7d 7d 29 3b 43 26 26 4e 2e 70 75 73 68 28 7b 65 76 65 6e 74 4e 61 6d 65 3a 6c 2e 43 48 41 4e 47 45 5f 44 45 4c 45 54 45 5f 53 50 45 45 44 2c 65 76 65 6e 74 41 72 67 73 3a 7b 73 Data Ascii: .speed,N=[];C&&N.push({eventName:l.CHANGE_DELETE_SPEED,eventArgs:{speed:C,temp:!0}});for(var b=0,O=L.length;b<O;b++)N.push({eventName:l.REMOVE_LAST_VISIBLE_NODE,eventArgs:{removingCharacterNode:!1}});C&&N.push({eventName:l.CHANGE_DELETE_SPEED,eventArgs:{s
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 74 68 69 73 2e 61 64 64 45 76 65 6e 74 54 6f 51 75 65 75 65 28 6c 2e 43 48 41 4e 47 45 5f 43 55 52 53 4f 52 2c 7b 63 75 72 73 6f 72 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 75 72 73 6f 72 7d 2c 21 30 29 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 54 6f 51 75 65 75 65 28 6c 2e 52 45 4d 4f 56 45 5f 41 4c 4c 2c 6e 75 6c 6c 2c 21 30 29 2c 21 77 69 6e 64 6f 77 7c 7c 77 69 6e 64 6f 77 2e 5f 5f 5f 54 59 50 45 57 52 49 54 45 52 5f 4a 53 5f 53 54 59 4c 45 53 5f 41 44 44 45 44 5f 5f 5f 7c 7c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 6b 69 70 41 64 64 53 74 79 6c 65 73 7c 7c 28 75 28 22 2e 54 79 70 65 77 72 69 74 65 72 5f 5f 63 75 72 73 6f 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 54 79 70 65 77 72 69 74 65 72 2d 63 75 72 73 6f 72 20 31 73 20 69 Data Ascii: this.addEventToQueue(l.CHANGE_CURSOR,{cursor:this.options.cursor},!0),this.addEventToQueue(l.REMOVE_ALL,null,!0),!window\|\|window.___TYPEWRITER_JS_STYLES_ADDED___\|\|this.options.skipAddStyles\|\|(u(".Typewriter__cursor{-webkit-animation:Typewriter-cursor 1s i
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 6e 65 77 20 45 72 72 6f 72 28 22 73 65 74 54 69 6d 65 6f 75 74 20 68 61 73 20 6e 6f 74 20 62 65 65 6e 20 64 65 66 69 6e 65 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 20 68 61 73 20 6e 6f 74 20 62 65 65 6e 20 64 65 66 69 6e 65 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 6e 3d 3d 3d 73 65 74 54 69 6d 65 6f 75 74 29 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 30 29 3b 69 66 28 28 6e 3d 3d 3d 61 7c 7c 21 6e 29 26 26 73 65 74 54 69 6d 65 6f 75 74 29 72 65 74 75 72 6e 20 6e 3d 73 65 74 54 69 6d 65 6f 75 74 2c 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 30 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 28 65 2c 30 29 7d 63 61 74 63 68 28 74 29 Data Ascii: new Error("setTimeout has not been defined")}function i(){throw new Error("clearTimeout has not been defined")}function s(e){if(n===setTimeout)return setTimeout(e,0);if((n===a\|\|!n)&&setTimeout)return n=setTimeout,setTimeout(e,0);try{return n(e,0)}catch(t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.7	49839	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	677	OUT	GET /ResourcePackages/Safenames/assets/dist/js/popper.min.js HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:40 UTC	421	IN	HTTP/1.1 200 OK Etag: "0ea5c6a6b7fd51:0" Last-Modified: Thu, 10 Oct 2019 13:05:40 GMT Content-Type: application/javascript Content-Length: 20359 Cache-Control: max-age=571152, public Expires: Sun, 13 Oct 2024 13:39:51 GMT Date: Sun, 06 Oct 2024 23:00:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 13-37543306-0 0CNN RT(1728255639172 205) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:40 UTC	1031	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 65 2e 50 6f 70 70 65 72 3d 74 28 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 27 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 27 3d 3d 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 Data Ascii: (function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 72 65 74 75 72 6e 27 42 4f 44 59 27 21 3d 3d 74 26 26 28 27 48 54 4d 4c 27 3d 3d 3d 74 7c 7c 70 28 65 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 29 3d 3d 3d 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 3a 64 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 65 7c 7c 21 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 74 7c 7c 21 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 76 61 Data Ascii: ent.documentElement}function s(e){var t=e.nodeName;return'BODY'!==t&&('HTML'===t\|\|p(e.firstElementChild)===e)}function d(e){return null===e.parentNode?e:d(e.parentNode)}function a(e,t){if(!e\|\|!e.nodeType\|\|!t\|\|!t.nodeType)return document.documentElement;va
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 29 2c 77 69 64 74 68 3a 68 28 27 57 69 64 74 68 27 2c 74 2c 6f 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 6c 65 28 7b 7d 2c 65 2c 7b 72 69 67 68 74 3a 65 2e 6c 65 66 74 2b 65 2e 77 69 64 74 68 2c 62 6f 74 74 6f 6d 3a 65 2e 74 6f 70 2b 65 2e 68 65 69 67 68 74 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 6f 3d 7b 7d 3b 74 72 79 7b 69 66 28 72 28 31 30 29 29 7b 6f 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 76 61 72 20 6e 3d 6c 28 65 2c 27 74 6f 70 27 29 2c 69 3d 6c 28 65 2c 27 6c 65 66 74 27 29 3b 6f 2e 74 6f 70 2b 3d 6e 2c 6f 2e 6c 65 66 74 2b 3d 69 2c 6f 2e 62 6f 74 74 6f 6d 2b 3d 6e 2c 6f 2e 72 69 67 68 74 2b 3d 69 7d 65 6c 73 65 20 6f 3d 65 2e 67 65 74 42 6f 75 6e Data Ascii: ),width:h('Width',t,o,n)}}function g(e){return le({},e,{right:e.left+e.width,bottom:e.top+e.height})}function u(e){var o={};try{if(r(10)){o=e.getBoundingClientRect();var n=l(e,'top'),i=l(e,'left');o.top+=n,o.left+=i,o.bottom+=n,o.right+=i}else o=e.getBoun
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 61 72 67 69 6e 4c 65 66 74 2c 77 69 64 74 68 3a 69 2c 68 65 69 67 68 74 3a 72 7d 3b 72 65 74 75 72 6e 20 67 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 72 65 74 75 72 6e 27 42 4f 44 59 27 3d 3d 3d 6e 7c 7c 27 48 54 4d 4c 27 3d 3d 3d 6e 3f 21 31 3a 27 66 69 78 65 64 27 3d 3d 3d 74 28 65 2c 27 70 6f 73 69 74 69 6f 6e 27 29 7c 7c 77 28 6f 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 72 28 29 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 66 6f 72 28 76 61 72 20 6f 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 6f 26 26 27 6e 6f 6e 65 27 3d 3d 3d 74 28 6f 2c Data Ascii: arginLeft,width:i,height:r};return g(d)}function w(e){var n=e.nodeName;return'BODY'===n\|\|'HTML'===n?!1:'fixed'===t(e,'position')\|\|w(o(e))}function E(e){if(!e\|\|!e.parentElement\|\|r())return document.documentElement;for(var o=e.parentElement;o&&'none'===t(o,
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 74 68 2c 6e 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e 74 57 69 64 74 68 26 26 6e 3e 3d 6f 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7d 29 2c 6c 3d 30 3c 61 2e 6c 65 6e 67 74 68 3f 61 5b 30 5d 2e 6b 65 79 3a 64 5b 30 5d 2e 6b 65 79 2c 66 3d 65 2e 73 70 6c 69 74 28 27 2d 27 29 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 2b 28 66 3f 27 2d 27 2b 66 3a 27 27 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 74 2c 6f 29 7b 76 61 72 20 6e 3d 33 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 33 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 33 5d 3a 6e 75 6c 6c 2c 69 3d 6e 3f 45 28 74 29 3a 61 28 74 2c 6f 29 3b 72 65 74 75 72 6e 20 62 28 6f 2c 69 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: th,n=e.height;return t>=o.clientWidth&&n>=o.clientHeight}),l=0<a.length?a[0].key:d[0].key,f=e.split('-')[1];return l+(f?'-'+f:'')}function L(e,t,o){var n=3<arguments.length&&void 0!==arguments[3]?arguments[3]:null,i=n?E(t):a(t,o);return b(o,i,n)}function
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b 7d 2c 61 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 66 6c 69 70 70 65 64 3a 21 31 2c 6f 66 66 73 65 74 73 3a 7b 7d 7d 3b 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 4c 28 74 68 69 73 2e 73 74 61 74 65 2c 74 68 69 73 2e 70 6f 70 70 65 72 2c 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 29 2c 65 2e 70 6c 61 63 65 6d 65 6e 74 3d 4f 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 70 6f 70 70 65 72 2c 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c Data Ascii: es:{},arrowStyles:{},attributes:{},flipped:!1,offsets:{}};e.offsets.reference=L(this.state,this.popper,this.reference,this.options.positionFixed),e.placement=O(this.options.placement,e.offsets.reference,this.popper,this.reference,this.options.modifiers.fl
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 4d 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c 69 29 2c 69 2e 70 75 73 68 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6f 2c 69 29 7b 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 3d 69 2c 41 28 65 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 73 69 7a 65 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 4d Data Ascii: ,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|M(n(p.parentNode),t,o,i),i.push(p)}function F(e,t,o,i){o.updateBound=i,A(e).addEventListener('resize',o.updateBound,{passive:!0});var r=n(e);return M
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 6f 6e 20 47 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 3f 27 65 6e 64 27 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 56 28 65 29 7b 76 61 72 20 74 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 6f 3d 6d 65 2e 69 6e 64 65 78 4f 66 28 65 29 2c 6e 3d 6d 65 2e 73 6c 69 63 65 28 6f 2b 31 29 2e 63 6f 6e 63 61 74 28 6d 65 2e 73 6c 69 63 65 28 30 2c 6f 29 29 3b 72 65 74 75 72 6e 20 74 3f 6e 2e 72 65 76 65 72 73 65 28 29 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 65 2c 74 2c 6f 2c 6e 29 7b 76 61 72 20 69 3d 65 2e 6d 61 74 63 68 28 2f 28 28 3f 3a 5c 2d 7c 5c 2b 29 3f 5c 64 2a 5c Data Ascii: on G(e){return'end'===e?'start':'start'===e?'end':e}function V(e){var t=1<arguments.length&&void 0!==arguments[1]&&arguments[1],o=me.indexOf(e),n=me.slice(o+1).concat(me.slice(0,o));return t?n.reverse():n}function z(e,t,o,n){var i=e.match(/((?:\-\|\+)?\d*\
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 6e 63 65 2c 64 3d 69 2e 73 70 6c 69 74 28 27 2d 27 29 5b 30 5d 3b 72 65 74 75 72 6e 20 6f 3d 59 28 2b 6e 29 3f 5b 2b 6e 2c 30 5d 3a 5f 28 6e 2c 70 2c 73 2c 64 29 2c 27 6c 65 66 74 27 3d 3d 3d 64 3f 28 70 2e 74 6f 70 2b 3d 6f 5b 30 5d 2c 70 2e 6c 65 66 74 2d 3d 6f 5b 31 5d 29 3a 27 72 69 67 68 74 27 3d 3d 3d 64 3f 28 70 2e 74 6f 70 2b 3d 6f 5b 30 5d 2c 70 2e 6c 65 66 74 2b 3d 6f 5b 31 5d 29 3a 27 74 6f 70 27 3d 3d 3d 64 3f 28 70 2e 6c 65 66 74 2b 3d 6f 5b 30 5d 2c 70 2e 74 6f 70 2d 3d 6f 5b 31 5d 29 3a 27 62 6f 74 74 6f 6d 27 3d 3d 3d 64 26 26 28 70 2e 6c 65 66 74 2b 3d 6f 5b 30 5d 2c 70 2e 74 6f 70 2b 3d 6f 5b 31 5d 29 2c 65 2e 70 6f 70 70 65 72 3d 70 2c 65 7d 66 6f 72 28 76 61 72 20 51 3d 4d 61 74 68 2e 6d 69 6e 2c 5a 3d 4d 61 74 68 2e 72 6f 75 6e 64 2c Data Ascii: nce,d=i.split('-')[0];return o=Y(+n)?[+n,0]:_(n,p,s,d),'left'===d?(p.top+=o[0],p.left-=o[1]):'right'===d?(p.top+=o[0],p.left+=o[1]):'top'===d?(p.left+=o[0],p.top-=o[1]):'bottom'===d&&(p.left+=o[0],p.top+=o[1]),e.popper=p,e}for(var Q=Math.min,Z=Math.round,
2024-10-06 23:00:40 UTC	1452	IN	Data Raw: 27 74 6f 70 27 2c 27 74 6f 70 2d 65 6e 64 27 2c 27 72 69 67 68 74 2d 73 74 61 72 74 27 2c 27 72 69 67 68 74 27 2c 27 72 69 67 68 74 2d 65 6e 64 27 2c 27 62 6f 74 74 6f 6d 2d 65 6e 64 27 2c 27 62 6f 74 74 6f 6d 27 2c 27 62 6f 74 74 6f 6d 2d 73 74 61 72 74 27 2c 27 6c 65 66 74 2d 65 6e 64 27 2c 27 6c 65 66 74 27 2c 27 6c 65 66 74 2d 73 74 61 72 74 27 5d 2c 6d 65 3d 66 65 2e 73 6c 69 63 65 28 33 29 2c 68 65 3d 7b 46 4c 49 50 3a 27 66 6c 69 70 27 2c 43 4c 4f 43 4b 57 49 53 45 3a 27 63 6c 6f 63 6b 77 69 73 65 27 2c 43 4f 55 4e 54 45 52 43 4c 4f 43 4b 57 49 53 45 3a 27 63 6f 75 6e 74 65 72 63 6c 6f 63 6b 77 69 73 65 27 7d 2c 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6f 2c 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2c 72 3d 32 3c 61 Data Ascii: 'top','top-end','right-start','right','right-end','bottom-end','bottom','bottom-start','left-end','left','left-start'],me=fe.slice(3),he={FLIP:'flip',CLOCKWISE:'clockwise',COUNTERCLOCKWISE:'counterclockwise'},ce=function(){function t(o,n){var i=this,r=2<a

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:40 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 4035d6e2-a01e-0002-4602-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230040Z-1657d5bbd48dfrdj7px744zp8s00000002fg000000001w2h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:40 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:40 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 62f7f1ae-f01e-0096-4d0c-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230040Z-1657d5bbd487nf59mzf5b3gk8n000000027g00000000h7cy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:40 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:40 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230040Z-1657d5bbd48qjg85buwfdynm5w00000002p000000000r3ub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:40 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:40 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fcca05a5-501e-00a0-3202-179d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230040Z-1657d5bbd482tlqpvyz9e93p5400000002m000000000vgcx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:40 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:40 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 31868579-401e-008c-0af2-1686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230040Z-1657d5bbd48lknvp09v995n790000000026000000000t7aw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:40 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.7	49845	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	661	OUT	GET /images/default-source/icons/uk-flag.png HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:40 UTC	399	IN	HTTP/1.1 200 OK Etag: "900db357" Last-Modified: Mon, 07 Sep 2020 14:23:02 GMT Content-Type: image/png Content-Length: 658 Cache-Control: max-age=5668752, public Expires: Wed, 11 Dec 2024 13:39:51 GMT Date: Sun, 06 Oct 2024 23:00:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 14-48185295-0 0CNN RT(1728255639480 205) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:40 UTC	658	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 90 50 4c 54 45 f2 91 98 eb 5a 65 5d 62 88 fd f1 f2 ae b0 c3 f1 f2 f5 e6 31 3e 50 55 7e 42 47 74 e7 3f 4b f1 91 98 f5 ad b2 ee 76 7e fc e4 e5 e4 e5 eb fa d6 d8 35 3a 6a e9 4c 58 78 7c 9c d6 d7 e1 86 89 a6 d7 d8 e1 50 54 7e 93 96 af f5 ac b1 f7 ba be c9 ca d7 f3 9f a5 ec 68 72 bb bd cd f6 ba be fc e4 e6 c9 cb d8 f3 9e a5 f0 83 8b f0 84 8b ec 68 71 6b 6f 92 f2 f2 f5 fc e3 e5 f8 c8 cb f7 bb bf f8 c8 cc c9 cb d7 27 2d 60 ff ff ff e4 23 31 ff ff ff 82 b5 0b 70 00 00 00 30 74 52 4e 53 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 62 a5 d0 78 00 00 01 81 49 44 Data Ascii: PNGIHDR00`PLTEZe]b1>PU~BGt?Kv~5:jLXx\|PT~hrhqko'-`#1p0tRNSbxID

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.7	49844	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	933	OUT	GET /ResourcePackages/Safenames/assets/dist/images/mag-glass-sm.svg HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:40 UTC	200	IN	HTTP/1.1 200 OK Cache-Control: max-age=2678400 Content-Type: image/svg+xml Last-Modified: Fri, 25 Oct 2019 12:42:16 GMT Accept-Ranges: bytes ETag: "0c4b5a1318bd51:0" Server: Microsoft-IIS/10.0
2024-10-06 23:00:40 UTC	2227	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 69 6e 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 77 73 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6e 61 6c 79 74 69 63 Data Ascii: Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.googletagmanager.com https://.hotjar.com https://in.hotjar.com https://.hotjar.io wss://.hotjar.com https://.google-analytics.com https://.analytic
2024-10-06 23:00:40 UTC	459	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 32 2e 32 33 20 35 32 2e 31 37 22 3e 3c 74 69 74 6c 65 3e 6d 61 67 2d 67 6c 61 73 73 2d 73 6d 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 34 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 32 2e 38 37 2c 34 30 2e 33 41 31 38 2e 30 39 2c 31 38 2e 30 39 2c 30 2c 31 2c 31 2c 33 35 2e 36 36 2c 39 2e 34 31 68 30 41 31 38 2e 31 2c 31 38 2e 31 2c 30 2c 30 2c 31 2c 32 32 2e 38 37 2c 34 30 2e 33 5a 6d 30 2d 33 33 2e 38 34 41 31 35 2e 37 34 2c 31 35 2e 37 34 2c 30 2c 31 2c 30 2c 33 34 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="#ffffff" viewBox="0 0 52.23 52.17"><title>mag-glass-sm</title><g id="Layer_14" data-name="Layer 14"><path d="M22.87,40.3A18.09,18.09,0,1,1,35.66,9.41h0A18.1,18.1,0,0,1,22.87,40.3Zm0-33.84A15.74,15.74,0,1,0,34,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.7	49847	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	941	OUT	GET /ResourcePackages/Safenames/assets/dist/images/safenames-logo-white.svg HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:41 UTC	201	IN	HTTP/1.1 200 OK Cache-Control: max-age=2678400 Content-Type: image/svg+xml Last-Modified: Tue, 28 Jan 2020 15:28:56 GMT Accept-Ranges: bytes ETag: "e5ad9fa7efd5d51:0" Server: Microsoft-IIS/10.0
2024-10-06 23:00:41 UTC	2227	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 69 6e 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 77 73 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6e 61 6c 79 74 69 63 Data Ascii: Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.googletagmanager.com https://.hotjar.com https://in.hotjar.com https://.hotjar.io wss://.hotjar.com https://.google-analytics.com https://.analytic
2024-10-06 23:00:41 UTC	476	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 53 41 46 45 4e 41 4d 45 53 5f 4c 4f 47 4f 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 53 41 46 45 4e 41 4d 45 53 20 4c 4f 47 4f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 37 2e 31 37 20 31 36 37 2e 34 32 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 73 61 66 65 6e 61 6d 65 73 2d 6c 6f 67 6f 2d 77 68 69 74 65 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 53 61 66 65 6e 61 6d 65 73 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 34 38 2e 34 34 2c 39 34 2e 34 32 76 32 2e 31 34 Data Ascii: <svg id="SAFENAMES_LOGO" data-name="SAFENAMES LOGO" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 677.17 167.42"><defs><style>.cls-1{fill:#fff;}</style></defs><title>safenames-logo-white</title><g id="Safenames"><path class="cls-1" d="M248.44,94.42v2.14
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 31 36 2c 32 30 2e 39 34 2c 31 36 2c 31 35 2e 38 34 2c 30 2c 32 30 2e 31 33 2d 37 2e 30 35 2c 32 30 2e 31 33 2d 31 33 2e 34 38 76 2d 31 2e 33 33 63 30 2d 39 2e 35 2d 38 2e 35 38 2d 31 32 2d 32 31 2e 38 36 2d 31 34 2e 39 32 2d 31 33 2e 38 2d 33 2e 30 36 2d 32 35 2e 34 34 2d 35 2e 32 31 2d 32 35 2e 34 34 2d 32 31 2e 33 35 76 2d 2e 36 31 63 30 2d 31 32 2e 35 37 2c 39 2e 30 39 2d 32 30 2e 34 34 2c 32 37 2e 33 38 2d 32 30 2e 34 34 43 32 34 30 2e 31 37 2c 37 32 2e 34 35 2c 32 34 38 2e 34 34 2c 38 31 2e 32 34 2c 32 34 38 2e 34 34 2c 39 34 2e 34 32 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 38 2e 30 36 20 2d 33 33 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 35 36 2e 32 2c 31 33 32 63 30 Data Ascii: 16,20.94,16,15.84,0,20.13-7.05,20.13-13.48v-1.33c0-9.5-8.58-12-21.86-14.92-13.8-3.06-25.44-5.21-25.44-21.35v-.61c0-12.57,9.09-20.44,27.38-20.44C240.17,72.45,248.44,81.24,248.44,94.42Z" transform="translate(-38.06 -33)"/><path class="cls-1" d="M256.2,132c0
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 2d 31 31 2e 32 34 2c 35 2e 39 32 2d 31 38 2c 32 33 2e 32 39 2d 31 38 2c 38 2e 35 38 2c 30 2c 31 35 2e 32 33 2c 31 2e 35 33 2c 31 38 2c 35 76 2d 39 2e 33 63 30 2d 38 2e 34 38 2d 34 2e 35 39 2d 31 34 2e 37 31 2d 31 36 2e 31 34 2d 31 34 2e 37 31 2d 39 2e 30 39 2c 30 2d 31 36 2c 33 2e 35 38 2d 31 36 2c 31 31 2e 37 35 68 2d 37 63 30 2d 31 31 2e 35 34 2c 37 2e 35 36 2d 31 38 2e 33 39 2c 32 32 2e 34 38 2d 31 38 2e 33 39 68 31 2e 39 34 63 31 34 2e 38 31 2c 30 2c 32 32 2e 31 37 2c 38 2e 35 38 2c 32 32 2e 31 37 2c 32 31 2e 35 36 76 32 32 2e 31 37 63 30 2c 31 32 2e 33 36 2d 31 30 2e 33 32 2c 31 39 2d 32 33 2e 35 2c 31 39 68 2d 32 2e 31 34 63 2d 31 34 2e 32 31 2c 30 2d 32 33 2d 35 2e 37 32 2d 32 33 2d 31 37 2e 37 37 5a 6d 34 31 2e 32 37 2d 2e 32 31 63 30 2d 38 2e 30 Data Ascii: -11.24,5.92-18,23.29-18,8.58,0,15.23,1.53,18,5v-9.3c0-8.48-4.59-14.71-16.14-14.71-9.09,0-16,3.58-16,11.75h-7c0-11.54,7.56-18.39,22.48-18.39h1.94c14.81,0,22.17,8.58,22.17,21.56v22.17c0,12.36-10.32,19-23.5,19h-2.14c-14.21,0-23-5.72-23-17.77Zm41.27-.21c0-8.0
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 35 2e 38 34 2c 31 30 2e 34 33 43 36 37 35 2e 38 39 2c 31 31 33 2e 39 33 2c 36 38 34 2e 34 38 2c 31 31 34 2e 37 35 2c 36 39 34 2c 31 31 36 2e 35 39 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 38 2e 30 36 20 2d 33 33 29 22 2f 3e 3c 2f 67 3e 3c 70 61 74 68 20 69 64 3d 22 49 63 6f 6e 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 34 36 2e 36 36 2c 36 39 2e 38 36 61 36 2c 36 2c 30 2c 31 2c 31 2c 36 2c 36 41 36 2c 36 2c 30 2c 30 2c 31 2c 31 34 36 2e 36 36 2c 36 39 2e 38 36 5a 6d 2d 38 31 2c 34 36 2e 37 38 61 36 2c 36 2c 30 2c 31 2c 30 2c 36 2d 36 41 36 2c 36 2c 30 2c 30 2c 30 2c 36 35 2e 36 32 2c 31 31 36 2e 36 34 5a 6d 2d 32 31 2e 35 36 2d 39 2e 38 32 61 36 2c 36 2c 30 2c 31 2c 30 2d 36 2d 36 41 36 2c 36 2c 30 Data Ascii: 5.84,10.43C675.89,113.93,684.48,114.75,694,116.59Z" transform="translate(-38.06 -33)"/></g><path id="Icon" class="cls-1" d="M146.66,69.86a6,6,0,1,1,6,6A6,6,0,0,1,146.66,69.86Zm-81,46.78a6,6,0,1,0,6-6A6,6,0,0,0,65.62,116.64Zm-21.56-9.82a6,6,0,1,0-6-6A6,6,0
2024-10-06 23:00:41 UTC	400	IN	Data Raw: 34 2c 36 2e 35 37 2d 37 2e 36 35 2c 39 2e 37 38 2d 37 2e 31 36 73 35 2e 36 37 2c 34 2e 31 2c 37 2e 31 39 2c 39 2e 37 35 61 33 39 2e 36 35 2c 33 39 2e 36 35 2c 30 2c 30 2c 30 2c 35 2e 31 33 2d 2e 36 38 2c 34 30 2e 36 36 2c 34 30 2e 36 36 2c 30 2c 30 2c 30 2c 35 2d 31 2e 33 34 63 2d 2e 37 37 2d 35 2e 38 2e 31 32 2d 31 30 2e 30 39 2c 32 2e 38 39 2d 31 31 2e 37 37 73 37 2d 2e 35 2c 31 31 2e 37 38 2c 32 2e 38 35 61 34 30 2e 30 37 2c 34 30 2e 30 37 2c 30 2c 30 2c 30 2c 36 2e 34 35 2d 38 2e 30 36 63 2d 34 2e 33 32 2d 33 2e 39 35 2d 36 2e 33 39 2d 37 2e 38 2d 35 2e 33 35 2d 31 30 2e 38 37 73 35 2d 34 2e 38 37 2c 31 30 2e 38 36 2d 35 2e 33 39 61 33 39 2e 33 35 2c 33 39 2e 33 35 2c 30 2c 30 2c 30 2d 2e 32 35 2d 31 30 2e 33 32 43 31 35 39 2e 33 2c 31 31 30 2e 34 2c Data Ascii: 4,6.57-7.65,9.78-7.16s5.67,4.1,7.19,9.75a39.65,39.65,0,0,0,5.13-.68,40.66,40.66,0,0,0,5-1.34c-.77-5.8.12-10.09,2.89-11.77s7-.5,11.78,2.85a40.07,40.07,0,0,0,6.45-8.06c-4.32-3.95-6.39-7.8-5.35-10.87s5-4.87,10.86-5.39a39.35,39.35,0,0,0-.25-10.32C159.3,110.4,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.7	49848	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:40 UTC	662	OUT	GET /images/default-source/icons/usa-flag.png HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:40 UTC	398	IN	HTTP/1.1 200 OK Etag: "74dd5a7b" Last-Modified: Mon, 07 Sep 2020 14:23:02 GMT Content-Type: image/png Content-Length: 712 Cache-Control: max-age=5668752, public Expires: Wed, 11 Dec 2024 13:39:51 GMT Date: Sun, 06 Oct 2024 23:00:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 0-12081072-0 0CNN RT(1728255639668 232) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:40 UTC	712	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 96 50 4c 54 45 f8 ce cf 26 4a 80 8c 9f bc 35 56 89 52 6e 9a 43 62 91 fd f3 f3 4a 3d 6a 6f 86 ab c5 cf dd ec 84 87 a8 b7 cc e7 5f 62 f9 da db 3e 3d 6d fb e6 e7 f4 b5 b6 9a ab c4 f7 ce cf f1 f3 f7 7d 92 b3 e3 46 4a 60 7a a2 ea 78 7b b7 c3 d5 8b 9e bb f0 9c 9e d4 db e6 6f 87 ab 31 3e 71 a8 b6 cc e5 53 56 e9 6b 6f b7 c2 d5 60 7b a2 f7 ce ce a5 9e b4 e2 e7 ee 77 6e 8f ee 91 92 f2 a9 aa f0 9c 9f eb 77 7b 7d 93 b4 f0 9d 9f e9 6b 6e 18 3e 78 e1 3a 3e ff ff ff ff ff ff 9e b8 42 4a 00 00 00 32 74 52 4e 53 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 0d 50 Data Ascii: PNGIHDR00`PLTE&J5VRnCbJ=jo_b>=m}FJ`zx{o1>qSVko`{wnw{}kn>x:>BJ2tRNSP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.7	49850	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	916	OUT	GET /images/default-source/default-album/sn-25.png HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:41 UTC	409	IN	HTTP/1.1 200 OK Etag: "17fee069" Last-Modified: Mon, 08 Jul 2024 11:03:55 GMT Content-Type: image/png Content-Length: 316100 Cache-Control: max-age=5723314, public Expires: Thu, 12 Dec 2024 04:49:14 GMT Date: Sun, 06 Oct 2024 23:00:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 7-27770056-27756177 2CNN RT(1728255639985 203) q(0 0 0 -1) r(0 0) U18
2024-10-06 23:00:41 UTC	1043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 04 38 08 03 00 00 00 df 0d 31 71 00 00 03 00 50 4c 54 45 00 00 00 01 01 02 00 01 01 01 01 02 01 01 02 02 02 03 07 08 0a 2b 57 91 3c 9f eb 04 05 06 9a b2 cb 3b 81 be e4 e6 ed 03 04 05 2d 73 ac 71 a8 e2 3d 4a 5c 58 88 b1 b9 c7 db 4e 56 5e 46 4e 57 40 46 4e 47 83 b2 a6 b7 ce 87 9b b3 c6 d3 e4 2e 94 db 7f 93 a9 d2 de ed 3d ab 96 34 91 d0 27 53 8f 31 5b 8f 3f 45 4f 6c 80 9a 55 5b 63 52 59 60 4f 56 5d 19 b1 ff 49 4f 57 4c 52 5a 19 ae ff 58 5e 65 5d 63 6b 5a 61 69 47 4d 55 3c 5f 1c 37 58 19 3e 45 4d fe ff ff 41 48 50 39 41 4a cb d3 de 99 a5 b3 ce d7 e3 a4 b2 c2 a0 ac bb 39 3c 42 9d a9 b7 32 51 17 96 a2 b0 a3 af be 42 68 1f 43 4b 55 3e 41 46 9e ae c1 cc d9 e9 c8 d5 e6 98 a7 b9 20 af ff 9b aa bd d2 Data Ascii: PNGIHDR81qPLTE+W<;-sq=J\XNV^FNW@FNG.=4'S1[?EOlU[cRY`OV]IOWLRZX^e]ckZaiGMU<_7X>EMAHP9AJ9<B2QBhCKU>AF
2024-10-06 23:00:41 UTC	55	IN	Data Raw: 55 55 55 55 55 55 55 55 55 55 55 55 55 15 f6 ed 5e 37 71 20 0a c3 30 74 2b cb 12 82 02 02 41 5c c5 d1 f4 51 8a 29 dc 71 01 23 a6 19 69 94 6a 43 97 82 62 5b f7 b1 44 Data Ascii: UUUUUUUUUUUUU^7q 0t+A\Q)q#ijCb[D
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: b1 25 8a 64 ed 2d d0 ee 45 e4 66 f6 3b 83 83 b3 69 16 f2 b7 8e f4 3d 1e 0f 29 50 52 50 bc 39 93 98 88 e8 3f cb 46 59 8f 88 88 88 3e 4f 36 9a 4e e7 d6 14 73 36 98 88 88 e8 53 64 a3 d1 74 ee 8a 28 36 d8 dc c8 7c ca 06 13 11 11 7d 2c c4 77 32 77 1e a2 b2 26 84 dc 1a 34 b8 47 44 44 44 1f 23 d3 c9 d7 79 28 74 45 2f 3e 5a b1 21 04 eb e7 53 8e c1 dd d4 3f e8 11 11 d1 97 84 f8 4e 10 df 15 ea eb 52 7a b1 61 19 2f 62 6d c8 73 1b 0a 1e 45 77 4b 3f 1b 8e 17 b3 a3 c5 62 3c e4 07 44 44 f4 b5 68 7d 97 2b f4 d7 1d f8 56 44 87 05 42 6e 72 cb a3 e8 ae e8 6b 7b cb 07 28 37 e5 d1 6f 64 78 9c 71 18 26 22 fa 1a 0e f5 4d 9c 5b 79 cd af 6b eb 2b 5e 8a 08 c6 84 10 f2 10 78 14 dd 01 d9 18 f1 dd a8 87 67 f9 ad eb 5a ef fd 6c c1 49 98 88 a8 f3 b4 be 5a 5e 2c d0 1d cb 23 c1 d1 2b 27 Data Ascii: %d-Ef;i=)PRP9?FY>O6Ns6Sdt(6\|},w2w&4GDDD#y(tE/>Z!S?NRza/bmsEwK?b<DDh}+VDBnrk{(7odxq&"M[yk+^xgZlIZ^,#+'
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: df 0b 08 d7 82 eb 39 73 07 53 c1 48 c2 f0 af 8d c0 63 2b 61 57 82 b6 e9 17 dd de ec 7b 8b 3b 9b 2c 63 76 3b d2 c3 68 a8 45 eb 04 bd a2 28 ca ad 0a 58 62 f0 24 2e 8d 03 8d 82 8d 83 73 57 88 36 54 88 b9 79 16 33 fa 66 14 2e 7a 9a 24 15 f4 5b 71 08 a2 28 f0 6e fa a5 a3 53 6b 60 01 31 18 0e 76 31 b8 c7 1c 0c 05 57 45 b6 fd 1b 1e fc e1 68 88 bf a7 b4 18 0e 3b f1 80 13 d2 d1 fd da e8 0a fd 52 b8 e0 e1 c5 c3 05 a4 1c 3d 77 70 f7 6b d4 a2 99 7f 79 b0 35 5c 08 86 7e 79 7e d9 58 d8 ca d7 0e af ee da 9d 4d 63 a7 5f 62 e3 af 2b 47 ab 83 15 45 51 6e 5b c0 a4 8f 52 b4 c4 60 71 30 49 96 32 70 06 d5 06 51 9e 15 45 5c 96 39 64 2b e9 17 91 39 09 e6 15 68 dc 06 d5 ee 4d f3 ce f4 2f bb 53 30 97 64 19 07 db 8d 49 df 7d 16 a1 c2 5d 0c 9a 2d 6f bb 00 3c 1a 75 e2 b8 1c 74 3e c2 Data Ascii: 9sSHc+aW{;,cv;hE(Xb$.sW6Ty3f.z$[q(nSk`1v1WEh;R=wpky5\~y~XMc_b+GEQn[R`q0I2pQE\9d+9hM/S0dI}]-o<ut>
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: b9 00 7c df ff c6 10 fc c0 cf 38 51 1d be fb e1 6b f7 c1 bf f8 37 82 42 81 d9 96 95 bd dc 5d bf 00 da 2d c2 42 b7 a7 da c5 f2 e0 4a 2c c6 b2 0a 3e 5f 18 67 14 e7 ec ac 81 e7 6a 19 e0 60 c6 60 51 b0 34 80 61 1d 63 34 ab 5f c3 4c 8a db 38 ab 83 15 45 51 b6 a5 35 02 3f a1 d3 c1 57 15 dc e7 96 da 20 85 d4 52 d6 97 ad 82 ab 14 17 6d 44 dd 5e 90 f0 a0 7b ab 10 0e b6 05 e9 aa 79 9d 7f 87 c3 89 53 30 b0 fe 95 81 f4 d9 f9 2c e7 94 de c5 5f 8d 27 12 1d f1 3e 65 08 f6 36 ce 03 0f c2 f6 bb ef dd 07 ff 62 7d ba ac 47 1b f2 8d 8d 59 56 5e 3a dd ae cb c1 92 84 c9 d5 14 cc 99 60 27 4c 9e e0 5e 8c f0 ef 59 a3 2b 7f d2 3a f8 e1 89 a9 45 bb 72 b4 5c 2d ee 0d 3e 73 4f a8 94 a1 66 66 d7 7a cd f4 b5 49 8a a2 28 5b 0b 78 6e c3 d1 e9 aa 83 fb c3 41 ce 27 5e 85 12 7b 59 6e 0e 70 Data Ascii: \|8Qk7B]-BJ,>_gj``Q4ac4_L8EQ5?W RmD^{yS0,_'>e6b}GYV^:`'L^Y+:Er\->sOffzI([xnA'^{Ynp
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: f1 14 87 94 a1 3b 4b 39 b8 03 ff e6 01 c2 2e 1c 1b f4 40 5b c4 2b 69 f8 e8 a8 0d 1d 43 bd 56 cc bd 2a db 60 60 cf f3 16 df 67 0f f5 fe 7a b7 fc bb f3 c6 1f f0 af 08 d8 06 e0 3f bb ab 6b b0 6c f9 d9 9c dd 97 37 19 98 fa 65 17 be 36 09 7a 59 e6 eb 1d 8c 52 74 83 25 68 67 e0 71 03 21 98 ea 75 11 58 04 7c 1d af ee eb 63 b2 14 45 51 2c be 7b 1b 02 2e 16 14 3c 62 93 04 1c 04 8c c0 06 3e 00 ab 9d 48 20 6e e3 96 17 f4 31 b4 8c db 04 e6 95 85 ca 9c b9 0d bc a5 05 58 79 9e 09 f2 48 09 28 98 75 e8 b9 82 1d 76 02 58 1e 7b 45 d9 8a 6a 23 dc e2 cc 4b a3 de fa ee da c5 d0 5e f3 93 14 5f 3d f0 6a 03 df b5 4d 48 78 09 ff e5 6f d6 bf 9d 78 88 85 d0 cf 9f ad c6 5e d0 b5 a1 d7 3d 0b 6b 4d 3c ae e9 ce 33 f0 9c 1f be f9 16 09 f8 66 6d bb 1c fc c4 be bb 10 26 6e e0 40 73 4b a0 Data Ascii: ;K9.@[+iCV*``gz?kl7e6zYRt%hgq!uX\|cEQ,{.<b>H n1XyH(uvX{Ej#K^_=jMHxox^=kM<3fm&n@sK
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 73 c6 35 cb 83 16 8a 55 f2 e3 c5 91 af 21 a1 d6 37 fc bb 2f 5e 99 45 5d af 3b 4f 1b ce 3a 1a 22 6f 70 c5 8c 03 36 78 ec f7 28 57 5d 57 f7 89 58 2f d1 d1 7a 88 6d 8f 83 ef 38 06 cb 06 ff 28 fe 52 3d 7e 7f 54 a3 be a6 c0 5e 06 e9 19 c8 75 d4 f5 15 08 53 af 5d 8b 0c 8e 8a 8a ba 7c 5a b2 c3 7f e9 06 e5 7d f0 e7 54 39 e0 cc b2 a0 c5 5f 95 2c 37 e7 9b e6 fe 68 06 9a 85 9c ed e5 23 3c aa 76 70 53 8b 47 b7 16 4a 8b 0c 9e c0 2a 6f 05 80 a5 b6 af 74 e6 8b c5 f0 54 9c 4d 1d 60 69 56 b5 20 b9 17 84 0b 71 97 4a b3 d9 a8 18 73 19 fa 3e d8 ce d2 ca e2 6c fe c5 7e b3 3e 9c c5 4c b5 82 42 3f 12 93 a2 ef 78 90 8a c0 47 22 f0 98 10 f4 44 08 d7 4f 7c a2 63 17 19 81 5d f7 9b 9a aa 24 0c eb d0 42 21 97 a6 ce a3 d7 0a d7 7b d7 ae c5 cf 45 47 45 45 5d 32 2d 61 7e 91 2c 30 cd f3 Data Ascii: s5U!7/^E];O:"op6x(W]WX/zm8(R=~T^uS]\|Z}T9_,7h#<vpSGJ*otTM`iV qJs>l~>LB?xG"DO\|c]$B!{EGEE]2-a~,0
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: d1 60 f0 2b 21 d8 0b f0 ba ce 5b e0 29 35 e3 9b f9 51 51 51 51 67 a8 8c d5 3d 5b 0a 41 7f d5 96 f1 15 60 c9 a9 6a 62 79 15 71 ae 92 88 a5 b5 1a d7 ad ac 51 05 c8 72 c1 d5 c2 9c 70 4d 3b c5 c0 33 cd 30 c2 39 af fb 36 73 58 2a bb 7b 28 fe 4a 8c 54 53 2f 27 ff 59 1e d7 a9 2a 06 67 e6 74 53 7a e7 73 73 c3 33 64 77 28 56 14 5a 03 34 ee 0d 3a dd ab b2 c0 c3 39 58 25 34 73 34 be 59 0f e6 d5 39 5f da 20 27 c3 55 a8 61 29 cc 68 63 a4 cf 71 08 c0 d3 6b aa 78 75 60 b0 de 4c 7a e5 f9 ab 82 02 83 ad 1b af 6e 04 70 54 54 d4 45 d5 d2 ad f1 02 c0 0f 32 73 c0 18 5c 61 b6 c9 95 ed 06 37 53 d4 48 04 59 39 df 94 3e 87 bc 35 36 85 99 19 49 e9 b8 99 eb 84 a3 66 02 2b 7b 86 dd ef 28 03 ea e5 9c d9 cb cd 5a 8f c7 43 8e b3 79 68 5d d9 82 e3 ba c3 ae a4 05 97 82 15 de 41 72 27 0e Data Ascii: `+![)5QQQQg=[A`jbyqQrpM;3096sX{(JTS/'YgtSzss3dw(VZ4:9X%4s4Y9_ 'Ua)hcqkxu`LznpTTE2s\a7SHY9>56If+{(ZCyh]Ar'
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 9f 45 5f b9 df dd 1d f0 4b d9 8d 00 8e 8a 8a ba 98 5a 99 0c e0 ad 6f aa 45 a7 53 a9 d4 e0 b0 85 a1 ad 35 70 bf 90 58 a0 4d ec 0b ce 8a 41 03 68 06 5e 3e aa 90 03 dd ab a5 66 81 0b e1 52 1c cd 5b ed fd ad cd 8d f6 7e eb a0 bd b1 bf df 26 fb 4a cf f6 08 2f 8b af 7a b2 c1 a5 ba dc 71 d6 67 5c a9 d8 28 9a e3 82 d5 eb 92 ee 46 69 98 be b0 57 7a be 66 00 7e 4e f1 fa f6 93 1f 2c 08 dd 6e b7 f7 db e7 9e c1 72 c0 d4 b0 f7 ab c9 a9 70 b2 33 c0 10 d8 e0 eb ea 2f c2 ef 48 13 1c 76 8f 55 a7 d3 ea 60 3f ce 28 0f 4e 83 4b 1f a1 be 0d 3e cd e0 ae 4f 7c 76 a1 67 d0 6b da 9d ed 4f 8a 46 45 45 45 fd d7 08 f4 bd 47 6b cd db 9d a2 da 29 e0 69 95 24 2c f9 df 04 d4 0a be 29 7d aa 6f 42 d3 cc fb 36 6b 8d 8a cf 57 76 6e b5 07 26 f3 5e 61 66 16 11 85 de 82 90 a2 ef 46 6e 34 e5 19 Data Ascii: E_KZoES5pXMAh^>fR[~&J/zqg\(FiWzf~N,nrp3/HvU`?(NK>O\|vgkOFEEEGk)i$,)}oB6kWvn&^afFn4
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 5e e3 ab 1a 8b 02 ae a2 d6 cc 98 f8 f5 46 a3 e3 ee 19 8d e5 73 fb 31 e9 0e 33 15 98 0c d7 45 e6 46 a7 ec ff 43 b6 00 ef f3 ad e7 cf bd 03 06 bc a6 bb 77 ef 7e 7c d7 11 f8 cb 37 df be f9 29 fd f2 cb 0c fe ca 04 27 39 3a a0 9e 63 00 0f 60 53 9d 97 a7 b0 00 ac 43 18 06 25 db 4b b5 82 f6 3c ba e6 e7 86 41 78 f6 e9 47 f4 93 15 b8 3b e5 7e ef 84 d3 98 00 f0 ae 8a 33 c0 74 73 1e bf f8 df a3 a3 f8 29 e8 a8 a8 a8 f3 a8 d2 d5 ff d5 00 a3 47 bc 84 74 78 08 5f 2b 95 02 ec 56 6c f7 37 a3 af 54 34 47 45 d1 c1 02 a7 3e 62 5c e9 68 53 58 f8 f4 5b b5 6e 62 41 68 a5 44 83 69 21 d9 e3 d6 08 4d 2f b1 40 c7 63 48 9b c9 a2 2d 9d dd f7 17 46 5e 26 85 3d cc 99 0e fd 08 f4 9d 35 c4 c6 af cf bf 72 62 f1 ee 57 77 09 43 df df 7c fc e6 cb 2f b1 c0 df 7c 93 24 ad 26 f4 6d e6 5e 07 ad Data Ascii: ^Fs13EFCw~\|7)'9:c`SC%K<AxG;~3ts)Gtx_+Vl7T4GE>b\hSX[nbAhDi!M/@cH-F^&=5rbWwC\|/\|$&m^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.7	49851	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	938	OUT	GET /Frontend-Assembly/Telerik.Sitefinity.Frontend.Search/Mvc/Scripts/SearchBox/Search-box.js?package=Safenames&v=MTMuMy43NjM5LjA%3d HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:41 UTC	400	IN	HTTP/1.1 200 OK Last-Modified: Thu, 10 Mar 2022 08:24:48 GMT Content-Type: application/javascript Content-Length: 3634 Cache-Control: max-age=55881, public Expires: Mon, 07 Oct 2024 14:32:01 GMT Date: Sun, 06 Oct 2024 23:00:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 4-23092338-23070580 2CNN RT(1728255639991 203) q(0 0 0 -1) r(1 1) U18
2024-10-06 23:00:41 UTC	1052	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 65 61 72 63 68 42 6f 78 49 64 46 69 65 6c 64 73 3d 24 28 27 5b 64 61 74 61 2d 73 66 2d 72 6f 6c 65 3d 22 73 65 61 72 63 68 54 65 78 74 42 6f 78 49 64 22 5d 27 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 73 65 61 72 63 68 42 6f 78 49 64 46 69 65 6c 64 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 73 65 61 72 63 68 42 6f 78 49 64 46 69 65 6c 64 3d 24 28 73 65 61 72 63 68 42 6f 78 49 64 46 69 65 6c 64 73 5b 69 5d 29 3b 76 61 72 20 63 6f 6e 74 72 6f 6c 53 65 72 76 65 72 44 61 74 61 3d 7b 72 65 73 75 6c 74 73 55 72 6c 3a 73 65 61 72 63 68 42 6f 78 49 64 46 69 65 6c 64 2e 73 69 62 6c 69 6e 67 73 28 27 Data Ascii: (function($){$(document).ready(function(){var searchBoxIdFields=$('[data-sf-role="searchTextBoxId"]');for(var i=0;i<searchBoxIdFields.length;i++){var searchBoxIdField=$(searchBoxIdFields[i]);var controlServerData={resultsUrl:searchBoxIdField.siblings('
2024-10-06 23:00:41 UTC	59	IN	Data Raw: 64 46 69 65 6c 64 2e 76 61 6c 28 29 2c 73 65 61 72 63 68 42 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3a 73 65 61 72 63 68 42 6f 78 49 64 46 69 65 6c 64 2e 73 69 62 6c 69 6e 67 73 Data Ascii: dField.val(),searchButtonSelector:searchBoxIdField.siblings
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 28 27 5b 64 61 74 61 2d 73 66 2d 72 6f 6c 65 3d 22 73 65 61 72 63 68 42 75 74 74 6f 6e 49 64 22 5d 27 29 2e 66 69 72 73 74 28 29 2e 76 61 6c 28 29 7d 3b 66 65 61 74 68 65 72 53 65 61 72 63 68 42 6f 78 57 69 64 67 65 74 28 63 6f 6e 74 72 6f 6c 53 65 72 76 65 72 44 61 74 61 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 65 61 74 68 65 72 53 65 61 72 63 68 42 6f 78 57 69 64 67 65 74 28 73 65 72 76 65 72 44 61 74 61 29 7b 76 61 72 20 73 65 61 72 63 68 54 65 78 74 42 6f 78 3d 24 28 73 65 72 76 65 72 44 61 74 61 2e 73 65 61 72 63 68 54 65 78 74 42 6f 78 53 65 6c 65 63 74 6f 72 29 2c 73 65 61 72 63 68 42 75 74 74 6f 6e 3d 24 28 73 65 72 76 65 72 44 61 74 61 2e 73 65 61 72 63 68 42 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 29 3b 73 65 61 72 63 68 42 75 74 74 6f 6e 2e 63 Data Ascii: ('[data-sf-role="searchButtonId"]').first().val()};featherSearchBoxWidget(controlServerData);}function featherSearchBoxWidget(serverData){var searchTextBox=$(serverData.searchTextBoxSelector),searchButton=$(serverData.searchButtonSelector);searchButton.c
2024-10-06 23:00:41 UTC	1071	IN	Data Raw: 67 67 65 73 74 69 6f 6e 73 52 6f 75 74 65 2c 64 61 74 61 54 79 70 65 3a 27 6a 73 6f 6e 27 2c 64 61 74 61 3a 72 65 71 75 65 73 74 2c 73 75 63 63 65 73 73 3a 73 75 67 67 65 73 74 69 6f 6e 73 53 75 63 63 65 73 73 48 61 6e 64 6c 65 72 7d 29 3b 7d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 61 76 69 67 61 74 65 54 6f 52 65 73 75 6c 74 73 28 65 29 7b 69 66 28 21 65 29 0a 65 3d 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 69 66 28 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 29 7b 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 7d 0a 65 6c 73 65 7b 65 2e 63 61 6e 63 65 6c 42 75 62 62 6c 65 3d 74 72 75 65 3b 7d 0a 69 66 28 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 7d 0a 65 6c 73 65 7b 65 Data Ascii: ggestionsRoute,dataType:'json',data:request,success:suggestionsSuccessHandler});}}}function navigateToResults(e){if(!e)e=window.event;if(e.stopPropagation){e.stopPropagation();}else{e.cancelBubble=true;}if(e.preventDefault){e.preventDefault();}else{e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.7	49852	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	937	OUT	GET /images/default-source/default-album/g4s-logo.png?sfvrsn=8e1596ff_4 HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:41 UTC	390	IN	HTTP/1.1 200 OK Last-Modified: Wed, 06 May 2020 09:49:35 GMT Content-Type: image/png Content-Length: 10786 Cache-Control: max-age=5723313, public Expires: Thu, 12 Dec 2024 04:49:13 GMT Date: Sun, 06 Oct 2024 23:00:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 6-27013661-27012886 2CNN RT(1728255639995 206) q(0 0 0 -1) r(0 0) U18
2024-10-06 23:00:41 UTC	1062	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 52 00 00 00 c7 08 06 00 00 00 4b 09 db ab 00 00 20 00 49 44 41 54 78 9c ed 9d 07 74 5c c5 f5 ff af 7a b3 2c cb aa b6 ba 76 b5 6a 96 2d 69 b5 ea 2e b2 03 04 08 04 9b 84 f0 cb 3f 94 13 20 09 bd fc 42 0b 24 81 d0 02 a1 77 08 bd 84 50 7e 84 9e 40 30 01 0c a1 85 e0 00 09 24 14 1b 5b 92 7b af b2 a5 9d ff dc f7 a4 df 4f c8 5b de ee be 79 77 de be f9 9e f3 39 1c 9f e3 63 66 ee 9b f9 ee bc 37 77 ee 00 c4 a1 2a 53 d2 e0 fd 8a 26 18 f2 74 00 6b e8 85 4d ee 36 58 59 dd 02 83 ae 56 91 5c c8 f9 8c f3 8e 22 20 7f e3 bc c6 79 92 f3 28 e7 16 ce 2f 39 a7 70 0e e1 d4 73 b2 05 3f a3 b8 61 2f 1f db ef 54 cc a0 9e 6a 4a 4e 90 2f 3d 0b ce cb 2b 81 75 6e af 66 a8 1b b8 a1 f6 bb 84 19 aa 8f c3 14 31 b1 99 f3 16 e7 0e ce c9 Data Ascii: PNGIHDRRK IDATxt\z,vj-i.? B$wP~@0$[{O[yw9cf7w*S&tkM6XYV\" y(/9ps?a/TjJN/=+unf1
2024-10-06 23:00:41 UTC	63	IN	Data Raw: b5 be 5d bd d6 2b 39 5d e7 4d 9d 0e 1b 47 2f e1 e3 93 e3 ab 01 7a 33 71 32 ef 52 9b 63 24 0c f1 d7 fa 37 f9 6b 7d 66 62 22 f5 30 56 52 a2 17 d6 3c 7d b9 ac 01 0b 48 1f be c3 dd c6 56 54 b7 Data Ascii: ]+9]MG/z3q2Rc$7k}fb"0VR<}HVT
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 50 1b 8a 53 d9 c5 99 4c 6d 90 46 e8 af 6e d1 7e 7c 8f c8 9e 4a 3d 7c 95 94 e4 d2 b9 7c 75 ba b9 b6 e3 89 9d ae 36 d6 4f 6f 2a 4e a5 93 da 24 8d b0 c5 dd a6 1d fa 98 96 94 42 3d 6c 95 94 be 26 1c 91 45 9c 2e ce f7 38 67 71 2e e1 dc c9 79 9c f3 24 e7 0d ce bb 9c b7 82 f0 36 e7 1d ce 73 9c 47 39 4f 8c e3 69 ce bd 9c 6b 38 37 04 e1 e2 85 35 35 cf b0 59 73 d8 da 8a 66 6a 43 71 2a df a3 36 c9 70 ac 70 b5 68 b9 a3 bf ce 2f 13 3e 29 08 95 c4 c1 33 af 1d 9c 45 9c 13 39 e7 70 7e c9 b9 99 73 23 04 9f 47 e3 b9 71 f4 ef b7 5b db 7c 67 68 32 67 26 e7 78 ce f5 9c 17 38 2b 38 bb 39 8c 94 b4 44 f6 b8 af 63 84 b9 db 59 bf 7a c5 a7 40 fa 2a fa 5b f9 4a 74 43 8d 0f f2 e2 eb 48 e8 34 ce 81 9c cb 40 5f 84 7c 09 e6 ce c7 e5 96 f5 24 8e 85 49 76 5e d0 7f d1 70 75 b9 0a a8 0d 33 Data Ascii: PSLmFn~\|J=\|\|u6OoN$B=l&E.8gq.y$6sG9Oik8755YsfjCq6pph/>)3E9p~s#Gq[\|gh2g&x8+89DcYz@*[JtCH4@_\|$Iv^pu3
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: af aa 42 1d 04 c7 90 34 39 8b bd d3 35 9b f9 2b 55 92 7e 08 86 38 53 a9 cd 32 14 eb 6b da 60 83 db 0b 95 29 69 c6 66 9a 18 f5 05 1b 67 0e e4 5f 31 c6 32 6a e1 15 87 5f 18 68 a0 c2 64 f6 f7 b8 18 6b 99 cb d6 a8 a3 a3 c1 38 9b da 28 c3 31 56 b0 e4 44 da d7 fb df 05 1b 63 0e e5 b8 d8 c2 19 9d 9e 89 b2 b1 8a 58 49 4b 66 cf 75 f7 32 e6 6a 53 49 fa fb f2 25 b5 49 1a 35 d2 91 ba 6e f8 73 69 1d a4 24 90 e4 85 e3 b1 aa ed 51 8d bf f8 05 6f e8 b0 b4 82 8c dd ab 65 db 9e 36 4f 15 f3 77 2c 60 1b 55 25 fd 89 7c 93 da 24 8d 82 d5 9f b6 b8 7d 54 af f7 ff 2f da b1 17 e7 5c 1e 4b 50 23 51 97 45 1d 52 84 22 25 91 dd e5 f5 31 56 a3 92 f4 c7 f1 0a b5 39 46 c2 aa d1 d7 fb e3 72 0a c2 4e 3a 01 7a 38 ea b1 17 df f8 41 bf 84 53 a8 f0 a7 73 35 71 47 15 a3 4c 9f 96 cf b6 74 cc 67 Data Ascii: B495+U~8S2k`)ifg_12j_hdk8(1VDcXIKfu2jSI%I5nsi$Qoe6Ow,`U%\|$}T/\KP#QER"%1V9FrN:z8ASs5qGLtg
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 6d 42 8c 14 c1 1f c4 6b 0a ca 45 0f 99 f3 81 7e 4e 1b e1 4c 51 01 10 21 bc 9a 15 0b 19 53 07 2d 14 fb 09 eb 7d 1c a9 29 2d 13 96 94 35 68 93 11 57 36 e3 56 a7 98 3c 6e b7 24 fd 93 24 30 d1 60 df 98 05 1a 69 37 5c 2d de 48 ed 90 4f 3a c6 b1 62 42 60 be 7e 00 f4 c1 0a c5 93 e2 ba 1e 9f fa ef a9 d3 61 77 6d 87 f6 fd 14 4f 3f 8d 1a ea 49 12 98 a3 51 64 29 d8 fc be d5 46 8a 3f 80 ff ae 6a 86 fc 24 e1 2f 60 76 ba 83 ed 50 41 31 30 55 8f 01 7d a0 82 81 95 6a 2a c4 75 3d 7e 85 b5 4a 5f c3 d5 29 37 d3 5d fc 95 bf 5f cf 3b fd 4c 02 93 34 82 0c 05 9b bf 13 a2 7d c2 8c 74 4b 4d 9b f6 69 26 4b 6c 39 3d 94 dd 8a b6 1f 23 26 0c e6 28 15 e4 2e 50 72 93 b8 ae 3b 43 58 b3 14 0b 3f 63 ee e9 1a 97 f7 60 1b 5c 92 f7 b0 04 26 9a c4 19 a4 30 52 bc 7a 64 47 6d 27 2c 9c 34 d5 8a Data Ascii: mBkE~NLQ!S-})-5hW6V<n$$0`i7\-HO:bB`~awmO?IQd)F?j$/`vPA10U}j*u=~J_)7]_;L4}tKMi&Kl9=#&(.Pr;CX?c`\&0RzdGm',4
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: d7 03 bf ca b7 a4 7a 7e 28 e1 2d a4 2b 81 7a 9c c6 0e 6e 40 c5 f4 39 f1 23 09 3a e1 64 23 2d e4 0c 03 7d cc 83 32 bf d6 ed 67 de 3e ff ba d8 8f 8e be 21 81 81 22 07 98 64 a2 64 46 8a 6c ad f1 c1 06 77 1b 14 88 bf 65 34 9c 4a 38 5f 81 04 63 35 46 36 73 aa a3 0d c2 3f 24 e8 80 93 8d 54 fe ab 70 d3 92 d9 e3 9d 3d 7e e6 6a 8f f5 e8 a8 0c 1b 4c 88 99 37 a8 92 19 e9 8a 6a 7d 55 7a 69 7e 99 b8 d1 69 5c 78 a7 da 32 a0 1e ab b1 83 3f 08 b9 d1 04 e0 63 09 1a 3f 11 a7 7c 23 c5 53 16 d4 b1 36 44 6d d9 34 3f 56 d2 df 1c 7d cd d2 9b 25 30 50 e4 64 13 4d 94 d4 48 91 2d a3 ab d2 69 c9 a9 a2 c6 68 24 42 47 8f 87 95 e9 92 68 3a bf 44 82 86 4f 64 13 38 a3 60 09 16 53 a0 8e b5 31 12 81 dd e8 6d c3 4a fa fe fe c8 93 f4 37 71 b2 24 30 51 6c c3 e6 78 32 d2 fe d1 63 a3 97 c8 b1 Data Ascii: z~(-+zn@9#:d#-}2g>!"ddFlwe4J8_c5F6s?$Tp=~jL7j}Uzi~i\x2?c?\|#S6Dm4?V}%0PdMH-ih$BGh:DOd8`S1mJ7q$0Qlx2c
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: e8 ab d2 01 a0 1f db 46 f8 7b a0 0e d4 4b d0 b0 70 bc 12 ea 09 c4 a1 ae 07 fa 98 87 22 aa b4 a7 c2 a4 14 f8 75 41 39 37 d0 6e 18 56 df 43 95 91 ee ab 6b 80 7e 6c 1b 61 0f 67 6a a0 0e 7c 24 41 e3 c2 71 52 a8 27 10 47 ea 01 fa 58 87 e2 c3 68 3b f6 3f d3 6b 80 35 cd d5 52 9b d4 ab bc 32 d2 00 b2 d3 e5 90 73 02 75 e0 42 09 1a 66 04 d3 13 c0 25 53 2e c8 5b 95 6b 8c a8 aa 73 1d 3d 39 5f 3b b1 a4 8e 7f 2a 23 0d 21 9c df 76 29 6a 12 f0 b6 d1 2a 09 1a 66 84 65 a0 27 f1 c6 ab 96 00 7d 8c 43 31 0c 7a a1 de 88 54 95 92 06 6b dc 6d b0 db d3 a9 56 a2 ca 48 43 c9 0d f6 31 d2 a0 9b e0 af 49 d0 38 23 2c 0e d6 01 9b eb 7e a0 8f 6d 38 9e 8f a6 63 1f 56 ce d4 be 8b aa 6f a2 f4 48 6e a4 32 e7 4d 4f e4 ae 60 9d 90 3d 39 7f 3c f7 07 eb 84 4d 85 bf 6e d4 31 35 c2 c1 91 76 0c af Data Ascii: F{Kp"uA97nVCk~lagj\|$AqR'GXh;?k5R2suBf%S.[ks=9_;#!v)jfe'}C1zTkmVHC1I8#,~m8cVoHn2MO`=9<Mn15v
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: ac 22 27 6c 35 3a 5e af 13 74 4e 11 1d 9f 41 84 f7 2f 05 53 4b 7a 16 0c 79 3a 60 8d db 14 73 38 44 02 83 74 a4 91 22 da c6 53 4d 87 ff b7 cd ad 43 90 9c 40 3d 46 65 e3 84 d8 66 8a 71 e1 c9 a7 0f 2d e8 90 22 36 56 42 0c 3b f4 13 55 9d 92 0e 5b f8 6a 74 bd db 6b 96 41 bc 25 81 49 3a d2 48 91 8d 7c 55 3a e2 eb 1b 9e 55 36 7d af 04 63 55 16 3e 8e 71 9a 44 ac 1c b0 77 a1 d6 78 a7 9f 53 1d f4 e9 45 a1 d3 73 8b 61 b8 ae 0b 56 99 67 10 5e 09 4c d2 b1 46 da ef 6a 61 cc ed 63 cf 75 74 0f 41 66 aa 4a 87 d2 89 e9 38 68 b4 9a 0a ca 4c 65 64 0d e8 97 1a 9a aa bb f0 6a 91 86 1e b3 2b e2 3f 26 81 51 3a d2 48 91 b5 e5 b3 18 f3 f6 0d 1f d4 e0 51 49 fa 00 37 c7 3c 49 62 50 16 e8 57 95 52 07 41 a1 83 b5 13 4d 5d 89 a2 8a 92 52 e0 b3 aa 59 b0 d5 e3 33 db 24 4a 06 e5 4f d2 8f Data Ascii: "'l5:^tNA/SKzy:`s8Dt"SMC@=Fefq-"6VB;U[jtkA%I:H\|U:U6}cU>qDwxSEsaVg^LFjacutAfJ8hLedj+?&Q:HQI7<IbPWRAM]RY3$JO
2024-10-06 23:00:41 UTC	949	IN	Data Raw: d1 a4 50 0b 37 52 2c 9b b7 4e 2e 23 45 3e 22 37 14 87 82 49 fa da b5 24 9e ae a5 7f 29 6b 80 8e f4 49 d4 c3 54 49 49 6e 5d 51 50 06 7e 73 af 5e 36 0b ea 8d 27 c7 b3 12 13 f5 eb ba 2e da eb e9 80 0b f2 4a a8 87 aa 92 92 bc ba 1b af 5e ae 97 66 a3 69 22 c7 53 9b 89 d3 e1 66 ba 7b 93 bb 2d 8f 35 ce 86 97 f8 ea f4 9b 59 53 a8 87 ac 92 92 7c ba b9 a8 52 66 23 45 ee a0 36 13 a7 33 e0 6a bd af bf ba 05 f8 ea 94 8f 95 1e fe e3 eb 82 82 a4 14 ea a1 ab a4 24 8f 6c 60 a4 08 75 a2 be c2 d5 5a cf 0d 15 d6 bb bd da 78 f9 8a 1b eb a2 6c b5 c1 ae a4 a4 c9 26 46 9a c6 59 2a 81 99 38 19 fc 31 83 81 51 30 d3 03 57 a7 b7 15 57 43 71 b2 5a 9d 2a 39 5c 36 31 52 24 67 50 3f 79 44 6d 28 4e 66 ee d8 f3 40 33 5d cd 61 0d bd f0 45 75 33 1c ae 56 a7 4a 4e 96 8d 8c 14 99 3c a8 cc 94 Data Ascii: P7R,N.#E>"7I$)kITIIn]QP~s^6'.J^fi"Sf{-5YS\|Rf#E63j$l`uZxl&FY81Q0WWCqZ9\61R$gP?yDm(Nf@3]aEu3VJN<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.7	49859	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	877	OUT	GET /ScriptResource.axd?d=VKaJmfFWDpQxp1_HxsR1qKyfqr1LoFdI1Larj06AwCrRGITZ0NZSm_gMLZ6jHmmIF30zk8r8VDydl4Hd0d7FZ9PIVI4Kle1brOUAMAyDWepfLOYh0V6vpqj1mJBFx92SzKTkVvuYlX-uO3fZ9ykmpzYqFvEcr5MMYvRo81yJnDqp6rzP6WxevUeNAFj3K6WqcNxIoYGo1-d3_ru3xKsagA2&t=fffffffffa5b9a95 HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:41 UTC	414	IN	HTTP/1.1 200 OK Last-Modified: Sat, 05 Oct 2024 21:28:27 GMT Content-Type: application/x-javascript; charset=utf-8 Content-Length: 252469 Cache-Control: max-age=31447667, public Expires: Sun, 05 Oct 2025 22:28:27 GMT Date: Sun, 06 Oct 2024 23:00:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 4-23092341-0 0CNN RT(1728255640006 201) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:41 UTC	1038	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 28 6a 51 75 65 72 79 29 7d 29 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 3b 22 69 6e 68 65 72 69 74 22 3d 3d 3d 65 3b 29 74 3d 74 2e 70 61 72 65 6e 74 28 29 2c 65 3d 74 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 3b 72 65 74 75 72 6e 22 68 69 64 64 65 6e 22 21 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 69 3b 74 2e 6c 65 6e 67 74 68 26 26 74 5b 30 5d 21 3d 3d 64 6f 63 75 6d 65 6e 74 3b 29 7b 69 66 28 65 3d 74 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 2c 28 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 65 7c 7c 22 72 65 6c 61 74 69 76 65 22 3d Data Ascii: (function(t){t(jQuery)})(function(t){function e(t){for(var e=t.css("visibility");"inherit"===e;)t=t.parent(),e=t.css("visibility");return"hidden"!==e}function i(t){for(var e,i;t.length&&t[0]!==document;){if(e=t.css("position"),("absolute"===e\|\|"relative"=
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 4a 75 6c 79 22 2c 22 41 75 67 75 73 74 22 2c 22 53 65 70 74 65 6d 62 65 72 22 2c 22 4f 63 74 6f 62 65 72 22 2c 22 4e 6f 76 65 6d 62 65 72 22 2c 22 44 65 63 65 6d 62 65 72 22 5d 2c 6d 6f 6e 74 68 4e 61 6d 65 73 53 68 6f 72 74 3a 5b 22 4a 61 6e 22 2c 22 46 65 62 22 2c 22 4d 61 72 22 2c 22 41 70 72 22 2c 22 4d 61 79 22 2c 22 4a 75 6e 22 2c 22 4a 75 6c 22 2c 22 41 75 67 22 2c 22 53 65 70 22 2c 22 4f 63 74 22 2c 22 4e 6f 76 22 2c 22 44 65 63 22 5d 2c 64 61 79 4e 61 6d 65 73 3a 5b 22 53 75 6e 64 61 79 22 2c 22 4d 6f 6e 64 61 79 22 2c 22 54 75 65 73 64 61 79 22 2c 22 57 65 64 6e 65 73 64 61 79 22 2c 22 54 68 75 72 73 64 61 79 22 2c 22 46 72 69 64 61 79 22 2c 22 53 61 74 75 72 64 61 79 22 5d 2c 64 61 79 4e 61 6d 65 73 53 68 6f 72 74 3a 5b 22 53 75 6e 22 2c 22 4d Data Ascii: July","August","September","October","November","December"],monthNamesShort:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],dayNames:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],dayNamesShort:["Sun","M
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 63 61 6c 65 6e 64 61 72 20 74 64 20 61 22 3b 72 65 74 75 72 6e 20 65 2e 6f 6e 28 22 6d 6f 75 73 65 6f 75 74 22 2c 69 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 22 29 2c 2d 31 21 3d 3d 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 72 65 76 22 29 26 26 74 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 72 65 76 2d 68 6f 76 65 72 22 29 2c 2d 31 21 3d 3d 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6e 65 78 74 22 29 26 26 74 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c Data Ascii: calendar td a";return e.on("mouseout",i,function(){t(this).removeClass("ui-state-hover"),-1!==this.className.indexOf("ui-datepicker-prev")&&t(this).removeClass("ui-datepicker-prev-hover"),-1!==this.className.indexOf("ui-datepicker-next")&&t(this).removeCl
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 3f 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 28 74 2c 65 29 2c 76 6f 69 64 20 30 29 3a 6e 65 77 20 6f 28 74 2c 65 29 7d 2c 74 2e 65 78 74 65 6e 64 28 6f 2c 6e 2c 7b 76 65 72 73 69 6f 6e 3a 73 2e 76 65 72 73 69 6f 6e 2c 5f 70 72 6f 74 6f 3a 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 73 29 2c 5f 63 68 69 6c 64 43 6f 6e 73 74 72 75 63 74 6f 72 73 3a 5b 5d 7d 29 2c 61 3d 6e 65 77 20 69 2c 61 2e 6f 70 74 69 6f 6e 73 3d 74 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 61 2e 6f 70 74 69 6f 6e 73 29 2c 74 2e 65 61 63 68 28 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 72 65 74 75 72 6e Data Ascii: ction(t,e){return this._createWidget?(arguments.length&&this._createWidget(t,e),void 0):new o(t,e)},t.extend(o,n,{version:s.version,_proto:t.extend({},s),_childConstructors:[]}),a=new i,a.options=t.widget.extend({},a.options),t.each(s,function(e,s){return
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 6e 2e 63 68 61 72 41 74 28 30 29 3f 28 69 3d 6f 5b 6e 5d 2e 61 70 70 6c 79 28 6f 2c 61 29 2c 69 21 3d 3d 6f 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 28 72 3d 69 26 26 69 2e 6a 71 75 65 72 79 3f 72 2e 70 75 73 68 53 74 61 63 6b 28 69 2e 67 65 74 28 29 29 3a 69 2c 21 31 29 3a 76 6f 69 64 20 30 29 3a 74 2e 65 72 72 6f 72 28 22 6e 6f 20 73 75 63 68 20 6d 65 74 68 6f 64 20 27 22 2b 6e 2b 22 27 20 66 6f 72 20 22 2b 65 2b 22 20 77 69 64 67 65 74 20 69 6e 73 74 61 6e 63 65 22 29 3a 74 2e 65 72 72 6f 72 28 22 63 61 6e 6e 6f 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 73 20 6f 6e 20 22 2b 65 2b 22 20 70 72 69 6f 72 20 74 6f 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 3b 20 22 2b 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 27 22 2b 6e 2b Data Ascii: n.charAt(0)?(i=o[n].apply(o,a),i!==o&&void 0!==i?(r=i&&i.jquery?r.pushStack(i.get()):i,!1):void 0):t.error("no such method '"+n+"' for "+e+" widget instance"):t.error("cannot call methods on "+e+" prior to initialization; "+"attempted to call method '"+n+
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 28 29 2c 74 2e 65 61 63 68 28 74 68 69 73 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 65 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2c 74 29 7d 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 6f 66 66 28 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 73 70 61 63 65 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 77 69 64 67 65 74 46 75 6c 6c 4e 61 6d 65 29 2c 74 68 69 73 2e 77 69 64 67 65 74 28 29 2e 6f 66 66 28 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 73 70 61 63 65 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 29 2c 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 2e 6f 66 66 28 74 68 Data Ascii: ){var e=this;this._destroy(),t.each(this.classesElementLookup,function(t,i){e._removeClass(i,t)}),this.element.off(this.eventNamespace).removeData(this.widgetFullName),this.widget().off(this.eventNamespace).removeAttr("aria-disabled"),this.bindings.off(th
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 22 29 29 7d 2c 65 6e 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 65 74 4f 70 74 69 6f 6e 73 28 7b 64 69 73 61 62 6c 65 64 3a 21 31 7d 29 7d 2c 64 69 73 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 65 74 4f 70 74 69 6f 6e 73 28 7b 64 69 73 61 62 6c 65 64 3a 21 30 7d 29 7d 2c 5f 63 6c 61 73 73 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 69 2c 6f 29 7b 76 61 72 20 61 2c 72 3b 66 6f 72 28 72 3d 30 3b 69 2e 6c 65 6e 67 74 68 3e 72 3b 72 2b 2b 29 61 3d 6e 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 5b 69 5b 72 5d 5d 7c 7c 74 28 29 2c 61 3d 65 2e 61 64 64 3f 74 28 74 2e 75 6e 69 71 75 65 28 61 2e 67 65 74 28 29 2e 63 6f Data Ascii: "))},enable:function(){return this._setOptions({disabled:!1})},disable:function(){return this._setOptions({disabled:!0})},_classes:function(e){function i(i,o){var a,r;for(r=0;i.length>r;r++)a=n.classesElementLookup[i[r]]\|\|t(),a=e.add?t(t.unique(a.get().co
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 30 7d 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 61 26 26 28 72 2e 67 75 69 64 3d 61 2e 67 75 69 64 3d 61 2e 67 75 69 64 7c 7c 72 2e 67 75 69 64 7c 7c 74 2e 67 75 69 64 2b 2b 29 3b 76 61 72 20 68 3d 73 2e 6d 61 74 63 68 28 2f 5e 28 5b 5c 77 3a 2d 5d 2a 29 5c 73 2a 28 2e 2a 29 24 2f 29 2c 6c 3d 68 5b 31 5d 2b 6f 2e 65 76 65 6e 74 4e 61 6d 65 73 70 61 63 65 2c 63 3d 68 5b 32 5d 3b 63 3f 6e 2e 6f 6e 28 6c 2c 63 2c 72 29 3a 69 2e 6f 6e 28 6c 2c 72 29 7d 29 7d 2c 5f 6f 66 66 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 69 3d 28 69 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2e 6a 6f 69 6e 28 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 73 70 61 63 65 2b 22 20 22 29 2b 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 73 70 61 63 65 2c 65 2e 6f 66 66 28 69 29 Data Ascii: 0}"string"!=typeof a&&(r.guid=a.guid=a.guid\|\|r.guid\|\|t.guid++);var h=s.match(/^([\w:-])\s(.*)$/),l=h[1]+o.eventNamespace,c=h[2];c?n.on(l,c,r):i.on(l,r)})},_off:function(e,i){i=(i\|\|"").split(" ").join(this.eventNamespace+" ")+this.eventNamespace,e.off(i)
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 3d 74 79 70 65 6f 66 20 6e 26 26 28 6e 3d 7b 65 66 66 65 63 74 3a 6e 7d 29 3b 76 61 72 20 61 2c 72 3d 6e 3f 6e 3d 3d 3d 21 30 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 69 3a 6e 2e 65 66 66 65 63 74 7c 7c 69 3a 65 3b 6e 3d 6e 7c 7c 7b 7d 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 6e 3d 7b 64 75 72 61 74 69 6f 6e 3a 6e 7d 29 2c 61 3d 21 74 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 6e 29 2c 6e 2e 63 6f 6d 70 6c 65 74 65 3d 6f 2c 6e 2e 64 65 6c 61 79 26 26 73 2e 64 65 6c 61 79 28 6e 2e 64 65 6c 61 79 29 2c 61 26 26 74 2e 65 66 66 65 63 74 73 26 26 74 2e 65 66 66 65 63 74 73 2e 65 66 66 65 63 74 5b 72 5d 3f 73 5b 65 5d 28 6e 29 3a 72 21 3d 3d 65 26 26 73 5b 72 5d 3f 73 5b 72 5d 28 6e 2e 64 75 72 61 74 69 6f 6e 2c Data Ascii: =typeof n&&(n={effect:n});var a,r=n?n===!0\|\|"number"==typeof n?i:n.effect\|\|i:e;n=n\|\|{},"number"==typeof n&&(n={duration:n}),a=!t.isEmptyObject(n),n.complete=o,n.delay&&s.delay(n.delay),a&&t.effects&&t.effects.effect[r]?s[e](n):r!==e&&s[r]?s[r](n.duration,
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 6d 65 6e 74 2e 63 73 73 28 22 6f 76 65 72 66 6c 6f 77 2d 79 22 29 2c 6e 3d 22 73 63 72 6f 6c 6c 22 3d 3d 3d 69 7c 7c 22 61 75 74 6f 22 3d 3d 3d 69 26 26 65 2e 77 69 64 74 68 3c 65 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 57 69 64 74 68 2c 6f 3d 22 73 63 72 6f 6c 6c 22 3d 3d 3d 73 7c 7c 22 61 75 74 6f 22 3d 3d 3d 73 26 26 65 2e 68 65 69 67 68 74 3c 65 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3b 72 65 74 75 72 6e 7b 77 69 64 74 68 3a 6f 3f 74 2e 70 6f 73 69 74 69 6f 6e 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 28 29 3a 30 2c 68 65 69 67 68 74 3a 6e 3f 74 2e 70 6f 73 69 74 69 6f 6e 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 28 29 3a 30 7d 7d 2c 67 65 74 57 69 74 68 69 6e 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e Data Ascii: ment.css("overflow-y"),n="scroll"===i\|\|"auto"===i&&e.width<e.element[0].scrollWidth,o="scroll"===s\|\|"auto"===s&&e.height<e.element[0].scrollHeight;return{width:o?t.position.scrollbarWidth():0,height:n?t.position.scrollbarWidth():0}},getWithinInfo:function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.7	49853	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	950	OUT	GET /images/default-source/default-album/nhsbloodandtransplant.png?sfvrsn=77d6694d_6 HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:41 UTC	390	IN	HTTP/1.1 200 OK Last-Modified: Wed, 06 May 2020 10:09:36 GMT Content-Type: image/png Content-Length: 3174 Cache-Control: max-age=5723314, public Expires: Thu, 12 Dec 2024 04:49:14 GMT Date: Sun, 06 Oct 2024 23:00:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 11-21477623-21476660 2CNN RT(1728255640009 221) q(0 0 0 -1) r(0 0) U18
2024-10-06 23:00:41 UTC	1062	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7f 00 00 00 6c 08 03 00 00 00 b5 af 42 d4 00 00 00 6f 50 4c 54 45 00 00 00 1d 1d 1b 00 72 ba 1d 1d 1b 1d 1d 1b 00 72 ba 1d 1d 1b 1d 1d 1b 1d 1d 1b 1d 1d 1b 00 72 ba 1d 1d 1b 1d 1d 1b 1d 1d 1b 1d 1d 1b 1d 1d 1b 1d 1d 1b 1d 1d 1b 1d 1d 1b 00 72 ba 10 7b be 1d 1d 1b 20 84 c3 30 8c c7 40 95 cb 50 9e d0 60 a7 d4 70 b0 d8 80 b9 dd 8f c1 e1 9f ca e5 af d3 e9 bf dc ee cf e5 f2 df ed f6 ef f6 fb ff ff ff 12 44 ae da 00 00 00 13 74 52 4e 53 00 10 20 20 30 40 40 50 60 70 80 80 8f 9f af bf cf df ef 65 3b 30 e2 00 00 0b 93 49 44 41 54 78 9c ed 9c e9 62 e3 2a 12 85 a5 91 5a 96 af 2c 6b f1 9e d8 8e 1d e7 fd 9f 71 8c d8 4e 15 a0 28 e9 f4 b8 ef 98 f3 ab 0d 88 e5 03 55 15 a0 74 92 44 3d 56 ff f9 e7 af d0 af 47 73 78 Data Ascii: PNGIHDRlBoPLTErrrr{ 0@P`pDtRNS 0@@P`pe;0IDATxb*Z,kqN(UtD=VGsx
2024-10-06 23:00:41 UTC	64	IN	Data Raw: b5 6e ae a8 bc df 43 08 aa be ef cb a5 b0 64 e0 5b 07 f2 91 69 8c 7f 24 7f 8f fb f5 7d 8e ab 72 27 dd 3d 0e 8e c2 3d e8 5f 93 5b 7e 33 d7 4f ce 1f 02 4a d8 b5 7a 3e 88 b8 f2 55 4e e0 72 f7 bb Data Ascii: nCd[i$}r'==_[~3OJz>UNr
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: ff b8 9d e8 8d ef 9e d4 69 43 a4 27 e7 0f a6 1e 0c ba e7 94 8d df 3d d2 2f 4a b8 fb 1d 0c d5 ed ed 78 d8 6f c5 5f 85 1d f8 5f 20 1d 23 7f c9 1f b6 a5 60 d0 3d 57 87 2f 2b f7 86 dd ff c2 08 c3 f4 c9 2d 0d 7c 0e f7 dc fc d1 d2 a3 41 77 f9 b1 bb 00 f6 17 62 58 72 15 70 20 20 38 a0 78 6e fe b8 bf 0d d9 13 9b cb 3e 70 03 e3 0e 19 57 f6 a2 78 84 a1 eb 73 f3 67 7f d9 68 e4 5c dd 3a 77 8f 64 f9 23 ef f3 2a f0 41 a3 17 ff 93 f3 bf 04 a8 38 9f 24 f2 bb c7 b0 fb 7d fd ec 92 98 6e 8f 9f 9b 3f e5 06 e2 5b e0 f1 c3 cf 2f fc e1 cb 85 7d 88 f8 d4 fc 31 ce a1 a7 06 1c e1 96 cd 09 3d e2 c7 92 c2 7a 05 ed cf 9b 73 36 f1 d4 fc f7 17 2b 8a 65 7b a1 1a ac 0c fc 26 47 fc 3b c8 90 66 6c fb 72 76 e6 e0 f6 f6 ea b9 18 78 6a fe 7f 56 bb c3 f1 a8 ff c7 8d e3 de ff f9 6d e4 ff 60 45 Data Ascii: iC'=/Jxo__ #`=W/+-\|AwbXrp 8xn>pWxsgh\:wd#*A8$}n?[/}1=zs6+e{&G;flrvxjVm`E
2024-10-06 23:00:41 UTC	596	IN	Data Raw: 02 5a 76 75 99 b0 40 47 86 45 a2 c3 b2 eb 2a 7e 58 f8 f8 63 81 a5 99 0b 3f 7f fb c2 d3 de 71 8d f0 ef 0c 13 d5 9f 4f f9 df 5b ea 28 87 0e eb b2 47 09 8d c6 a3 30 a4 06 da f7 f8 ab 8d 27 b5 ff 0a 6d 0a 8f 0f f1 c0 12 27 be 32 9c 6a 58 30 0a 98 8f bf fc 67 6e db f3 f3 57 fb af 0c 1a f9 2a 7f 3b 10 b5 65 9f c0 df 44 79 3a 3c 97 cb 4f ed 27 c9 fe 0b fb bd 98 ca 1f 63 63 89 40 5c 1b 69 c3 37 a7 dd 96 c3 91 bb c9 da 2e 07 d9 69 79 ec 39 b7 98 0a 5b 47 46 4e 44 68 83 72 13 0a c7 19 7e fe 0a c4 d0 b8 6a e4 5b eb 7f 78 83 72 30 2b 01 fe b5 9c e9 d4 bc ce 7a 7b 34 b7 1d a0 e7 0f 10 87 e3 76 7f 9c bf 58 cd 69 0a 38 50 dc ef eb 78 a5 d5 07 66 6a 35 a9 e3 9d 4e 1f 6c d1 93 a7 ce 94 e6 fc 65 7a 5b 55 3a 0e 1a e3 af a3 8b a6 31 21 fc 17 f9 ab 25 b3 30 cb 6b 13 e6 9f 8a Data Ascii: Zvu@GE~Xc?qO[(G0'm'2jX0gnW;eDy:<O'cc@\i7.iy9[GFNDhr~j[xr0+z{4vXi8Pxfj5Nlez[U:1!%0k

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:41 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:41 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: f076ebb2-f01e-001f-3766-175dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230041Z-1657d5bbd48762wn1qw4s5sd3000000002c000000000yhpc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:41 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:41 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:41 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d21ea5d-701e-0098-0502-17395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230041Z-1657d5bbd48xdq5dkwwugdpzr000000002w000000000s3y3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:41 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.7	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:41 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:41 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08bf7a15-f01e-0020-7706-17956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230041Z-1657d5bbd48sqtlf1huhzuwq70000000027g00000000y627 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:41 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.7	49854	172.65.208.22	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	544	OUT	GET /26584007.js HTTP/1.1 Host: js-eu1.hs-scripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:00:41 UTC	915	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:41 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 1955 Connection: close Cf-Bgj: minify Cf-Polished: origSize=2065 access-control-allow-credentials: true access-control-allow-origin: https://www.safenames.net access-control-max-age: 3600 vary: origin x-content-type-options: nosniff x-envoy-upstream-service-time: 35 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: fra04/hubapi-td/envoy-proxy-576fd69b8-s5p7q x-evy-trace-virtual-host: all x-hubspot-correlation-id: 808625de-1251-461b-81ae-b19e7dfc5ee8 x-request-id: 808625de-1251-461b-81ae-b19e7dfc5ee8 CF-Cache-Status: HIT Age: 2639 Last-Modified: Sun, 06 Oct 2024 22:16:42 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ce944deaffbd08f-CDG
2024-10-06 23:00:41 UTC	454	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6e 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2d 65 75 31 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 2f 77 65 62 2d 69 6e 74 65 72 61 63 74 69 76 65 73 2d 65 6d 62 65 64 2e 6a 73 22 2c 6e 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 6e 2e 69 64 3d 74 2c 72 29 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 2c 72 5b 61 5d 29 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e Data Ascii: !function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js-eu1.hubspot.com/web-interactives-embed.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.
2024-10-06 23:00:41 UTC	1369	IN	Data Raw: 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 68 75 62 6c 65 74 22 3a 22 65 75 31 22 7d 29 3b 76 61 72 20 5f 68 73 70 3d 77 69 6e 64 6f 77 2e 5f 68 73 70 3d 77 69 6e 64 6f 77 2e 5f 68 73 70 7c 7c 5b 5d 3b 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 45 6e 61 62 6c 65 64 46 65 61 74 75 72 65 47 61 74 65 73 27 2c 5b 5d 5d 29 3b 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 42 75 73 69 6e 65 73 73 55 6e 69 74 49 64 27 2c 30 5d 29 3b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 Data Ascii: s-env":"prod","data-hsjs-hublet":"eu1"});var _hsp=window._hsp=window._hsp\|\|[];_hsp.push(['addEnabledFeatureGates',[]]);_hsp.push(['setBusinessUnitId',0]);!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in
2024-10-06 23:00:41 UTC	132	IN	Data Raw: 74 61 2d 6c 65 61 64 69 6e 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 6c 6f 61 64 65 72 22 3a 22 68 73 2d 73 63 72 69 70 74 6c 6f 61 64 65 72 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 70 6f 72 74 61 6c 22 3a 32 36 35 38 34 30 30 37 2c 22 64 61 74 61 2d 68 73 6a 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 68 75 62 6c 65 74 22 3a 22 65 75 31 22 7d 29 3b Data Ascii: ta-leadin-env":"prod","data-loader":"hs-scriptloader","data-hsjs-portal":26584007,"data-hsjs-env":"prod","data-hsjs-hublet":"eu1"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.7	49856	18.66.102.11	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	553	OUT	GET /c/hotjar-1425002.js?sv=6 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:00:41 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Sun, 06 Oct 2024 23:00:41 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/09c4ec72766bb999ccb9806f23995ab4 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c387974a86541bbcc6c5141a85eeaf36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: gEUkSEQsammxEh-fk7ZYwRdZdmcie5y_q0-rpX1_0ax726LFtTPJyQ==
2024-10-06 23:00:41 UTC	13155	IN	Data Raw: 33 33 35 62 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 31 34 32 35 30 30 32 2c 22 72 22 3a 31 2e 30 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 31 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 66 61 6c 73 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 Data Ascii: 335bwindow.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1425002,"r":1.0,"rec_value":1.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent"
2024-10-06 23:00:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:41 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:41 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 6dc6331d-801e-0047-0866-177265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230041Z-1657d5bbd487nf59mzf5b3gk8n000000028000000000g2q7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:41 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:00:41 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:00:41 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b6fa471e-401e-0067-43e5-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230041Z-1657d5bbd48tqvfc1ysmtbdrg000000002dg00000000s32z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:00:41 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.7	49868	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	684	OUT	GET /ResourcePackages/Safenames/assets/dist/images/mag-glass-sm.svg HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:41 UTC	410	IN	HTTP/1.1 200 OK Etag: "0c4b5a1318bd51:0" Last-Modified: Fri, 25 Oct 2019 12:42:16 GMT Content-Type: image/svg+xml Content-Length: 459 Cache-Control: max-age=2678399, public Expires: Wed, 06 Nov 2024 23:00:39 GMT Date: Sun, 06 Oct 2024 23:00:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 0-12081081-0 0CNN RT(1728255640339 199) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:41 UTC	459	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 32 2e 32 33 20 35 32 2e 31 37 22 3e 3c 74 69 74 6c 65 3e 6d 61 67 2d 67 6c 61 73 73 2d 73 6d 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 34 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 32 2e 38 37 2c 34 30 2e 33 41 31 38 2e 30 39 2c 31 38 2e 30 39 2c 30 2c 31 2c 31 2c 33 35 2e 36 36 2c 39 2e 34 31 68 30 41 31 38 2e 31 2c 31 38 2e 31 2c 30 2c 30 2c 31 2c 32 32 2e 38 37 2c 34 30 2e 33 5a 6d 30 2d 33 33 2e 38 34 41 31 35 2e 37 34 2c 31 35 2e 37 34 2c 30 2c 31 2c 30 2c 33 34 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="#ffffff" viewBox="0 0 52.23 52.17"><title>mag-glass-sm</title><g id="Layer_14" data-name="Layer 14"><path d="M22.87,40.3A18.09,18.09,0,1,1,35.66,9.41h0A18.1,18.1,0,0,1,22.87,40.3Zm0-33.84A15.74,15.74,0,1,0,34,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.7	49867	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	951	OUT	GET /images/default-source/default-album/cushman-wakefield-logo.png?sfvrsn=11e1b817_4 HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:41 UTC	391	IN	HTTP/1.1 200 OK Last-Modified: Wed, 06 May 2020 09:50:14 GMT Content-Type: image/png Content-Length: 18031 Cache-Control: max-age=5723314, public Expires: Thu, 12 Dec 2024 04:49:14 GMT Date: Sun, 06 Oct 2024 23:00:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 12-29106727-28995695 2CNN RT(1728255640342 205) q(0 0 0 -1) r(0 0) U18
2024-10-06 23:00:41 UTC	1061	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 46 00 00 00 9b 08 02 00 00 00 08 80 c3 e3 00 00 20 00 49 44 41 54 78 9c ed 9d 07 78 1b c7 99 f7 e1 14 c7 b1 d3 13 e7 9c 58 b6 73 e7 cb e5 2e 17 59 be 2f df 97 e4 ec b8 3b b1 25 92 00 09 10 ec bd 53 14 9b 2a a9 de 48 55 ab 50 bd f7 66 c9 92 28 51 8d ea bd 51 92 d5 bb 44 51 8d 24 08 76 52 24 c5 f2 fd 17 2b 41 c0 ec 02 58 00 0b 36 bd ff 67 1e 3d 14 80 9d 99 9d 9d 79 7f f3 ce 4e 51 b4 90 48 24 12 89 d4 29 a4 68 eb 0c 90 48 24 12 89 24 8f 08 69 24 12 89 44 ea 24 22 a4 91 48 24 12 a9 93 88 90 46 22 91 48 a4 4e 22 42 1a 89 44 22 91 3a 89 08 69 24 12 89 44 ea 24 22 a4 91 48 24 12 a9 93 88 90 46 22 91 48 a4 4e 22 42 1a 89 44 22 91 3a 89 08 69 16 d5 dc dc dc d6 59 20 91 48 24 92 1d 22 a4 59 53 53 69 59 cb a3 Data Ascii: PNGIHDRF IDATxxXs.Y/;%S*HUPf(QQDQ$vR$+AX6g=yNQH$)hH$$i$D$"H$F"HN"BD":i$D$"H$F"HN"BD":iY H$"YSSiY
2024-10-06 23:00:41 UTC	64	IN	Data Raw: b3 21 ad 61 ef a1 92 5f ff 7b 91 e2 45 fd eb 5d f5 5d ba 96 be f6 5f 6d 8c 34 7e 10 b2 4b d7 22 c5 4b ba 9f fd ae fe 9b 4d ad 55 12 24 12 89 f4 dc a9 b3 21 ad 32 26 b5 50 a1 28 7d eb 5d 6e 73 Data Ascii: !a_{E]]_m4~K"KMU$!2&P(}]ns
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 61 e0 a4 3d 20 8d 0f 6f 75 d3 7d ef d7 00 5b 75 bf a1 4f 22 6f 8d f2 20 91 48 a4 e7 48 9d 0d 69 d5 03 47 17 2b 7e f8 0c 24 ed 07 69 86 41 48 dd 2f ff 9d 9b 09 f9 91 7b d3 9d fb ad 55 24 24 12 89 f4 bc 88 90 d6 8a 48 7b fd 4f 7a c3 20 64 b1 e2 c5 92 5f fe 5b dd a6 ed ad 55 2a 24 12 89 f4 5c a8 c3 22 cd c2 1a af 76 8e b4 a7 83 90 ef 16 7f f7 57 c8 67 f5 20 f6 d0 51 12 89 44 22 39 ac 0e 8b 34 f0 a6 b2 aa 59 a7 67 3e ec 10 48 d3 bf fe a7 92 37 bb 95 fc e2 6d 6e 10 f2 9f ea a6 fc 02 17 16 53 fb d3 83 87 0f 4f e6 e5 65 67 67 2f 5e ba 64 e6 ac 99 08 33 f0 cf ec d9 cb 57 ac d8 b2 75 eb f9 f3 e7 cb ca ca 1c 8b b9 ba ba ba b0 b0 50 07 95 94 18 43 51 51 51 45 45 85 5d f1 3c 7e fc 58 c7 cb 24 1e fc af b8 b8 18 5f 39 96 b1 b3 e7 ce 6e da bc 79 f1 92 c5 b8 59 dc f2 f4 Data Ascii: a= ou}[uO"o HHiG+~$iAH/{U$$H{Oz d_[U*$\"vWg QD"94Yg>H7mnSOegg/^d3WuPCQQQEE]<~X$_9nyY
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: f6 13 23 20 65 73 f3 36 41 da fc 85 f3 bb bb bb d9 6c c8 bc bb d6 c3 bd c7 e1 c3 87 5d 97 19 2b ea 30 48 7b 34 6b 51 b1 e2 27 c5 8a 9f ea df ec a6 ef d2 b5 e4 c7 6f 12 d2 da b3 2a 2a 2a 52 fb f4 46 5b e5 6b b9 03 3c 33 ef fa c5 7d fa f9 e7 59 d3 b3 ac 37 f8 76 82 b4 19 33 67 f4 f0 70 47 07 dc e1 1b c7 85 40 d4 87 9f 7c 7c f4 d8 51 9b c9 b5 7f a4 f1 0f 11 1e 8f f4 11 e0 bd fb f6 ba ab 94 09 16 0a 50 46 a4 7d b3 61 bd 87 4a 69 e9 49 21 21 df 00 ff 5b b7 6f 39 9f 90 25 a4 21 f4 ec 95 e0 ae f2 d8 7f f0 80 c4 a8 5a 1f 69 f9 f9 f9 28 07 a6 8e e1 99 46 46 47 c1 cb 0c 0e 0b 31 6d e6 f8 3c 30 38 08 ff d6 d5 db f7 2e 5c 16 75 18 a4 e9 df ea a6 53 bc 62 d8 16 c4 00 83 1f 11 d2 da af 2a 2a 2b 79 13 06 b3 6e c9 64 a3 19 c3 e6 86 45 84 07 85 04 c3 3c a1 6d 58 7a db c4 Data Ascii: # es6Al]+0H{4kQ'o*RF[k<3}Y7v3gpG@\|\|QPF}aJiI!![o9%!Zi(FFG1m<08.\uSb+yndE<mXz
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 20 ed 69 93 e1 e6 bb ae 5a bd da 52 54 ad 8f 34 f4 2c d1 8a 99 4c a2 9f 0a 68 3d 7a f4 68 e7 ae 5d 48 dd b4 2f 82 3f f0 ed d1 63 c7 5c 94 1f 2b 22 a4 11 d2 e4 51 c1 bd bb c1 61 a1 8c 61 45 80 69 00 1e aa ab 6b 5a 21 0f 6d 8e b4 83 87 0e 69 4d fa aa c6 c6 1f 18 1c 94 da a7 f7 95 ab 57 9c bb 3f 71 b5 67 a4 f1 13 5c f9 4d 1a 85 06 71 ea b4 2c e3 e5 87 0e 1f f2 50 29 13 12 d9 99 a2 91 d1 51 e8 10 30 b3 8d 9c 44 5a 53 53 53 df fe fd 10 83 69 9c bc d3 56 5e ce ed b1 b7 64 e9 52 66 bc 21 31 29 49 a5 f6 5c b4 64 b1 63 29 b6 d8 83 34 7e 55 22 ca e7 ec b9 b3 a2 51 b5 c9 52 eb e1 23 47 98 76 38 0c eb 70 7a 85 45 44 f4 4f 1b 00 ef 36 2a 36 da f8 8c f0 55 40 50 20 2a bc 63 7b 7c 3b 29 42 1a 21 4d 1e 6d d9 ba 45 65 fe 66 22 e1 e9 b2 1e 29 1b 7f c8 a2 36 47 da f5 1b d7 Data Ascii: iZRT4,Lh=zh]H/?c\+"QaaEikZ!miMW?qg\Mq,P)Q0DZSSSiV^dRf!1)I\dc)4~U"QR#Gv8pzEDO66U@P c{\|;)B!MmEef")6G
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 28 73 ec 18 b5 60 f8 d1 d4 2c 86 46 84 a1 b8 ca ca 9f 2d 59 93 0d 69 cd cd 03 d2 d3 f8 ad 93 4d a3 f2 0b 0c b8 7d fb b6 e8 15 53 a6 4e d1 f8 78 9b 21 30 99 1b a5 5c ba 4c d2 21 09 a6 b2 89 34 e8 db b3 df 82 af 31 71 71 c2 aa 82 8e ce 8e 9d b9 fc cf 5a 13 69 40 a9 9b d2 43 b8 1f 50 82 61 ee 0f 7a 60 a6 03 ec f8 19 3e f1 f2 d6 98 56 dd d2 d2 d2 a8 98 e8 7f 7c f1 4f 9b db c2 c9 22 42 1a 21 4d 06 a1 a6 f6 32 4c df 62 9a 99 46 eb 2d da ff 75 91 44 91 a6 f5 f5 99 3e c3 be a6 6e 09 69 30 a3 e0 87 5d 51 dd ce cf 5f b8 78 11 2c 38 32 86 a6 6e 7d c2 98 31 e0 f7 fe 81 01 a1 e1 61 d6 37 46 e2 25 13 d2 c4 71 2b 3b d2 4a f4 dc f0 63 78 64 84 38 e0 93 12 85 27 87 c9 85 b4 bc bc 3c 66 bd 30 5f 3d ac 6c 18 7f ff fe 7d 3c 08 e6 91 21 f3 f1 09 3d 6b 6a ec 5b 6a 29 05 69 d0 Data Ascii: (s`,F-YiM}SNx!0\L!41qqZi@CPaz`>V\|O"B!M2LbF-uD>ni0]Q_x,82n}1a7F%q+;Jcxd8'<f0_=l}<!=kj[j)i
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 27 a7 a6 08 3b e3 01 c1 81 83 25 bf f9 78 f8 b0 30 28 24 58 38 db 02 6e 84 f4 a9 db 9b 73 72 96 2f 5f 2e f1 c7 4f 2f d9 6c 7a 28 f0 f3 80 b4 a2 a2 a2 c0 e0 a0 f0 c8 08 0f 4f e5 9e 7d 7b 2d c5 ec 3c d2 90 31 24 24 23 cf f8 2a a1 f4 52 a1 ce 4b cc 83 03 48 ab a8 ac 88 88 8a 0a 0c 09 92 e2 fd c8 8b b4 3b 05 05 78 2e a6 95 2a 2a 26 3a be 57 42 45 45 85 a5 4b 8a 8a 8a 23 22 23 2d 2d a5 e7 1d f1 21 16 8e 7e 95 51 84 b4 f6 88 b4 c6 1b b7 8a 15 3f d0 29 5e 7e 34 6b 81 bc c5 e8 52 e9 f5 fa d0 88 70 e1 54 7e d4 66 6e b3 c1 90 e0 b3 67 c5 0f cb 10 d5 b6 ed db 7d fc fd dc 3c b8 b1 29 e9 6f b0 26 7e f5 95 70 7e 33 b7 9c 56 a3 de b4 79 b3 94 18 46 65 8c d6 fa f9 08 8d 88 c6 c7 fb e8 71 49 e7 3f 5d ba 7c 09 36 fa 8b 1e dd a7 4c 9d 52 66 38 ac 44 8a 70 bf 2a b5 a7 d0 4e Data Ascii: ';%x0($X8nsr/_.O/lz(O}{-<1$$#RKH;x.&:WBEEK#"#--!~Q?)^~4kRpT~fng}<)o&~p~3VyFeqI?]\|6LRf8DpN
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 10 f2 85 d2 3f 7f f2 f8 32 3b 6e d6 0e 95 bb 73 a7 87 4a 09 7f 48 e2 14 64 eb 2d 21 3c 32 02 8c 94 c2 33 5e 79 a7 f2 c0 03 20 44 fa 2e f8 a2 81 db 15 5e ed 95 36 30 4d ca 32 9a ec 4d d9 60 15 da b6 95 03 38 f8 00 3b 6b 0c 96 6e 19 bc 47 fb 2f 97 30 bb 84 90 66 49 bb 76 ef 16 2e 96 c2 85 fd fa f7 73 2c 4b db 77 ec e0 36 f2 37 2f a2 98 b8 58 3c a9 62 5b 1b f2 3a 89 34 68 fd 86 0d 6e 1e ee 96 2a 95 ec ef d2 f0 ef ad 5b b7 d0 e9 34 5f 11 ff 64 e0 01 ee 1a 52 c4 b7 41 86 c3 63 85 4b 77 50 fd d0 69 8b 4f e8 99 c8 ee 00 19 82 ba 7d a7 a0 40 ae ac 32 6a 5b a4 3d f3 33 60 d6 75 8a 9f ea 14 3f d3 29 7e c2 4d 88 10 e8 79 47 1a 42 97 ae fa 37 de c1 ef 4b 5e 7e fd d1 e2 95 0e 16 79 2b ea c0 c1 03 fc 1e 83 36 bb 6f a2 a1 57 12 3f 50 99 ac f5 f3 f5 f1 f3 b1 77 0b 92 ec Data Ascii: ?2;nsJHd-!<23^y D.^60M2M`8;knG/0fIv.s,Kw67/X<b[:4hn*[4_dRAcKwPiO}@2j[=3`u?)~MyGB7K^~y+6oW?Pw
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: d7 31 08 42 5d ba 74 09 86 d2 34 da 9d bb 76 21 66 bd e5 43 8b ae 5d bb f6 cd 86 f5 7b f6 ee 35 bd 0a a5 b4 6f bf d4 e1 5c 2b ba 9d 9f 8f 9e 0a 53 50 c8 d2 e6 9c 1c 2b e7 5b a2 18 37 6d da c4 5c 85 fb 72 ec b9 ef db bf 0f b7 63 1a 15 52 3f 73 e6 8c 13 b7 25 49 57 ae 5c 41 35 86 77 c5 1f ca c3 ef b5 8f 6a 3c 67 de dc 23 47 8f 3e 7e 2c be 29 44 b1 4e 87 1a be 8b b9 f9 3d 7b 76 ed de b5 72 d5 2a 27 0f 6c 62 44 48 eb c0 48 e3 c2 9b dd f0 4b 6e 10 f2 bd 2f 1a 6f 1a bb e4 ed 1f 6d 9c d0 7d 83 cd 2d 2e 2e 86 51 ae ad 75 e1 a9 80 22 49 d7 d7 d5 d4 d4 c0 26 56 54 54 20 69 27 6d ae 50 d6 23 ac af af 47 ea 48 b7 15 f6 07 22 91 5c 21 34 9c bb 77 ef de be 7d 5b a7 d3 39 bf ad be 8c 0d b0 f5 91 66 96 75 42 9a b3 48 7b 9d 1b 84 2c ed f2 8e 4e f1 83 92 9f bd 55 bf 6e d3 Data Ascii: 1B]t4v!fC]{5o\+SP+[7m\rcR?s%IW\A5wj<g#G>~,)DN={vr*'lbDHHKn/om}-..Qu"I&VTT i'mP#GH"\!4w}[9fuBH{,NUn
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 8c 6d a4 dd bc 75 0b 55 22 24 3c cc 34 db b8 11 d4 46 54 21 9b 97 db ab 43 87 0f 2b bd 3c d9 46 64 39 e0 97 a1 11 e1 e8 ca 70 a7 00 6a d4 fe 41 81 7d fa f7 5d ba 7c d9 ad db b7 65 cf 9b a8 1c 44 5a d3 bd 87 65 1f f4 28 56 28 4a 5e fa 8d fe f5 ae 8d 37 6e 33 3f 20 a4 b5 7b a4 fd b8 6e e1 0a 09 8f 5a 92 b6 6e db a6 f2 f2 14 1e 77 8b 36 7f fc c4 09 e9 f1 c0 e6 82 82 68 18 c2 33 73 bd bc d5 f3 17 cc b7 2b 57 53 b3 b2 98 d3 90 11 80 34 74 cc 2b 2a 2a a4 c7 73 eb d6 2d fe 50 6c 61 ae e0 ba 8d 18 25 cf 16 2d e8 62 c3 d3 85 4f 69 9a 04 7f 24 95 14 2f ad 44 a7 03 c9 7c fd fd 93 52 52 4c 63 48 4a 49 56 a9 bd d0 e7 90 32 7a 39 66 dc 58 7f 43 97 5c 96 c0 9f 4e 6e fb c8 4d 78 69 23 86 03 2d 72 a5 cb 55 3c 1f ef 39 f3 e6 5a 4f 16 dc 42 89 31 07 8e 47 c7 a1 7e c4 48 f1 Data Ascii: muU"$<4FT!C+<Fd9pjA}]\|eDZe(V(J^7n3? {nZnw6h3s+WS4t+**s-Pla%-bOi$/D\|RRLcHJIV2z9fXC\NnMxi#-rU<9ZOB1G~H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.7	49869	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	937	OUT	GET /images/default-source/default-album/gsk-logo.png?sfvrsn=86c1b0a5_7 HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:41 UTC	391	IN	HTTP/1.1 200 OK Last-Modified: Mon, 04 Dec 2023 14:00:01 GMT Content-Type: image/png Content-Length: 17400 Cache-Control: max-age=5723314, public Expires: Thu, 12 Dec 2024 04:49:14 GMT Date: Sun, 06 Oct 2024 23:00:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 12-29106737-29084662 2CNN RT(1728255640525 194) q(0 0 0 -1) r(0 0) U18
2024-10-06 23:00:41 UTC	1061	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ce 00 00 00 ce 08 06 00 00 00 76 1f 3d c4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 42 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDRv=tEXtSoftwareAdobe ImageReadyqe<BiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:
2024-10-06 23:00:41 UTC	64	IN	Data Raw: c9 6d 3b d8 fd bd bf fb 7b a8 5b ef ea fe 7f a8 5b 0f 77 ff 3f d0 ad fb b8 75 cb ea 19 db 63 ab e0 5c 26 3a 2f f5 77 f2 7f 13 7d 67 98 63 e6 bd 9f f0 39 dc c6 fd 3f 7c b6 d4 3d 74 ce 97 39 37 Data Ascii: m;{[[w?uc\&:/w}gc9?\|=t97
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 75 1f d4 6f a2 ee 7b e8 b1 89 ad 18 de 6e cc 4c f6 f3 ff 5e b6 0c 8b b9 ec e7 d6 47 bb f5 68 b7 3e ce ad 47 ba f5 6e ab 00 91 1e 34 10 a0 59 eb 05 b1 7e 19 d8 dc 4f f2 99 db ae fc 0c c1 39 20 3a 1f 18 7a 5f 88 ce 05 f1 3e c1 f7 10 9d 0f 98 fb ee 5c 9b 78 f6 e4 b6 cc b1 48 dc e7 62 2c fb 2c 12 70 ee e6 d6 63 dc 03 fa 59 f7 f7 58 f7 f7 70 be 25 e2 5a 30 61 5b ee ef e8 80 99 d3 b9 73 86 c6 19 31 64 c0 01 0c 30 63 23 e7 f6 ed 00 18 e8 c6 22 06 0f 64 ee d9 08 0d d3 ac 9f 79 77 d9 b9 d6 c0 f1 dc f0 34 b7 be c4 fd e0 27 b9 bf fb 17 1b 7c ec 9a f5 06 cb c0 27 3e cb d6 91 6a dd 35 46 43 b1 48 b6 c5 8f 8e 99 b0 56 e0 5b 27 80 63 be 83 08 94 31 78 b8 ef 00 f2 cc ba c6 e0 59 2b e0 f8 18 e5 85 0d 60 1e 9a 35 f8 12 db 9e 35 a3 a0 f0 b2 fb 1e ab 71 c7 40 c9 2a d4 39 38 Data Ascii: uo{nL^Gh>Gn4Y~O9 :z_>\xHb,,pcYXp%Z0a[s1d0c#"dyw4'\|'>j5FCHV['c1xY+`55q@*98
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 0f c7 30 4c ca 36 26 26 3f dc 40 93 5d de 73 d1 30 8e cf 72 7e f7 38 40 c9 18 63 9f 00 7e 2e a0 89 5b 5c a5 9c c9 b9 67 5a d7 2d 77 1e 94 00 92 71 df 62 97 8f ea 5c 8c 63 11 20 62 a0 38 e3 a0 34 fe 49 b6 09 2c 28 31 73 0e 2c 31 d8 34 0d 1c 0c 73 d5 de 02 f5 c8 cd 11 80 a2 00 4f c9 b1 66 de fb 15 b2 4e 71 7c a4 8c 9d 38 17 30 7e 8e 98 71 df 48 97 2e 93 c5 1c c7 06 94 35 4b fd 3f a1 82 66 08 77 4a 8a 55 24 96 d1 b2 d0 48 4b ce 55 7b 91 5b 9f 3f 0e 40 c6 02 5a 21 7b cc 8b 91 34 ac a3 8a 8f 7a 82 87 6b 3d 39 f7 4d 0b a0 70 1b 15 e7 90 71 4b a4 f2 c5 02 03 5b 31 87 29 51 45 c5 33 25 ac a3 19 f4 56 12 d3 66 42 7b 2f 39 ff 79 c7 b8 e3 b5 c4 78 b9 fe 9d 52 10 ac 79 7d 2d 4e de 54 80 43 7b 0c d5 47 c2 7e 46 a6 4f 05 f8 74 fd 5c ff 0e 97 69 0d c0 77 7a da 60 5f 8b Data Ascii: 0L6&&?@]s0r~8@c~.[\gZ-wqb\c b84I,(1s,14sOfNq\|80~qH.5K?fwJU$HKU{[?@Z!{4zk=9MpqK[1)QE3%VfB{/9yxRy}-NTC{G~FOt\iwz`_
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 0d 06 19 f2 cf 5e 3b f5 45 0e 3c d2 78 7e ea 3a e1 39 8c d1 55 f0 c9 4d 14 15 fe 2e 2b 14 42 04 26 6e 8a cb fd 32 65 b0 3c e3 dc 6d e1 5d 97 d2 38 61 51 c0 32 06 6b a2 f2 78 ec 71 3d 4d 61 f8 be cc 53 52 ca ca 30 31 8e 54 6f 21 37 5b 37 69 3b 4c cc c2 4e b3 48 00 b4 f9 ce 03 67 ff f5 63 8d b8 18 20 58 8b 05 0b ef a7 cf 64 5e b9 aa 96 da e3 b5 20 4a 58 86 60 04 a9 96 37 37 d5 7b c2 f6 04 23 92 40 cb 7c 17 2c 1e 38 77 5e 87 7e cf 0c 58 6f 9d 30 1a 8e 0c 9e 3e 75 ad 45 76 62 aa dd c4 6c 52 32 59 2d 17 17 01 13 df 84 20 0a 4b ec 52 a0 8c 41 82 9c 0b db 55 db 3c 70 36 ae cf c0 a1 67 d9 dc bd c1 1d 2c 05 8f 46 40 d0 18 ad d6 65 03 42 6a 46 81 3d 80 62 04 61 1a 12 8e 7d b8 b8 0d 89 0d 31 d0 da af 73 75 b8 cd 54 55 c3 85 c5 c6 bc 7c a8 a1 fd 4a 66 c1 c1 33 44 4d Data Ascii: ^;E<x~:9UM.+B&n2e<m]8aQ2kxq=MaSR01To!7[7i;LNHgc Xd^ JX`77{#@\|,8w^~Xo0>uEvblR2Y- KRAU<p6g,F@eBjF=ba}1suTU\|Jf3DM
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: af 02 b8 fe db 3a 37 cf 5f 6a f3 3e 00 77 79 48 fe bc 3b af 07 f8 c1 d7 53 95 4c eb b2 61 26 16 d9 e5 de df 41 f7 01 d8 7a 68 5a 9a 96 bd 2f f7 8e 2b 67 5b df 3f db 3d 77 ab 6f d7 55 e7 37 44 8c 93 03 90 29 e1 78 42 f2 58 d9 53 1b d0 61 8f 05 78 e0 0b 00 ee e5 fe 1e f8 13 ae 65 d8 5c ff d8 79 2d a7 fd 22 c0 d7 fe 6f 0d dc 9c 0f 30 06 80 fc cb df e6 5e fc a3 7e 1f e0 fe 27 02 dc f9 ee f5 8b 9d e7 72 c1 fb dc ef 7e 89 fb cd 26 cf 3a bb dd fd 1e fe 28 80 17 7f 22 7f de ff fe 3c c0 7b 8f ed b6 ee 6a 13 61 c4 81 f6 f8 9d ae 75 3d fa 17 00 9e f8 56 07 e4 6d 65 bf f7 df fe 1c e0 b2 cf 35 e3 9c 8d de cc 15 ae dc 72 71 65 3a 66 be 90 64 ea 37 6a 9f 5d bb 00 f6 b9 ab 7b 08 6f 06 d8 fe b2 f9 1b 4e 2f 5f 10 87 03 c8 1b e1 21 0f 02 78 c1 47 1c d3 dc 7b 1d c5 3b 3d c6 Data Ascii: :7_j>wyH;SLa&AzhZ/+g[?=woU7D)xBXSaxe\y-"o0^~'r~&:("<{jau=Vme5rqe:fd7j]{oN/_!xG{;=
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 4a 1e 15 d3 7e 46 29 37 58 bb 49 ab 46 a3 09 22 ed c8 51 2c a5 66 19 02 0c 12 1b b4 20 30 19 10 65 62 1c 34 f2 35 f7 b8 f5 a8 67 03 dc 69 5b e1 d3 5f 23 e6 e9 f3 4a 76 de 34 ec 46 fc 61 7e 00 da 06 e7 aa 3e d3 c5 79 47 9d 58 76 bc 57 58 4f 7d 6e 0d 9a 4d 55 61 63 3c 92 07 c5 a8 75 d1 d0 e9 2a 35 3a d2 40 6d 43 ff d5 c8 06 53 81 d8 37 84 94 5b 56 11 20 16 40 04 b1 ac 6c e4 78 06 0d 21 46 34 db 0e 7b b4 ee 67 d9 95 7e 8c 80 7d 1e a3 24 a5 17 be 8a 9b 2f 75 01 f9 8d e5 39 86 ed a5 7c e3 e2 d5 cb 67 9d 0a 70 df c2 ec 91 9b bf 07 f0 fe e3 01 ae fe e6 14 34 0b b4 54 d3 3f 55 f0 ab a9 35 dc a7 aa 0d 8a 5d b1 90 8c c2 71 e0 55 74 2d a0 ef 2b bc 5e 78 7f f1 34 db 3e 0e 9a ac 2b f5 5f 6f c8 ab c3 b5 6d f4 7d b4 5f 32 89 51 e0 d6 fa cb f9 b1 45 b9 65 c3 16 80 fd ee Data Ascii: J~F)7XIF"Q,f 0eb45gi[_#Jv4Fa~>yGXvWXO}nMUac<u*5:@mCS7[V @lx!F4{g~}$/u9\|gp4T?U5]qUt-+^x4>+_om}_2QEe
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: ff 79 0a c0 95 e7 02 dc ff 59 00 87 ff 74 3d 84 bb cd 51 f3 1d 85 87 6d d7 f5 f7 24 b1 0d 10 f7 e5 ef 67 43 3d 64 fa ea f3 1c 80 dc fa 05 17 fb 1c e4 82 f1 7b 3a a3 d8 76 98 03 f4 be e5 65 5c 4d 56 ea eb 1a f8 92 bb fe 3d 1e 06 b0 55 93 0a e4 2c fd 10 f7 5c 7e 78 59 2d 37 73 8b 07 cd 31 7f 54 b3 4d f6 9c 55 1d e8 9f f2 0c c7 22 a7 bb 67 fc 33 fa df 7a d0 03 00 9e f7 31 80 0f 3d db 79 0d ff 3d 3c 6b 60 c6 cc d5 14 eb a8 04 ff 3e 7e 41 44 8b 60 a8 ca 72 a6 07 fc 83 61 02 18 74 86 76 40 64 03 90 85 13 b1 46 c6 bc f9 80 7a c4 e0 39 6f 77 2b 36 99 07 4d e5 1d ef ab bf fc 43 00 0f 7e 8e fe 0d 60 08 d8 38 31 36 18 5c e7 3b 3a 3d 3e 6e bd 12 e0 a6 2b 00 be f5 31 91 b4 46 35 00 7f 1b fb bb c6 e0 85 1f ab 53 7c b2 2d fd a3 1c 3b 9f 2a 80 c6 17 5e 7f 4c 3d ba 55 bb Data Ascii: yYt=Qm$gC=d{:ve\MV=U,\~xY-7s1TMU"g3z1=y=<k`>~AD`ratv@dFz9ow+6MC~`816\;:=>n+1F5S\|-;*^L=U
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: c7 ec 85 1f ac 3b 7e e7 04 98 28 72 8d 82 67 52 52 a0 02 d7 38 06 09 46 6e 56 ce 18 af bb 0c e0 b2 0b 17 d3 6e fc 40 b4 4d 0e 28 1b 1c 70 cc c6 a6 77 3c 50 dd 26 bf 65 89 17 20 26 12 bc 85 75 b7 5c 73 b1 5b bf da d4 20 30 33 c3 66 d6 70 7d 5a cd 27 7f db b1 ff 1f 96 9d db 83 e7 59 ff 0c f0 90 97 d5 29 54 73 04 4d a0 aa c5 f1 0a 53 46 49 1c ca 6c 22 75 a9 51 51 ce 39 6d 31 0d c7 44 b2 32 99 cc 19 0c a3 e8 28 7e 10 29 6c eb 70 b9 c8 c5 0a 3b f6 08 53 0d ce 51 ee f5 e9 42 9f ff 73 b7 fe 59 61 e3 e7 fc bd 67 fc 03 c0 83 5f 90 ef e7 29 0c fe 75 c0 11 e5 e3 9c b4 5c 11 e9 27 4d ab bd c9 c5 0b 5f 3d 03 e0 82 4f 2f 9e e1 dc 7a 43 90 b0 1a a5 d3 c4 00 e9 00 88 62 e2 75 06 9e 1f 5c 5c d7 4b db 98 69 82 47 99 07 54 69 cc 9e 79 ce 7a 7d cd 3e 58 c0 20 4b 9b 6b e6 f1 Data Ascii: ;~(rgRR8FnVn@M(pw<P&e &u\s[ 03fp}Z'Y)TsMSFIl"uQQ9m1D2(~)lp;SQBsYag_)u\'M_=O/zCbu\\KiGTiyz}>X Kk
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 90 b1 54 ed f1 39 06 ec 0d 1e 14 c0 c3 dd 07 15 f7 68 c0 13 9e 4b 5b cf 40 00 8f 68 5d a6 d0 12 cd e2 02 4a 45 9a 85 31 8d 0a 38 63 bb 65 39 10 cd 82 85 70 a4 fb 44 46 70 a0 c0 63 4b ef 43 cb 3c c2 75 b9 32 57 a8 51 45 7b b8 6c 6b 09 12 cd b5 d7 d0 8b ac 46 71 cb 4a 5c b5 8e f2 35 22 80 54 f7 87 05 0d 84 15 f6 41 fd 0b 2f 8e ab e2 02 20 4a 65 4e 15 ef f4 70 d9 16 11 34 25 79 b5 66 e4 b4 a1 c9 b0 82 3e 81 fe 20 96 89 e6 98 51 b9 71 03 dc 34 92 41 6c 3f 76 25 99 47 01 c6 22 c0 46 ac a1 95 b5 7b c5 3b 0a b9 9a ea 32 98 07 13 c5 06 5f 32 c9 5f 26 b3 39 39 5f 0f 10 56 ac 81 e2 98 c6 9a 71 0d 66 e9 a6 51 6e c9 10 d7 94 5a 7a 83 a7 27 a0 4a 8e 85 11 5c b6 b5 66 9b 31 c0 52 02 94 49 07 b0 61 cf 5b a9 8d 71 0c 55 2d db e9 d9 07 40 b6 9f 7b 34 3a 78 7a ba 6d a3 19 Data Ascii: T9hK[@h]JE18ce9pDFpcKC<u2WQE{lkFqJ\5"TA/ JeNp4%yf> Qq4Al?v%G"F{;2_2_&99_VqfQnZz'J\f1RIa[qU-@{4:xzm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.7	49870	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	692	OUT	GET /ResourcePackages/Safenames/assets/dist/images/safenames-logo-white.svg HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:41 UTC	412	IN	HTTP/1.1 200 OK Etag: "e5ad9fa7efd5d51:0" Last-Modified: Tue, 28 Jan 2020 15:28:56 GMT Content-Type: image/svg+xml Content-Length: 5232 Cache-Control: max-age=2678400, public Expires: Wed, 06 Nov 2024 23:00:40 GMT Date: Sun, 06 Oct 2024 23:00:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 1-14747220-0 0CNN RT(1728255640525 194) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:41 UTC	1040	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 53 41 46 45 4e 41 4d 45 53 5f 4c 4f 47 4f 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 53 41 46 45 4e 41 4d 45 53 20 4c 4f 47 4f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 37 2e 31 37 20 31 36 37 2e 34 32 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 73 61 66 65 6e 61 6d 65 73 2d 6c 6f 67 6f 2d 77 68 69 74 65 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 53 61 66 65 6e 61 6d 65 73 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 34 38 2e 34 34 2c 39 34 2e 34 32 76 32 2e 31 34 Data Ascii: <svg id="SAFENAMES_LOGO" data-name="SAFENAMES LOGO" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 677.17 167.42"><defs><style>.cls-1{fill:#fff;}</style></defs><title>safenames-logo-white</title><g id="Safenames"><path class="cls-1" d="M248.44,94.42v2.14
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 2c 37 2e 37 36 2c 36 2e 32 33 2c 31 31 2e 34 34 2c 31 37 2c 31 31 2e 34 34 2c 31 30 2e 39 33 2c 30 2c 31 37 2e 30 36 2d 35 2e 33 31 2c 31 37 2e 30 36 2d 31 31 2e 37 35 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 38 2e 30 36 20 2d 33 33 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 33 32 34 2e 31 34 2c 39 35 2e 37 35 56 31 35 30 2e 31 68 2d 37 2e 33 35 56 39 35 2e 37 35 48 33 30 39 56 38 39 2e 34 31 68 37 2e 38 37 63 31 2d 31 34 2e 39 32 2c 38 2e 32 37 2d 31 38 2e 35 39 2c 32 35 2e 32 33 2d 31 38 2e 35 39 68 32 2e 37 36 76 36 2e 32 33 68 2d 2e 38 31 63 2d 31 33 2e 38 2c 30 2d 31 39 2e 31 31 2c 31 2e 37 34 2d 31 39 2e 38 32 2c 31 32 2e 33 36 68 32 30 2e 36 33 76 36 2e 33 34 5a 22 20 74 Data Ascii: ,7.76,6.23,11.44,17,11.44,10.93,0,17.06-5.31,17.06-11.75Z" transform="translate(-38.06 -33)"/><path class="cls-1" d="M324.14,95.75V150.1h-7.35V95.75H309V89.41h7.87c1-14.92,8.27-18.59,25.23-18.59h2.76v6.23h-.81c-13.8,0-19.11,1.74-19.82,12.36h20.63v6.34Z" t
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 76 34 32 2e 34 48 35 39 35 2e 38 56 31 30 38 63 30 2d 37 2e 34 36 2d 34 2e 31 39 2d 31 33 2d 31 34 2e 38 31 2d 31 33 2d 31 30 2e 38 33 2c 30 2d 31 35 2c 35 2e 35 32 2d 31 35 2c 31 33 56 31 35 30 2e 31 68 2d 37 2e 32 36 56 31 30 38 63 30 2d 37 2e 34 36 2d 34 2e 31 39 2d 31 33 2d 31 34 2e 38 31 2d 31 33 2d 31 30 2e 38 33 2c 30 2d 31 35 2c 35 2e 35 32 2d 31 35 2c 31 33 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 38 2e 30 36 20 2d 33 33 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 31 38 2e 32 37 2c 31 32 31 2e 39 76 37 2e 33 36 63 30 2c 37 2e 33 36 2c 33 2e 34 38 2c 31 35 2e 32 32 2c 31 38 2e 30 39 2c 31 35 2e 32 32 2c 31 31 2e 39 35 2c 30 2c 31 37 2e 33 37 2d 34 2c 31 37 2e 33 37 2d Data Ascii: v42.4H595.8V108c0-7.46-4.19-13-14.81-13-10.83,0-15,5.52-15,13V150.1h-7.26V108c0-7.46-4.19-13-14.81-13-10.83,0-15,5.52-15,13Z" transform="translate(-38.06 -33)"/><path class="cls-1" d="M618.27,121.9v7.36c0,7.36,3.48,15.22,18.09,15.22,11.95,0,17.37-4,17.37-
2024-10-06 23:00:41 UTC	1288	IN	Data Raw: 2c 30 2c 31 2c 30 2d 36 2d 36 41 36 2c 36 2c 30 2c 30 2c 30 2c 31 35 32 2e 36 36 2c 34 35 2e 35 5a 6d 30 2c 31 31 32 2e 30 35 61 36 2c 36 2c 30 2c 31 2c 30 2c 36 2c 36 41 36 2c 36 2c 30 2c 30 2c 30 2c 31 35 32 2e 36 35 2c 31 35 37 2e 35 35 5a 6d 2d 32 37 2e 38 31 2c 31 35 2e 33 31 61 36 2c 36 2c 30 2c 31 2c 30 2c 36 2c 36 41 36 2c 36 2c 30 2c 30 2c 30 2c 31 32 34 2e 38 34 2c 31 37 32 2e 38 36 5a 6d 2d 32 36 2c 31 35 2e 35 37 61 36 2c 36 2c 30 2c 31 2c 30 2c 36 2c 36 41 36 2c 36 2c 30 2c 30 2c 30 2c 39 38 2e 38 32 2c 31 38 38 2e 34 33 5a 4d 37 32 2c 31 37 33 2e 36 33 61 36 2c 36 2c 30 2c 31 2c 30 2c 36 2c 36 41 36 2c 36 2c 30 2c 30 2c 30 2c 37 32 2c 31 37 33 2e 36 33 5a 6d 2d 31 2e 35 33 2d 31 39 2e 34 61 36 2c 36 2c 30 2c 31 2c 30 2d 36 2d 36 41 36 2c 36 Data Ascii: ,0,1,0-6-6A6,6,0,0,0,152.66,45.5Zm0,112.05a6,6,0,1,0,6,6A6,6,0,0,0,152.65,157.55Zm-27.81,15.31a6,6,0,1,0,6,6A6,6,0,0,0,124.84,172.86Zm-26,15.57a6,6,0,1,0,6,6A6,6,0,0,0,98.82,188.43ZM72,173.63a6,6,0,1,0,6,6A6,6,0,0,0,72,173.63Zm-1.53-19.4a6,6,0,1,0-6-6A6,6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.7	49873	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	688	OUT	GET /images/default-source/default-album/g4s-logo.png?sfvrsn=8e1596ff_4 HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:41 UTC	383	IN	HTTP/1.1 200 OK Last-Modified: Wed, 06 May 2020 09:49:35 GMT Content-Type: image/png Content-Length: 10786 Cache-Control: max-age=5723313, public Expires: Thu, 12 Dec 2024 04:49:13 GMT Date: Sun, 06 Oct 2024 23:00:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 14-48185425-0 0CNN RT(1728255640611 202) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:41 UTC	1069	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 52 00 00 00 c7 08 06 00 00 00 4b 09 db ab 00 00 20 00 49 44 41 54 78 9c ed 9d 07 74 5c c5 f5 ff af 7a b3 2c cb aa b6 ba 76 b5 6a 96 2d 69 b5 ea 2e b2 03 04 08 04 9b 84 f0 cb 3f 94 13 20 09 bd fc 42 0b 24 81 d0 02 a1 77 08 bd 84 50 7e 84 9e 40 30 01 0c a1 85 e0 00 09 24 14 1b 5b 92 7b af b2 a5 9d ff dc f7 a4 df 4f c8 5b de ee be 79 77 de be f9 9e f3 39 1c 9f e3 63 66 ee 9b f9 ee bc 37 77 ee 00 c4 a1 2a 53 d2 e0 fd 8a 26 18 f2 74 00 6b e8 85 4d ee 36 58 59 dd 02 83 ae 56 91 5c c8 f9 8c f3 8e 22 20 7f e3 bc c6 79 92 f3 28 e7 16 ce 2f 39 a7 70 0e e1 d4 73 b2 05 3f a3 b8 61 2f 1f db ef 54 cc a0 9e 6a 4a 4e 90 2f 3d 0b ce cb 2b 81 75 6e af 66 a8 1b b8 a1 f6 bb 84 19 aa 8f c3 14 31 b1 99 f3 16 e7 0e ce c9 Data Ascii: PNGIHDRRK IDATxt\z,vj-i.? B$wP~@0$[{O[yw9cf7w*S&tkM6XYV\" y(/9ps?a/TjJN/=+unf1
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 5d e7 4d 9d 0e 1b 47 2f e1 e3 93 e3 ab 01 7a 33 71 32 ef 52 9b 63 24 0c f1 d7 fa 37 f9 6b 7d 66 62 22 f5 30 56 52 a2 17 d6 3c 7d b9 ac 01 0b 48 1f be c3 dd c6 56 54 b7 50 1b 8a 53 d9 c5 99 4c 6d 90 46 e8 af 6e d1 7e 7c 8f c8 9e 4a 3d 7c 95 94 e4 d2 b9 7c 75 ba b9 b6 e3 89 9d ae 36 d6 4f 6f 2a 4e a5 93 da 24 8d b0 c5 dd a6 1d fa 98 96 94 42 3d 6c 95 94 be 26 1c 91 45 9c 2e ce f7 38 67 71 2e e1 dc c9 79 9c f3 24 e7 0d ce bb 9c b7 82 f0 36 e7 1d ce 73 9c 47 39 4f 8c e3 69 ce bd 9c 6b 38 37 04 e1 e2 85 35 35 cf b0 59 73 d8 da 8a 66 6a 43 71 2a df a3 36 c9 70 ac 70 b5 68 b9 a3 bf ce 2f 13 3e 29 08 95 c4 c1 33 af 1d 9c 45 9c 13 39 e7 70 7e c9 b9 99 73 23 04 9f 47 e3 b9 71 f4 ef b7 5b db 7c 67 68 32 67 26 e7 78 ce f5 9c 17 38 2b 38 bb 39 8c 94 b4 44 f6 b8 af 63 Data Ascii: ]MG/z3q2Rc$7k}fb"0VR<}HVTPSLmFn~\|J=\|\|u6OoN$B=l&E.8gq.y$6sG9Oik8755YsfjCq6pph/>)3E9p~s#Gq[\|gh2g&x8+89Dc
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 41 82 b1 4d cc 9f 63 8e a2 09 9a 0b f4 81 70 0c c7 b7 34 31 d6 3c 97 ad aa 50 e9 50 61 b8 8f da 2c 43 1b 69 27 3c 5f 2a c5 42 e8 5f 20 c1 b8 96 80 be 58 03 19 8b aa 40 af aa 42 1d 04 c7 90 34 39 8b bd d3 35 9b f9 2b 55 92 7e 08 86 38 53 a9 cd 32 14 eb 6b da 60 83 db 0b 95 29 69 c6 66 9a 18 f5 05 1b 67 0e e4 5f 31 c6 32 6a e1 15 87 5f 18 68 a0 c2 64 f6 f7 b8 18 6b 99 cb d6 a8 a3 a3 c1 38 9b da 28 c3 31 56 b0 e4 44 da d7 fb df 05 1b 63 0e e5 b8 d8 c2 19 9d 9e 89 b2 b1 8a 58 49 4b 66 cf 75 f7 32 e6 6a 53 49 fa fb f2 25 b5 49 1a 35 d2 91 ba 6e f8 73 69 1d a4 24 90 e4 85 e3 b1 aa ed 51 8d bf f8 05 6f e8 b0 b4 82 8c dd ab 65 db 9e 36 4f 15 f3 77 2c 60 1b 55 25 fd 89 7c 93 da 24 8d 82 d5 9f b6 b8 7d 54 af f7 ff 2f da b1 17 e7 5c 1e 4b 50 23 51 97 45 1d 52 84 22 Data Ascii: AMcp41<PPa,Ci'<_*B_ X@B495+U~8S2k`)ifg_12j_hdk8(1VDcXIKfu2jSI%I5nsi$Qoe6Ow,`U%\|$}T/\KP#QER"
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 40 3f 9f c3 71 9f a8 ce 8b d4 b3 40 1f b8 50 60 b9 bb 64 61 bd b7 b9 d2 13 12 e0 8e a2 2a d8 e9 69 d7 56 a7 78 da 69 c2 b7 d3 ab 24 30 c5 48 d9 c9 99 2c 81 91 3e 16 a0 6d 42 8c 14 c1 1f c4 6b 0a ca 45 0f 99 f3 81 7e 4e 1b e1 4c 51 01 10 21 bc 9a 15 0b 19 53 07 2d 14 fb 09 eb 7d 1c a9 29 2d 13 96 94 35 68 93 11 57 36 e3 56 a7 98 3c 6e b7 24 fd 93 24 30 d1 60 df 98 05 1a 69 37 5c 2d de 48 ed 90 4f 3a c6 b1 62 42 60 be 7e 00 f4 c1 0a c5 93 e2 ba 1e 9f fa ef a9 d3 61 77 6d 87 f6 fd 14 4f 3f 8d 1a ea 49 12 98 a3 51 64 29 d8 fc be d5 46 8a 3f 80 ff ae 6a 86 fc 24 e1 2f 60 76 ba 83 ed 50 41 31 30 55 8f 01 7d a0 82 81 95 6a 2a c4 75 3d 7e 85 b5 4a 5f c3 d5 29 37 d3 5d fc 95 bf 5f cf 3b fd 4c 02 93 34 82 0c 05 9b bf 13 a2 7d c2 8c 74 4b 4d 9b f6 69 26 4b 6c 39 3d Data Ascii: @?q@P`daiVxi$0H,>mBkE~NLQ!S-})-5hW6V<n$$0`i7\-HO:bB`~awmO?IQd)F?j$/`vPA10U}ju=~J_)7]_;L4}tKMi&Kl9=
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: f5 38 4c d3 1b 08 34 6e 6c c8 dc 58 83 21 e3 c9 05 bc f2 a4 28 d6 8e d9 48 97 03 7d cc 03 93 9e c2 5e eb e8 f5 b3 2a 2f eb 37 e7 e8 e8 77 25 30 51 64 b1 9d 8d 54 2f af d7 03 bf ca b7 a4 7a 7e 28 e1 2d a4 2b 81 7a 9c c6 0e 6e 40 c5 f4 39 f1 23 09 3a e1 64 23 2d e4 0c 03 7d cc 83 32 bf d6 ed 67 de 3e ff ba d8 8f 8e be 21 81 81 22 07 98 64 a2 64 46 8a 6c ad f1 c1 06 77 1b 14 88 bf 65 34 9c 4a 38 5f 81 04 63 35 46 36 73 aa a3 0d c2 3f 24 e8 80 93 8d 54 fe ab 70 d3 92 d9 e3 9d 3d 7e e6 6a 8f f5 e8 a8 0c 1b 4c 88 99 37 a8 92 19 e9 8a 6a 7d 55 7a 69 7e 99 b8 d1 69 5c 78 a7 da 32 a0 1e ab b1 83 3f 08 b9 d1 04 e0 63 09 1a 3f 11 a7 7c 23 c5 53 16 d4 b1 36 44 6d d9 34 3f 56 d2 df 1c 7d cd d2 9b 25 30 50 e4 64 13 4d 94 d4 48 91 2d a3 ab d2 69 c9 a9 a2 c6 68 24 42 47 Data Ascii: 8L4nlX!(H}^*/7w%0QdT/z~(-+zn@9#:d#-}2g>!"ddFlwe4J8_c5F6s?$Tp=~jL7j}Uzi~i\x2?c?\|#S6Dm4?V}%0PdMH-ih$BG
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: ab e5 8e d2 9b 8c 13 90 d4 48 51 b2 16 52 0a c4 ed 81 3a f0 73 09 1a 16 0a 3c 09 51 1e ea 09 c4 a9 64 ae e7 78 61 2c 1d 3b 3d b7 58 ff 1e 5a d7 a5 4d 6e f5 3d 54 19 29 e8 ab d2 01 a0 1f db 46 f8 7b a0 0e d4 4b d0 b0 70 bc 12 ea 09 c4 a1 ae 07 fa 98 87 22 aa b4 a7 c2 a4 14 f8 75 41 39 37 d0 6e 18 56 df 43 95 91 ee ab 6b 80 7e 6c 1b 61 0f 67 6a a0 0e 7c 24 41 e3 c2 71 52 a8 27 10 47 ea 01 fa 58 87 e2 c3 68 3b f6 3f d3 6b 80 35 cd d5 52 9b d4 ab bc 32 d2 00 b2 d3 e5 90 73 02 75 e0 42 09 1a 66 04 d3 13 c0 25 53 2e c8 5b 95 6b 8c a8 aa 73 1d 3d 39 5f 3b b1 a4 8e 7f 2a 23 0d 21 9c df 76 29 6a 12 f0 b6 d1 2a 09 1a 66 84 65 a0 27 f1 c6 ab 96 00 7d 8c 43 31 0c 7a a1 de 88 54 95 92 06 6b dc 6d b0 db d3 a9 56 a2 ca 48 43 c9 0d f6 31 d2 a0 9b e0 af 49 d0 38 23 2c 0e Data Ascii: HQR:s<Qdxa,;=XZMn=T)F{Kp"uA97nVCk~lagj\|$AqR'GXh;?k5R2suBf%S.[ks=9_;#!v)jfe'}C1zTkmVHC1I8#,
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 09 e4 e3 52 56 84 d7 3a 7e 5a 82 4e 2a 22 e3 dd 80 4f 32 42 d5 a6 66 c0 6a 97 17 36 d6 b4 99 61 0e cb 24 30 48 67 1a 29 67 6b 79 33 db d4 d5 b7 a7 64 5a 81 7a c5 df 17 ac 22 27 6c 35 3a 5e af 13 74 4e 11 1d 9f 41 84 f7 2f 05 53 4b 7a 16 0c 79 3a 60 8d db 14 73 38 44 02 83 74 a4 91 22 da c6 53 4d 87 ff b7 cd ad 43 90 9c 40 3d 46 65 e3 84 d8 66 8a 71 e1 c9 a7 0f 2d e8 90 22 36 56 42 0c 3b f4 13 55 9d 92 0e 5b f8 6a 74 bd db 6b 96 41 bc 25 81 49 3a d2 48 91 8d 7c 55 3a e2 eb 1b 9e 55 36 7d af 04 63 55 16 3e 8e 71 9a 44 ac 1c b0 77 a1 d6 78 a7 9f 53 1d f4 e9 45 a1 d3 73 8b 61 b8 ae 0b 56 99 67 10 5e 09 4c d2 b1 46 da ef 6a 61 cc ed 63 cf 75 74 0f 41 66 aa 4a 87 d2 89 e9 38 68 b4 9a 0a ca 4c 65 64 0d e8 97 1a 9a aa bb f0 6a 91 86 1e b3 2b e2 3f 26 81 51 3a d2 Data Ascii: RV:~ZN*"O2Bfj6a$0Hg)gky3dZz"'l5:^tNA/SKzy:`s8Dt"SMC@=Fefq-"6VB;U[jtkA%I:H\|U:U6}cU>qDwxSEsaVg^LFjacutAfJ8hLedj+?&Q:
2024-10-06 23:00:41 UTC	1005	IN	Data Raw: d2 c6 6e 76 53 43 f3 9f 92 12 e0 34 3e 4c 2e 36 01 3c 71 84 73 f4 27 a0 bf 65 7e 83 53 07 36 3f 0f ef 04 e1 1d 53 25 a0 27 ea 7a 39 ed 41 68 03 3d 1d 0b 8d 72 0a 10 1e d1 a4 50 0b 37 52 2c 9b b7 4e 2e 23 45 3e 22 37 14 87 82 49 fa da b5 24 9e ae a5 7f 29 6b 80 8e f4 49 d4 c3 54 49 49 6e 5d 51 50 06 7e 73 af 5e 36 0b ea 8d 27 c7 b3 12 13 f5 eb ba 2e da eb e9 80 0b f2 4a a8 87 aa 92 92 bc ba 1b af 5e ae 97 66 a3 69 22 c7 53 9b 89 d3 e1 66 ba 7b 93 bb 2d 8f 35 ce 86 97 f8 ea f4 9b 59 53 a8 87 ac 92 92 7c ba b9 a8 52 66 23 45 ee a0 36 13 a7 33 e0 6a bd af bf ba 05 f8 ea 94 8f 95 1e fe e3 eb 82 82 a4 14 ea a1 ab a4 24 8f 6c 60 a4 08 75 a2 be c2 d5 5a cf 0d 15 d6 bb bd da 78 f9 8a 1b eb a2 6c b5 c1 ae a4 a4 c9 26 46 9a c6 59 2a 81 99 38 19 fc 31 83 81 51 30 d3 Data Ascii: nvSC4>L.6<qs'e~S6?S%'z9Ah=rP7R,N.#E>"7I$)kITIIn]QP~s^6'.J^fi"Sf{-5YS\|Rf#E63j$l`uZxl&FY*81Q0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.7	49872	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	934	OUT	GET /ResourcePackages/Safenames/assets/dist/images/safe2-thin-60.svg HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:42 UTC	200	IN	HTTP/1.1 200 OK Cache-Control: max-age=2678400 Content-Type: image/svg+xml Last-Modified: Sat, 08 Feb 2020 11:01:24 GMT Accept-Ranges: bytes ETag: "05a391a6fded51:0" Server: Microsoft-IIS/10.0
2024-10-06 23:00:42 UTC	2228	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 69 6e 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 77 73 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6e 61 6c 79 74 69 63 Data Ascii: Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.googletagmanager.com https://.hotjar.com https://in.hotjar.com https://.hotjar.io wss://.hotjar.com https://.google-analytics.com https://.analytic
2024-10-06 23:00:42 UTC	476	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 76 67 6a 73 3d 22 68 74 74 70 3a 2f 2f 73 76 67 6a 73 2e 63 6f 6d 2f 73 76 67 6a 73 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 36 30 22 20 77 69 64 74 68 3d 22 36 30 22 20 68 65 69 67 68 74 3d 22 36 30 22 3e 3c 74 69 74 6c 65 3e 45 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 53 74 72 65 61 6d 6c 69 6e 65 20 41 70 70 20 28 68 74 74 70 73 3a 2f 2f 61 70 70 2e 73 74 72 65 61 6d 6c 69 6e 65 69 63 6f 6e 73 2e 63 6f 6d 29 3c 2f 74 69 74 6c 65 3e 3c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" viewBox="0 0 60 60" width="60" height="60"><title>Exported from Streamline App (https://app.streamlineicons.com)</title><
2024-10-06 23:00:42 UTC	1452	IN	Data Raw: 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 20 32 2e 35 30 34 2c 32 32 2e 35 76 31 20 22 20 73 74 72 6f 6b 65 3d 22 23 34 64 62 63 65 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 20 32 31 2e 35 30 34 2c 32 32 2e 35 76 31 20 22 20 73 74 72 6f 6b 65 3d 22 23 34 64 62 63 65 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 73 74 72 6f 6b 65 2d Data Ascii: e-linecap="round" stroke-linejoin="round"></path><path d="M 2.504,22.5v1 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 21.504,22.5v1 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-
2024-10-06 23:00:42 UTC	946	IN	Data Raw: 68 3e 3c 70 61 74 68 20 64 3d 22 4d 20 39 2e 33 32 32 2c 38 2e 33 31 38 6c 31 2e 34 31 34 2c 31 2e 34 31 35 20 22 20 73 74 72 6f 6b 65 3d 22 23 34 64 62 63 65 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 20 38 2e 30 30 34 2c 31 31 2e 35 68 32 20 22 20 73 74 72 6f 6b 65 3d 22 23 34 64 62 63 65 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e Data Ascii: h><path d="M 9.322,8.318l1.414,1.415 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 8.004,11.5h2 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="roun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.7	49874	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	749	OUT	GET /Frontend-Assembly/Telerik.Sitefinity.Frontend.Search/Mvc/Scripts/SearchBox/Search-box.js?package=Safenames&v=MTMuMy43NjM5LjA%3d HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:41 UTC	392	IN	HTTP/1.1 200 OK Last-Modified: Thu, 10 Mar 2022 08:24:48 GMT Content-Type: application/javascript Content-Length: 3634 Cache-Control: max-age=55881, public Expires: Mon, 07 Oct 2024 14:32:01 GMT Date: Sun, 06 Oct 2024 23:00:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 9-11306226-0 0CNN RT(1728255640616 200) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:41 UTC	1060	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 65 61 72 63 68 42 6f 78 49 64 46 69 65 6c 64 73 3d 24 28 27 5b 64 61 74 61 2d 73 66 2d 72 6f 6c 65 3d 22 73 65 61 72 63 68 54 65 78 74 42 6f 78 49 64 22 5d 27 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 73 65 61 72 63 68 42 6f 78 49 64 46 69 65 6c 64 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 73 65 61 72 63 68 42 6f 78 49 64 46 69 65 6c 64 3d 24 28 73 65 61 72 63 68 42 6f 78 49 64 46 69 65 6c 64 73 5b 69 5d 29 3b 76 61 72 20 63 6f 6e 74 72 6f 6c 53 65 72 76 65 72 44 61 74 61 3d 7b 72 65 73 75 6c 74 73 55 72 6c 3a 73 65 61 72 63 68 42 6f 78 49 64 46 69 65 6c 64 2e 73 69 62 6c 69 6e 67 73 28 27 Data Ascii: (function($){$(document).ready(function(){var searchBoxIdFields=$('[data-sf-role="searchTextBoxId"]');for(var i=0;i<searchBoxIdFields.length;i++){var searchBoxIdField=$(searchBoxIdFields[i]);var controlServerData={resultsUrl:searchBoxIdField.siblings('
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: 61 6c 28 29 2c 73 65 61 72 63 68 42 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3a 73 65 61 72 63 68 42 6f 78 49 64 46 69 65 6c 64 2e 73 69 62 6c 69 6e 67 73 28 27 5b 64 61 74 61 2d 73 66 2d 72 6f 6c 65 3d 22 73 65 61 72 63 68 42 75 74 74 6f 6e 49 64 22 5d 27 29 2e 66 69 72 73 74 28 29 2e 76 61 6c 28 29 7d 3b 66 65 61 74 68 65 72 53 65 61 72 63 68 42 6f 78 57 69 64 67 65 74 28 63 6f 6e 74 72 6f 6c 53 65 72 76 65 72 44 61 74 61 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 65 61 74 68 65 72 53 65 61 72 63 68 42 6f 78 57 69 64 67 65 74 28 73 65 72 76 65 72 44 61 74 61 29 7b 76 61 72 20 73 65 61 72 63 68 54 65 78 74 42 6f 78 3d 24 28 73 65 72 76 65 72 44 61 74 61 2e 73 65 61 72 63 68 54 65 78 74 42 6f 78 53 65 6c 65 63 74 6f 72 29 2c 73 65 61 72 63 68 42 75 74 74 6f Data Ascii: al(),searchButtonSelector:searchBoxIdField.siblings('[data-sf-role="searchButtonId"]').first().val()};featherSearchBoxWidget(controlServerData);}function featherSearchBoxWidget(serverData){var searchTextBox=$(serverData.searchTextBoxSelector),searchButto
2024-10-06 23:00:41 UTC	1122	IN	Data Raw: 76 65 72 44 61 74 61 2e 73 69 74 65 49 64 3b 24 2e 61 6a 61 78 28 7b 74 79 70 65 3a 22 47 45 54 22 2c 75 72 6c 3a 73 65 72 76 65 72 44 61 74 61 2e 73 75 67 67 65 73 74 69 6f 6e 73 52 6f 75 74 65 2c 64 61 74 61 54 79 70 65 3a 27 6a 73 6f 6e 27 2c 64 61 74 61 3a 72 65 71 75 65 73 74 2c 73 75 63 63 65 73 73 3a 73 75 67 67 65 73 74 69 6f 6e 73 53 75 63 63 65 73 73 48 61 6e 64 6c 65 72 7d 29 3b 7d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 61 76 69 67 61 74 65 54 6f 52 65 73 75 6c 74 73 28 65 29 7b 69 66 28 21 65 29 0a 65 3d 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 69 66 28 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 29 7b 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 7d 0a 65 6c 73 65 7b 65 2e 63 61 6e 63 65 6c 42 75 62 62 6c 65 3d 74 72 75 65 Data Ascii: verData.siteId;$.ajax({type:"GET",url:serverData.suggestionsRoute,dataType:'json',data:request,success:suggestionsSuccessHandler});}}}function navigateToResults(e){if(!e)e=window.event;if(e.stopPropagation){e.stopPropagation();}else{e.cancelBubble=true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.7	49871	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	936	OUT	GET /ResourcePackages/Safenames/assets/dist/images/monitor-thin-60.svg HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:42 UTC	200	IN	HTTP/1.1 200 OK Cache-Control: max-age=2678400 Content-Type: image/svg+xml Last-Modified: Sat, 08 Feb 2020 11:01:40 GMT Accept-Ranges: bytes ETag: "0c2c2236fded51:0" Server: Microsoft-IIS/10.0
2024-10-06 23:00:42 UTC	2228	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 69 6e 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 77 73 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6e 61 6c 79 74 69 63 Data Ascii: Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.googletagmanager.com https://.hotjar.com https://in.hotjar.com https://.hotjar.io wss://.hotjar.com https://.google-analytics.com https://.analytic
2024-10-06 23:00:42 UTC	476	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 76 67 6a 73 3d 22 68 74 74 70 3a 2f 2f 73 76 67 6a 73 2e 63 6f 6d 2f 73 76 67 6a 73 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 36 30 22 20 77 69 64 74 68 3d 22 36 30 22 20 68 65 69 67 68 74 3d 22 36 30 22 3e 3c 74 69 74 6c 65 3e 45 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 53 74 72 65 61 6d 6c 69 6e 65 20 41 70 70 20 28 68 74 74 70 73 3a 2f 2f 61 70 70 2e 73 74 72 65 61 6d 6c 69 6e 65 69 63 6f 6e 73 2e 63 6f 6d 29 3c 2f 74 69 74 6c 65 3e 3c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" viewBox="0 0 60 60" width="60" height="60"><title>Exported from Streamline App (https://app.streamlineicons.com)</title><
2024-10-06 23:00:42 UTC	1452	IN	Data Raw: 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 20 31 32 2c 35 2e 35 30 31 20 63 30 2e 38 32 38 2c 30 2c 31 2e 35 2c 30 2e 36 37 32 2c 31 2e 35 2c 31 2e 35 73 2d 30 2e 36 37 32 2c 31 2e 35 2d 31 2e 35 2c 31 2e 35 73 2d 31 2e 35 2d 30 2e 36 37 32 2d 31 2e 35 2d 31 2e 35 53 31 31 2e 31 37 32 2c 35 2e 35 30 31 2c 31 32 2c 35 2e 35 30 31 7a 20 22 20 73 74 72 6f 6b 65 3d 22 23 34 64 62 63 65 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 20 36 2e 35 2c 31 31 2e 35 Data Ascii: e-linejoin="round"></path><path d="M 12,5.501 c0.828,0,1.5,0.672,1.5,1.5s-0.672,1.5-1.5,1.5s-1.5-0.672-1.5-1.5S11.172,5.501,12,5.501z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 6.5,11.5
2024-10-06 23:00:42 UTC	562	IN	Data Raw: 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 20 37 2e 35 2c 32 33 2e 35 30 31 68 39 20 22 20 73 74 72 6f 6b 65 3d 22 23 34 64 62 63 65 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 20 30 2e 35 2c 31 36 2e 35 30 31 68 32 33 20 22 20 73 74 72 6f 6b 65 3d 22 23 34 64 62 63 65 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b Data Ascii: oke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 7.5,23.501h9 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 0.5,16.501h23 " stroke="#4dbce8" fill="none" strok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.7	49877	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	701	OUT	GET /images/default-source/default-album/nhsbloodandtransplant.png?sfvrsn=77d6694d_6 HTTP/1.1 Host: www.safenames.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:41 UTC	382	IN	HTTP/1.1 200 OK Last-Modified: Wed, 06 May 2020 10:09:36 GMT Content-Type: image/png Content-Length: 3174 Cache-Control: max-age=5723314, public Expires: Thu, 12 Dec 2024 04:49:14 GMT Date: Sun, 06 Oct 2024 23:00:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 11-21477655-0 0CNN RT(1728255640677 297) q(0 -1 -1 -1) r(0 -1)
2024-10-06 23:00:41 UTC	1070	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7f 00 00 00 6c 08 03 00 00 00 b5 af 42 d4 00 00 00 6f 50 4c 54 45 00 00 00 1d 1d 1b 00 72 ba 1d 1d 1b 1d 1d 1b 00 72 ba 1d 1d 1b 1d 1d 1b 1d 1d 1b 1d 1d 1b 00 72 ba 1d 1d 1b 1d 1d 1b 1d 1d 1b 1d 1d 1b 1d 1d 1b 1d 1d 1b 1d 1d 1b 1d 1d 1b 00 72 ba 10 7b be 1d 1d 1b 20 84 c3 30 8c c7 40 95 cb 50 9e d0 60 a7 d4 70 b0 d8 80 b9 dd 8f c1 e1 9f ca e5 af d3 e9 bf dc ee cf e5 f2 df ed f6 ef f6 fb ff ff ff 12 44 ae da 00 00 00 13 74 52 4e 53 00 10 20 20 30 40 40 50 60 70 80 80 8f 9f af bf cf df ef 65 3b 30 e2 00 00 0b 93 49 44 41 54 78 9c ed 9c e9 62 e3 2a 12 85 a5 91 5a 96 af 2c 6b f1 9e d8 8e 1d e7 fd 9f 71 8c d8 4e 15 a0 28 e9 f4 b8 ef 98 f3 ab 0d 88 e5 03 55 15 a0 74 92 44 3d 56 ff f9 e7 af d0 af 47 73 78 Data Ascii: PNGIHDRlBoPLTErrrr{ 0@P`pDtRNS 0@@P`pe;0IDATxb*Z,kqN(UtD=VGsx
2024-10-06 23:00:41 UTC	1452	IN	Data Raw: aa be ef cb a5 b0 64 e0 5b 07 f2 91 69 8c 7f 24 7f 8f fb f5 7d 8e ab 72 27 dd 3d 0e 8e c2 3d e8 5f 93 5b 7e 33 d7 4f ce 1f 02 4a d8 b5 7a 3e 88 b8 f2 55 4e e0 72 f7 bb ff b8 9d e8 8d ef 9e d4 69 43 a4 27 e7 0f a6 1e 0c ba e7 94 8d df 3d d2 2f 4a b8 fb 1d 0c d5 ed ed 78 d8 6f c5 5f 85 1d f8 5f 20 1d 23 7f c9 1f b6 a5 60 d0 3d 57 87 2f 2b f7 86 dd ff c2 08 c3 f4 c9 2d 0d 7c 0e f7 dc fc d1 d2 a3 41 77 f9 b1 bb 00 f6 17 62 58 72 15 70 20 20 38 a0 78 6e fe b8 bf 0d d9 13 9b cb 3e 70 03 e3 0e 19 57 f6 a2 78 84 a1 eb 73 f3 67 7f d9 68 e4 5c dd 3a 77 8f 64 f9 23 ef f3 2a f0 41 a3 17 ff 93 f3 bf 04 a8 38 9f 24 f2 bb c7 b0 fb 7d fd ec 92 98 6e 8f 9f 9b 3f e5 06 e2 5b e0 f1 c3 cf 2f fc e1 cb 85 7d 88 f8 d4 fc 31 ce a1 a7 06 1c e1 96 cd 09 3d e2 c7 92 c2 7a 05 ed cf Data Ascii: d[i$}r'==_[~3OJz>UNriC'=/Jxo__ #`=W/+-\|AwbXrp 8xn>pWxsgh\:wd#*A8$}n?[/}1=z
2024-10-06 23:00:41 UTC	652	IN	Data Raw: 35 1d c4 81 69 cb 95 eb e3 6c 95 9a fb f8 77 66 6c aa f2 4f f9 eb e1 c3 f1 e0 74 fe 4b a8 78 02 ff 44 4c 81 da cf 18 0e 7a 3d 79 fc 6f 8e 3d fc 5d fe a9 dd e1 1b fe 33 02 5a 76 75 99 b0 40 47 86 45 a2 c3 b2 eb 2a 7e 58 f8 f8 63 81 a5 99 0b 3f 7f fb c2 d3 de 71 8d f0 ef 0c 13 d5 9f 4f f9 df 5b ea 28 87 0e eb b2 47 09 8d c6 a3 30 a4 06 da f7 f8 ab 8d 27 b5 ff 0a 6d 0a 8f 0f f1 c0 12 27 be 32 9c 6a 58 30 0a 98 8f bf fc 67 6e db f3 f3 57 fb af 0c 1a f9 2a 7f 3b 10 b5 65 9f c0 df 44 79 3a 3c 97 cb 4f ed 27 c9 fe 0b fb bd 98 ca 1f 63 63 89 40 5c 1b 69 c3 37 a7 dd 96 c3 91 bb c9 da 2e 07 d9 69 79 ec 39 b7 98 0a 5b 47 46 4e 44 68 83 72 13 0a c7 19 7e fe 0a c4 d0 b8 6a e4 5b eb 7f 78 83 72 30 2b 01 fe b5 9c e9 d4 bc ce 7a 7b 34 b7 1d a0 e7 0f 10 87 e3 76 7f 9c bf Data Ascii: 5ilwflOtKxDLz=yo=]3Zvu@GE~Xc?qO[(G0'm'2jX0gnW;eDy:<O'cc@\i7.iy9[GFNDhr~j[xr0+z{4v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.7	49875	45.223.61.112	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:00:41 UTC	935	OUT	GET /ResourcePackages/Safenames/assets/dist/images/server-thin-60.svg HTTP/1.1 Host: www.safenames.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.safenames.net/?ref=lndrdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1ftxbhgbk024cegvvkzg00gb; visid_incap_2927459=bVNoleYHQ9CcMafS3onBppQWA2cAAAAAQUIPAAAAAADPlOiYWQEw+tbMjZijMtyv; nlbi_2927459=LhzALxDrR0p/9f3QCNfsxQAAAABV1DA89jA7uXHsCeaxuPiv; incap_ses_890_2927459=qWYmYMHwOF8pSREedepZDJQWA2cAAAAA/2tBjiUT8xKhYCNl9/Axhw==
2024-10-06 23:00:42 UTC	200	IN	HTTP/1.1 200 OK Cache-Control: max-age=2678400 Content-Type: image/svg+xml Last-Modified: Sat, 08 Feb 2020 11:02:02 GMT Accept-Ranges: bytes ETag: "0b1df306fded51:0" Server: Microsoft-IIS/10.0
2024-10-06 23:00:42 UTC	2228	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 69 6e 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 77 73 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6e 61 6c 79 74 69 63 Data Ascii: Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.googletagmanager.com https://.hotjar.com https://in.hotjar.com https://.hotjar.io wss://.hotjar.com https://.google-analytics.com https://.analytic
2024-10-06 23:00:42 UTC	476	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 76 67 6a 73 3d 22 68 74 74 70 3a 2f 2f 73 76 67 6a 73 2e 63 6f 6d 2f 73 76 67 6a 73 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 36 30 22 20 77 69 64 74 68 3d 22 36 30 22 20 68 65 69 67 68 74 3d 22 36 30 22 3e 3c 74 69 74 6c 65 3e 45 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 53 74 72 65 61 6d 6c 69 6e 65 20 41 70 70 20 28 68 74 74 70 73 3a 2f 2f 61 70 70 2e 73 74 72 65 61 6d 6c 69 6e 65 69 63 6f 6e 73 2e 63 6f 6d 29 3c 2f 74 69 74 6c 65 3e 3c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" viewBox="0 0 60 60" width="60" height="60"><title>Exported from Streamline App (https://app.streamlineicons.com)</title><
2024-10-06 23:00:42 UTC	1452	IN	Data Raw: 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 20 32 33 2e 35 2c 38 2e 35 63 30 2c 31 2e 31 30 35 2d 30 2e 38 39 35 2c 32 2d 32 2c 32 68 2d 31 39 63 2d 31 2e 31 30 35 2c 30 2d 32 2d 30 2e 38 39 35 2d 32 2d 32 76 2d 32 63 30 2d 31 2e 31 30 35 2c 30 2e 38 39 35 2d 32 2c 32 2d 32 68 31 39 63 31 2e 31 30 35 2c 30 2c 32 2c 30 2e 38 39 35 2c 32 2c 32 56 38 2e 35 7a 20 22 20 73 74 72 6f 6b 65 3d 22 23 34 64 62 63 65 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 3e 3c 2f 70 61 74 Data Ascii: "round" stroke-linejoin="round"></path><path d="M 23.5,8.5c0,1.105-0.895,2-2,2h-19c-1.105,0-2-0.895-2-2v-2c0-1.105,0.895-2,2-2h19c1.105,0,2,0.895,2,2V8.5z " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></pat
2024-10-06 23:00:42 UTC	673	IN	Data Raw: 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 20 36 2e 35 2c 32 33 2e 35 20 68 31 31 20 22 20 73 74 72 6f 6b 65 3d 22 23 34 64 62 63 65 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 20 30 2e 35 2c 32 33 2e 35 68 31 20 22 20 73 74 72 6f 6b 65 3d 22 23 34 64 62 63 65 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 Data Ascii: ="round" stroke-linejoin="round"></path><path d="M 6.5,23.5 h11 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 0.5,23.5h1 " stroke="#4dbce8" fill="none" stroke-width="1" stroke-linecap="rou

Target ID:	2
Start time:	19:00:11
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	19:00:17
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2184,i,11222019368487239187,10007873458667200943,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	19:00:20
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ykbdmz.com/php/php.exe?c:"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://ykbdmz.com/php/php.exe?c:

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Windows Analysis Report
http://ykbdmz.com/php/php.exe?c: