Edit tour

Windows Analysis Report
http://coritta.com/

Overview

General Information

Sample URL:	http://coritta.com/
Analysis ID:	1527503
Tags:	urlscan
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3300 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1692,i,8583954906543678060,8366272167246359389,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5420 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://coritta.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /service/common.php HTTP/1.1Host: sedo.comConnection: keep-aliveContent-Length: 45sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://sedo.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sedo.com/us/park-domains/?tracked=&partnerid=&language=usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw; campaignId=; session=e8de16dbea38ff0797b368d643674e0e; locale=en-US

Source: chromecache_305.3.dr, chromecache_285.3.dr	String found in binary or memory: http://ns.attribution.com/ads/1.0/
Source: chromecache_221.3.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkOCqyKW-JKY05XWU5Al3JzKwkR9
Source: chromecache_239.3.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkRN4FRPQIanfatTMa1ixJNEO8jM
Source: chromecache_221.3.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkS2KHfKxw63HSmOZfxyngMQThNn
Source: chromecache_239.3.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqksLzWFR6Zronb0fjN8mSruVqTiX
Source: chromecache_282.3.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlMfrq-KJlQ17mKSx_7zloCS7IL1
Source: chromecache_282.3.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqldUbBNbk1pvpYHchD2qq1SvwdrF
Source: chromecache_287.3.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlpynKyvUq0132Y_LUVF7uDuiXDV
Source: chromecache_287.3.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqn6mgjQ6YyOpQ3esLrkxn5NpM2m-
Source: chromecache_270.3.dr, chromecache_260.3.dr	String found in binary or memory: https://app.usercentrics.eu/browser-ui/latest/loader.js
Source: chromecache_270.3.dr, chromecache_260.3.dr	String found in binary or memory: https://app.varify.io/varify.js
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: https://beian.miit.gov.cn/
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/dist/js/deprecated/typescript/static/app.min.js
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/images/icons/apple-touch-icon.png?v=dLJ3bx2xjj
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/images/icons/favicon-16x16.png?v=dLJ3bx2xjj
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/images/icons/favicon-32x32.png?v=dLJ3bx2xjj
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/images/icons/favicon.ico?v=dLJ3bx2xjj
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/images/icons/safari-pinned-tab.svg?v=dLJ3bx2xjj
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/images/icons/site.webmanifest?v=dLJ3bx2xjj
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/libs/external/jquery-ui.min.js
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/components/TfcP3WYRyZ9A/cookie-banner.min.js
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/components/p9HJ4M2Uz7U4/full.header.min.js
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/components/zkLxDsbw1hz2/full.footer.min.js
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/dist/css/typo3/main.css?1724922195
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/dist/js/typo3/app.min.js?1724922195
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Domain-Parking-Profis.jpg
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Domain-Parking.jpg
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Parking_50-50_1420x1082_EN.jpg
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Parking_einrichten.jpg
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin/user_upload/Sell_Domains/Domain_Auction/FAQ.jpg
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin/user_upload/park-domains_bild.png
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin_git/resources/public/JavaScripts/jquery-3.7.1.min.js?1724921946
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin_git/resources/public/JavaScripts/splide.min.js?1724921946
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/typo3temp/assets/js/4c6258062633129d69aecce4f0023d9c.js?1718178726
Source: chromecache_219.3.dr	String found in binary or memory: https://cdn.sedo.com/typo3temp/assets/js/cfd16b174d7f7b046e20adbc2e0a1094.js?1689601391
Source: chromecache_270.3.dr, chromecache_260.3.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_219.3.dr	String found in binary or memory: https://faq-us.sedo.com/app/answers/detail/a_id/1168/kw/what%20is%20domain%20parking/search/1
Source: chromecache_219.3.dr	String found in binary or memory: https://faq-us.sedo.com/app/answers/detail/a_id/2827/kw/park/search/1
Source: chromecache_219.3.dr	String found in binary or memory: https://faq-us.sedo.com/app/answers/detail/a_id/689/kw/park/search/1
Source: chromecache_197.3.dr, chromecache_293.3.dr, chromecache_284.3.dr, chromecache_263.3.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_296.3.dr, chromecache_208.3.dr	String found in binary or memory: https://frontend-services.ionos.com/t/tag/SEDO/customerarea.js
Source: chromecache_195.3.dr, chromecache_228.3.dr	String found in binary or memory: https://jqueryui.com
Source: chromecache_197.3.dr, chromecache_293.3.dr, chromecache_284.3.dr, chromecache_263.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_197.3.dr, chromecache_293.3.dr, chromecache_284.3.dr, chromecache_263.3.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_221.3.dr, chromecache_239.3.dr, chromecache_282.3.dr	String found in binary or memory: https://search.yahoo.com/search/results
Source: chromecache_219.3.dr	String found in binary or memory: https://sedo.com/member/domainsignup/index.php?language=us
Source: chromecache_270.3.dr, chromecache_260.3.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_270.3.dr, chromecache_260.3.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_197.3.dr, chromecache_293.3.dr, chromecache_284.3.dr, chromecache_263.3.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_196.3.dr	String found in binary or memory: https://twitter.com/sedo
Source: chromecache_196.3.dr	String found in binary or memory: https://twitter.com/sedoDE
Source: chromecache_219.3.dr	String found in binary or memory: https://typo3.org/
Source: chromecache_219.3.dr	String found in binary or memory: https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
Source: chromecache_221.3.dr, chromecache_282.3.dr	String found in binary or memory: https://www.avuair.com/
Source: chromecache_197.3.dr, chromecache_293.3.dr, chromecache_284.3.dr, chromecache_263.3.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_239.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwinw5eV7_qIAxV6rYMHHV6JGrwYABAAGgJlZg
Source: chromecache_239.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwinw5eV7_qIAxV6rYMHHV6JGrwYABABGgJlZg
Source: chromecache_239.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwinw5eV7_qIAxV6rYMHHV6JGrwYABACGgJlZg
Source: chromecache_287.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwit2Zac7_qIAxVqmoMHHWrBL70YABAAGgJlZg
Source: chromecache_287.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwit2Zac7_qIAxVqmoMHHWrBL70YABABGgJlZg
Source: chromecache_287.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwit2Zac7_qIAxVqmoMHHWrBL70YABACGgJlZg
Source: chromecache_282.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwivqt2i7_qIAxVJlYMHHZ-wN3sYABAAGgJlZg
Source: chromecache_282.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwivqt2i7_qIAxVJlYMHHZ-wN3sYABABGgJlZg
Source: chromecache_282.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwivqt2i7_qIAxVJlYMHHZ-wN3sYABACGgJlZg
Source: chromecache_221.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwju9rGY7_qIAxW6oIMHHVE9K2UYABAAGgJlZg
Source: chromecache_221.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwju9rGY7_qIAxW6oIMHHVE9K2UYABABGgJlZg
Source: chromecache_221.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwju9rGY7_qIAxW6oIMHHVE9K2UYABACGgJlZg
Source: chromecache_197.3.dr, chromecache_293.3.dr, chromecache_284.3.dr, chromecache_263.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_270.3.dr, chromecache_260.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: https://www.paypal.com/cn/selfhelp/home
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: https://www.paypal.com/de/selfhelp/home
Source: chromecache_196.3.dr	String found in binary or memory: https://www.paypal.com/es/selfhelp/home
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: https://www.paypal.com/pt/selfhelp/home
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: https://www.paypal.com/us/selfhelp/home
Source: chromecache_287.3.dr	String found in binary or memory: https://www.thenewflatrate.com/
Source: chromecache_287.3.dr	String found in binary or memory: https://www.topsearchnow.net/air-conditioner/
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: https://www.united-internet.de/
Source: chromecache_196.3.dr	String found in binary or memory: https://www.united-internet.de/en.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 50899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 50875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 50858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 50903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 50871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 50913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 50893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50904
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50903
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50906
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50909
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50914
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50917
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50919
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 50905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50854
Source: unknown	Network traffic detected: HTTP traffic on port 50909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50850
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:50072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:50870 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@28/198@72/24

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1692,i,8583954906543678060,8366272167246359389,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://coritta.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1692,i,8583954906543678060,8366272167246359389,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://syndicatedsearch.goog	0%	URL Reputation	safe
https://connect.facebook.net/en_US/fbevents.js	0%	URL Reputation	safe
http://ns.attribution.com/ads/1.0/	0%	URL Reputation	safe
https://syndicatedsearch.goog/afs/ads/i/iframe.html	0%	URL Reputation	safe
https://jqueryui.com	0%	URL Reputation	safe
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
api.usercentrics.eu	35.241.3.184	true	false	unknown
coritta.com	162.255.119.216	true	false	unknown
www.sedo.com	104.16.140.114	true	false	unknown
app.usercentrics.eu	35.190.14.188	true	false	unknown
sedo.cachefly.net	205.234.175.175	true	false	unknown
sedo.com	104.16.140.114	true	false	unknown
syndicatedsearch.goog	142.250.185.78	true	false	unknown
cdn.sedo.com	104.16.141.114	true	false	unknown
parkingpage.namecheap.com	91.195.240.19	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
uct.service.usercentrics.eu	34.95.108.180	true	false	unknown
vip1.g5.cachefly.net	205.234.175.175	true	false	unknown
consent-api.service.consent.usercentrics.eu	35.201.111.240	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
widget.trustpilot.com	108.156.60.21	true	false	unknown
googlehosted.l.googleusercontent.com	172.217.16.193	true	false	unknown
www.coritta.com	unknown	unknown	false	unknown
afs.googleusercontent.com	unknown	unknown	false	unknown
img.sedoparking.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=u0qzifx4i94b&aqid=2RcDZ-fyC_rajuwP3pLq4As&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1450&adbw=379&adbah=550%2C470%2C430&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=681010707&csala=22%7C0%7C-6302518%7C11%7C6304028&lle=0&ifv=1&hpt=1	false		unknown
https://cdn.sedo.com/c7r/assets/static/libs/external/jquery-ui.min.js	false		unknown
https://consent-api.service.consent.usercentrics.eu/consent/uw/3	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/VirtualServiceItem-d95151cb.js	false		unknown
https://cdn.sedo.com/fileadmin/images/legacy/images/icons/icn-check-beige.svg	false		unknown
https://sedo.com/us/park-domains/?tracked=&partnerid=&language=us	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/FirstLayerCustomization-de8ec6f3-0ed66d66.js	false		unknown
https://cdn.sedo.com/components/TfcP3WYRyZ9A/cookie-banner.min.js	false		unknown
https://cdn.sedo.com/components/zkLxDsbw1hz2/e3c69f63348c1ec6e547.png	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/index.module.js	false		unknown
https://cdn.sedo.com/components/zkLxDsbw1hz2/b75b73e313804cf110ea.svg	false		unknown
http://sedo.com/redirect.php?id=22	false		unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=g9i2m58a1jd9&aqid=uBcDZ8WZNaeUiM0P5ZLx4QU&pbt=bs&adbx=481.5&adby=1025.015625&adbh=16&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo80_3ph&errv=681010707&csala=15%7C0%7C1604%7C1092%7C418&lle=0&ifv=0&hpt=0	false		unknown
https://www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/index-4d0d6d10.js	false		unknown
https://cdn.sedo.com/c7r/assets/static/images/icons/favicon.ico?v=dLJ3bx2xjj	false		unknown
http://img.sedoparking.com/templates/bg/arrows-curved.png	false		unknown
http://www.coritta.com/search/tsc.php?ses=ogc-pHY9hg6S8tYf34s_xrgsU7s_49KmerisVUCDZX1RSAIR5RZu49QIYaEkiLJAfVzBuB_3dqEC-8eAixiSYOyFnI09k7eqeOz8T9_Xbote5sXdw3WC116Zb6Et1jdV8eQTnv3C-dwj5YCghl-gAN_3VW_JRbz5mP_q89GOBkhZonllZ0iMpSu9YsyoC769uyf8sVGhEEvgInuM7s8eLmWK8Y4-i4A88poLHrqicMMx8_EL990_EJqXDjE7UF4TQVM-cUYlhyMNSNT7fiWLecHzhLi2IP39cPqiQUKunV4QjBFXlDt88XDKQxO0yVrPVYA4Wtho3Eokg1KFZMQYvLCu-cmwpMb_Iuti-FhxufUD-KgniMRik4aJ5wz&cv=2	false		unknown
http://www.coritta.com/search/tsc.php?ses=ogcpCtxtojopBEXJ3abXvbInowugRdqwmZI40XyGVD7wS_QL_j0E8TY6mbcX673XhXWgKoJGgg1v5wqQwKdGdzLvK9jHNmYfPh905BS5AMubCa7gJ36K2LckXQf_JERgi46OW7wVJP5DPbUNNa5wm0R5pSe_eBEGU73VfsIRZoBiorc2f7gnI2S1LvuaXEm21y9GCO6cKAlfrncFpO652lscss8Hz9m69KpmWKPEb_fxyShWacSDjzIuB_MdIApYtUFfC3d3c3DqkJG1fzd04ZYGUcYVM3fWqjgMt7WHKdPRRtyfp17f97GIRqJ2nDTo3FGdtjjHNEgSxggjI-5ynx3YFtUEvO8ONddfoN0D8OHJSZKXbygDkpQvmRj&cv=2	false		unknown
https://cdn.sedo.com/typo3temp/assets/js/4c6258062633129d69aecce4f0023d9c.js?1718178726	false		unknown
https://cdn.sedo.com/fileadmin_git/resources/public/JavaScripts/splide.min.js?1724921946	false		unknown
https://sedo.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js?	false		unknown
https://sedo.com/service/common.php?v=0.1&m=translate&f=getTexts&language=us&app=com.sedo.translation.global	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/ButtonsCustomization-5698ac85-5d43b15f.js	false		unknown
http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Cost+of+a+New+Ac+and+Furnace&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj3wtYOe7rzx_1g0wON-N8H__C4RQ1CeooGzFWtQkJCJwnMJ1w-u4cuLbMWU_7XM46bcpZ97UYjuhVirX9hk929rs6qaClYRSjBdJEFMkHJUbEGAnwvyWdh41fmZ1VUQ8tfWlxX7SZjj5&pcsa=false&nb=0	false		unknown
https://sedo.com/services/parking.php3	false		unknown
https://api.usercentrics.eu/translations/translations-en.json	false		unknown
https://syndicatedsearch.goog/afs/ads/i/iframe.html	false	URL Reputation: safe	unknown
https://cdn.sedo.com/components/p9HJ4M2Uz7U4/d26139c0fd3b917ce03b.woff2	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=ko55oyhuooxu&aqid=uBcDZ8WZNaeUiM0P5ZLx4QU&psid=3259787283&pbt=bv&adbx=385.203125&adby=413.015625&adbh=612&adbw=493&adbah=171%2C212%2C212&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=681010707&csala=32%7C0%7C1587%7C1092%7C417&lle=0&ifv=1&hpt=0	false		unknown
https://sedo.com/cdn-cgi/challenge-platform/h/g/jsd/r/8ce94c374e427ca5	false		unknown
https://cdn.sedo.com/components/zkLxDsbw1hz2/d5634a838071888dbd2a.png	false		unknown
https://app.usercentrics.eu/browser-ui/latest/loader.js	false		unknown
https://app.usercentrics.eu/session/1px.png?settingsId=5QJe3R54G	false		unknown
https://cdn.sedo.com/components/zkLxDsbw1hz2/48d68b70659b28905e87.jpg	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/DefaultData-fa10cf7f-3d7db9aa.js	false		unknown
http://www.coritta.com/search/tsc.php?ses=ogcV_WvEfM___dYD1L7gly3SU3IFN9HcA91vILohR6NX1LY0h0GqkOW2ripKZAwuNsWOj5Wu8FJUUlfANAIwIaBJnJ9Vm74aDQXwlM2lW2qZlBDAVJC63G2CGJZjTE5YH8dqnVz71Qih3Kh12xmeBytsHwZss1FnK42YSGH5dN1i_NTKeNTiUrm1Pi4cWMe8OnDvJO7l3n4dGb2LVoH6Xv6rGPykqqjmRLOQEdwDO__xEFbM_kRTKpeFxKCywnaMkelLJ3O9yYyOhllddUAU_1YlbmIyR7ztiIkekOMue5Zy0j7V-mPWYaY1uKvM6mJatLrHOTnZba3HPGFq6PPeZcc-HJbU1Xxes0VAyI2sDdG1LvnYBxU6dfBvpMu&cv=2	false		unknown
http://img.sedoparking.com/templates/logos/sedo_logo.png	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/SecondLayerUI-2d936468-4fd84b50.js	false		unknown
https://app.usercentrics.eu/browser-sdk/4.38.4/cross-domain-bridge.html	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=8btpz3kg9bim&aqid=9RcDZ-_bJMmqjuwPn-He2Qc&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1470&adbw=379&adbah=530%2C459%2C481&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=681010707&csala=17%7C0%7C1752%7C1705%7C2974&lle=0&ifv=1&hpt=1	false		unknown
https://cdn.sedo.com/typo3temp/assets/js/cfd16b174d7f7b046e20adbc2e0a1094.js?1689601391	false		unknown
https://api.usercentrics.eu/settings/5QJe3R54G/latest/en.json	false		unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2	false		unknown
https://cdn.sedo.com/fileadmin_git/resources/public/JavaScripts/jquery-3.7.1.min.js?1724921946	false		unknown
https://img.sedoparking.com/templates/images/hero_nc.svg	false		unknown
https://cdn.sedo.com/fileadmin/images/legacy/images/icons/icn-check-blue.svg	false		unknown
https://cdn.sedo.com/dist/js/typo3/app.min.js?1724922195	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=wb2g6hwdftgs&aqid=5xcDZ-3JNOq0juwP6oK_6Qs&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1368&adbw=379&adbah=450%2C430%2C488&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=681010707&csala=39%7C0%7C-6302286%7C2%7C6303968&lle=0&ifv=1&hpt=1	false		unknown
https://sedo.com/redirect.php?id=22	false		unknown
https://cdn.sedo.com/components/p9HJ4M2Uz7U4/b75b73e313804cf110ea.svg	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/SaveButton-c74cbe89.js	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/index-3ff76a26.js	false		unknown
https://sedo.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	false		unknown
http://www.coritta.com/	false		unknown
https://uct.service.usercentrics.eu/uct?v=1&sid=5QJe3R54G&t=1&abv=&r=https%3A%2F%2Fsedo.com%2Fus%2Fpark-domains%2F&cb=1728255956637	false		unknown
https://cdn.sedo.com/fileadmin/user_upload/Sell_Domains/Domain_Auction/FAQ.jpg	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=fbhts9fcqnlg&aqid=uBcDZ8WZNaeUiM0P5ZLx4QU&psid=3259787283&pbt=bs&adbx=385.203125&adby=413.015625&adbh=612&adbw=493&adbah=171%2C212%2C212&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=681010707&csala=32%7C0%7C1587%7C1092%7C417&lle=0&ifv=1&hpt=0	false		unknown
https://cdn.sedo.com/components/p9HJ4M2Uz7U4/full.header.min.js	false		unknown
https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Domain-Parking.jpg	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=te1c0qye7j9m&aqid=3xcDZ66LOLrBjuwP0fqsqQY&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1437&adbw=379&adbah=459%2C499%2C479&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=681010707&csala=32%7C0%7C-6301939%7C3%7C6304083&lle=0&ifv=1&hpt=1	false		unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	false	URL Reputation: safe	unknown
http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Replace+Hvac+System+Cost&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj5ulDShI8Bb7iRptDBkDmxnWF4qf353j65aQvFz-IKHccRTuxxIucZ2b63EhAJbftDkzbBDaWuuRYuJLti9NXeWNbTMnmVHkdDlPUOz-6PAxKFfYM9qN9Qyxx-ANIn2stcqlhWRn5irL&pcsa=false&nb=0	false		unknown
https://sedo.com/service/common.php	false		unknown
https://cdn.sedo.com/components/p9HJ4M2Uz7U4/a7d29342348138d42728.woff2	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=5hbnh7fncz6c&aqid=2RcDZ-fyC_rajuwP3pLq4As&psid=3259787283&pbt=bs&adbx=442.0625&adby=373.359375&adbh=1450&adbw=379&adbah=550%2C470%2C430&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=681010707&csala=22%7C0%7C-6302518%7C11%7C6304028&lle=0&ifv=1&hpt=1	false		unknown
https://cdn.sedo.com/components/zkLxDsbw1hz2/9f07a3eca6d4792ac529.svg	false		unknown
http://coritta.com/	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/DefaultUI-efcc91c9-fa5e06dd.js	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://typo3.org/	chromecache_219.3.dr	false		unknown
https://www.paypal.com/us/selfhelp/home	chromecache_225.3.dr, chromecache_196.3.dr	false		unknown
https://syndicatedsearch.goog	chromecache_197.3.dr, chromecache_293.3.dr, chromecache_284.3.dr, chromecache_263.3.dr	false	URL Reputation: safe	unknown
https://cdn.sedo.com/c7r/assets/static/images/icons/safari-pinned-tab.svg?v=dLJ3bx2xjj	chromecache_219.3.dr	false		unknown
https://faq-us.sedo.com/app/answers/detail/a_id/689/kw/park/search/1	chromecache_219.3.dr	false		unknown
https://app.varify.io/varify.js	chromecache_270.3.dr, chromecache_260.3.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlMfrq-KJlQ17mKSx_7zloCS7IL1	chromecache_282.3.dr	false		unknown
https://beian.miit.gov.cn/	chromecache_225.3.dr, chromecache_196.3.dr	false		unknown
https://connect.facebook.net/en_US/fbevents.js	chromecache_270.3.dr, chromecache_260.3.dr	false	URL Reputation: safe	unknown
https://www.united-internet.de/	chromecache_225.3.dr, chromecache_196.3.dr	false		unknown
http://ns.attribution.com/ads/1.0/	chromecache_305.3.dr, chromecache_285.3.dr	false	URL Reputation: safe	unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_197.3.dr, chromecache_293.3.dr, chromecache_284.3.dr, chromecache_263.3.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkRN4FRPQIanfatTMa1ixJNEO8jM	chromecache_239.3.dr	false		unknown
https://www.paypal.com/es/selfhelp/home	chromecache_196.3.dr	false		unknown
https://www.avuair.com/	chromecache_221.3.dr, chromecache_282.3.dr	false		unknown
https://cdn.sedo.com/c7r/assets/static/images/icons/favicon-32x32.png?v=dLJ3bx2xjj	chromecache_219.3.dr	false		unknown
https://www.paypal.com/de/selfhelp/home	chromecache_225.3.dr, chromecache_196.3.dr	false		unknown
https://www.topsearchnow.net/air-conditioner/	chromecache_287.3.dr	false		unknown
https://cdn.sedo.com/c7r/assets/static/images/icons/favicon-16x16.png?v=dLJ3bx2xjj	chromecache_219.3.dr	false		unknown
https://twitter.com/sedoDE	chromecache_196.3.dr	false		unknown
https://sedo.com/member/domainsignup/index.php?language=us	chromecache_219.3.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqn6mgjQ6YyOpQ3esLrkxn5NpM2m-	chromecache_287.3.dr	false		unknown
https://www.paypal.com/pt/selfhelp/home	chromecache_225.3.dr, chromecache_196.3.dr	false		unknown
https://www.united-internet.de/en.html	chromecache_196.3.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlpynKyvUq0132Y_LUVF7uDuiXDV	chromecache_287.3.dr	false		unknown
https://cdn.sedo.com/c7r/assets/static/images/icons/apple-touch-icon.png?v=dLJ3bx2xjj	chromecache_219.3.dr	false		unknown
https://jqueryui.com	chromecache_195.3.dr, chromecache_228.3.dr	false	URL Reputation: safe	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqldUbBNbk1pvpYHchD2qq1SvwdrF	chromecache_282.3.dr	false		unknown
https://frontend-services.ionos.com/t/tag/SEDO/customerarea.js	chromecache_296.3.dr, chromecache_208.3.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqksLzWFR6Zronb0fjN8mSruVqTiX	chromecache_239.3.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.46	unknown	United States	15169	GOOGLEUS	false
142.250.185.78	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
205.234.175.175	sedo.cachefly.net	United States	30081	CACHENETWORKSUS	false
104.16.140.114	www.sedo.com	United States	13335	CLOUDFLARENETUS	false
108.156.60.21	widget.trustpilot.com	United States	16509	AMAZON-02US	false
162.255.119.216	coritta.com	United States	22612	NAMECHEAP-NETUS	false
104.16.141.114	cdn.sedo.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
35.241.3.184	api.usercentrics.eu	United States	15169	GOOGLEUS	false
172.217.18.110	unknown	United States	15169	GOOGLEUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
3.164.206.74	unknown	United States	16509	AMAZON-02US	false
34.95.108.180	uct.service.usercentrics.eu	United States	15169	GOOGLEUS	false
91.195.240.19	parkingpage.namecheap.com	Germany	47846	SEDO-ASDE	false
142.250.185.238	unknown	United States	15169	GOOGLEUS	false
204.93.142.142	unknown	United States	30081	CACHENETWORKSUS	false
35.190.14.188	app.usercentrics.eu	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
172.217.16.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
35.201.111.240	consent-api.service.consent.usercentrics.eu	United States	15169	GOOGLEUS	false
142.250.185.97	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527503
Start date and time:	2024-10-07 01:04:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://coritta.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@28/198@72/24
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.sedo.com/services/parking.php3 Browse: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Best+Home+Warranty+for+Hvac&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEmwBlLqpj1YJdz7AzpZcgeGyRhp5zMxp8n1DEmNsr7hGBcgg34MnxBeRt-c9OxWGMfyh27HvGtg4vi3Woi_41qZIfViSTrEkCjKcSnu5_x2fLueh1V508qjLQKWCgp2wXmyKbwgvH5qd2vVtgD8&pcsa=false&nb=0 Browse: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Cost+of+a+New+Ac+and+Furnace&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj3wtYOe7rzx_1g0wON-N8H__C4RQ1CeooGzFWtQkJCJwnMJ1w-u4cuLbMWU_7XM46bcpZ97UYjuhVirX9hk929rs6qaClYRSjBdJEFMkHJUbEGAnwvyWdh41fmZ1VUQ8tfWlxX7SZjj5&pcsa=false&nb=0 Browse: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Replace+Hvac+System+Cost&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj5ulDShI8Bb7iRptDBkDmxnWF4qf353j65aQvFz-IKHccRTuxxIucZ2b63EhAJbftDkzbBDaWuuRYuJLti9NXeWNbTMnmVHkdDlPUOz-6PAxKFfYM9qN9Qyxx-ANIn2stcqlhWRn5irL&pcsa=false&nb=0 Browse: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Best+Home+Warranty+for+Hvac&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEmwBlLqpj1YJdz7AzpZcgeGyRhp5zMxp8n1DEmNsr7hGBcgg34MnxBeRt-c9OxWGMfyh27HvGtg4vi3Woi_41qZIfViSTrEkCjKcSnu5_x2fLueh1V508qjLQKWCgp2wXmyKbwgvH5qd2vVtgD8&pcsa=false&nb=0&nm=3

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.206, 74.125.133.84, 142.250.186.35, 34.104.35.123, 216.58.206.34, 142.250.186.130, 142.250.185.106, 172.217.16.202, 216.58.206.42, 142.250.186.138, 142.250.181.234, 142.250.186.170, 172.217.16.138, 142.250.184.202, 172.217.18.10, 142.250.186.106, 216.58.212.170, 142.250.186.74, 142.250.186.42, 216.58.212.138, 142.250.185.74, 216.58.206.74, 142.250.185.234, 142.250.185.138, 142.250.185.170, 142.250.185.202, 142.250.184.234, 142.250.74.202, 52.149.20.212, 199.232.214.172, 13.95.31.18, 172.217.18.106, 93.184.221.240, 13.85.23.206, 216.58.206.35, 142.250.186.110
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, partner.googleadservices.com, clientservices.googleapis.com, time.windows.com, wu.azureedge.net, clients2.google.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://coritta.com/

Input	Output
URL: http://www.coritta.com/ Model: jbxai	{ "brand":["Namecheap"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Learn more", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Looking for a domain? Namecheap has some of the best prices. This domain has recently been registered with Namecheap. coritta.com Relevant searches Replace Hvac System Cost Best Home Warranty for Hvac Cost of a New Ac and", "has_visible_qrcode":false}

URL: https://sedo.com/us/park-domains/?tracked=&partnerid=&language=us Model: jbxai	{ "brand":["Sedo"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Set up domain parking now", "text_input_field_labels":["Earn money by advertising: aligned with the domain name and in the language of the visitors to your page", "Easy to set up and completely free", "Attract visitors with advertising instead turning them away with an under construction notification: parked domains can be accessed online and sell twice as fast as offline domains", "Get to know your domain's value: gain valuable visitor statistics as a basis for price negotiations with prospective buyers"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Domain Parking Earn money, and sell your domains more quickly. With domain parking, you earn money with thematically matched advertising links featured on your domain. With every click on an ad your till will ring!", "has_visible_qrcode":false}

URL: https://sedo.com/us/park-domains/?tracked=&partnerid=&language=us Model: jbxai	{ "brand":["sedo.com"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Set up domain parking now", "text_input_field_labels":["Earn money by advertising: aligned with the domain name and in the language of the visitors to your page", "Easy to set up and completely free", "Attract visitors with advertising instead turning them away with an under construction notification: parked domains can be accessed online and sell twice as fast as offline domains", "Get to know your domain's value: gain valuable visitor statistics as a basis for price negotiations with prospective buyers"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Domain Parking Earn money, and sell your domains more quickly. With domain parking, you earn money with thematically matched advertising links featured on your domain. With every click on an ad your till will ring!", "has_visible_qrcode":false}

URL: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Cost+of+a+New+Ac+and+Furnace&afdToken=ChMI-fff Model: jbxai	{ "brand":["Namecheap"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":["AIR CONDITIONER"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"This domain has recently been registered with Namecheap. Looking for a domain? Namecheap has some of the best prices.", "has_visible_qrcode":false}

URL: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Best+Home+Warranty+for+Hvac&afdToken=ChMI-fffh Model: jbxai	{ "brand":["Namecheap"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"This domain has recently been registered with Namecheap. REPAIR COSTS? NO WORRIES - NO MORE REPAIR COSTS - COVER HOME REPAIRS NOW Ad https://www.regencytotalwarranty.com/home/p... Cover Your Home Repairs with Regency Warranty. Get the Best Deal Now. Say Goodbye to Repair Costs. Protect Your Home with Regency Warranty. Flexible Plan Options. No Hidden Fees. Affordable Pricing. Customizable Plans. Covers Major Systems. Fast Claims Processing. Comprehensive Coverage. Nationwide Service. 24/7 Support. Peace of Mind Guarantee.", "has_visible_qrcode":false}

URL: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Best+Home+Warranty+for+Hvac&afdToken=ChMI-fffh Model: jbxai	{ "brand":["Namecheap"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"This domain has recently been registered with Namecheap. REPAIR COSTS? NO WORRIES - NO MORE REPAIR COSTS - COVER HOME REPAIRS NOW Ad https://www.regencytotalwarranty.com/home/p... Cover Your Home Repairs with Regency Warranty. Get the Best Deal Now. Say Goodbye to Repair Costs. Protect Your Home with Regency Warranty. Flexible Plan Options. No Hidden Fees. Affordable Pricing. Customizable Plans. Covers Major Systems. Fast Claims Processing. Comprehensive Coverage. Nationwide Service. 24/7 Support. Peace of Mind Guarantee.", "has_visible_qrcode":false}

URL: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Cost+of+a+New+Ac+and+Furnace&afdToken=ChMI-fff Model: jbxai	{ "brand":["Namecheap"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":["AIR CONDITIONER"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"This domain has recently been registered with Namecheap. Looking for a domain? Namecheap has some of the best prices.", "has_visible_qrcode":false}

URL: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Replace+Hvac+System+Cost&afdToken=ChMI-fffhe_6 Model: jbxai	{ "brand":["Namecheap"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"This domain has recently been registered with Namecheap. Looking for a domain? Namecheap has some of the best prices. CONTACT US TODAY TO LEARN MORE - BOOK YOUR FREE DEMO", "has_visible_qrcode":false}

URL: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Replace+Hvac+System+Cost&afdToken=ChMI-fffhe_6 Model: jbxai	{ "brand":["Namecheap"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"This domain has recently been registered with Namecheap. FIND HOME HVAC SERVICE - HOME HVAC SERVICE - EXPLORE HOME HVAC SERVICE Ad https://search.yahoo.com/search/results Search For Home HVAC Service. Learn More With The Next Search. Research Home HVAC Service. Learn More With The Next Search.", "has_visible_qrcode":false}

URL: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Best+Home+Warranty+for+Hvac&afdToken=ChMI-fffh Model: jbxai	{ "brand":["Namecheap"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"This domain has recently been registered with Namecheap. NO MORE REPAIR COSTS - REPAIR COSTS? NO WORRIES - TOP WARRANTY COVERAGE Ad https://www.regencytotalwarranty.com/home/p... Cover Your Home Repairs with Regency Warranty. Get the Best Deal Now. Say Goodbye to Repair Costs. Protect Your Home with Regency Warranty. No Hidden Fees. Peace of Mind Guarantee. Flexible Plan Options. Customizable Plans. Covers Major Systems. Comprehensive Coverage. Affordable Pricing. Fast Claims Processing. Nationwide Service. 24/7 Support.", "has_visible_qrcode":false}

URL: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Best+Home+Warranty+for+Hvac&afdToken=ChMI-fffh Model: jbxai	{ "brand":["Namecheap"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"This domain has recently been registered with Namecheap. NO MORE REPAIR COSTS - REPAIR COSTS? NO WORRIES - TOP WARRANTY COVERAGE Ad https://www.regencytotalwarranty.com/home/p... Cover Your Home Repairs with Regency Warranty. Get the Best Deal Now. Say Goodbye to Repair Costs. Protect Your Home with Regency Warranty. No Hidden Fees. Peace of Mind Guarantee. Flexible Plan Options. Customizable Plans. Covers Major Systems. Comprehensive Coverage. Affordable Pricing. Fast Claims Processing. Nationwide Service. 24/7 Support.", "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpyiylrfjd", last modified: Tue Sep 17 11:16:29 2024, max compression, original size modulo 2^32 473
Category:	dropped
Size (bytes):	236
Entropy (8bit):	7.101694903074545
Encrypted:	false
SSDEEP:	6:XISDMHA6RQv98lnIQh0z8AuiUAJS6rYcyyln:XIq6Hlnjh0Q36pYD2n
MD5:	810EE2A65A302B5F880E3A00E840D6CE
SHA1:	0216DAA7AE065F8634DF06741E9CC791CAA9C1C0
SHA-256:	570D71A067BF20C244E164897D82D6C8E77D712A5B400A00BE41EFBBD6128487
SHA-512:	898D331822B32A20BD8286B2494EBD1119A8881D82B4C468594838459783C794D8F01D8D00B69B068C5D407C229EC5E899E621E72527127095FF01AE75CAC695
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmpyiylrfjd...Mj.0...=.....f.#...r.U....3A.....^.D-t.....{\|.`..p...8<.#7.......C.^..M}......2...'..(Q....V..o;.j..V[..EL.a..)r"x..q.%...1%.e.oWF(........E.C.=z..B._b..w..+..=...FV5..=x.=..+nH.d.h.+..=...P.n.f...hi.]....

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	27346
Entropy (8bit):	4.931460709222008
Encrypted:	false
SSDEEP:	384:BbLwi6HkwBb9O9lxKwhtUjP4qhqa3TnAGnZ6g4ASe6Rs4mRkz3R54W2:BbUVHkwBb9O9ls/74qhX3TbUUnLoR5W
MD5:	DDC1A1F070CF0B6118CDE45749359A22
SHA1:	4C854109540F768F794D8675A98CCFCD1499CBB6
SHA-256:	325088F998FAC12A93057677B52799897639E9E003D50837BEA26A5790D2A58C
SHA-512:	81BB263C1C23E67A9EA164A283664E351AD2663FAD77D82B4964F5163A4AEA333A67CA9A2BDDD354776E0CFF1824895F8D8DF99635DD2BD2BE6F1C64516FE943
Malicious:	false
Reputation:	low
Preview:	{"settingsId":"5QJe3R54G","version":"31.17.158","isLatest":true,"buttonDisplayLocation":"bl","moreInfoButtonUrl":"","actionClickOnViewConsentInSearchApp":"","layout":1,"privacyModal":1,"urlConsentInfo":"","stylesCss":"","buttonPrivacyOpenIcon":"","buttonPrivacyCloseIcon":"","buttonPrivacyOpenIconUrl":"https://img.usercentrics.eu/misc/icon-fingerprint.svg","bannerMobileDescription":"","consentSharingIFrameUrl":"","bannerMobileDescriptionIsActive":false,"controllerIdCookie":"","chipDisplayLocation":"rm","privacyButtonIsVisible":false,"chipIsVisible":false,"disableScriptIfBot":false,"consentSharingIFrameIsCustomUrl":false,"consentSharingIFrameIsActive":true,"iabConsentIsActive":false,"resetConsentsOnShowingInitialView":false,"btnMoreInfoIsVisible":true,"isVisibleInIframe":true,"btnDenyIsVisible":true,"showLanguageDropdown":true,"enablePoweredBy":false,"storeUserCounter":false,"useConsentCookie":true,"tagLoggerIsActive":true,"storeConsents":true,"optInCountdownVisible":false,"optInCountdow

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpz39m4eqo", last modified: Tue Sep 17 11:16:31 2024, max compression, original size modulo 2^32 2937
Category:	downloaded
Size (bytes):	1077
Entropy (8bit):	7.802144664467643
Encrypted:	false
SSDEEP:	24:X2LG5DiW9Za6EIL0AXpEdSQdpiI7RuXAMJoadrF65wsdvAh+L:X2LG5DiSa9IFXp8nPiItuXA8c6t+L
MD5:	C2E932D4D1B024014630F22BD817AA3B
SHA1:	FC46FC43601100941B49908D7DE4D508FFB8EC42
SHA-256:	0BE9A77CCF72E583D8F7F421203F14F01085405FC73CFFA3E27E6BB6E1FED93E
SHA-512:	A9E5C3223E586D9E917585F50B03F5080461472BFC67C304E484B4B1FC35026CA1B9E683F9082D0734A64FEFCBFB48187DE66CF6DEFF924DC832CEB05F07E260
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/FirstLayerCustomization-de8ec6f3-0ed66d66.js
Preview:	.....e.f..tmpz39m4eqo..V.n.6.}.Wh] ....E.n.@.\|.b..."...7Z..%R ).../I...8[YAh...\.9&....p.H.....2 +3R /fd@.f.@3 .f.w..y/.....A..2.._.Y..a..,R.......fATJ.s.J.p..T.$.)...Y...v.i...,..Jq6t..v..o......w`...Q<...2....K.bd..wU.{._3H.8..H.B..s.S...r&. C.........x...{?'..........+. ..X..r....X..f0..S...R...-.$..(uE.45..c<.....8c.$8v.gg..&...P...w.T].dd..wAW$..C.......J......[.IHN.j..Q.a.m.X.v....^..QF../.=URa.U/...E...N...)Go6.....=......a...d..oL.".u^.W.W..a<..a.BE#..c..w.....Pj....&=.$}.V~.....GN/..W...Yf..fN.e*x..1.......?2Fm.+..j..........C...../...m......7Y'.>.C...".e6.x.7....\|.v`N..Z.&2.....O..<.L=.tp....Z...C.%5]9`........~o0.J-...i..........oz.!..a.....e.....N...>...\|q......J.C..n.vS....#\|q..a=..Z.0u....%$G..-.[.1s{...#l...P..a..1.......F.I.asr.......[.....v..2~&.......s...7C.V....(\..l.!.....j....~n^x.f.[@.P.p..S.w.;,o.....@..q.q.y{#//....\|.....#...B....6..4.>.qU........IC}..1.....<-..\|...e]6{....a....>N.i..i.:x.9l...

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	610
Entropy (8bit):	5.4559097885945365
Encrypted:	false
SSDEEP:	12:TMHdPhRi/nzVV/KYf3nS31PHEX7aPjW2e/bKI0C2UbKt9:2dzAjLf3S5kX72ObKbhU2
MD5:	950A5568A5DC7D9B5C1C8E33C9686077
SHA1:	4AC8BE7FA70589332CA25BC6CEA1263CA54306E0
SHA-256:	0D8EEC0DF98211FA752EBE83512BFD9027B3423FEFB1F116D062B58233B88C50
SHA-512:	380236D6F03ACFF1215F6159479F428BEB1F8904A6CD5F5FB6D19098A2BFC08EA0E9770B158B732A7BF669CA592DC56A2F35F681FCE173386A40F1A98C9CDD8C
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/images/legacy/images/icons/icn-check-beige.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 79.5 79.5" style="enable-background:new 0 0 79.5 79.5;" xml:space="preserve">.<style type="text/css">...st0{fill:#C7AC9A;}.</style>.<g>..<path class="st0" d="M39.8,0C17.8,0,0,17.8,0,39.8s17.8,39.8,39.8,39.8s39.8-17.8,39.8-39.8C79.5,17.8,61.7,0,39.8,0z M34.1,58.5...L15.4,39.8l7.5-7.5l11.2,11.2L56.6,21l7.5,7.5L34.1,58.5z"/>.</g>.</svg>.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp5ay73b4h", last modified: Tue Sep 17 11:17:07 2024, max compression, original size modulo 2^32 33954
Category:	downloaded
Size (bytes):	8553
Entropy (8bit):	7.972892727864916
Encrypted:	false
SSDEEP:	192:SBnfOnCZlLsSg0SM61d0L0jcwdBvmPMM9/caIoc:Sp8SS7BThgwdBeZ/re
MD5:	DA6FD8696488229B01EE683C868A69D4
SHA1:	D04F9AADAC0EA4981B4B0C5825A28A21D41461C0
SHA-256:	2BBE9507295BA99051EE3ACEF34C0B36D5CADC6946614EEF45445F8D6DF33F3A
SHA-512:	C8D1447E683AD4D4935D8B80844591F6657FDCC178CAAEAAE66A286E7D260E13DC879CEC3DE61F073C84FB99ECE9E2F1DEAE193B2817FCCE38BF5ABFD75908BE
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/latest/loader.js
Preview:	....3e.f..tmp5ay73b4h..=iW.H...W..>Jj...S .\.W5.\.......,.m5..VJP4x..F.!.\|a05;og..SyDFDFdD...4..?...^O).h..^....F...=.b$..Fc.J...1.c..q..R....<..<j~rtw4n.n7 =..o...:g......V...a..l7..;.I.$.E...#.K\|<:m...T..w..5.;g_[?;z7...On...w$>K..37NO..O.. .!..E.m..$>..$.....a....>.~....z.Q......Tu..._.O G.H.E.z.~.25.v.O?5....Q.`...3...'_..@j..........p..[.F+... 1.A......f.y....P.p.[..O.O........{..;.o^\..N........ L..7$...R......M.V..8........c.M...V;.]D'....`I...4y....b.%.P:....h..........$^_../g.\..\..Z..'..\|. ...M..Q.h~.\|.J.vZ.o.r..0 ...-..#=1.'....{...H.{R.5U.CG...$wc.........:e.........(..I&.<.....#%.kP.....d..2\..Q.a...........=..C..`.D]7.......y9o...........37.%A.s...,..L .N.PP2P.......Kr.JC...gq4&qrW.. 0..CMn.$.Y#%.....8....(N.}?.....r.1q.'9V....~.H..)...8.?}...{.....ZjM.$,...eY..pl.G.lT.(..F....$.`l%....".....M..9,.=....$...u.Hb..s.......2!`I..3....A.035...AJl.........7...mT8.I.\|.6..ds. N......D6.....G.P(....(`y...1/&nB.0...A....

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpkg97jlww", last modified: Tue Sep 17 11:16:38 2024, max compression, original size modulo 2^32 1740
Category:	dropped
Size (bytes):	809
Entropy (8bit):	7.720303795641301
Encrypted:	false
SSDEEP:	24:XIWEXTA2oLo4HrPzCh07TfSkxp5crljJeYxn:XREXTAlLjHjOaakxbch
MD5:	22A4A3ABC5E97B864B21EDF7B8142D96
SHA1:	0E0522764E5AC8586F53E0A56F9696A65ED1E0D4
SHA-256:	E9ADA726EB1B3A8998A4F9FB6A6724ED1A1AB9CAB98E020D0AB4DD4C2F1B4295
SHA-512:	607E974C18A42E3362CB0E0E835AE146ACC5F2E83E8456585FBF12BE292F2650946801BCC11DCB60A5970809383844013E619593A580FC3A2F086049B114EF0B
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmpkg97jlww..Umo.H..._..C.Hs\R.r',NB.74~.!.NUe.a.7Y/..~...o..&q...g..yv<3..&.........4RXi...F....~..^k.p.......W......p....j,.G..:.....O&b.7.i\pj....(.2.,mJ.1....5..F.$.qN...H.?.....}.XC2.4G..a....8......}.....\|./....L......F...(....G.,xn...]..(.T......}...Jw.U..x...@\.Jj....X....J.....k..z@......w........z.-.2q.R..0c(rk.L:.'p.il.@.......QF..F...b.......5....,`.].......P..c&...n.$4..i...&.J..b>..-.G...mYD..or.....kx..9.mKi+~&..K../9m..[7S9..=1.\|E.!(."j.C.w.$3....z..75`D._..a.pc?.U...{p..x...Q.<.:.?......V...O.0.W.&lO......c...1..cR..,......$..~?....e..z.\|.z.i`..W.uW.X....(#..#M.8VF."...0(..\|.rXBuQ...@.\|..B..=P.......S7....j...\|^;GF.U..... \|[..-1O.z.zxM^.c..-...c/....9i=..T.mUmO.....e#....j....L^...ZG./T.g...T+.wU..O.j.C{..Vx#U...j5...Sw....&!f....

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpCfWGAE", last modified: Fri May 8 09:06:08 2020, max compression, original size modulo 2^32 489
Category:	downloaded
Size (bytes):	522
Entropy (8bit):	7.343516125324942
Encrypted:	false
SSDEEP:	12:XJjUv/7Cu7oXqejoa3pS/3vgOGUBbxMFHCKlHIEg3JzWiFlpij:XthXqe3ZS/3IFSbxMFHnXuzRjij
MD5:	3702ADA73B8951017B8451CBD6A96523
SHA1:	FBA130B6F83751655F96DF7F947B9591DA67C50B
SHA-256:	A714DEF57C786512C5F2BA2CC4DFA9EFE919CD5F2004D05378D5BE2377F627EF
SHA-512:	574EE82DDDD8DBCD580883CC3D5F792A9DDABAB2C9651BF262276A0FB05FDE6F6E6C12EAC71381C2613891758459A5EFA0CFA3679049C5A738F6149074162A28
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/session/1px.png?settingsId=5QJe3R54G
Preview:	.....!.^..tmpCfWGAE.......PNG........IHDR....................iCCPsRGB IEC61966-2.1..(.u..+DQ..?f..G....IX!F..2...4F...y.fF..{o.d.l.(..k._.VY+E.deaMl......s>.{.9.{...)%mT.C:c.....}....(.....gg..8>..M.]...G}L5.....).n.O.O......J2..>.......u...._6..P.\..../..b%.....t.S9.t..%.jf~Nb.X;.!...2.....`D...........g.J."^#..*..........y....j..}N..?.<Y.[..nA.`Y...U<..#\d.....~..P.:..i....Zt..7..A....-..............9...\|....A..oZ....g...`h....pHYs...#...#.x.?v....IDAT..c````........N.....IEND.B`....f....

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpCfWGAE", last modified: Fri May 8 09:06:08 2020, max compression, original size modulo 2^32 489
Category:	dropped
Size (bytes):	522
Entropy (8bit):	7.343516125324942
Encrypted:	false
SSDEEP:	12:XJjUv/7Cu7oXqejoa3pS/3vgOGUBbxMFHCKlHIEg3JzWiFlpij:XthXqe3ZS/3IFSbxMFHnXuzRjij
MD5:	3702ADA73B8951017B8451CBD6A96523
SHA1:	FBA130B6F83751655F96DF7F947B9591DA67C50B
SHA-256:	A714DEF57C786512C5F2BA2CC4DFA9EFE919CD5F2004D05378D5BE2377F627EF
SHA-512:	574EE82DDDD8DBCD580883CC3D5F792A9DDABAB2C9651BF262276A0FB05FDE6F6E6C12EAC71381C2613891758459A5EFA0CFA3679049C5A738F6149074162A28
Malicious:	false
Reputation:	low
Preview:	.....!.^..tmpCfWGAE.......PNG........IHDR....................iCCPsRGB IEC61966-2.1..(.u..+DQ..?f..G....IX!F..2...4F...y.fF..{o.d.l.(..k._.VY+E.deaMl......s>.{.9.{...)%mT.C:c.....}....(.....gg..8>..M.]...G}L5.....).n.O.O......J2..>.......u...._6..P.\..../..b%.....t.S9.t..%.jf~Nb.X;.!...2.....`D...........g.J."^#..*..........y....j..}N..?.<Y.[..nA.`Y...U<..#\d.....~..P.:..i....Zt..7..A....-..............9...\|....A..oZ....g...`h....pHYs...#...#.x.?v....IDAT..c````........N.....IEND.B`....f....

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 10672, version 1.3276
Category:	downloaded
Size (bytes):	10672
Entropy (8bit):	7.975462455488595
Encrypted:	false
SSDEEP:	192:QOI6T7un2Duc7EMp+xyAWHVwBc3Yx22nr50hueaqdAqmO:1IEP7EMpwwsc3Yxfuhueaqyy
MD5:	00E18964FBA583769DCC97245B06CBC0
SHA1:	145B37095E53AD8CBA15C162B25BDE9830CC0890
SHA-256:	B4FD007408FCF22B7B71A61B3EBAC2379F9CE2F3A5D9EF694684F12024FBC9A9
SHA-512:	854390795DAED7B28A48FF6006B724A83E7862E7BFC613FEB47D2CEC939DFCA41C693C681FBFC6D6C9996CAFD2689356BFB811940E41E3C272556DDFE5F44BBB
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/p9HJ4M2Uz7U4/98a8d93f852421263258.woff2
Preview:	wOF2......).......a(..)Y.........................@.....`.`..f......o.6.$..D..d.. ..J..9..R.....`..^Q................I...U.@...P...s.....M..P..=. .:....(.N.a7?,......Z1.3.QIZ..5....OG;$I....c..+..k..F.....C).HUO;$.7....f..F.(.....A.QJ..2..dV....%Ws.ns.....]..:w......s..Z.X.Z........,...0..7...k..4y.<..0.7..?...B.....s...:.)_p_^gJv..).@.D..4....~{..H....1...._.....'p..'.\^>...?..@..h...\.?].....QK.!T.....U..R.4."Il...TE.X.b...$...V.k[Hf..g.!..3..!N..+_0\....gX..>e.......I.>=.FP....H7.)...!..4BJ..F.......5.Lc.....=?..$..;.....M..y$.'w3E%.....P.......K.`.....8...k.+so...}..u..%..H.. !.>z....`A,.q.....,.%w.0....!Y..R!B.Z.-B.Vm.n.D.FR:..Ii.}.{c. .../(.....z..}..8..G..g. ..=i.Q..6..k.{....V=}><. ".S..3.\...;........+q...'..... .\6..M.V%^.....X..i.4......F.h7.E6 ......@@D.."YN...x2C..J'9C..-p...O........_........_qK.uM..;..S-."......yv\|.. ...c..V8)....tb..$8L..>.%JC.cH;.+.......IClg.....6eQ........*\.mA.R.Q.F...5.`^..u..In....8~.E..m.@.b...R?....&H.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.455520614126619
Encrypted:	false
SSDEEP:	12:TMHdPhRi/nzVV/KYf3nS31PHqgaPjW2K5v/bMtW2I0C24kAXKt9:2dzAjLf3S5Kg2K53bUW2bh4kAS
MD5:	38DC034A6892121319F8A432898F3CA2
SHA1:	E417E2636A04712260F2D5E5A799069F8E9036EC
SHA-256:	EB1677D0DED69FFBBC182C79EBA2F2E33E6F13D719BF4EB4F18F1F7ED62DFD4F
SHA-512:	EAAE9941ACB8D758E092ADA53679EB3DD8B0E9853FD3B26871400609A69C22CB4FBC588DB9D49D8648F75411B248A3E58B73213AEBCD35DBF49BC83C3BC02CC4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 79.5 79.5" style="enable-background:new 0 0 79.5 79.5;" xml:space="preserve">.<style type="text/css">...st0{fill:#0061AA;}.</style>.<g>..<path class="st0" d="M39.8,0C17.8,0,0,17.8,0,39.8c0,22,17.8,39.8,39.8,39.8c22,0,39.8-17.8,39.8-39.8C79.5,17.8,61.7,0,39.8,0z... M34.1,58.5L15.4,39.8l7.5-7.5l11.2,11.2L56.6,21l7.5,7.5L34.1,58.5z"/>.</g>.</svg>.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	147609
Entropy (8bit):	5.274206815954838
Encrypted:	false
SSDEEP:	1536:jH2R6XMuBhICoQHC3CdT7Z7vJ7I0N0w0I0T0bGmAxaZAUrZbECsOsWsws+sXsHs6:sihIod9
MD5:	81D418065F1DF7CDCF4AFC5D8E3C1F4F
SHA1:	3F913F5587A34CD1DFA82F73B69F4F4D9EB09036
SHA-256:	7EE12C64C0521C5A4230ED239D71A8AACA307ED793ADD5AEA71721016E9B6092
SHA-512:	6566297D4A63CE0CF5A7FE13364D768FF780EBCFA5544063412E457F80FC4B2652D5C858C4D5571B71EA64A36CFDE708CC877FA855FB2639CBEC2FC07DDBBE08
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/dist/css/typo3/main.css?1724922195
Preview:	@font-face{font-family:Droid Sans;font-style:normal;font-weight:400;src:local("Droid Sans"),local("DroidSans"),url(/dist/files/s-BiyweUPV0v-yRb-cjciAzyDMXhdD8sAj6OAJTFsBI.woff2) format("woff2");unicode-range:u+00??,u+0131,u+0152-0153,u+02c6,u+02da,u+02dc,u+2000-206f,u+2074,u+20ac,u+2212,u+2215,u+e0ff,u+effd,u+f000}@font-face{font-family:Droid Sans;font-style:normal;font-weight:700;src:local("Droid Sans Bold"),local("DroidSans-Bold"),url(/dist/files/EFpQQyG9GqCrobXxL-KRMWaVI6zN22yiurzcBKxPjFE.woff2) format("woff2");unicode-range:u+00??,u+0131,u+0152-0153,u+02c6,u+02da,u+02dc,u+2000-206f,u+2074,u+20ac,u+2212,u+2215,u+e0ff,u+effd,u+f000}@font-face{font-family:Marck Script;font-style:normal;font-weight:400;src:local("Marck Script"),local("MarckScript-Regular"),url(/dist/files/O_D1NAZVOFOobLbVtW3bchdwxCXfZpKo5kWAx_74bHs.woff2) format("woff2");unicode-range:u+0400-045f,u+0490-0491,u+04b0-04b1,u+2116}@font-face{font-family:Marck Script;font-style:normal;font-weight:400;src:local("Marck Script

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11256, version 1.3276
Category:	downloaded
Size (bytes):	11256
Entropy (8bit):	7.981317751240797
Encrypted:	false
SSDEEP:	192:yrJyZwJ8dvcaSNnior8RYSbckbfcv2m+wKhN9RnH7OgBEbB3GvcgM6qfwoXTMJIf:ysMkcLNxcE+ZwKhxH7OgebBWvcgbqhjn
MD5:	E80EEFB2E693F982ADE7D2F9C41C59EA
SHA1:	F240D480114E47ABE991D4A9C3EC1A3B95B1E0F0
SHA-256:	115EA8CCC77135E889658E3922A3CE4747DB8CD8A9FFC82286D4B48C771C4DA0
SHA-512:	0D7225D00BBC4183ED66EA8BDB0719AF32AA8CF2E7437A62070E85F14720B06F3F9692113D66D098846571C80EE813C695ABB62BBC0201E0E2FF9E9068F8DEBB
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/p9HJ4M2Uz7U4/d26139c0fd3b917ce03b.woff2
Preview:	wOF2......+.......bh..+..........................@..h..`.`..f....h.<.6.$..D..d.. ..\..9..S.....0x.3E.l.P.."........d.....%ZI...J..Rio...M`.R)..y.&>...V....\]>G.o.tVG..y.._.;.Z..:y.!I.....=...~...(.l.U...8U.p......zc..E.U.%.j...=J`...60.F8.A1...0.<+8.<..BE.J\|..4...N.............[o.dHp..K.E.....(j......)V!}H...Z'..d..'.N..C...?....A.......IU...N.6...#@7...u....A..l;@...g..7S....xr..8w.....A...y."A...2.:.U.r..@..St.T...."}....'.}$..>RX....>..4.Yv.J.........u.a...u.0.r.......q.0.(.VR...ZV.<..K.(../....?...C...#..j.?..........?3.5.'......Rk........el._s/"lJ..`3..i.0..+! (.S4J.l(..(3x..F.m.......H.......Q..... ..2..v(.....5'......%,:(l...h.m..n....@...!.x~B..#.KR..r...g.kB.[.7..V.:t[.5W/9"R ...hk..._...!.DRgT.R..Nr...9T..."[..H...-...9.)......;......w...0@....b..G.f.;.^...@.4w.:..1Z;.G{~.g.....)....F!.@....)g..5L..:...#.....5..A.J..Z_...... ....}...u...,d..K.......d.......\...jw....H....D.D..&Ad.....<.........H....b3....._f!l.d.".....j.-(.3$....bn._

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpl5u_ed55", last modified: Tue Sep 17 11:16:32 2024, max compression, original size modulo 2^32 567
Category:	downloaded
Size (bytes):	318
Entropy (8bit):	7.302858438317619
Encrypted:	false
SSDEEP:	6:XJDUm4z/kBLRxGb35H0uCCXjzVQQmiq9RRudG+HLkAuzJfdZdp6zuUHQY2QVL6C:XJ2kBLR45HDTz3mX9RUcaQJfbr6zHHQu
MD5:	E46EF9182081D5B5A9DBDC1F0B20036D
SHA1:	1C5BD2868DEF0452591D89323DDC0EE1C4D5825C
SHA-256:	FDEDCB287B14EA8E85C9A10E400BA60857A90EB2ED40112365CA9102B1FF36CE
SHA-512:	897051ADC9767334CFBF0D3120AB2959303C238FF2EE2A0487E7242BD6970C2EB77D607641DEEF628F143A069BC2AA6F12F3C445D66BB1C597DD27D794082B3E
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/SecondLayerUI-2d936468-4fd84b50.js
Preview:	.....e.f..tmpl5u_ed55.u.Ao.0......S+E....&.v.4i..v7..Li<.i.A...BE%.d+...S.S...{.&........V...V#.CN.Yz...8.[Y..,....u.x..\.....}X...?j..v...........;..y....o...)J..~...!.,g.y&:..h\|.....d6n...6....=F.'...&.<"^.f..W........,.<..'.1..,....z~E..,....U.*....+.E.J....g.CMF'.H..}..h=.,.,....h..&.m.S.K5..?.1.7...

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (376), with no line terminators
Category:	dropped
Size (bytes):	376
Entropy (8bit):	5.4361423225157015
Encrypted:	false
SSDEEP:	6:xWzPlz1ZUSNRORJubwoHA/4V2+nkPEXEica7M+dHuYRORJubdHXmJV2+nkPEXEib:xWd1qSUubTHA/4dXt7HHgubdHXmJdXt7
MD5:	488C26D535E6237B08D799BCD53F83DE
SHA1:	E40E1087191A684C598CB739225597C65A3263B8
SHA-256:	E5A2CE4A9D1CC08CB3E68F84890A0F6587652EB5BE48EFDB26F97E8EC1FA31F8
SHA-512:	C54AA350B6F3AE873559B27EA469F32719BFFCC929B5ED7A97A9267A7F57D96277E723E79C7AD8186FA89A34D7663726EEBD754A6B5364443E65929D1A44689A
Malicious:	false
Reputation:	low
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=0d35a35e7f4119ac:T=1728255930:RT=1728255930:S=ALNI_MZAVrA05aK0pbKS-zmSq5wsvIlkFQ","_expires_":1761951930,"_path_":"/","_domain_":"coritta.com","_version_":1},{"_value_":"UID=00000f044c0874d9:T=1728255930:RT=1728255930:S=ALNI_MbV5GHK5zbZrNnS8iS3poeN1b86Rw","_expires_":1761951930,"_path_":"/","_domain_":"coritta.com","_version_":2}]});

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp_cgccsit", last modified: Tue Sep 17 11:16:33 2024, max compression, original size modulo 2^32 1270
Category:	downloaded
Size (bytes):	687
Entropy (8bit):	7.681964112643804
Encrypted:	false
SSDEEP:	12:XFnlsvP8Gagyl4M43aPTyLAsMHPzkgYF1SAKy0YxojBlfBKwn:XFn638xgy+M43a7y9MHPYfFMy06ABlfp
MD5:	E4C20E66800385031ECA3E76F11D9A33
SHA1:	5955E24E438BCDC0D9342C40393F7FE897BFF32F
SHA-256:	AEE18B7A861A520930DF1435A8C81368504DCC3135ED1BC16C4DAC94838448AA
SHA-512:	F9BD85D721972B3E0CDA7A5AAAA60A5FCD72F4E466AD2299C16CDFEBE10B0FFFBD20497495C8B6658537730B81B17F98AC446083B0E5D60FFE63D0D5ED296FA1
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/Taglogger-ece90602-40fbde48.js
Preview:	.....e.f..tmp_cgccsit.mT]o.0.}.p..l5..>...a..J..N.D3.$.p..}]...}.@.~HQ...\.{.iZ.q]1..f..N?v3..j`l./.qU.A=.>~..\|.m..Y!../....J....m..Us.n%...FOX.z..W-$.....G.V.w.%..=..U$3..\.......Y.{......z........6..m.yeu..........4...t8..&.i..P.u. ..#...,..0z.<..D..]....\......S.G.q...v.].&.-3.k./.u.wqZ....F.)..0.I.mFng.I.....I......e6qE.vZ..m.r...n.!..7n>.......d_.Un.tU]?..7& X..Oa.<D[;].L..+W........\h;..D.0U..S...G..j....-...k%.}^E.V.c`...2...-..\|.eWZx.......?...s.JgK..N>.2.....p...xtYH)Go..[..#.0.#.:...L..A.b>M......J<..t.]...q.J].b.....I]...w.H..u3v.H-y...BW..Z..$..m..>..wj#....."7P.`.Cp4`jJ,...=ho.....9...X.N....(.,.6M/..t.V.z6.nI..xRqC...v..4.*..X.f..?v......

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64398)
Category:	dropped
Size (bytes):	254961
Entropy (8bit):	5.157935778298396
Encrypted:	false
SSDEEP:	3072:baRWCAGMFW5dwcLDL/utlfU89DK2Jr42uz1Uu6TA1m+uPSaSvN53:ipvMAd6lHWvu/2n
MD5:	D81728B84FADEE4F3E6F11E7A322146E
SHA1:	ED00C5DC0F336D5DAF0D347A154A0A7E337F07A3
SHA-256:	D582A0874FA6D0F4379A7A1AA10B506BF1303CAF06F0CDCA775B0602ABC56FA7
SHA-512:	F94068951DF78712100C202CF53B913A7F30BBD8C03AC3D48D3ABFD04A9F8641FF5115D0BBDA44E99D9292E33CFFFADFD3E7E7648EFA9BA8E84C26AB5BA2BFB7
Malicious:	false
Reputation:	low
Preview:	/! jQuery UI - v1.13.3 - 2024-06-11. https://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js, widgets/droppable.js, widgets/resizable.js, widgets/selectable.js, widgets/sortable.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/selectmenu.js, widgets/slider.js, widgets/spinner.js, widgets/tabs.js, widgets/tooltip.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/eff

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56867)
Category:	downloaded
Size (bytes):	402703
Entropy (8bit):	5.475259998054872
Encrypted:	false
SSDEEP:	3072:S65BGXyy0KtEGy88CQG3Gm8bLlST92XRsd:t54iyptEGy89QG3Gm8vET9L
MD5:	9B62689DA1AA72A71835D38D99D20A96
SHA1:	603697230E1B51B5031A25AB1A53F4A4F361A059
SHA-256:	E758E555B63E231A16170A028053D83D90A38C01574A9AFA372A59D8049DE450
SHA-512:	8860A650735EFBBE91DB4363927C17ECF56C56B467830F99018AAF2A723D613B2B0B48FCD487FD70434FE38A7AAA22F4CA98F9A92C0B09150C41589F2EE2E84F
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/zkLxDsbw1hz2/full.footer.min.js
Preview:	!function(){var e={"./src/Footer.js":./!*********************!\. !* ./src/Footer.js !. \*********************/function(e,n,o){"use strict";o.r(n);var t=o(/! @sedo/vue-component-library/utils/sedoCookieManager /"./node_modules/@sedo/vue-component-library/utils/sedoCookieManager.js"),r=o(/! @sedo/vue-component-library/i18n/languageMapping.json /"./node_modules/@sedo/vue-component-library/i18n/languageMapping.json"),i=o(/! ./utils/Template /"./src/utils/Template.js"),s=o(/! ./utils/Languages /"./src/utils/Languages.js"),a=o(/! ./utils/NewsletterService /"./src/utils/NewsletterService.js"),l=o(/! ./utils/animationHelper */"./src/utils/animationHelper.js");n.default=class{constructor(e,n){this.variant=e,this.newsletterService=new a.default,this.template=new i.default,this.footer=this.template.createFooter(e,(0,s.default)(n)),document.addEventListener("templateAddedFooter",(()=>{this.templateInit(n)})),"loading"!==document.readyState?this.template.addTemplateToBody():

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153126
Entropy (8bit):	5.540387004970446
Encrypted:	false
SSDEEP:	1536:ISG6arvU/wAQWPyXpKHhitCnAyYHLaUbxijIHWvxDZz7/wurgsjWbcbWgQWZpVqk:9H1YrCIHWpDB74u7RzqNYPCfaQBZwK0j
MD5:	98D15CC7271D4311E0588CDD062F2B05
SHA1:	C5DD588D4B4005AF3744922A4BB4A40A7BE6BE9B
SHA-256:	05E9D067A048CCB3410C0671AC01CB634BA1AF51AA143B872986F1FF969ADC47
SHA-512:	0858A62A11F7458B3D56DCA1CCE6C329023822E2529464B4379E1D348CA83DF16D820F6D9365C65FB0A41372CDBF5BDFE6632C80F7888DFC6DCEF47C269277AB
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301511,17301516,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":100,"afs_gpp_api":0}}};var n;function aa(a){var b=0;return fu

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2016:05:31 14:22:58], baseline, precision 8, 1420x1082, components 3
Category:	downloaded
Size (bytes):	192363
Entropy (8bit):	7.636436886854452
Encrypted:	false
SSDEEP:	3072:fPIylqoepCbCrGxh1a4I6a1/IPv6py5kb257kQDRgL0R:HZqUa4Lncy5kbikQDx
MD5:	C4FC2A699F5911C8A76801F9CC0E6041
SHA1:	234FB5423FA474A9AD4E6400AA0BFD234BCCD17D
SHA-256:	F3DE437B6F851ACA580C747F36504E7267C60A6909DD365096B8A19C7BC2B6CE
SHA-512:	426C8A00BC7AB0FF13C36B7704EB5EF5A81DCF43237D892986E46792A04173B8A50A6EA51C89626109481869E646682CCC646C6E9876CDAB4AF88C9C2BB8433E
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Parking_50-50_1420x1082_EN.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2016:05:31 14:22:58......................................:...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..I$...e4..m.k.9$.V..a.....~,...tO.g..7....x..b6.....yh......[....Fq2$.kCL.r....j8......]g...g..K..Y...o.......m.t..N......,w......I...M........7........

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp55kknrum", last modified: Tue Sep 17 11:16:40 2024, max compression, original size modulo 2^32 450160
Category:	downloaded
Size (bytes):	120986
Entropy (8bit):	7.99779152335096
Encrypted:	true
SSDEEP:	3072:qRGJgz6bNgd3sl+bB1MA5Pj6uv5HqHpxTKa7tzzufQO1vIy68Mgkpx:qL2bkcQbfJVtktJufQ8wy6ykP
MD5:	2B99A4D62A7128947770E032AD56F377
SHA1:	47B1A12A8069445B647B73FAFF175079969A97EC
SHA-256:	F8AA8AC514D45C9AA9159FC1C8A8F4A23D5CD3F25001E617F792401E2630302B
SHA-512:	D5B4407A2E636EFAE9A98CAF8AE4CB7E70DE87392451DEC6FC9245DCAF2A917659B3FA229014B6D904F7C8608AE0D30234F23A888D684429A5D9FC427A80BD54
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/index.module.js
Preview:	.....e.f..tmp55kknrum.....6.(.Ud..^....I.]).V..D._k..CW..%.b#...q-..~g.....N6.s../.I.....`0....I......_&.....0.E....y.r..E.G..u<Y..I ...;u....8.oT....7..F..h....w/.......b.G.......aN..".j.....o5..x.F..8.RQK......,.D(....w......=.\.4.{.C.u\|.]o...C..u...a.].X...YQlU.x...U....\|..=..:.)a....,.p.....}]...u..j.....x.......+..L..........#.G....&H.I8...cc=dA..W.;..k...8.....7.Q%<.JV.0@Q..'.g..<.G<I....S.;.........D..Q.....P.co..fq0.Rk.#....i...z0..h.......Ri.....X.0@....4.>...4j.........'..w}..RY...`...I.2.......P.".J..\b.0.m.......3.].XT./.)vzv..x+MM+..........U.\.....GWb...dOB?Z.f...1..-..q.jF..k...7...W....L.\|..,...H4..a.R.&.2....r@ {.(4.kXmZ.....a?..c'4.y.`..H..+\|S%.X.. ..Q91U.l.8...._.....s..xS...HJ...$......!R.M.Nj;...i:...`6.Z.K...,f0[.U.&...).I\|[..y.ir.:...U].z..S..js..&.-x..x..!.0.r..........'.`c.-.9..,..9(..&Z.!K..../.\...=5...lv46v.p...ja.o.P....~0k.C...0..[...E..cj....%..K...Y3K....L<....f.."Fd.Aj...[...M. ...E.,T.@L......

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	48097
Entropy (8bit):	4.541259077514592
Encrypted:	false
SSDEEP:	768:cfppX5/9YbZIqEGYbGqnq77SdMOsZff7pUbGA+dHeSZKFwj:CKYw3A9+
MD5:	5A2C392E7ACDF6E9DE6E00129500503C
SHA1:	C8D0F80381E4CE180B5EB3C4C98539907292A7BB
SHA-256:	878DA09A057EC8F1775CDC522E5F7EC44966DF547A87A9C29826BA114833C24B
SHA-512:	52223B04EB9121F05442DBC48519A95FDABB81C414772EE43DC837B58F797B97314796EF6D77EA6B7A1F3FEE5937EC039E617FCDF8B146822792ACCD2534E141
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">. Creator: CorelDRAW 2018 (64-Bit) -->.<svg xmlns="http://www.w3.org/2000/svg" xml:space="preserve" width="1440px" height="140px" version="1.1" style="shape-rendering:geometricPrecision; text-rendering:geometricPrecision; image-rendering:optimizeQuality; fill-rule:evenodd; clip-rule:evenodd".viewBox="0 0 1451.085 141.382". xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <font id="FontID0" horiz-adv-x="666" font-variant="normal" style="fill-rule:nonzero" font-weight="400">..<font-face ...font-family="Arial">...<font-face-src>....<font-face-name name="Arial"/>...</font-face-src>..</font-face>. <missing-glyph><path d="M0 0z"/></missing-glyph>. <glyph unicode=" " horiz-adv-x="277" d=""/>. <glyph unicode="." horiz-adv-x="277" d="M90.9909 0l0 99.9962 99.9962 0 0 -99.9962 -99.9962 0z"/>. <glyph unicode="?" horiz-adv-x="556" d="M231.002 175.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7457
Entropy (8bit):	5.34297521532081
Encrypted:	false
SSDEEP:	192:7iDQ7e1rjU7t+K4K8caBIsKcML42CRNcookG2SXTTev5:7roKlX3eSXTTeR
MD5:	E1FBAB4A7A2F1F4DB9C23112004E958A
SHA1:	DFC4F8DBFDFC8E3AFF41881145D7BABD2C914B9B
SHA-256:	293C213205CD107EC18A50AE1F8A7B79915117D162CC58701A575DEF7C295D39
SHA-512:	D97D5F13D61BDAB589DE2734DA87D603C3C8540D3EB2C9D8A98DA56093DA2E9CAFEFF55997335946F8A15AA5C26367D34AAC11ED3626D7998E0EFB704AB993E3
Malicious:	false
Reputation:	low
URL:	https://api.usercentrics.eu/translations/translations-en.json
Preview:	{"labels":{"ALL":"All","BACK":"Back","CID_TITLE":"ID to request consent data","CNIL_DENY_LINK_TEXT":"Continue without accepting","COOKIE_REFRESH":"Cookie refresh","COOKIE_STORAGE":"Cookie storage","DETAILS":"Details","LANGUAGE_TOOLTIP":"Changes occur immediately after selection.","MOBILE_TCF_MAX_STORAGE_DURATION_TEXT":"The choices you make regarding the purposes and entities listed are saved in the local storage","MOBILE_TCF_MAX_STORAGE_DURATION_TITLE":"CMP Maximum Storage Duration","SUB_SERVICE":"Subservice","SUB_SERVICES":"Subservices","SUB_SERVICES_DESCRIPTION":"Below you can find all the services that are subordinate to this service. The current consent status of this service applies to all subservices.","THIRD_COUNTRY_TRANSFER":"Data Transfer to Third Countries","VENDORS_OUTSIDE_EU":"This vendor is transferring data outside the EU / EEA.","WEB_TCF_MAX_STORAGE_DURATION_TEXT":"The choices you make regarding the purposes and entities listed are saved in the local storage","WEB_TCF_MA

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp_fdb7c0w", last modified: Tue Sep 17 11:16:30 2024, max compression, original size modulo 2^32 2217
Category:	downloaded
Size (bytes):	970
Entropy (8bit):	7.80515027083298
Encrypted:	false
SSDEEP:	24:XzQSBED6tjGe2UQ2zYWn13kF9jD14va1UHOaZ1mk40D77O:XzbBEDejX5zlpEbeOo1mgD2
MD5:	343C5A2330FBEBA75D5619CBDF4BF55E
SHA1:	06721B4782D4C06B9FC66A789399D99B23A86D02
SHA-256:	E0B85C9BA9C3292DD86D7D9FAF6D29524AB70ED1D6E020883FD6BA09460CD390
SHA-512:	77B2BA703BBD116755E6F292779C5C157836D87B8E769DBFBC5AEB1C8FF6424396C0C232F7810AA0EA0BE5D74245464F248D8957DA38D93FA87425B4767A5C07
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/DefaultData-fa10cf7f-3d7db9aa.js
Preview:	.....e.f..tmp_fdb7c0w..Vmk.8..~..."..m../."t{.[.w.s.A...G.#..Jw....Qd.v....F....yF..^.....8\|s.@............>:....l.P....u"..Nl.?'.....'..F..e.N...w.%.....!.A.6Vf.P..Zw.@....v6kf.,-KRm.A..[L5......^(.3)m..h.x...b....9.U\|./.0.....i...x.I.9...".7OO._..^....t...K..s ...R...u..A..[...\...3B.O..F..<.D.x..n.[..{ee....:pm.E<lW....&.Dz.i."..5....N...c...)d.....cC&.'.....y.....L..u...\GbC...W.4U3N(..y..c\....@,.-&.G^..r...L..6..L..&Q.^..po.,'p..aEay..sW.....y..I.bBW..M.'ct...N........+.1.?....V.A.&.c0.ZiR.......~.[.=.....y.._.\|H._.....>..+;#k&..]...$......;@......3..`l....u4......).\..{B.Qg,....2.$.W....x.gxue..e...L.Y.DKuP.\|A.}:j.#.2.......N{..%,....W....".(Q".o.$~..y..q.. ..XF!e.t.o.}V..%.L._^...}...(.%..7.b.P...+,?=...@....V....a.t..k.......I.#...G#.=n..`.zB..[..Z..h.NB...p........-....o...ZZ.._....L. .....`O.1-!.'d......... Z..."......h.RL,..hK1.w%I.Dgg2.^I....+...o.i....'...+.oR[V......i/.....

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (13720)
Category:	downloaded
Size (bytes):	14534
Entropy (8bit):	5.404740830414273
Encrypted:	false
SSDEEP:	96:2E/yk2iIlb5lphMzwronbkz/MBhshv/NYrqWhhHMMDVw96DlhfMMDxw96DGhTZnv:2E12iMpgbkzMBhsV/Wrr/i1tjgG2wCs
MD5:	A7643DB296A0986A5EA44B61B3B22933
SHA1:	CDE6A94625D3C804EEF61983E3B85F2427691643
SHA-256:	E5B4108568F7EEB9970B18BD1D9910760DA60A860D90C6C12B801B0D739D6187
SHA-512:	621D18654F21900CE92F0892A00F23C5C1DBA4ECADCEA206230760A739B181C592AE9E67FECFA5668B3190DDABAA0FA674512F349113534B384836CE26E821A9
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.coritta.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301542%2C17301266%2C72717108&format=r3%7Cs&nocache=3421728255926863&num=0&output=afd_ads&domain_name=www.coritta.com&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1728255926885&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1146&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fwww.coritta.com%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmplia6_9k8", last modified: Tue Sep 17 11:16:34 2024, max compression, original size modulo 2^32 159833
Category:	downloaded
Size (bytes):	48659
Entropy (8bit):	7.994214091197096
Encrypted:	true
SSDEEP:	768:jM/GZCmBGNDG9Ri8HGd3I9NydPngtCuwRQMlXHHd9MPCFzOCsz8U/iJMeMBTTXCq:jMG1GNDg4ifMPnzu+XXd9MyMzSJMeMhz
MD5:	C50FB1F4D031300832BA08A720FB45C4
SHA1:	4C0758D8B6CD0164AB620D2115C17FBC3EE3EBC1
SHA-256:	245CBF9A2B05D6FD36FF612F28688B82F0F65E896D7957A95427C5535FB6DA42
SHA-512:	EF1A92374CD813F720DAA2F9E8469F25136E2E12E7F2AA97B95E59632026E7D793EAC9A2611BD6AB43DF0DED10E228E39026888149B8894EE5CE27769A72E522
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/VirtualServiceItem-d95151cb.js
Preview:	.....e.f..tmplia6_9k8..Yb..(.....\'a.3.B..l.,[I.U:2H.",.`...K.....;..J:"2.$@P...t.... ...####cJ.b....bG...v.7f.K.u....6z..>....!....f.>.z..........;f.!........;.......1.=.^..U7e#.n.F....."..d#.....WWlD.o1....1.5....5..lj.^..6......Q{.l.........l......#...'.}.F.........=e.S.}..m.}.l..5.=..l\..oll..+6n..{6n...6n..G6...7l...Ol....l.../l...?.M....;.....i.`.h.1<,h..f.C.)4s...6M....)#.4x.......l...Ap...B.!..;......rh..aJ...g4..@.t..i.......7.Cx8.I...f...h.....#..4....L...k....7.!......@.....}x........4A..;.i.\(.3.8..E0Yx..-R......c.1s5.[J8...b9..\U6..QcM.......l+TU.a1........U_U..J`.z.cG..../B..9...KM[j.88I..9.N.\......v._0/....K.")..\....[.~.L...L...y.B...\|i......-p...n.s...h......c...a..q.2[Z..(..cE..2T...{...X\|.F..^....gY..--...]..R.tg..MG..?......<...8.X......[..-.....`.j.!@..:..@.>xN.}....uw.(0Y.ju.?.!.'.[.37..@.C]rx..M.L..T..4cI3..f&I3.=.N....R@...3k....zxw.x...p....LQT.....F..,...Xp....%".....:. ....Q....yC.".t....v..O....`..!;...r

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	522
Entropy (8bit):	4.486830141218752
Encrypted:	false
SSDEEP:	12:Z+Nv4FBU8Th0NIv4FB86cN8YVvF6DVvFRhn:ZW448CQ4rcCYJF6DJFRhn
MD5:	5B66A3D2A8973A29D8D192DB0A46080B
SHA1:	FF72CF3C5FE0192B10089B599502AB3FABBF0023
SHA-256:	7BC33CEB36096D0DE05681B3D455CAD366588A8E5117B36EF8F4061F47E39425
SHA-512:	A78DF47CC3EE052B4ED1FBD50C91940941B095CAE13C6394408A44BBC5E6965DF8CA5A232AF25DAEDBF5E4BB3587BC6335B2689ACC1C59452B888123D2500642
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/c7r/assets/static/images/icons/site.webmanifest?v=dLJ3bx2xjj
Preview:	{. "name": "Sedo",. "short_name": "Sedo",. "icons": [. {. "src": "/c7r/assets/static/images/icons/android-chrome-192x192.png?v=dLJ3bx2xjj",. "sizes": "192x192",. "type": "image/png". },. {. "src": "/c7r/assets/static/images/icons/android-chrome-512x512.png?v=dLJ3bx2xjj",. "sizes": "512x512",. "type": "image/png". }. ],. "theme_color": "#0060a9",. "background_color": "#0060a9",. "display": "standalone".}.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.72645217666044
Encrypted:	false
SSDEEP:	6:t6F3Ci9mc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6F3H9FPUPkHSt1UiT6i6jUs8b0I0C
MD5:	A6AD6E65373DB8C1B1F154C4C83F8CE5
SHA1:	84CC007D6D682C589E1E1F87482A5278830F3000
SHA-256:	920A378947204498C122722933B3A4B67788A2B6FADE8BD0D47CF830EEEE0563
SHA-512:	09B6D4711C284B1A04C9C4D874F3D1DDFC876C1491FB2AA283A13505BCDBFE90B02731D0B7AD5F492B1DDA2161A4AFE20040801EA634D2727CDE84319ADFB1D2
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2
Preview:	<svg fill='#1967d2' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (376), with no line terminators
Category:	downloaded
Size (bytes):	376
Entropy (8bit):	5.453525561174541
Encrypted:	false
SSDEEP:	6:xWzPFdTgR3YRI3c4q6xSg3sw6Y2+rH6PEXEica7M+dHhR3YRI3hu79uX2+rH6PEV:xWjs3c4peSlXt7HHn3UBYlXt7n
MD5:	35FF9F7F6C7A2FF4A5C4C37E835B9357
SHA1:	7C09A485D21BFFE612C6E32E024CD72E69BD1D5C
SHA-256:	981C3768A205BA67BC966B092EC622BBC630B4BC2DC4C9848B5A87CD482C2310
SHA-512:	136D015B95A2645A43A06DED1D7B74681B6778050AA6DFBDDCF5F61CE7B8DD13627BC3E029BC453B42E81C969A30149078CB9AE2041B5A063F81FB07C3DC1371
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=www.coritta.com&client=dp-sedo80_3ph&product=SAS&callback=__sasCookie&cookie_types=v1%2Cv2
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA","_expires_":1761951929,"_path_":"/","_domain_":"coritta.com","_version_":1},{"_value_":"UID=00000f044c35cb36:T=1728255929:RT=1728255929:S=ALNI_MYjHjskSaOtQqu4Qsx3c7iY8uUMKg","_expires_":1761951929,"_path_":"/","_domain_":"coritta.com","_version_":2}]});

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55651)
Category:	downloaded
Size (bytes):	443013
Entropy (8bit):	5.565770993049353
Encrypted:	false
SSDEEP:	3072:UaC6+WKyy0ztEGIJ2TjD9yAZnSPdh7sGQZVq8bLlbT9jcc:FCk3yctEGIcTjDrZrHlT9H
MD5:	292F026AB8F4867FAE5824CB8F3D34A3
SHA1:	D6B96752D29BAAB2A3C907769109714B1B196B46
SHA-256:	06660678D49BFBE85FF7B4BA47D1FFE1E47F6B56AB0C24A3560119D23B5A5AE0
SHA-512:	C3F2BD22440FA925DDAB7F4DD5C55A7AD0D1A9B9E848F0A2529218B79760AF71FCAE2A0CEAD1BAF773977337CC0808C40869AF27CA175783045C56011A210020
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/p9HJ4M2Uz7U4/full.header.min.js
Preview:	!function(){var e={"./src/FullHeader.js":./!*************************!\. !* ./src/FullHeader.js !. \*************************/function(e,n,r){"use strict";r.r(n);var t=r(/! ./utils/LoginService /"./src/utils/LoginService.js"),o=r(/! ./utils/searchHelpers /"./src/utils/searchHelpers.js"),a=r(/! ./Header */"./src/Header.js");n.default=class extends a.default{constructor(e,n){super(e,n),"loading"!==document.readyState?this.init():document.addEventListener("DOMContentLoaded",(()=>{this.init()}))}init(){this.LoginService=new t.default(this.lang);this.loginData=(async()=>{const e=await this.LoginService.getStatus();this.userLoginHandling(e.data)})();const e=window.location.search;this.$loginStatusLoggedOff=document.querySelector("#login-status-logged-off"),this.$loginStatusLogged=document.querySelector("#login-status-logged"),this.$watchlistStatusLoggedOff=document.querySelector("#watchlist-status-logged-off"),this.$watchlistStatusLogged=document.querySelector("#watchlist-s

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmplia6_9k8", last modified: Tue Sep 17 11:16:34 2024, max compression, original size modulo 2^32 159833
Category:	dropped
Size (bytes):	48659
Entropy (8bit):	7.994214091197096
Encrypted:	true
SSDEEP:	768:jM/GZCmBGNDG9Ri8HGd3I9NydPngtCuwRQMlXHHd9MPCFzOCsz8U/iJMeMBTTXCq:jMG1GNDg4ifMPnzu+XXd9MyMzSJMeMhz
MD5:	C50FB1F4D031300832BA08A720FB45C4
SHA1:	4C0758D8B6CD0164AB620D2115C17FBC3EE3EBC1
SHA-256:	245CBF9A2B05D6FD36FF612F28688B82F0F65E896D7957A95427C5535FB6DA42
SHA-512:	EF1A92374CD813F720DAA2F9E8469F25136E2E12E7F2AA97B95E59632026E7D793EAC9A2611BD6AB43DF0DED10E228E39026888149B8894EE5CE27769A72E522
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmplia6_9k8..Yb..(.....\'a.3.B..l.,[I.U:2H.",.`...K.....;..J:"2.$@P...t.... ...####cJ.b....bG...v.7f.K.u....6z..>....!....f.>.z..........;f.!........;.......1.=.^..U7e#.n.F....."..d#.....WWlD.o1....1.5....5..lj.^..6......Q{.l.........l......#...'.}.F.........=e.S.}..m.}.l..5.=..l\..oll..+6n..{6n...6n..G6...7l...Ol....l.../l...?.M....;.....i.`.h.1<,h..f.C.)4s...6M....)#.4x.......l...Ap...B.!..;......rh..aJ...g4..@.t..i.......7.Cx8.I...f...h.....#..4....L...k....7.!......@.....}x........4A..;.i.\(.3.8..E0Yx..-R......c.1s5.[J8...b9..\U6..QcM.......l+TU.a1........U_U..J`.z.cG..../B..9...KM[j.88I..9.N.\......v._0/....K.")..\....[.~.L...L...y.B...\|i......-p...n.s...h......c...a..q.2[Z..(..cE..2T...{...X\|.F..^....gY..--...]..R.tg..MG..?......<...8.X......[..-.....`.j.!@..:..@.>xN.}....uw.(0Y.ju.?.!.'.[.37..@.C]rx..M.L..T..4cI3..f&I3.=.N....R@...3k....zxw.x...p....LQT.....F..,...Xp....%".....:. ....Q....yC.".t....v..O....`..!;...r

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpjb_3iwb1", last modified: Tue Sep 17 11:16:17 2024, max compression, original size modulo 2^32 5482
Category:	downloaded
Size (bytes):	1142
Entropy (8bit):	7.838370181242706
Encrypted:	false
SSDEEP:	24:XEHTZiYxeX9oZbeYbis3qP4vIPqxAMp4gUaqHlOeF/:XKAUetoJeYGs3Hwqq5g/qHlOeF/
MD5:	2D333D3B78DEEAB0A42FC5C2C41494F3
SHA1:	B5439CE6D3B2357466B22E3188CFB11457DF3DAD
SHA-256:	2D611DBDE27CA7196AE91A5D1DC899A33323BE04DD288D38A68FB445004313DF
SHA-512:	C6BDE41051D6EC18CA92CD98CA8B6711248760E889F0A4AB9C64DE61F6A6123D3830D50E5967E90FA9F0840F5844D59C4EEA26A10056E2666675F2750D88CCF6
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-sdk/4.38.4/cross-domain-bridge.html
Preview:	.....e.f..tmpjb_3iwb1..X[s.6.~.WhyX..1}.....C....K'.a.Y.O..Jr..N.{%..lSC....p.w.wn.<.4]LV........P^@......u.....P..... .r..Q..\| .....a>.y...+.x......;Q...>.].&.;<.R.D8.)....=..'..f..3L...1b>.....~Hv0N.........Re...W...@.&_...z........j.^.+0.N....Z.9f..4..d\|.\-....)..T6..&...E....X.F(...\|.6./..G........D..,n.....7x....n/..`.<E<&i.......{...D..E..9..q.....4<I6f5^.r...I[=0.....M.S.#/....J1.iZ.l)....h.\.3.v.`.&.9^.$....?..Ee...B..<...p?U_.7n..NtN.....v.B.N....TH....S.7......E...D`.!.....rq.grn...e..."k!...B_O.>..B..-..mL)..1+...mcK.....50......D[.{..g.......Q.Y...M.W=F..B...J....ZWThe.vL..%O...kO....[....U.....^j...'\......[..p.s5N.ib.t..E.....a.}......p.'8..z.V.H.r.a.i....!..["W.R.W...>!..=..e..hhXS.6"X.......).D......l...r....Zf....NQ...G.E.....L.......}A...^.<.X..X.z..U.@u.4.7.O\,.*M6U...;..C.\Y.Z.Y...r..$m.WAkHO..Ns\......9.......oe.;..\...}#N....6..{GP.+.<8...c.r..(....I..E..\|p< .9%I..<\|...pPL.Z^...D.f.y.g-Y6.zO..........&S....[...?

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp0yrdjd2n", last modified: Tue Sep 17 11:16:31 2024, max compression, original size modulo 2^32 1728
Category:	dropped
Size (bytes):	755
Entropy (8bit):	7.775474941492504
Encrypted:	false
SSDEEP:	12:X2jC8DoYO/DMdBMlSAll4D7sOVuU8DSu2TNHfq1WOK1T55jHobgf0hjdAd7W7hn:X2ugHO/DMdBMdll4uDSu2RHSLwzOP8Oh
MD5:	B0B7CF1233C893469CAF7CBF3145560E
SHA1:	D22FF70EF795B5ABF97B488E01C64CB0141A5B55
SHA-256:	FE11978FB303E3DE23F1F5904653DDDCB3EC6899FDD6BD90250249C69AB277C9
SHA-512:	ED5C49BF050574F2B3F1341DD1B68C50ABCE875982B16FFCBEBAC3486CCF750E881A74A2477A0FB06DA629DF6C41E361FD26A5E2B9FB6FBA3A36026E5A78BD79
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmp0yrdjd2n..U]o.0.}.H..H.K.$J..O..m.%........%..!$.Z4.bs....c;$.2..i........L.........9....1.,5./.".j..e....cB.2.......T.......LH..?P.F{..q0..{}.F#.6..:z.I.h..G.c....!...w...u.....5.............~4..{......_..w"7.h.......Nd........x ..+c"&....&....F...CcS7..f...e.i'.../.......NbF.U.D9..cg...w.YF.%.;.$&..u]3w.Y.-g.u.Nj..........3IggF......p:4, .\|...!EQ..:.Fqi..T?.u...W....n...>..toZ...a.o`.k_\...........beg.P%V.0._.Zg'j......1A....L...-\|......r.(~.A..[%.EQ....D.......P.P...P.4.`..8..d...^......>..]m]p.ElG-...X.....'....F.o.NW.\|.;...?a!....O.'.V...R....QL..1P'.@.^ne9..1.>?/....U....m..T..X..M`.b<.Re.kR..z.5i....m.S.Zc..@y....0...%.[...UX...M...-W..,@.r..\|..Q...?..FlF.Z :..w._.....B8.Y"..O..@.......

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmphejarc7e", last modified: Tue Sep 17 11:16:32 2024, max compression, original size modulo 2^32 1513
Category:	dropped
Size (bytes):	616
Entropy (8bit):	7.64751725155793
Encrypted:	false
SSDEEP:	12:XJQiwAirSYKl6SbehEMlKN9RkcNR4ZkwDlujUTbwwmUszJx0FGUE0sO3cJnLO/:XeiwTrSvZbeWMBcNRC/uoTkrdxht0qL+
MD5:	954CA4ED0665A91EEC3838F6217030AE
SHA1:	5A515CE38AEE45BE434A801D51BA0B10442B1C98
SHA-256:	C894B7A9CF6E2BF3E964E6EDAB92EFD9DBF82670954B4B28DEF5022D28689D35
SHA-512:	59EDEBE9D1D6300E5B84CF48FDF5C72C93D76DDE70DE5A65DDFC414631BF3BC34EB686AA8CF493E4D089EBE10E4C663D9C557B398ECAA65CF7BDCE5CF2E57644
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmphejarc7e.....0...}....$..,fQG4J.H..f.F.2...cl.K....!...vu..`~.O2.....-GH.(@/N.@.S..W..d.S.2.T..S...N-(.d..NU.S....2A.6.%.....7e.....N..S.".P.a.~44..w.w.w8.?.Rh3..#L..S..."...B..N.!B.QI......5..)9.e.D.w.&;.2.5L.e0."..`...iXT..y.....O?.q....fr..7..XG.....Q.y.TQc..!?..c...~..g{x..y...8...C.1-...#..q.....y....ddt..0.M}..9.....C.u...$.\*..-;...t..+.y.`C.a.z.O./&..I..wp.......ZZ.......An.j..sdA}....v.Ne/`W.=..;../{P..O.[+.X5.].h..39.."..:@..$T.]..t.t..i[u..l.n...#+.d.N.......p.T.!....j...D/...m. .aJ.ek..U.,k......+..37...h.=.F..k.....H.0.z.s.....V....)..+v....'...T.7....~.....

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpz39m4eqo", last modified: Tue Sep 17 11:16:31 2024, max compression, original size modulo 2^32 2937
Category:	dropped
Size (bytes):	1077
Entropy (8bit):	7.802144664467643
Encrypted:	false
SSDEEP:	24:X2LG5DiW9Za6EIL0AXpEdSQdpiI7RuXAMJoadrF65wsdvAh+L:X2LG5DiSa9IFXp8nPiItuXA8c6t+L
MD5:	C2E932D4D1B024014630F22BD817AA3B
SHA1:	FC46FC43601100941B49908D7DE4D508FFB8EC42
SHA-256:	0BE9A77CCF72E583D8F7F421203F14F01085405FC73CFFA3E27E6BB6E1FED93E
SHA-512:	A9E5C3223E586D9E917585F50B03F5080461472BFC67C304E484B4B1FC35026CA1B9E683F9082D0734A64FEFCBFB48187DE66CF6DEFF924DC832CEB05F07E260
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmpz39m4eqo..V.n.6.}.Wh] ....E.n.@.\|.b..."...7Z..%R ).../I...8[YAh...\.9&....p.H.....2 +3R /fd@.f.@3 .f.w..y/.....A..2.._.Y..a..,R.......fATJ.s.J.p..T.$.)...Y...v.i...,..Jq6t..v..o......w`...Q<...2....K.bd..wU.{._3H.8..H.B..s.S...r&. C.........x...{?'..........+. ..X..r....X..f0..S...R...-.$..(uE.45..c<.....8c.$8v.gg..&...P...w.T].dd..wAW$..C.......J......[.IHN.j..Q.a.m.X.v....^..QF../.=URa.U/...E...N...)Go6.....=......a...d..oL.".u^.W.W..a<..a.BE#..c..w.....Pj....&=.$}.V~.....GN/..W...Yf..fN.e*x..1.......?2Fm.+..j..........C...../...m......7Y'.>.C...".e6.x.7....\|.v`N..Z.&2.....O..<.L=.tp....Z...C.%5]9`........~o0.J-...i..........oz.!..a.....e.....N...>...\|q......J.C..n.vS....#\|q..a=..Z.0u....%$G..-.[.1s{...#l...P..a..1.......F.I.asr.......[.....v..2~&.......s...7C.V....(\..l.!.....j....~n^x.f.[@.P.p..S.w.;,o.....@..q.q.y{#//....\|.....#...B....6..4.>.qU........IC}..1.....<-..\|...e]6{....a....>N.i..i.:x.9l...

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpyiylrfjd", last modified: Tue Sep 17 11:16:29 2024, max compression, original size modulo 2^32 473
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	7.101694903074545
Encrypted:	false
SSDEEP:	6:XISDMHA6RQv98lnIQh0z8AuiUAJS6rYcyyln:XIq6Hlnjh0Q36pYD2n
MD5:	810EE2A65A302B5F880E3A00E840D6CE
SHA1:	0216DAA7AE065F8634DF06741E9CC791CAA9C1C0
SHA-256:	570D71A067BF20C244E164897D82D6C8E77D712A5B400A00BE41EFBBD6128487
SHA-512:	898D331822B32A20BD8286B2494EBD1119A8881D82B4C468594838459783C794D8F01D8D00B69B068C5D407C229EC5E899E621E72527127095FF01AE75CAC695
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/ButtonsCustomization-5698ac85-5d43b15f.js
Preview:	.....e.f..tmpyiylrfjd...Mj.0...=.....f.#...r.U....3A.....^.D-t.....{\|.`..p...8<.#7.......C.^..M}......2...'..(Q....V..o;.j..V[..EL.a..)r"x..q.%...1%.e.oWF(........E.C.=z..B._b..w..+..=...FV5..=x.=..+nH.d.h.+..=...P.n.f...hi.]....

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HrPyY:zyY
MD5:	6CEA4FAAAFA38FD40BB35DE6589E85F6
SHA1:	8105D649FBDC85604236E65C53E97BCF0CBF5A36
SHA-256:	FC11A6B80A3B077C6ABCF624E3331E30045DEA7896F6539A7CB263E74964F5C0
SHA-512:	7DB4FBAAE22AA961987C0750E13E1B7A3CDEE6C0502A7C5093D4FAAE84454EF6709F8690278FF2AF9ED984601FDD8FFC59E887A34AE723C5BCAAE54125F4FCD4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkIQnKyAvL46BIFDVKKSaM=?alt=proto
Preview:	CgkKBw1SikmjGgA=

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.452819531114783
Encrypted:	false
SSDEEP:	3:H52WthYHV2Nk1:IqR21
MD5:	5C338D6F09B30800D3CBE195E9C1685D
SHA1:	1A1879ADE5024AEF1FDC9272719C0CAE73AE6182
SHA-256:	33A6546E6E1AD007224E785BE77227DC006FD1057F30F4DA2351DDE40E84BD6C
SHA-512:	D2F5BC23E0F50963F867CB022203E9BBB426C0F4E8DE2C865C8BA6FE8C658170934FAAB1AAF85E8612B317B9F524C4ACE3297A382C6EA4C60646406EC693BBC1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmRDbEU98QszRIFDeO8ISoSEAkBBRZl3eKjCBIFDVQbpTU=?alt=proto
Preview:	CgkKBw3jvCEqGgAKCQoHDVQbpTUaAA==

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	3.090787153125625
Encrypted:	false
SSDEEP:	192:jiHSINqv0tJ30DezSfPAXTZwC3D2N2xp1Fd/ar/+zi3LHZNwkQH0iWpXDt3TN8rB:jzAnP9j
MD5:	DEF00C11B1596DB4EFEE6A9FBE64FC27
SHA1:	BD298981E6D8D7E4FFA18ABCF687041F4246672D
SHA-256:	95C427FA3143B1896FAF42A6406686CE7602CB39052081BB32D12B51C9E047E4
SHA-512:	C056E95DBFA1AAB3A50DFF18C6D577DBFFEA72C93316FFC53B6B7AA41DCC7707A810D563894589A7305DE0B76610F88150B2034670DE368773B2B356F14AD30F
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................@...@...@...........................@...A...A. .A. .A. .A...A. .A. .A...@.......................@...@...@...........................................................................@...@...@...............@...A...A.U.@...@...@..@..@..@..@..@...@...@...@..@..@..@..@...@.}.A.U.A. .@...........@...@...............................................................@...........@...A...@.j.@...@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@..@.}.A...........@...@...................................................@.......A. .@.}.@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...A.G.....@...@...........................................@.......A.U.@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	543
Entropy (8bit):	4.199353192354715
Encrypted:	false
SSDEEP:	12:yQHSz5Rd7OTR0VyAX9SxSyrtZDRWtYyNnULcHByI:7a5RdSRvAUlrtJRWyySLYByI
MD5:	4C6258062633129D69AECCE4F0023D9C
SHA1:	C985E54A808E6FB1B69B949ACADC054AE39629DB
SHA-256:	728AEC7E6742CF7D5C0894860C9D2DFB2C9AED8A8FF6ED399094AB782341762E
SHA-512:	E593EDB63A8D7D2CDFBFA87669C1768A2A357F5A6A45778AEAB4188D66A364286BA10533E2FB2FB715F1630AA73AA2AD75504385D25DC4B759861046511F232D
Malicious:	false
Reputation:	low
Preview:	$(function(){. $( ".ce-accordion" ).accordion({. collapsible: true,. animate: false,. icons: false,. collapsible: true,. active: false,. heightStyle: 'content'. });. });.. // init sliders. document.addEventListener( 'DOMContentLoaded', function() {. var elms = document.getElementsByClassName( 'splide' );. for ( var i = 0; i < elms.length; i++ ) {. new Splide( elms[i], {. arrows: false. }).mount();. }. });

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2720), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	82380
Entropy (8bit):	4.730140043037895
Encrypted:	false
SSDEEP:	1536:q1RH9cuH5LigSun2deT73iiiish2gJW7U8rdFP0IRby7GzrEgHnh8k3+x/a:gjcu9ik2dUhgJSU8bRb4GfEgHnh8k3oa
MD5:	AE3E06CD787014F72119B9A7C09657E6
SHA1:	21A21EC1EB03D94F90997E74D4CA101DAC90524B
SHA-256:	139135ACAB9BD45B8CD6005DCF48AFEE40851A04FA50E7C1AE818905D966E142
SHA-512:	C08CB10E967EAD4648718D9128244454A7AA3040AD0908D5A8C402C08BDA0A4CE0AF1159B42FD52796EFACB07DD493EF47D5C1817086DB93A0502657C9E2F6F1
Malicious:	false
Reputation:	low
URL:	https://sedo.com/us/park-domains/?tracked=&partnerid=&language=us
Preview:	<!DOCTYPE html>.<html lang="en-US">.<head>..<meta charset="utf-8">. ..This website is powered by TYPO3 - inspiring people to share!..TYPO3 is a free open source Content Management Framework initially created by Kasper Skaarhoj and licensed under GNU/GPL...TYPO3 is copyright 1998-2024 of Kasper Skaarhoj. Extensions are copyright of their respective owners...Information and contribution at https://typo3.org/.-->....<title>Domain parking \| Earn money with parked domains \| Sedo</title>.<meta name="generator" content="TYPO3 CMS" />.<meta name="description" content="Earn money with domain parking at Sedo! Award-winning parking program . Fast . Easy & accessible . Register now and get started!.." />.<meta name="viewport" content="width=device-width, initial-scale=1.0" />.<meta name="robots" content="index, follow" />.<meta name="keywords" content="Domain Parking, park domain, unused domains, earn money with domains, advertising on domains, turning traffic into money" />.<meta na

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp_fdb7c0w", last modified: Tue Sep 17 11:16:30 2024, max compression, original size modulo 2^32 2217
Category:	dropped
Size (bytes):	970
Entropy (8bit):	7.80515027083298
Encrypted:	false
SSDEEP:	24:XzQSBED6tjGe2UQ2zYWn13kF9jD14va1UHOaZ1mk40D77O:XzbBEDejX5zlpEbeOo1mgD2
MD5:	343C5A2330FBEBA75D5619CBDF4BF55E
SHA1:	06721B4782D4C06B9FC66A789399D99B23A86D02
SHA-256:	E0B85C9BA9C3292DD86D7D9FAF6D29524AB70ED1D6E020883FD6BA09460CD390
SHA-512:	77B2BA703BBD116755E6F292779C5C157836D87B8E769DBFBC5AEB1C8FF6424396C0C232F7810AA0EA0BE5D74245464F248D8957DA38D93FA87425B4767A5C07
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmp_fdb7c0w..Vmk.8..~..."..m../."t{.[.w.s.A...G.#..Jw....Qd.v....F....yF..^.....8\|s.@............>:....l.P....u"..Nl.?'.....'..F..e.N...w.%.....!.A.6Vf.P..Zw.@....v6kf.,-KRm.A..[L5......^(.3)m..h.x...b....9.U\|./.0.....i...x.I.9...".7OO._..^....t...K..s ...R...u..A..[...\...3B.O..F..<.D.x..n.[..{ee....:pm.E<lW....&.Dz.i."..5....N...c...)d.....cC&.'.....y.....L..u...\GbC...W.4U3N(..y..c\....@,.-&.G^..r...L..6..L..&Q.^..po.,'p..aEay..sW.....y..I.bBW..M.'ct...N........+.1.?....V.A.&.c0.ZiR.......~.[.=.....y.._.\|H._.....>..+;#k&..]...$......;@......3..`l....u4......).\..{B.Qg,....2.$.W....x.gxue..e...L.Y.DKuP.\|A.}:j.#.2.......N{..%,....W....".(Q".o.$~..y..q.. ..XF!e.t.o.}V..%.L._^...}...(.%..7.b.P...+,?=...@....V....a.t..k.......I.#...G#.=n..`.zB..[..Z..h.NB...p........-....o...ZZ.._....L. .....`O.1-!.'d......... Z..."......h.RL,..hK1.w%I.Dgg2.^I....+...o.i....'...+.oR[V......i/.....

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (18249)
Category:	downloaded
Size (bytes):	26037
Entropy (8bit):	5.4877348224855425
Encrypted:	false
SSDEEP:	384:2ni0Zfaxi4UNsQ4M0Cpasqjawjfvztpw2:2i6ai4UNJtaPaQHw2
MD5:	8597195A38885FA8F1B5AA30F3F51013
SHA1:	0E8EAB1638229B8E78471793BBE9CDE36113CE04
SHA-256:	86EACA3CC615817E31E558A35772D5778E60A5C98979CB69867FDAE91CF9C1E9
SHA-512:	F108D55B5B6A2028C6D4DEA059CEFC0BB6CADD289A2423E27B665F259FCF78CCCF84813252CA25A37D258A87E0C70A2583EC255F7EA242AE8EB8C83CD0174E54
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3D87e1bf0796c9fd42%3AT%3D1728255929%3ART%3D1728255929%3AS%3DALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.coritta.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjgyNTU5NjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Cost%20of%20a%20New%20Ac%20and%20Furnace&afdt=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj3wtYOe7rzx_1g0wON-N8H__C4RQ1CeooGzFWtQkJCJwnMJ1w-u4cuLbMWU_7XM46bcpZ97UYjuhVirX9hk929rs6qaClYRSjBdJEFMkHJUbEGAnwvyWdh41fmZ1VUQ8tfWlxX7SZjj5&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301542%2C17301266%2C72717108&format=n3&ad=n3&nocache=9811728262269674&num=0&output=afd_ads&domain_name=www.coritta.com&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1728262269678&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1227&frm=0&uio=-&cont=ab-default&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fwww.coritta.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%253D%26query%3DCost%2Bof%2Ba%2BNew%2BAc%2Band%2BFurnace%26afdToken%3DChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj3wtYOe7rzx_1g0wON-N8H__C4RQ1CeooGzFWtQkJCJwnMJ1w-u4cuLbMWU_7XM46bcpZ97UYjuhVirX9hk929rs6qaClYRSjBdJEFMkHJUbEGAnwvyWdh41fmZ1VUQ8tfWlxX7SZjj5%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65469)
Category:	dropped
Size (bytes):	128582
Entropy (8bit):	5.285583929776152
Encrypted:	false
SSDEEP:	1536:rNZtf3ftRu6GTGkwGh+rVs+xsv2F7t835vk3CqDHEASBBmZJj/+L0S/dIG0ZqwaC:/tvfb+MZ8pvTb+JjGLqowajnCxn5
MD5:	E1D695FFAC0AF680A179A699A68B9893
SHA1:	A27500032B6DD1EA82054499BFA22063073CDC5A
SHA-256:	022C3D1C8A0C8FD5C46E82A58C269D6B501458186C23B13A6B6E1F3B52CCA0DD
SHA-512:	F13C7F98DF48EC3307E066FFDB6E02F7E3EECFFF0E27D6C3767F6CE877B3E8B81246CBA92EFFC5AD93412DACF086565ABC99BD09C64BA1249DB548FD8EF649C9
Malicious:	false
Reputation:	low
Preview:	/! For license information please see app.min.js.LICENSE.txt /.!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/dist/",n(n.s=9)}([function(e,t,n){"

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27332, version 2.1310
Category:	downloaded
Size (bytes):	27332
Entropy (8bit):	7.991751157831881
Encrypted:	true
SSDEEP:	768:98lHID7bGsgKetE+hR2nTPXyAlFh6Zc6u2:qGDWsgKUR2RveI2
MD5:	8BB4BA711047411893D35612BC631AB9
SHA1:	FDDC00ECA2E66E4431C9615DF508A1A377ADCE42
SHA-256:	4BCE5252202292E4D9D6DE37A5BD004CB52D8C44E9F940BBCDD030EA569F29DC
SHA-512:	48BEA7A2A376B01D097E02409AAC713500AA7CFA9903378977178677A2764C0C8E07B692379B3722163BCB201F9649620347045B4503C0A35CBDD16F1E036470
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/p9HJ4M2Uz7U4/2febe6dbe65f64ce36be.woff2
Preview:	wOF2......j.......`...jQ...........................?FFTM..(........`..R.L..e.....`..{.6.$..(..V.. ..>..d..L?webf.[gMq.o.I+....L.(.]..c.M?odF........2.&U.....!7.d.B......."...'yu.....s,C...3{.(........9e...Y.,?+uT$..T.=i....?T.)).6..+...L..tl.!^A~..Z.C.... H$.DM..qw.e......,.g..s..C+.[<........{..\{.......%..M.?..P3..;...f,;N.i..rU.'E.U.s}TD8........hn...0.B....s...fImcAl....Y....J2...........Jy._....R...jj..... f........+...4.. 6.wd..#k.Lp.............k..W..>mq... .....6...P.9....._.f.^.._...Y...Z...Vu.8..n..".0N.kF.1.B,bX...c..`.b...A..W...d..3r.r..~w..#...Ch...a.,y.X..."...L...........g.kiUlY[+...t.H..0.@.....}..Z.[..>L.E-..N..1.d?.N....}.3a.......g.mD...K&.D.i..$.e.]-...?k.g.....wF..K)".p..FD/Y:.l.~.>a....'....S{P.dC....1...uK............./.B.D.!.)OO.s..M...w.M.7..v....t.@..)..J..I1..\|Ar..B...B.Sr...m.r.]..KU=.g.9$4.kU....K....*.0]....zh...g..w.z!.,~._..0.}...aP...2..%kv.U.\......2<.....I.xS.b......f..f....j.}E=..DBf.a..$H.L....B.$k.E.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpuhnqew5e", last modified: Tue Sep 17 11:16:31 2024, max compression, original size modulo 2^32 5491
Category:	dropped
Size (bytes):	2448
Entropy (8bit):	7.915825988584021
Encrypted:	false
SSDEEP:	48:X2TRvvxBZQkdysZTyAxhqRa5U2Q5yJR/HKcUGm+H2baIjVIOfS35oklcB:eRnxB9gAxtU2Q5SzU7+HSaIqJ3YB
MD5:	5DA72F9934EC4DA8A4798966F0B6BFD8
SHA1:	F6973E32A9EFC3162635AD1FD0805FEDD8275BBA
SHA-256:	B3B6367472632D79597A664B7C1E5904E057AA7F11E9575667337BD101A7E0C5
SHA-512:	E806BA43043635444C7ECB7B6A5C067ED95B3B08E645A39738C9CE77F984D1FCA1A73392EC547F0B593716E685E348E68A8ABB23CB5DE77B94070CF6CA1D8773
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmpuhnqew5e..Xi......_A....h..IA1....`.....E.S.G.....K...{.:f..\|..`..bwu....]..m7..7N.;..r.T.7.......F.?s.T....q.T..c......u.]...,.;.n......d.n..YLk=..C....M..x.P..b^m.......e..6..U.d.v..+6.:.^W..]_......u...;.w^...m.G'.....n.rV.\|%.:.+2$...t.Dv..L..j0..M...+X=Y...)...........\|99....j.g.....r..7..l...vS\.w.b.yo......(..Di..I.O.m9..{Y..X.7U.~.....?..p..n.5...M...~.o......4eu....[.Gt...g./......h?..uU.......mW..{=[.Eu].aL.....jh...9.........]...../....n. ..h.9.q..i..e...[o.Z6.Wy.o..W..WHY...S......>..pT......-....E.).Xm.#p4#..Y.j..n6}.a[<.~{{.oC.v..........t.M].l...w\|'...c.[..i.w..:.....YVvu.....3..`...V......VAt.D..?..'....a...:3N..t.i?s\|O..T.. .\.X'...(pL...o.p....?.Y..^...1:2..i..q....I..Of.<r.9.dW..8...'..'8J.....I....D...>..X.!,.u`t.Bb..u$:..E..^.:..4.[.^A.O.r.[............-....4..Az..Y.C.".&.&v.N<.a:M.-M`d..>.h+../...D.T-....VG.T.$P.xD=\|.A.\|.R..z....P...0...j0.b{..eh...0..)...X.^b.......h..BQ.. .[.8..!n>.I.T.^..^"..c

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56867)
Category:	dropped
Size (bytes):	402703
Entropy (8bit):	5.475259998054872
Encrypted:	false
SSDEEP:	3072:S65BGXyy0KtEGy88CQG3Gm8bLlST92XRsd:t54iyptEGy89QG3Gm8vET9L
MD5:	9B62689DA1AA72A71835D38D99D20A96
SHA1:	603697230E1B51B5031A25AB1A53F4A4F361A059
SHA-256:	E758E555B63E231A16170A028053D83D90A38C01574A9AFA372A59D8049DE450
SHA-512:	8860A650735EFBBE91DB4363927C17ECF56C56B467830F99018AAF2A723D613B2B0B48FCD487FD70434FE38A7AAA22F4CA98F9A92C0B09150C41589F2EE2E84F
Malicious:	false
Reputation:	low
Preview:	!function(){var e={"./src/Footer.js":./!*********************!\. !* ./src/Footer.js !. \*********************/function(e,n,o){"use strict";o.r(n);var t=o(/! @sedo/vue-component-library/utils/sedoCookieManager /"./node_modules/@sedo/vue-component-library/utils/sedoCookieManager.js"),r=o(/! @sedo/vue-component-library/i18n/languageMapping.json /"./node_modules/@sedo/vue-component-library/i18n/languageMapping.json"),i=o(/! ./utils/Template /"./src/utils/Template.js"),s=o(/! ./utils/Languages /"./src/utils/Languages.js"),a=o(/! ./utils/NewsletterService /"./src/utils/NewsletterService.js"),l=o(/! ./utils/animationHelper */"./src/utils/animationHelper.js");n.default=class{constructor(e,n){this.variant=e,this.newsletterService=new a.default,this.template=new i.default,this.footer=this.template.createFooter(e,(0,s.default)(n)),document.addEventListener("templateAddedFooter",(()=>{this.templateInit(n)})),"loading"!==document.readyState?this.template.addTemplateToBody():

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	151
Entropy (8bit):	3.837002606073176
Encrypted:	false
SSDEEP:	3:YJELTrzaEIGWpHBAHJDLRHZFM9pz8JHABMREHJxr/4ALpHBAHJDLRHZFM9pzO:YQTiE32AHJTi8JERHdAHJTiO
MD5:	E9CD67A12859A172B0E44A712D57D56E
SHA1:	C710B9581CE5B3599FC267660F119AC78D486C4F
SHA-256:	1325830F2CAADAC80119B837399252F3A70353B6D73FA725AAC4E58ED73EE499
SHA-512:	A83C1E311FF01FAB116396F6ACAC026CD273079D1785E53DB5780F03B64C18A81E605AD37630DF2941A2B6CA6B86624DB0BC372F1B2380D2B95271E50280189F
Malicious:	false
Reputation:	low
Preview:	{"languagesAvailable":["en","de","fr","pt","es","zh","it","nl","ko","pl"],"editableLanguages":["en","de","fr","pt","es","zh","it","nl","ko","pl","ru"]}

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpkijf5vvx", last modified: Tue Sep 17 11:16:39 2024, max compression, original size modulo 2^32 5128
Category:	dropped
Size (bytes):	2111
Entropy (8bit):	7.906743654914115
Encrypted:	false
SSDEEP:	48:XcHr4l7jJBKtLqLBZfPgCUKphtJiwgJjIklYCKBjR33S0:sHc5jzKtLIBZfrLodPKfS0
MD5:	5DDBD52E915AA0202DCB4058D613068F
SHA1:	731594B30F11A511C901EFB097FC621EEE4E0F02
SHA-256:	D038445DB649CA70900DE422361C52F12B2534EF179D62197102EF139ED99C98
SHA-512:	58E1473DB6FE050CCF6E3BBE5A47F2E203340E77DBFFCD0B76CA7EFFCA6420DB9BE4967F765A29E4E95BB18DC8E0292274FCA64E49EFB38ABF45D7D123218622
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmpkijf5vvx..X{o.8...>.m......-.C.8...u..n[..%.m6...)?....c.I.`q-....p..y(\|.G..^........FQ.kE"`mE....!.....O......~P...R4..LQ.\-g..\.5x.............. Vd..GE..F....+..W.Y.+.=.W...W.........6.I..k.x...G~...C..<7....@.z.....-.4.2.....\.....k..SEVp..9h.:.]x..E.p...V.'2e......#q^..;~w.e.Z...3..4.C.........4...BV..Z>_..j,...I..=.%&...8`k.....>.p..d...b.......s.....al...hcf:.EK.....r.@k....9..!.4..u.._t.o....!<=c.0z...(.:M.P...G..5K.~....Ke...).$....=.Z..h..x....... 5..c.1..(Y.....;.m.Q....t........3.....~..^}+...xk.D...4..a...X..ty.N..3....Z.-.E.....b@k.....I./...xNi.p.....}....h...J.F.FK...9.0a.P..{.9..X...w}{.....O..zd.....HP.IX.o><x..$2V.a.g]m.o=>...bv.%..'Q2g.G!...&Q..-..W.1.CP'h.S(..;..:.#..E...u~..1....X..i.h....s....y...8&'..Q.P]X...@A.%.......:.~..b.2Z`./..cb+p4.,.t3..l&<.R.p............j.c.L..cY.B....{.......L_y..%.rC$0.Q.2..S.?'..^..6.1Y..].NS6.....i..y..&).....k.....N...Ow.).Z...F..i.....Rn..dr.i..$.*r99."s\|.^..'.~.).QL.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64398)
Category:	downloaded
Size (bytes):	254961
Entropy (8bit):	5.157935778298396
Encrypted:	false
SSDEEP:	3072:baRWCAGMFW5dwcLDL/utlfU89DK2Jr42uz1Uu6TA1m+uPSaSvN53:ipvMAd6lHWvu/2n
MD5:	D81728B84FADEE4F3E6F11E7A322146E
SHA1:	ED00C5DC0F336D5DAF0D347A154A0A7E337F07A3
SHA-256:	D582A0874FA6D0F4379A7A1AA10B506BF1303CAF06F0CDCA775B0602ABC56FA7
SHA-512:	F94068951DF78712100C202CF53B913A7F30BBD8C03AC3D48D3ABFD04A9F8641FF5115D0BBDA44E99D9292E33CFFFADFD3E7E7648EFA9BA8E84C26AB5BA2BFB7
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/c7r/assets/static/libs/external/jquery-ui.min.js
Preview:	/! jQuery UI - v1.13.3 - 2024-06-11. https://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js, widgets/droppable.js, widgets/resizable.js, widgets/selectable.js, widgets/sortable.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/selectmenu.js, widgets/slider.js, widgets/spinner.js, widgets/tabs.js, widgets/tooltip.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/eff

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	297066
Entropy (8bit):	4.43774922185931
Encrypted:	false
SSDEEP:	1536:JLG5JeiM0mlm2ZE4jE4AVsbVYKq5gXW7D+uZ8FAqL+8TzXY76wajXY76wa8M7lEZ:f1zw
MD5:	E19583E456E4848ED2C03362ADCF6011
SHA1:	EB6B7C724929B2F4BA48E5C7C2DD98D9D415454B
SHA-256:	7C2350D4A6C1F6E7DAD9912B315D2485A5E8B0AF90C4CEB2B9BCD575074A0F9C
SHA-512:	AB2ABAE54620A1AAFF7554F9C49FD71029EDED330E6AD4CBE0BA5BDB13D4955A0BC755A4655D218C9C10E446865BCDB8CE5E293A694778FE6DF5010BB46EDCCD
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/zkLxDsbw1hz2/9f07a3eca6d4792ac529.svg
Preview:	<?xml version="1.0"?>. Icons from directory ""-->.<svg xmlns="http://www.w3.org/2000/svg" width="300" height="2925" viewBox="0 0 300 2925"><svg xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" id="br" height="225" width="300" version="1" y="0" x="0" viewBox="0 0 640 480"><g id="br-flag" stroke-width="1pt"><rect id="br-rect552" fill-rule="evenodd" height="480" width="640" y="0" x="0" fill="#229e45"/><g id="br-g3551" transform="matrix(.98110 0 0 .98110 64.633 -11.162)"><path id="br-path554" fill-rule="evenodd" fill="#f8e509" d="m261.72 455.71 307.29-199.44-309.15-199.98-308.3 200.46 310.16 198.96z"/><path id="br-path557" fill-rule="evenodd" fill="#2b49a3" transform="matrix(1.6911 0 0 1.7117 -100.3 -.71516)" d="m293.25 149.98c0 41.878-34.418 75.827-76.874 75.827-42.457 0-76.874-33.949-76.874-75.827s34.418-75.827 76.874-75.827c42.457 0 76.874 33.949 76.874 75.827z"/><g fill-rule="evenodd" fill="

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 24134
Category:	dropped
Size (bytes):	7514
Entropy (8bit):	7.972817339817039
Encrypted:	false
SSDEEP:	192:xu+tUmw+Xl4veocBfqyrPEuB+59F1oeIjjY:cjcKvPcBfqyrD+b1
MD5:	149F8B397FE711244EF204823190CB86
SHA1:	1AE7A6222C28FD5D32A89B6A2C9BBC72FD6F647A
SHA-256:	8D54148B53158E3D06FE5285AFF2C3E189390FE355B2EE400BAF8F1F5A0A819A
SHA-512:	B6CA495E1A0A55D00854F467BF88D87D86C149BFE285CE490F9BEFEA0D0EEA06B868F8B02880E30D2EFD779980554862F38DEF6992B2018701550AD90D13E1E2
Malicious:	false
Reputation:	low
Preview:	...........<Mo.Hv...2..q...m..o...]...gv.1..X...".d.n...bo.$@..r..,..{.....a~.$../..bQ.l..,..i.-.>_.z........2.!gY.J.d$...$r9....._.B<.Dy...n.!...l...K..v[=....2/......AW...'.,Qe.:.n]....u..Y.:.Q.f.5bi..gq...g._u>s<..f1....o...:}.....^:..X. .S.q......A./...0J......E..V.P....zy.O..a......j.3.....F.$O...a.O..~B.+~...^..0.....i/...$.0o..m.<gC..O....1.4..y6.9.s.q.....C`...+.. .?<y...:z...7.^.Nw.?..~..W.\|w\|....K..<.p.6....M..uw........C........`.7.ot..&...s9#..%Y.dA.QB5..B.t.g\.....).!.`...i9.y4H........I.\...e.J.8.%..y.m7.os.U.G..Ja....l..hw....mx.'y.3$.X+a..jg....)..8.G..(...;D.j.%..x..e.M..V...;.> .0.8.....g.p.....+.tn..~J?r..+.R..."....SL.\|...Y.....e.....f9....I..CRB.(.i..8.h.%..aX..#{=.n(..S...L.n.kV...1'.M.....^#OG.T...l.p...AZ....<V=A7....yB ....3.q......f..q<..c8.....A..H.v..J.^aR...b..F...z....@...<.z...LC.. .T..gnA.f..0.Q...iVr7.H....r]l...d..i.$@. [.jM..r.. @.nT6(h~Cs....8....A..i.A..JN..h..p.)...d(k.l.0..M}Z.}.gt..1.I.^...

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2016:05:31 14:22:58], baseline, precision 8, 1420x1082, components 3
Category:	dropped
Size (bytes):	184349
Entropy (8bit):	7.654662718598747
Encrypted:	false
SSDEEP:	3072:fPIylqoepCbCrGxh1a4I6a1/IPv6py5kb257kQDRgLu:HZqUa4Lncy5kbikQDD
MD5:	46A1D34448F0960DE251E1A3E2D9D815
SHA1:	55B9BD3C017B26FE84ACD7C770427F460FDF60F2
SHA-256:	4304BD1E6D0491E8AD4011441555DB518066ECCD8CD3157BDF448ABDA63FCC3B
SHA-512:	25C0A17810023A62AC6EE651D9BC78B76D8EC99274BF3F6871B2BECCE9D85383D8087F646B905C1B76AE9534C5EEB9E5D0E655152A0972CF226C7ABD4755B911
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2016:05:31 14:22:58......................................:...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..I$...e4..m.k.9$.V..a.....~,...tO.g..7....x..b6.....yh......[....Fq2$.kCL.r....j8......]g...g..K..Y...o.......m.t..N......,w......I...M........7........

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpkijf5vvx", last modified: Tue Sep 17 11:16:39 2024, max compression, original size modulo 2^32 5128
Category:	downloaded
Size (bytes):	2111
Entropy (8bit):	7.906743654914115
Encrypted:	false
SSDEEP:	48:XcHr4l7jJBKtLqLBZfPgCUKphtJiwgJjIklYCKBjR33S0:sHc5jzKtLIBZfrLodPKfS0
MD5:	5DDBD52E915AA0202DCB4058D613068F
SHA1:	731594B30F11A511C901EFB097FC621EEE4E0F02
SHA-256:	D038445DB649CA70900DE422361C52F12B2534EF179D62197102EF139ED99C98
SHA-512:	58E1473DB6FE050CCF6E3BBE5A47F2E203340E77DBFFCD0B76CA7EFFCA6420DB9BE4967F765A29E4E95BB18DC8E0292274FCA64E49EFB38ABF45D7D123218622
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/index-4d0d6d10.js
Preview:	.....e.f..tmpkijf5vvx..X{o.8...>.m......-.C.8...u..n[..%.m6...)?....c.I.`q-....p..y(\|.G..^........FQ.kE"`mE....!.....O......~P...R4..LQ.\-g..\.5x.............. Vd..GE..F....+..W.Y.+.=.W...W.........6.I..k.x...G~...C..<7....@.z.....-.4.2.....\.....k..SEVp..9h.:.]x..E.p...V.'2e......#q^..;~w.e.Z...3..4.C.........4...BV..Z>_..j,...I..=.%&...8`k.....>.p..d...b.......s.....al...hcf:.EK.....r.@k....9..!.4..u.._t.o....!<=c.0z...(.:M.P...G..5K.~....Ke...).$....=.Z..h..x....... 5..c.1..(Y.....;.m.Q....t........3.....~..^}+...xk.D...4..a...X..ty.N..3....Z.-.E.....b@k.....I./...xNi.p.....}....h...J.F.FK...9.0a.P..{.9..X...w}{.....O..zd.....HP.IX.o><x..$2V.a.g]m.o=>...bv.%..'Q2g.G!...&Q..-..W.1.CP'h.S(..;..:.#..E...u~..1....X..i.h....s....y...8&'..Q.P]X...@A.%.......:.~..b.2Z`./..cb+p4.,.t3..l&<.R.p............j.c.L..cY.B....{.......L_y..%.rC$0.Q.2..S.?'..^..6.1Y..].NS6.....i..y..&).....k.....N...Ow.).Z...F..i.....Rn..dr.i..$.*r99."s\|.^..'.~.).QL.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpl5u_ed55", last modified: Tue Sep 17 11:16:32 2024, max compression, original size modulo 2^32 567
Category:	dropped
Size (bytes):	318
Entropy (8bit):	7.302858438317619
Encrypted:	false
SSDEEP:	6:XJDUm4z/kBLRxGb35H0uCCXjzVQQmiq9RRudG+HLkAuzJfdZdp6zuUHQY2QVL6C:XJ2kBLR45HDTz3mX9RUcaQJfbr6zHHQu
MD5:	E46EF9182081D5B5A9DBDC1F0B20036D
SHA1:	1C5BD2868DEF0452591D89323DDC0EE1C4D5825C
SHA-256:	FDEDCB287B14EA8E85C9A10E400BA60857A90EB2ED40112365CA9102B1FF36CE
SHA-512:	897051ADC9767334CFBF0D3120AB2959303C238FF2EE2A0487E7242BD6970C2EB77D607641DEEF628F143A069BC2AA6F12F3C445D66BB1C597DD27D794082B3E
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmpl5u_ed55.u.Ao.0......S+E....&.v.4i..v7..Li<.i.A...BE%.d+...S.S...{.&........V...V#.CN.Yz...8.[Y..,....u.x..\.....}X...?j..v...........;..y....o...)J..~...!.,g.y&:..h\|.....d6n...6....=F.'...&.<"^.f..W........,.<..'.1..,....z~E..,....U.*....+.E.J....g.CMF'.H..}..h=.,.,....h..&.m.S.K5..?.1.7...

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	3.090787153125625
Encrypted:	false
SSDEEP:	192:jiHSINqv0tJ30DezSfPAXTZwC3D2N2xp1Fd/ar/+zi3LHZNwkQH0iWpXDt3TN8rB:jzAnP9j
MD5:	DEF00C11B1596DB4EFEE6A9FBE64FC27
SHA1:	BD298981E6D8D7E4FFA18ABCF687041F4246672D
SHA-256:	95C427FA3143B1896FAF42A6406686CE7602CB39052081BB32D12B51C9E047E4
SHA-512:	C056E95DBFA1AAB3A50DFF18C6D577DBFFEA72C93316FFC53B6B7AA41DCC7707A810D563894589A7305DE0B76610F88150B2034670DE368773B2B356F14AD30F
Malicious:	false
Reputation:	low
URL:	http://img.sedoparking.com/templates/logos/sedo_logo.png
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................@...@...@...........................@...A...A. .A. .A. .A...A. .A. .A...@.......................@...@...@...........................................................................@...@...@...............@...A...A.U.@...@...@..@..@..@..@..@...@...@...@..@..@..@..@...@.}.A.U.A. .@...........@...@...............................................................@...........@...A...@.j.@...@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@..@.}.A...........@...@...................................................@.......A. .@.}.@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...A.G.....@...@...........................................@.......A.U.@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 477 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68061
Entropy (8bit):	7.991826692964678
Encrypted:	true
SSDEEP:	1536:3xKkzKqx+cdA9KhAjMt4v7KnCkGaSNTOW7ou9jHRcB1WO:4kh/A4AjMtb93un7outuQO
MD5:	B125DC28311A0C2BBE52C81E2B448DD6
SHA1:	571E1CCCDC8514618AD14D2822C2B9D39AD50B75
SHA-256:	678F9D972EFD3371793E158BA103863F55B38A40A89067CD9D476717A4E86801
SHA-512:	DADD0DD9460DE525488C0C02900AEA17F1F903019215CD979215F23EBC335EF912F6A0BACFA544E31672A4B4E280974E6BE7D4775C109CE59352A8C3C2BCA58A
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/zkLxDsbw1hz2/d5634a838071888dbd2a.png
Preview:	.PNG........IHDR...............Ru....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:F9295479158111E8A9F9C70B84CCAA81" xmpMM:DocumentID="xmp.did:F929547A158111E8A9F9C70B84CCAA81"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F9295477158111E8A9F9C70B84CCAA81" stRef:documentID="xmp.did:F9295478158111E8A9F9C70B84CCAA81"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>j.....PIDATx..}..\U...No.[6.M.....@."% .X@..D..E..>..\|....C\|"...t...'......l.uvz...w.3;......0..;.{....?-I..e..

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8011), with no line terminators
Category:	dropped
Size (bytes):	8011
Entropy (8bit):	5.791487998163466
Encrypted:	false
SSDEEP:	192:7a/GGh/jd+ztJ1MwVLWu2+QnSbQb9HOTSIlIB4aQe4+K:qHSr1MwVLWzS05UIOze4+K
MD5:	234551F0A02897F21FF816E55ECD244C
SHA1:	4CDE35BDE606B20926B4C4C9C29014066DA1BCF7
SHA-256:	3143C17A8EC4140DE49AA33BC10CAFFEA7230842784E0D7A01079EBEFAEF58DA
SHA-512:	F075A0D93536BF6FB27EB774F21157FF6866C2CB3125CD6F6B5D34C4F78483C32537EF3121FEC4FA1AF12A205D6C56A1DF3389C15CB0DD931AB44C5704F0AEF5
Malicious:	false
Reputation:	low
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(V,f,g,l,m,n,x,y){V=b,function(c,d,U,B,C){for(U=b,B=c();!![];)try{if(C=parseInt(U(363))/1+parseInt(U(444))/2+parseInt(U(403))/3(-parseInt(U(396))/4)+-parseInt(U(419))/5+-parseInt(U(402))/6(parseInt(U(429))/7)+parseInt(U(352))/8(-parseInt(U(435))/9)+-parseInt(U(375))/10(-parseInt(U(452))/11),d===C)break;else B.push(B.shift())}catch(D){B.push(B.shift())}}(a,177763),f=this\|\|self,g=f[V(409)],l=function(a0,d,B,C){return a0=V,d=String[a0(365)],B={'h':function(D){return null==D?'':B.g(D,6,function(E,a1){return a1=b,a1(366)[a1(448)](E)})},'g':function(D,E,F,a2,G,H,I,J,K,L,M,N,O,P,Q,R,S,T){if(a2=a0,null==D)return'';for(H={},I={},J='',K=2,L=3,M=2,N=[],O=0,P=0,Q=0;Q<D[a2(416)];Q+=1)if(R=D[a2(448)](Q),Object[a2(355)][a2(381)][a2(393)](H,R)\|\|(H[R]=L++,I[R]=!0),S=J+R,Object[a2(355)][a2(381)][a2(393)](H,S))J=S;else{if(Object[a2(355)][a2(381)][a2(393)](I,J)){if(256>J[a2(357)](0)){for(G=0;G<M;O<<=1,E-1==P?(P=0,N[a2(425)](F(O)),O=0):P++,G++);for(T=J[a2(357)](0

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 12:02:22], progressive, precision 8, 1420x1082, components 3
Category:	dropped
Size (bytes):	47523
Entropy (8bit):	7.553550969005098
Encrypted:	false
SSDEEP:	768:76yIEPrdyIOE/Ne5ZxmEnbsELrhVzqb90rGef1pC+XF:mCpkpx9nbZ/hVzqbsda+XF
MD5:	2FE3D5FBCB0D85C72D064FC69D6414FA
SHA1:	CDB5F75E5341FEFD368F11FEC82D43F941DA518C
SHA-256:	0AC600398C7FF1A29828A0A0C2C77BBA481740D8A041BB748D478729166BE975
SHA-512:	42DA2613BE687CF38C87C9F8DE6E13CE9D450FADDF6754B533F7435A30D7A7FE21731BB3568165E433E3674560813FF9890EF9D5A8D309B01DA009B4AB8A6BCD
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....jExif..II*...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 12:02:22.....................................:...........................................&...(...............................4.......H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..../...n...V...e.!E.k..cy&9.kt+F...P.U.....`.<$.yq.Q.y...x.u.e..M..e`.V6.......)@.]...N.~%$.q1..u.#$.)..W..$.NX..L...I$.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 12:02:22], progressive, precision 8, 1420x1082, components 3
Category:	downloaded
Size (bytes):	47523
Entropy (8bit):	7.553550969005098
Encrypted:	false
SSDEEP:	768:76yIEPrdyIOE/Ne5ZxmEnbsELrhVzqb90rGef1pC+XF:mCpkpx9nbZ/hVzqbsda+XF
MD5:	2FE3D5FBCB0D85C72D064FC69D6414FA
SHA1:	CDB5F75E5341FEFD368F11FEC82D43F941DA518C
SHA-256:	0AC600398C7FF1A29828A0A0C2C77BBA481740D8A041BB748D478729166BE975
SHA-512:	42DA2613BE687CF38C87C9F8DE6E13CE9D450FADDF6754B533F7435A30D7A7FE21731BB3568165E433E3674560813FF9890EF9D5A8D309B01DA009B4AB8A6BCD
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Parking_einrichten.jpg
Preview:	......JFIF.....H.H.....jExif..II*...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 12:02:22.....................................:...........................................&...(...............................4.......H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..../...n...V...e.!E.k..cy&9.kt+F...P.U.....`.<$.yq.Q.y...x.u.e..M..e`.V6.......)@.]...N.~%$.q1..u.#$.)..W..$.NX..L...I$.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (12720)
Category:	downloaded
Size (bytes):	26070
Entropy (8bit):	5.471586608388086
Encrypted:	false
SSDEEP:	384:2ni0Zfaxi4UNsQ4M0CRCjQ2GRkakgvlkbfNzy9HIBwE:2i6ai4UNJVOQ2GRFVvl0fNW9HfE
MD5:	98FE08CEBF89062A24F2C3E26F7D0623
SHA1:	D3170DE19DE465CC4608779365714F4874371578
SHA-256:	D3A55FBAAADA5DB32011CD86548E11D91A89F0C7D23C1B0BD071C9CE4C739B37
SHA-512:	E8E4D19BD9E27395420D5B9006B2B50141EDD4BA4222C8FB095E1B292A0A8F114C7F780770D74D1C16A6F9C5F7E220FBF000DE4CF8E30A28566D6B24FAF3DB8A
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3D87e1bf0796c9fd42%3AT%3D1728255929%3ART%3D1728255929%3AS%3DALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.coritta.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjgyNTU5NTkmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Best%20Home%20Warranty%20for%20Hvac&afdt=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEmwBlLqpj1YJdz7AzpZcgeGyRhp5zMxp8n1DEmNsr7hGBcgg34MnxBeRt-c9OxWGMfyh27HvGtg4vi3Woi_41qZIfViSTrEkCjKcSnu5_x2fLueh1V508qjLQKWCgp2wXmyKbwgvH5qd2vVtgD8&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301542%2C17301266%2C72717107&format=n3&ad=n3&nocache=3771728262263033&num=0&output=afd_ads&domain_name=www.coritta.com&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1728262263035&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1227&frm=0&uio=-&cont=ab-default&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fwww.coritta.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%253D%26query%3DBest%2BHome%2BWarranty%2Bfor%2BHvac%26afdToken%3DChMI-fffhe_6iAMV4IH9Bx0b0DkAEmwBlLqpj1YJdz7AzpZcgeGyRhp5zMxp8n1DEmNsr7hGBcgg34MnxBeRt-c9OxWGMfyh27HvGtg4vi3Woi_41qZIfViSTrEkCjKcSnu5_x2fLueh1V508qjLQKWCgp2wXmyKbwgvH5qd2vVtgD8%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	4.72645217666044
Encrypted:	false
SSDEEP:	6:t6F3Ci9mc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6F3H9FPUPkHSt1UiT6i6jUs8b0I0C
MD5:	A6AD6E65373DB8C1B1F154C4C83F8CE5
SHA1:	84CC007D6D682C589E1E1F87482A5278830F3000
SHA-256:	920A378947204498C122722933B3A4B67788A2B6FADE8BD0D47CF830EEEE0563
SHA-512:	09B6D4711C284B1A04C9C4D874F3D1DDFC876C1491FB2AA283A13505BCDBFE90B02731D0B7AD5F492B1DDA2161A4AFE20040801EA634D2727CDE84319ADFB1D2
Malicious:	false
Reputation:	low
Preview:	<svg fill='#1967d2' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	3.090787153125625
Encrypted:	false
SSDEEP:	192:jiHSINqv0tJ30DezSfPAXTZwC3D2N2xp1Fd/ar/+zi3LHZNwkQH0iWpXDt3TN8rB:jzAnP9j
MD5:	DEF00C11B1596DB4EFEE6A9FBE64FC27
SHA1:	BD298981E6D8D7E4FFA18ABCF687041F4246672D
SHA-256:	95C427FA3143B1896FAF42A6406686CE7602CB39052081BB32D12B51C9E047E4
SHA-512:	C056E95DBFA1AAB3A50DFF18C6D577DBFFEA72C93316FFC53B6B7AA41DCC7707A810D563894589A7305DE0B76610F88150B2034670DE368773B2B356F14AD30F
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................@...@...@...........................@...A...A. .A. .A. .A...A. .A. .A...@.......................@...@...@...........................................................................@...@...@...............@...A...A.U.@...@...@..@..@..@..@..@...@...@...@..@..@..@..@...@.}.A.U.A. .@...........@...@...............................................................@...........@...A...@.j.@...@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@..@.}.A...........@...@...................................................@.......A. .@.}.@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...A.G.....@...@...........................................@.......A.U.@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	297066
Entropy (8bit):	4.43774922185931
Encrypted:	false
SSDEEP:	1536:JLG5JeiM0mlm2ZE4jE4AVsbVYKq5gXW7D+uZ8FAqL+8TzXY76wajXY76wa8M7lEZ:f1zw
MD5:	E19583E456E4848ED2C03362ADCF6011
SHA1:	EB6B7C724929B2F4BA48E5C7C2DD98D9D415454B
SHA-256:	7C2350D4A6C1F6E7DAD9912B315D2485A5E8B0AF90C4CEB2B9BCD575074A0F9C
SHA-512:	AB2ABAE54620A1AAFF7554F9C49FD71029EDED330E6AD4CBE0BA5BDB13D4955A0BC755A4655D218C9C10E446865BCDB8CE5E293A694778FE6DF5010BB46EDCCD
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0"?>. Icons from directory ""-->.<svg xmlns="http://www.w3.org/2000/svg" width="300" height="2925" viewBox="0 0 300 2925"><svg xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" id="br" height="225" width="300" version="1" y="0" x="0" viewBox="0 0 640 480"><g id="br-flag" stroke-width="1pt"><rect id="br-rect552" fill-rule="evenodd" height="480" width="640" y="0" x="0" fill="#229e45"/><g id="br-g3551" transform="matrix(.98110 0 0 .98110 64.633 -11.162)"><path id="br-path554" fill-rule="evenodd" fill="#f8e509" d="m261.72 455.71 307.29-199.44-309.15-199.98-308.3 200.46 310.16 198.96z"/><path id="br-path557" fill-rule="evenodd" fill="#2b49a3" transform="matrix(1.6911 0 0 1.7117 -100.3 -.71516)" d="m293.25 149.98c0 41.878-34.418 75.827-76.874 75.827-42.457 0-76.874-33.949-76.874-75.827s34.418-75.827 76.874-75.827c42.457 0 76.874 33.949 76.874 75.827z"/><g fill-rule="evenodd" fill="

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpkg97jlww", last modified: Tue Sep 17 11:16:38 2024, max compression, original size modulo 2^32 1740
Category:	downloaded
Size (bytes):	809
Entropy (8bit):	7.720303795641301
Encrypted:	false
SSDEEP:	24:XIWEXTA2oLo4HrPzCh07TfSkxp5crljJeYxn:XREXTAlLjHjOaakxbch
MD5:	22A4A3ABC5E97B864B21EDF7B8142D96
SHA1:	0E0522764E5AC8586F53E0A56F9696A65ED1E0D4
SHA-256:	E9ADA726EB1B3A8998A4F9FB6A6724ED1A1AB9CAB98E020D0AB4DD4C2F1B4295
SHA-512:	607E974C18A42E3362CB0E0E835AE146ACC5F2E83E8456585FBF12BE292F2650946801BCC11DCB60A5970809383844013E619593A580FC3A2F086049B114EF0B
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/index-3ff76a26.js
Preview:	.....e.f..tmpkg97jlww..Umo.H..._..C.Hs\R.r',NB.74~.!.NUe.a.7Y/..~...o..&q...g..yv<3..&.........4RXi...F....~..^k.p.......W......p....j,.G..:.....O&b.7.i\pj....(.2.,mJ.1....5..F.$.qN...H.?.....}.XC2.4G..a....8......}.....\|./....L......F...(....G.,xn...]..(.T......}...Jw.U..x...@\.Jj....X....J.....k..z@......w........z.-.2q.R..0c(rk.L:.'p.il.@.......QF..F...b.......5....,`.].......P..c&...n.$4..i...&.J..b>..-.G...mYD..or.....kx..9.mKi+~&..K../9m..[7S9..=1.\|E.!(."j.C.w.$3....z..75`D._..a.pc?.U...{p..x...Q.<.:.?......V...O.0.W.&lO......c...1..cR..,......$..~?....e..z.\|.z.i`..W.uW.X....(#..#M.8VF."...0(..\|.rXBuQ...@.\|..B..=P.......S7....j...\|^;GF.U..... \|[..-1O.z.zxM^.c..-...c/....9i=..T.mUmO.....e#....j....L^...ZG./T.g...T+.wU..O.j.C{..Vx#U...j5...Sw....&!f....

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65469)
Category:	downloaded
Size (bytes):	128582
Entropy (8bit):	5.285583929776152
Encrypted:	false
SSDEEP:	1536:rNZtf3ftRu6GTGkwGh+rVs+xsv2F7t835vk3CqDHEASBBmZJj/+L0S/dIG0ZqwaC:/tvfb+MZ8pvTb+JjGLqowajnCxn5
MD5:	E1D695FFAC0AF680A179A699A68B9893
SHA1:	A27500032B6DD1EA82054499BFA22063073CDC5A
SHA-256:	022C3D1C8A0C8FD5C46E82A58C269D6B501458186C23B13A6B6E1F3B52CCA0DD
SHA-512:	F13C7F98DF48EC3307E066FFDB6E02F7E3EECFFF0E27D6C3767F6CE877B3E8B81246CBA92EFFC5AD93412DACF086565ABC99BD09C64BA1249DB548FD8EF649C9
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/dist/js/typo3/app.min.js?1724922195
Preview:	/! For license information please see app.min.js.LICENSE.txt /.!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/dist/",n(n.s=9)}([function(e,t,n){"

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmphejarc7e", last modified: Tue Sep 17 11:16:32 2024, max compression, original size modulo 2^32 1513
Category:	downloaded
Size (bytes):	616
Entropy (8bit):	7.64751725155793
Encrypted:	false
SSDEEP:	12:XJQiwAirSYKl6SbehEMlKN9RkcNR4ZkwDlujUTbwwmUszJx0FGUE0sO3cJnLO/:XeiwTrSvZbeWMBcNRC/uoTkrdxht0qL+
MD5:	954CA4ED0665A91EEC3838F6217030AE
SHA1:	5A515CE38AEE45BE434A801D51BA0B10442B1C98
SHA-256:	C894B7A9CF6E2BF3E964E6EDAB92EFD9DBF82670954B4B28DEF5022D28689D35
SHA-512:	59EDEBE9D1D6300E5B84CF48FDF5C72C93D76DDE70DE5A65DDFC414631BF3BC34EB686AA8CF493E4D089EBE10E4C663D9C557B398ECAA65CF7BDCE5CF2E57644
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/SaveButton-c74cbe89.js
Preview:	.....e.f..tmphejarc7e.....0...}....$..,fQG4J.H..f.F.2...cl.K....!...vu..`~.O2.....-GH.(@/N.@.S..W..d.S.2.T..S...N-(.d..NU.S....2A.6.%.....7e.....N..S.".P.a.~44..w.w.w8.?.Rh3..#L..S..."...B..N.!B.QI......5..)9.e.D.w.&;.2.5L.e0."..`...iXT..y.....O?.q....fr..7..XG.....Q.y.TQc..!?..c...~..g{x..y...8...C.1-...#..q.....y....ddt..0.M}..9.....C.u...$.\*..-;...t..+.y.`C.a.z.O./&..I..wp.......ZZ.......An.j..sdA}....v.Ne/`W.=..;../{P..O.[+.X5.].h..39.."..:@..$T.]..t.t..i[u..l.n...#+.d.N.......p.T.!....j...D/...m. .aJ.ek..U.,k......+..37...h.=.F..k.....H.0.z.s.....V....)..+v....'...T.7....~.....

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29400)
Category:	dropped
Size (bytes):	29802
Entropy (8bit):	5.245806072418599
Encrypted:	false
SSDEEP:	768:/veaVfq2uGhc6eIRE2yNQ4iyHuqpp0L0pvj8vCwF3Cn:/5VfqpGvPqZWyNf0L0pvjWCwF32
MD5:	FCFF8644D2012C95B22B7A521DA0C2DD
SHA1:	6250E5B45FE3EA26E0F1B17C9AA576C9F5AFA5D3
SHA-256:	420514B11077554F1CBC0425327EA7301D930BDD5C01DDA9BE6FAF4FD1927D19
SHA-512:	4BC35067AF2BA6F3E345F447AF34125B88FEB54A71A6B090AF899A343F9A64E0C5729F6C1C302431DF74CE38A5632428F05640FE80E07FE843DFE342F72C35A3
Malicious:	false
Reputation:	low
Preview:	function r(n,t){for(var i=0;i<t.length;i++){var r=t[i];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(n,r.key,r)}}function Jt(n,t,i){t&&r(n.prototype,t),i&&r(n,i),Object.defineProperty(n,"prototype",{writable:!1})}./!. Splide.js. * Version : 4.1.4. * License : MIT. * Copyright: 2022 Naotoshi Fujita. */.var n,t;n=this,t=function(){"use strict";var v="(prefers-reduced-motion: reduce)",G=4,rn=5,r={CREATED:1,MOUNTED:2,IDLE:3,MOVING:G,SCROLLING:rn,DRAGGING:6,DESTROYED:7};function D(n){n.length=0}function o(n,t,i){return Array.prototype.slice.call(n,t,i)}function R(n){return n.bind.apply(n,[null].concat(o(arguments,1)))}function on(){}var p=setTimeout;function h(n){return requestAnimationFrame(n)}function u(n,t){return typeof t===n}function un(n){return!c(n)&&u("object",n)}var e=Array.isArray,x=R(u,"function"),C=R(u,"string"),en=R(u,"undefined");function c(n){return null===n}function m(n){try{return n instanceof(n.ownerDocument.default

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1520 x 500, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	537573
Entropy (8bit):	7.988877951560557
Encrypted:	false
SSDEEP:	12288:orYcqGIpRhLSLl0wrBVFH6aLHx7QZVemCG:xGIpRhMjrBVXHGV3CG
MD5:	2CA55CFD34932B173AFC0805F28AEACE
SHA1:	E8CEF798BF4B66E28ABD892F0303BF6458EFB43B
SHA-256:	83F14346B68DC3C90039B7331720DE1EDB570485320252332023EBFD0C4B4074
SHA-512:	7DD6274C9A8403A3D9CBBF9B62B00C5080C6DFDAE73E97DDD62DF0628453069DF5C12B54259CB1B1621C31B526596F9533F279390A05619F66533EABE2740BBE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............r..r....pHYs.................sRGB.........gAMA......a...3zIDATx...I.mK.&......{/"#..YDU...j. ..A@....p .......8.....@.4. ...e.........w......kYo.{.........9g....w.........$..D".H$..D".H$..D"....*$..D".H$..D".H$..D"....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$..D".....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$..D".....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$..D".....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87532
Entropy (8bit):	5.262415846264695
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7
MD5:	C9771CC3E90E18F5336EEDBD0FFFB2CF
SHA1:	6EE8AAA3AC1F4E0AE18717A3FD26892E9F0E4CC5
SHA-256:	3E7501D15C3630E791C8B20392EB9DEE31A9F65CE3EFDDE76CEF5C710141AB24
SHA-512:	C503341FA3A7176FD10BD8CD7A5717C8FAF971F87FA0C158F2D94FCD484AE3ED5031F49414DAE833FB806B7365B5699C21D2E655376F69ADB052B22F6F6982A7
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	25066
Entropy (8bit):	3.729531622434699
Encrypted:	false
SSDEEP:	384:NNQFuqx0sUTmVC557hGpcn6ZF04O3iNtCEkusgLPOcP1nHR4ZHx/B+spYPn+Hz5H:NqsqxEToCu8uF0lixLLWcRHyZp51
MD5:	F55C5F0057D84AA4EEEDAB2A8F4D558C
SHA1:	EDF55FA3D61D93E3EB7EB085F77890B752EBA049
SHA-256:	17CF6709088D4FF6D398CDE251F6394C88AB3CD1D2C3D1FFBE3357A6C54BDD2E
SHA-512:	B346380F6448BF2D3140BA49A71E58B03928F33BADBF29009EFBFF0E5DA0360F56FD53F36666AF56C26F74AF3240AB919E35AE108EA1088E4134F1DCA9F350F4
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/zkLxDsbw1hz2/b75b73e313804cf110ea.svg
Preview:	<svg width="250" height="65" viewBox="0 0 250 65" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M80.1996 37.4998H88.9245V0H80.1996V11.5749C79.1612 11.0678 78.0925 10.6253 76.9996 10.2499C75.7027 9.86294 74.3524 9.6857 72.9996 9.72494C71.3876 9.74368 69.7966 10.0925 68.3246 10.7499C66.8114 11.3824 65.4547 12.338 64.3496 13.5499C63.1559 14.8902 62.2232 16.4419 61.5997 18.1249C60.9097 20.0921 60.5712 22.1654 60.5997 24.2499C60.4075 27.9197 61.4553 31.5476 63.5746 34.5498C64.4907 35.7777 65.6893 36.7665 67.0689 37.4323C68.4485 38.0982 69.9684 38.4215 71.4996 38.3748C73.0443 38.4016 74.5775 38.1035 75.9996 37.4998C77.5082 36.771 78.9192 35.8555 80.1996 34.7748V37.4998ZM80.1996 16.7999V29.9998V30.1248C79.4812 30.6472 78.6892 31.06 77.8496 31.3498C77.047 31.6376 76.2021 31.7897 75.3496 31.7998C74.5255 31.8754 73.6954 31.7512 72.9295 31.4379C72.1636 31.1246 71.4844 30.6313 70.9496 29.9998C69.8787 28.2466 69.3969 26.1966 69.5746 24.1499C69.4535

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 12:02:59], progressive, precision 8, 1420x1082, components 3
Category:	dropped
Size (bytes):	52602
Entropy (8bit):	7.4287422947114035
Encrypted:	false
SSDEEP:	768:/E6FrL65El0Krcmskr6siDLYu0QjUoqiacJVFsX665/XeD7rr2ghN:RY5A0KIIWDLYuXUohVFsX661OWKN
MD5:	F65D136F378CD22EED47C416D1D8097E
SHA1:	F59C9C299939E28F77B1FCD42DF7609FC6C529CB
SHA-256:	DA5FE47C053D2DDF43B3D159330C30276F942E26934DA65242D449644414358E
SHA-512:	942E4D95C8D5F722E06F089E000DB8A754F4AB6D0775C522DBBFE778AC01C4FB25E6109114F95B7559BC066258D7170D4E901D52B2E73A8A070EC86147AEECC4
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H..... Exif..II*...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 12:02:59.....................................:...........................................&...(.......................................H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...I%}.RI$...I$.$..N5L...Z0..w>..~..@n....+.i.v........Gj_g.Zo..u.....!.[.?..+./b....I....LJ.. .&.......=.W...N....%.{.....

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	25066
Entropy (8bit):	3.729531622434699
Encrypted:	false
SSDEEP:	384:NNQFuqx0sUTmVC557hGpcn6ZF04O3iNtCEkusgLPOcP1nHR4ZHx/B+spYPn+Hz5H:NqsqxEToCu8uF0lixLLWcRHyZp51
MD5:	F55C5F0057D84AA4EEEDAB2A8F4D558C
SHA1:	EDF55FA3D61D93E3EB7EB085F77890B752EBA049
SHA-256:	17CF6709088D4FF6D398CDE251F6394C88AB3CD1D2C3D1FFBE3357A6C54BDD2E
SHA-512:	B346380F6448BF2D3140BA49A71E58B03928F33BADBF29009EFBFF0E5DA0360F56FD53F36666AF56C26F74AF3240AB919E35AE108EA1088E4134F1DCA9F350F4
Malicious:	false
Reputation:	low
Preview:	<svg width="250" height="65" viewBox="0 0 250 65" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M80.1996 37.4998H88.9245V0H80.1996V11.5749C79.1612 11.0678 78.0925 10.6253 76.9996 10.2499C75.7027 9.86294 74.3524 9.6857 72.9996 9.72494C71.3876 9.74368 69.7966 10.0925 68.3246 10.7499C66.8114 11.3824 65.4547 12.338 64.3496 13.5499C63.1559 14.8902 62.2232 16.4419 61.5997 18.1249C60.9097 20.0921 60.5712 22.1654 60.5997 24.2499C60.4075 27.9197 61.4553 31.5476 63.5746 34.5498C64.4907 35.7777 65.6893 36.7665 67.0689 37.4323C68.4485 38.0982 69.9684 38.4215 71.4996 38.3748C73.0443 38.4016 74.5775 38.1035 75.9996 37.4998C77.5082 36.771 78.9192 35.8555 80.1996 34.7748V37.4998ZM80.1996 16.7999V29.9998V30.1248C79.4812 30.6472 78.6892 31.06 77.8496 31.3498C77.047 31.6376 76.2021 31.7897 75.3496 31.7998C74.5255 31.8754 73.6954 31.7512 72.9295 31.4379C72.1636 31.1246 71.4844 30.6313 70.9496 29.9998C69.8787 28.2466 69.3969 26.1966 69.5746 24.1499C69.4535

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11400, version 1.3276
Category:	downloaded
Size (bytes):	11400
Entropy (8bit):	7.9806431346374405
Encrypted:	false
SSDEEP:	192:tk7ah2APGmFIFXjih0570McQvxVwON4EmgoIBXzs+BlHdt7zvVCXOIYSbL:+mrJF+Xjih0R08v7wo4EhdBXzllHdt7C
MD5:	00BFA19CECC3900646C108E4AC706488
SHA1:	C53D45529667D136551D190B3D0433C10317F6DA
SHA-256:	ADBBB1570F134E34309F6335B650F8704232D270F25624283A8B56EA48236E57
SHA-512:	6A7559C4257B647DDE6BE0A08EBD47EDE622F60DC179DAD2BF76DE0CC7644AF5B31B23E06293379D1EAD6DA256B5795332D1E28D6FD38FB67784AF3E1C0495AE
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/p9HJ4M2Uz7U4/a7d29342348138d42728.woff2
Preview:	wOF2......,.......c@..,/.........................@..p..`.`..f....L.f.6.$..D..d.. ..F..9..T....a.. .wRQTpF..?&P..v.t..WT..B!.u..l......m....u....N_=.c'...".u.........I.&......>.C"22S...!%...]C4gM.E5b.Q".G...Q.x.+.K.h....W..{...x{W....6....^h.b.f......(q.^..?..>.`.L6....h..v.%.w..F]HD..".>ky..7...`.S-.!$...^Q7...-+.,._...K[d..+...o.9.6s....Dwo...S......n@.J.+".. p.D.....5.N... ...Y.............jt@...`.../...h.'.5..C./H..+;4.#"...A.-..bET5.^GUsEIEu..o~6T..B...W..m.[..:....'d%..T.a.....B....B....d......E.P.T.JKF..P......d.I.!....x`..=..{.< ...;.........y.... .!...- H.4<{C`..a.c.d.....WAfF...72...$....i5..#.lrR.,...is..A7.`..m.(h....H{.z.v$....J..............fc[.s..._.l..!..,....MQ.G .K.N4...!`;...g...5...`..9..!^...kin....>S..u..L\|.$......vz......V.r.K.T...g:q\|x..3..=.E..*....1.G...w..u....a.....`.k~...-.E..>...I.....a......o.EVq..z.....)....O#......H.`2....sZ...R..n.=.3.eN...y.T....E..q...,...y.}.r..F.3.S.F.U.....M.6R;..J.....s..65...]8b.....

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 413 x 594, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13502
Entropy (8bit):	7.912202553387551
Encrypted:	false
SSDEEP:	384:/mKXXNN5Jr7k18sA6pXsox1amFbraxPpkJ:euNN3r7SJZRGmgxPC
MD5:	107694EE1E94990D97B7E58651FFD6A0
SHA1:	7DD9AE7BADF78BE01EA0623DF1E90171348716FF
SHA-256:	7AA2A3E9A9575A27F5593C3B0357423128C468A46ED20D284CE5A21555EE67BC
SHA-512:	5D695545E1516D28CA05933C88AEC08CA324A61804BD662102A1EEB7A515BA543343AD24FDA53ABA329AE803F622664B29D5A3461BCCBD264EC8950E8CA51002
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......R........^....pHYs.................sRGB.........gAMA......a...4SIDATx....\.y........F.U.b.U....A...#V.......J..?....w..UD&.A...P&.....Q...#..qA.d\.E[...Y.....'...;....{.......+_....<.y.9.k.o.-J..%.C)I3..7o..e..........0....f.<.6/J...&.}.S..n.%...1........'........'X..+...4Z..;JTf.JV........)S-e.'Z.dO...y.'....a{mM.C...r...1.V.....L.K..@...:...H..N^.}..ex....N...\/k..l..P....\...j..:vr........_.3..n...!..n.?t....8.pNX...5.Dwd....8...`iB..Q=...L.:...`.b...L+Ne.....7tF.....V..x..S.e{.....:.....H..........]...!..`6.........ooqN......i......x.N.h......z1...%....T?.V.lD..+Bg9zZ..NB...D..-.U[%...~../..D.J......?..F.)5................J....k.I...W....5..ns.....^..%!o.}..g/.~.....<@......8.J'....T?.\E......X..........\|.vS.`....hY."....`.h..}?...J'^..y...7[....@.tP..5.ZQ....5...F.`,......&.&.6.....`VT:.T3.......A.`jy.....7.....z.0.*.T.p.7.G tP).........S...tP76..8@.`a........C.`.L;W).....~......t...Y."A...<.f!_... T

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7457
Entropy (8bit):	5.34297521532081
Encrypted:	false
SSDEEP:	192:7iDQ7e1rjU7t+K4K8caBIsKcML42CRNcookG2SXTTev5:7roKlX3eSXTTeR
MD5:	E1FBAB4A7A2F1F4DB9C23112004E958A
SHA1:	DFC4F8DBFDFC8E3AFF41881145D7BABD2C914B9B
SHA-256:	293C213205CD107EC18A50AE1F8A7B79915117D162CC58701A575DEF7C295D39
SHA-512:	D97D5F13D61BDAB589DE2734DA87D603C3C8540D3EB2C9D8A98DA56093DA2E9CAFEFF55997335946F8A15AA5C26367D34AAC11ED3626D7998E0EFB704AB993E3
Malicious:	false
Reputation:	low
Preview:	{"labels":{"ALL":"All","BACK":"Back","CID_TITLE":"ID to request consent data","CNIL_DENY_LINK_TEXT":"Continue without accepting","COOKIE_REFRESH":"Cookie refresh","COOKIE_STORAGE":"Cookie storage","DETAILS":"Details","LANGUAGE_TOOLTIP":"Changes occur immediately after selection.","MOBILE_TCF_MAX_STORAGE_DURATION_TEXT":"The choices you make regarding the purposes and entities listed are saved in the local storage","MOBILE_TCF_MAX_STORAGE_DURATION_TITLE":"CMP Maximum Storage Duration","SUB_SERVICE":"Subservice","SUB_SERVICES":"Subservices","SUB_SERVICES_DESCRIPTION":"Below you can find all the services that are subordinate to this service. The current consent status of this service applies to all subservices.","THIRD_COUNTRY_TRANSFER":"Data Transfer to Third Countries","VENDORS_OUTSIDE_EU":"This vendor is transferring data outside the EU / EEA.","WEB_TCF_MAX_STORAGE_DURATION_TEXT":"The choices you make regarding the purposes and entities listed are saved in the local storage","WEB_TCF_MA

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp55kknrum", last modified: Tue Sep 17 11:16:40 2024, max compression, original size modulo 2^32 450160
Category:	dropped
Size (bytes):	120986
Entropy (8bit):	7.99779152335096
Encrypted:	true
SSDEEP:	3072:qRGJgz6bNgd3sl+bB1MA5Pj6uv5HqHpxTKa7tzzufQO1vIy68Mgkpx:qL2bkcQbfJVtktJufQ8wy6ykP
MD5:	2B99A4D62A7128947770E032AD56F377
SHA1:	47B1A12A8069445B647B73FAFF175079969A97EC
SHA-256:	F8AA8AC514D45C9AA9159FC1C8A8F4A23D5CD3F25001E617F792401E2630302B
SHA-512:	D5B4407A2E636EFAE9A98CAF8AE4CB7E70DE87392451DEC6FC9245DCAF2A917659B3FA229014B6D904F7C8608AE0D30234F23A888D684429A5D9FC427A80BD54
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmp55kknrum.....6.(.Ud..^....I.]).V..D._k..CW..%.b#...q-..~g.....N6.s../.I.....`0....I......_&.....0.E....y.r..E.G..u<Y..I ...;u....8.oT....7..F..h....w/.......b.G.......aN..".j.....o5..x.F..8.RQK......,.D(....w......=.\.4.{.C.u\|.]o...C..u...a.].X...YQlU.x...U....\|..=..:.)a....,.p.....}]...u..j.....x.......+..L..........#.G....&H.I8...cc=dA..W.;..k...8.....7.Q%<.JV.0@Q..'.g..<.G<I....S.;.........D..Q.....P.co..fq0.Rk.#....i...z0..h.......Ri.....X.0@....4.>...4j.........'..w}..RY...`...I.2.......P.".J..\b.0.m.......3.].XT./.)vzv..x+MM+..........U.\.....GWb...dOB?Z.f...1..-..q.jF..k...7...W....L.\|..,...H4..a.R.&.2....r@ {.(4.kXmZ.....a?..c'4.y.`..H..+\|S%.X.. ..Q91U.l.8...._.....s..xS...HJ...$......!R.M.Nj;...i:...`6.Z.K...,f0[.U.&...).I\|[..y.ir.:...U].z..S..js..&.-x..x..!.0.r..........'.`c.-.9..,..9(..&Z.!K..../.\...=5...lv46v.p...ja.o.P....~0k.C...0..[...E..cj....%..K...Y3K....L<....f.."Fd.Aj...[...M. ...E.,T.@L......

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	151
Entropy (8bit):	3.837002606073176
Encrypted:	false
SSDEEP:	3:YJELTrzaEIGWpHBAHJDLRHZFM9pz8JHABMREHJxr/4ALpHBAHJDLRHZFM9pzO:YQTiE32AHJTi8JERHdAHJTiO
MD5:	E9CD67A12859A172B0E44A712D57D56E
SHA1:	C710B9581CE5B3599FC267660F119AC78D486C4F
SHA-256:	1325830F2CAADAC80119B837399252F3A70353B6D73FA725AAC4E58ED73EE499
SHA-512:	A83C1E311FF01FAB116396F6ACAC026CD273079D1785E53DB5780F03B64C18A81E605AD37630DF2941A2B6CA6B86624DB0BC372F1B2380D2B95271E50280189F
Malicious:	false
Reputation:	low
URL:	https://api.usercentrics.eu/settings/5QJe3R54G/latest/languages.json
Preview:	{"languagesAvailable":["en","de","fr","pt","es","zh","it","nl","ko","pl"],"editableLanguages":["en","de","fr","pt","es","zh","it","nl","ko","pl","ru"]}

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://sedo.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	543
Entropy (8bit):	4.199353192354715
Encrypted:	false
SSDEEP:	12:yQHSz5Rd7OTR0VyAX9SxSyrtZDRWtYyNnULcHByI:7a5RdSRvAUlrtJRWyySLYByI
MD5:	4C6258062633129D69AECCE4F0023D9C
SHA1:	C985E54A808E6FB1B69B949ACADC054AE39629DB
SHA-256:	728AEC7E6742CF7D5C0894860C9D2DFB2C9AED8A8FF6ED399094AB782341762E
SHA-512:	E593EDB63A8D7D2CDFBFA87669C1768A2A357F5A6A45778AEAB4188D66A364286BA10533E2FB2FB715F1630AA73AA2AD75504385D25DC4B759861046511F232D
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/typo3temp/assets/js/4c6258062633129d69aecce4f0023d9c.js?1718178726
Preview:	$(function(){. $( ".ce-accordion" ).accordion({. collapsible: true,. animate: false,. icons: false,. collapsible: true,. active: false,. heightStyle: 'content'. });. });.. // init sliders. document.addEventListener( 'DOMContentLoaded', function() {. var elms = document.getElementsByClassName( 'splide' );. for ( var i = 0; i < elms.length; i++ ) {. new Splide( elms[i], {. arrows: false. }).mount();. }. });

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	610
Entropy (8bit):	5.4559097885945365
Encrypted:	false
SSDEEP:	12:TMHdPhRi/nzVV/KYf3nS31PHEX7aPjW2e/bKI0C2UbKt9:2dzAjLf3S5kX72ObKbhU2
MD5:	950A5568A5DC7D9B5C1C8E33C9686077
SHA1:	4AC8BE7FA70589332CA25BC6CEA1263CA54306E0
SHA-256:	0D8EEC0DF98211FA752EBE83512BFD9027B3423FEFB1F116D062B58233B88C50
SHA-512:	380236D6F03ACFF1215F6159479F428BEB1F8904A6CD5F5FB6D19098A2BFC08EA0E9770B158B732A7BF669CA592DC56A2F35F681FCE173386A40F1A98C9CDD8C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 79.5 79.5" style="enable-background:new 0 0 79.5 79.5;" xml:space="preserve">.<style type="text/css">...st0{fill:#C7AC9A;}.</style>.<g>..<path class="st0" d="M39.8,0C17.8,0,0,17.8,0,39.8s17.8,39.8,39.8,39.8s39.8-17.8,39.8-39.8C79.5,17.8,61.7,0,39.8,0z M34.1,58.5...L15.4,39.8l7.5-7.5l11.2,11.2L56.6,21l7.5,7.5L34.1,58.5z"/>.</g>.</svg>.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4696)
Category:	downloaded
Size (bytes):	7555
Entropy (8bit):	5.352986407699594
Encrypted:	false
SSDEEP:	96:n200TXAOFr6W0oEujWwmZuzUl3y2bJlNNhVfkGOinwWrb5FKolU0y3g1aNlWrrzI:lgR2pumuSpbJbNhVfHXRT2QyWrrthFCF
MD5:	EBABDE677604270643EDD01458C4F10F
SHA1:	100D84FD2175AAABF534A9F5A2C1B497C5E261A9
SHA-256:	C8A3188726D12E2E6A8C84B1534456425C2704BF7D87CABDB838CFAB76CB157D
SHA-512:	E9949F8FA5748BD9FEF096321A28E2121A5E4F92914E435B84BDD1E4A143A84F280CFB3B6F67725F066C3B4E97305838396DF1CD88ABD5B5A3CFA3A8F568EC31
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/TfcP3WYRyZ9A/cookie-banner.min.js
Preview:	!function(){"use strict";var e={"./src/CookieBanner.js":./!***************************!\. !* ./src/CookieBanner.js !. \***************************/function(e,t,n){n.r(t);var a=n(/! ./utils/CookieHandler /"./src/utils/CookieHandler.js"),i=n(/! ./utils/helpers /"./src/utils/helpers.js"),r=n(/! ./utils/Template */"./src/utils/Template.js");t.default=class{constructor(e,t){this.gtmId=e,this.lang=t,this.cookieHandler=new a.default(window.document),this.template=new r.default(this.lang),this.banner=this.template.createBanner(),this.template.addTemplateToBody(),this.externalScriptsHandler()}externalScriptsHandler(){const e=`window.dataLayer = window.dataLayer \|\| [];\n (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':\n new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],\n j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=\n 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);\

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	214519
Entropy (8bit):	5.906193140023946
Encrypted:	false
SSDEEP:	1536:cHGBkY+5UPEKaTV3Xv5H3nvNj8FBw1H7V8HHYAfuq0ciAIR4MJT0cKgrjgXrjETq:cv/xwBcyH/fuq0N6fcSbhgyTbDQ5W
MD5:	4D34395F5FC4601249FC0ADD1149B75B
SHA1:	525379A580FE74AD70FD218FFFC1E57289B931AA
SHA-256:	7738C8373A5B87AA8281BDC4960DE5026717881C83DF2666093718CA5AFFA444
SHA-512:	E1944C2C7B56777B4D4837ECE50F023919E7E7ECD296B8555E719BEDFC46E179987AEF67FF5E662F72DC98EAC6B0DE513C31A889EC49E1F2D3275EADAD568EF5
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/c7r/assets/static/dist/js/deprecated/typescript/static/app.min.js
Preview:	(()=>{var __webpack_modules__={1424:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{"use strict";eval("__webpack_require__.r(__webpack_exports__);\n/* harmony export / __webpack_require__.d(__webpack_exports__, {\n/ harmony export / \"default\": () => (__WEBPACK_DEFAULT_EXPORT__)\n/ harmony export / });\n/ harmony import / var _helpers_GTMHelper__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(9796);\n/ harmony import / var _helpers_GTMHelper__WEBPACK_IMPORTED_MODULE_0___default = /#__PURE__/__webpack_require__.n(_helpers_GTMHelper__WEBPACK_IMPORTED_MODULE_0__);\n/ harmony import / var _helpers_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(1052);\n/ harmony import / var _helpers_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1___default = /#__PURE__/__webpack_require__.n(_helpers_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1__);\n/ harmony import / var _helpers_Debounce__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(6652);\n/ har

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	25066
Entropy (8bit):	3.729531622434699
Encrypted:	false
SSDEEP:	384:NNQFuqx0sUTmVC557hGpcn6ZF04O3iNtCEkusgLPOcP1nHR4ZHx/B+spYPn+Hz5H:NqsqxEToCu8uF0lixLLWcRHyZp51
MD5:	F55C5F0057D84AA4EEEDAB2A8F4D558C
SHA1:	EDF55FA3D61D93E3EB7EB085F77890B752EBA049
SHA-256:	17CF6709088D4FF6D398CDE251F6394C88AB3CD1D2C3D1FFBE3357A6C54BDD2E
SHA-512:	B346380F6448BF2D3140BA49A71E58B03928F33BADBF29009EFBFF0E5DA0360F56FD53F36666AF56C26F74AF3240AB919E35AE108EA1088E4134F1DCA9F350F4
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/p9HJ4M2Uz7U4/b75b73e313804cf110ea.svg
Preview:	<svg width="250" height="65" viewBox="0 0 250 65" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M80.1996 37.4998H88.9245V0H80.1996V11.5749C79.1612 11.0678 78.0925 10.6253 76.9996 10.2499C75.7027 9.86294 74.3524 9.6857 72.9996 9.72494C71.3876 9.74368 69.7966 10.0925 68.3246 10.7499C66.8114 11.3824 65.4547 12.338 64.3496 13.5499C63.1559 14.8902 62.2232 16.4419 61.5997 18.1249C60.9097 20.0921 60.5712 22.1654 60.5997 24.2499C60.4075 27.9197 61.4553 31.5476 63.5746 34.5498C64.4907 35.7777 65.6893 36.7665 67.0689 37.4323C68.4485 38.0982 69.9684 38.4215 71.4996 38.3748C73.0443 38.4016 74.5775 38.1035 75.9996 37.4998C77.5082 36.771 78.9192 35.8555 80.1996 34.7748V37.4998ZM80.1996 16.7999V29.9998V30.1248C79.4812 30.6472 78.6892 31.06 77.8496 31.3498C77.047 31.6376 76.2021 31.7897 75.3496 31.7998C74.5255 31.8754 73.6954 31.7512 72.9295 31.4379C72.1636 31.1246 71.4844 30.6313 70.9496 29.9998C69.8787 28.2466 69.3969 26.1966 69.5746 24.1499C69.4535

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153123
Entropy (8bit):	5.5401520772555415
Encrypted:	false
SSDEEP:	1536:JSG6arvU/wAQWPyXpKHhitCnAyYHLaUbxijIHWvxDZz7/wurgsjWbcbWgQWZpVqk:sH1YrCIHWpDB74u7RzqNYPCfaQBZwK0j
MD5:	5D456342C4E7871B227A5F2CF9085E0D
SHA1:	1AB2EA688236C11E26D3667B93556109058143BF
SHA-256:	BD1FC79709E6D9400989E10645C953E7A1487EA4C32D44BA488428E4CE3A7FA9
SHA-512:	76BEBD9B8AD208751E0347971BA024585E45373BE10591DB60915BB31D864863D13D6DF77CC0AE522CA03EF904E531D4549EE15C5377B8674E3E37ED0795DA5B
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":10,"afs_gpp_api":0}}};var n;function aa(a){var b=0;return funct

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 24134
Category:	downloaded
Size (bytes):	7514
Entropy (8bit):	7.972817339817039
Encrypted:	false
SSDEEP:	192:xu+tUmw+Xl4veocBfqyrPEuB+59F1oeIjjY:cjcKvPcBfqyrD+b1
MD5:	149F8B397FE711244EF204823190CB86
SHA1:	1AE7A6222C28FD5D32A89B6A2C9BBC72FD6F647A
SHA-256:	8D54148B53158E3D06FE5285AFF2C3E189390FE355B2EE400BAF8F1F5A0A819A
SHA-512:	B6CA495E1A0A55D00854F467BF88D87D86C149BFE285CE490F9BEFEA0D0EEA06B868F8B02880E30D2EFD779980554862F38DEF6992B2018701550AD90D13E1E2
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
Preview:	...........<Mo.Hv...2..q...m..o...]...gv.1..X...".d.n...bo.$@..r..,..{.....a~.$../..bQ.l..,..i.-.>_.z........2.!gY.J.d$...$r9....._.B<.Dy...n.!...l...K..v[=....2/......AW...'.,Qe.:.n]....u..Y.:.Q.f.5bi..gq...g._u>s<..f1....o...:}.....^:..X. .S.q......A./...0J......E..V.P....zy.O..a......j.3.....F.$O...a.O..~B.+~...^..0.....i/...$.0o..m.<gC..O....1.4..y6.9.s.q.....C`...+.. .?<y...:z...7.^.Nw.?..~..W.\|w\|....K..<.p.6....M..uw........C........`.7.ot..&...s9#..%Y.dA.QB5..B.t.g\.....).!.`...i9.y4H........I.\...e.J.8.%..y.m7.os.U.G..Ja....l..hw....mx.'y.3$.X+a..jg....)..8.G..(...;D.j.%..x..e.M..V...;.> .0.8.....g.p.....+.tn..~J?r..+.R..."....SL.\|...Y.....e.....f9....I..CRB.(.i..8.h.%..aX..#{=.n(..S...L.n.kV...1'.M.....^#OG.T...l.p...AZ....<V=A7....yB ....3.q......f..q<..c8.....A..H.v..J.^aR...b..F...z....@...<.z...LC.. .T..gnA.f..0.Q...iVr7.H....r]l...d..i.$@. [.jM..r.. @.nT6(h~Cs....8....A..i.A..JN..h..p.)...d(k.l.0..M}Z.}.gt..1.I.^...

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp5ay73b4h", last modified: Tue Sep 17 11:17:07 2024, max compression, original size modulo 2^32 33954
Category:	dropped
Size (bytes):	8553
Entropy (8bit):	7.972892727864916
Encrypted:	false
SSDEEP:	192:SBnfOnCZlLsSg0SM61d0L0jcwdBvmPMM9/caIoc:Sp8SS7BThgwdBeZ/re
MD5:	DA6FD8696488229B01EE683C868A69D4
SHA1:	D04F9AADAC0EA4981B4B0C5825A28A21D41461C0
SHA-256:	2BBE9507295BA99051EE3ACEF34C0B36D5CADC6946614EEF45445F8D6DF33F3A
SHA-512:	C8D1447E683AD4D4935D8B80844591F6657FDCC178CAAEAAE66A286E7D260E13DC879CEC3DE61F073C84FB99ECE9E2F1DEAE193B2817FCCE38BF5ABFD75908BE
Malicious:	false
Reputation:	low
Preview:	....3e.f..tmp5ay73b4h..=iW.H...W..>Jj...S .\.W5.\.......,.m5..VJP4x..F.!.\|a05;og..SyDFDFdD...4..?...^O).h..^....F...=.b$..Fc.J...1.c..q..R....<..<j~rtw4n.n7 =..o...:g......V...a..l7..;.I.$.E...#.K\|<:m...T..w..5.;g_[?;z7...On...w$>K..37NO..O.. .!..E.m..$>..$.....a....>.~....z.Q......Tu..._.O G.H.E.z.~.25.v.O?5....Q.`...3...'_..@j..........p..[.F+... 1.A......f.y....P.p.[..O.O........{..;.o^\..N........ L..7$...R......M.V..8........c.M...V;.]D'....`I...4y....b.%.P:....h..........$^_../g.\..\..Z..'..\|. ...M..Q.h~.\|.J.vZ.o.r..0 ...-..#=1.'....{...H.{R.5U.CG...$wc.........:e.........(..I&.<.....#%.kP.....d..2\..Q.a...........=..C..`.D]7.......y9o...........37.%A.s...,..L .N.PP2P.......Kr.JC...gq4&qrW.. 0..CMn.$.Y#%.....8....(N.}?.....r.1q.'9V....~.H..)...8.?}...{.....ZjM.$,...eY..pl.G.lT.(..F....$.`l%....".....M..9,.=....$...u.Hb..s.......2!`I..3....A.035...AJl.........7...mT8.I.\|.6..ds. N......D6.....G.P(....(`y...1/&nB.0...A....

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp0yrdjd2n", last modified: Tue Sep 17 11:16:31 2024, max compression, original size modulo 2^32 1728
Category:	downloaded
Size (bytes):	755
Entropy (8bit):	7.775474941492504
Encrypted:	false
SSDEEP:	12:X2jC8DoYO/DMdBMlSAll4D7sOVuU8DSu2TNHfq1WOK1T55jHobgf0hjdAd7W7hn:X2ugHO/DMdBMdll4uDSu2RHSLwzOP8Oh
MD5:	B0B7CF1233C893469CAF7CBF3145560E
SHA1:	D22FF70EF795B5ABF97B488E01C64CB0141A5B55
SHA-256:	FE11978FB303E3DE23F1F5904653DDDCB3EC6899FDD6BD90250249C69AB277C9
SHA-512:	ED5C49BF050574F2B3F1341DD1B68C50ABCE875982B16FFCBEBAC3486CCF750E881A74A2477A0FB06DA629DF6C41E361FD26A5E2B9FB6FBA3A36026E5A78BD79
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/DefaultUI-efcc91c9-fa5e06dd.js
Preview:	.....e.f..tmp0yrdjd2n..U]o.0.}.H..H.K.$J..O..m.%........%..!$.Z4.bs....c;$.2..i........L.........9....1.,5./.".j..e....cB.2.......T.......LH..?P.F{..q0..{}.F#.6..:z.I.h..G.c....!...w...u.....5.............~4..{......_..w"7.h.......Nd........x ..+c"&....&....F...CcS7..f...e.i'.../.......NbF.U.D9..cg...w.YF.%.;.$&..u]3w.Y.-g.u.Nj..........3IggF......p:4, .\|...!EQ..:.Fqi..T?.u...W....n...>..toZ...a.o`.k_\...........beg.P%V.0._.Zg'j......1A....L...-\|......r.(~.A..[%.EQ....D.......P.P...P.4.`..8..d...^......>..]m]p.ElG-...X.....'....F.o.NW.\|.;...?a!....O.'.V...R....QL..1P'.@.^ne9..1.>?/....U....m..T..X..M`.b<.Re.kR..z.5i....m.S.Zc..@y....0...%.[...UX...M...-W..,@.r..\|..Q...?..FlF.Z :..w._.....B8.Y"..O..@.......

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4210
Entropy (8bit):	7.930002383326811
Encrypted:	false
SSDEEP:	96:zllcHitlIxv9vk7C1+I4wWHLihk/xVUYyuFbA9VDo:gIIHUCD4warUYyc03k
MD5:	1867771ADD1D5DBB17BD1AB7469C7FFF
SHA1:	8DFB8D9245D4ABBD0174B28D66422B2E211A6329
SHA-256:	8343010321A203AA9285287D0D107B0255EFAD786F6BC2E4D675652EFD828633
SHA-512:	76E269C9BC966301FE22359D4E6BEBE17FD0310E996E3DC2AD09ACE0470160B583E626B6EB22730F150A035714CA9BA26D4481D80CF1EE4853232ABDF134C7B5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6N...CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	27346
Entropy (8bit):	4.931460709222008
Encrypted:	false
SSDEEP:	384:BbLwi6HkwBb9O9lxKwhtUjP4qhqa3TnAGnZ6g4ASe6Rs4mRkz3R54W2:BbUVHkwBb9O9ls/74qhX3TbUUnLoR5W
MD5:	DDC1A1F070CF0B6118CDE45749359A22
SHA1:	4C854109540F768F794D8675A98CCFCD1499CBB6
SHA-256:	325088F998FAC12A93057677B52799897639E9E003D50837BEA26A5790D2A58C
SHA-512:	81BB263C1C23E67A9EA164A283664E351AD2663FAD77D82B4964F5163A4AEA333A67CA9A2BDDD354776E0CFF1824895F8D8DF99635DD2BD2BE6F1C64516FE943
Malicious:	false
Reputation:	low
URL:	https://api.usercentrics.eu/settings/5QJe3R54G/latest/en.json
Preview:	{"settingsId":"5QJe3R54G","version":"31.17.158","isLatest":true,"buttonDisplayLocation":"bl","moreInfoButtonUrl":"","actionClickOnViewConsentInSearchApp":"","layout":1,"privacyModal":1,"urlConsentInfo":"","stylesCss":"","buttonPrivacyOpenIcon":"","buttonPrivacyCloseIcon":"","buttonPrivacyOpenIconUrl":"https://img.usercentrics.eu/misc/icon-fingerprint.svg","bannerMobileDescription":"","consentSharingIFrameUrl":"","bannerMobileDescriptionIsActive":false,"controllerIdCookie":"","chipDisplayLocation":"rm","privacyButtonIsVisible":false,"chipIsVisible":false,"disableScriptIfBot":false,"consentSharingIFrameIsCustomUrl":false,"consentSharingIFrameIsActive":true,"iabConsentIsActive":false,"resetConsentsOnShowingInitialView":false,"btnMoreInfoIsVisible":true,"isVisibleInIframe":true,"btnDenyIsVisible":true,"showLanguageDropdown":true,"enablePoweredBy":false,"storeUserCounter":false,"useConsentCookie":true,"tagLoggerIsActive":true,"storeConsents":true,"optInCountdownVisible":false,"optInCountdow

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4696)
Category:	dropped
Size (bytes):	7555
Entropy (8bit):	5.352986407699594
Encrypted:	false
SSDEEP:	96:n200TXAOFr6W0oEujWwmZuzUl3y2bJlNNhVfkGOinwWrb5FKolU0y3g1aNlWrrzI:lgR2pumuSpbJbNhVfHXRT2QyWrrthFCF
MD5:	EBABDE677604270643EDD01458C4F10F
SHA1:	100D84FD2175AAABF534A9F5A2C1B497C5E261A9
SHA-256:	C8A3188726D12E2E6A8C84B1534456425C2704BF7D87CABDB838CFAB76CB157D
SHA-512:	E9949F8FA5748BD9FEF096321A28E2121A5E4F92914E435B84BDD1E4A143A84F280CFB3B6F67725F066C3B4E97305838396DF1CD88ABD5B5A3CFA3A8F568EC31
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var e={"./src/CookieBanner.js":./!***************************!\. !* ./src/CookieBanner.js !. \***************************/function(e,t,n){n.r(t);var a=n(/! ./utils/CookieHandler /"./src/utils/CookieHandler.js"),i=n(/! ./utils/helpers /"./src/utils/helpers.js"),r=n(/! ./utils/Template */"./src/utils/Template.js");t.default=class{constructor(e,t){this.gtmId=e,this.lang=t,this.cookieHandler=new a.default(window.document),this.template=new r.default(this.lang),this.banner=this.template.createBanner(),this.template.addTemplateToBody(),this.externalScriptsHandler()}externalScriptsHandler(){const e=`window.dataLayer = window.dataLayer \|\| [];\n (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':\n new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],\n j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=\n 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);\

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp_cgccsit", last modified: Tue Sep 17 11:16:33 2024, max compression, original size modulo 2^32 1270
Category:	dropped
Size (bytes):	687
Entropy (8bit):	7.681964112643804
Encrypted:	false
SSDEEP:	12:XFnlsvP8Gagyl4M43aPTyLAsMHPzkgYF1SAKy0YxojBlfBKwn:XFn638xgy+M43a7y9MHPYfFMy06ABlfp
MD5:	E4C20E66800385031ECA3E76F11D9A33
SHA1:	5955E24E438BCDC0D9342C40393F7FE897BFF32F
SHA-256:	AEE18B7A861A520930DF1435A8C81368504DCC3135ED1BC16C4DAC94838448AA
SHA-512:	F9BD85D721972B3E0CDA7A5AAAA60A5FCD72F4E466AD2299C16CDFEBE10B0FFFBD20497495C8B6658537730B81B17F98AC446083B0E5D60FFE63D0D5ED296FA1
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmp_cgccsit.mT]o.0.}.p..l5..>...a..J..N.D3.$.p..}]...}.@.~HQ...\.{.iZ.q]1..f..N?v3..j`l./.qU.A=.>~..\|.m..Y!../....J....m..Us.n%...FOX.z..W-$.....G.V.w.%..=..U$3..\.......Y.{......z........6..m.yeu..........4...t8..&.i..P.u. ..#...,..0z.<..D..]....\......S.G.q...v.].&.-3.k./.u.wqZ....F.)..0.I.mFng.I.....I......e6qE.vZ..m.r...n.!..7n>.......d_.Un.tU]?..7& X..Oa.<D[;].L..+W........\h;..D.0U..S...G..j....-...k%.}^E.V.c`...2...-..\|.eWZx.......?...s.JgK..N>.2.....p...xtYH)Go..[..#.0.#.:...L..A.b>M......J<..t.]...q.J].b.....I]...w.H..u3v.H-y...BW..Z..$..m..>..wj#....."7P.`.Cp4`jJ,...=ho.....9...X.N....(.,.6M/..t.V.z6.nI..xRqC...v..4.*..X.f..?v......

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 11:29:28], progressive, precision 8, 1420x1082, components 3
Category:	downloaded
Size (bytes):	36978
Entropy (8bit):	6.9636627771866975
Encrypted:	false
SSDEEP:	768:kSkp0pOrckp0psEsL000000000000000000002qWQ7jX/zG0OHuc45UV5hlBFroR:VI0ppI0pshtWQ7jX/oHL425hlBq
MD5:	34728207D8866591537B004617EBC934
SHA1:	C2349D2DA5E93B32B8B37DE746B895D4355DA876
SHA-256:	417E432A47F7DF09B95A50DD64EA392F008F3A3FE64389234D221FB59EF14F20
SHA-512:	B8300A4C33D067DF0E1D060DD03126E377F036266BE4D73D0D3A6AC9898B6E0CDC2B72A41D37C3DA68D3372BADA77CA70FCAEDA1360B3522D9E28BB838C57BC0
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/user_upload/Sell_Domains/Domain_Auction/FAQ.jpg
Preview:	......JFIF.....H.H......Exif..II*...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 11:29:28.....................................:...........................................&...(.......................................H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...I%}.RI'k\..0K...)d...cc.$.....R..G......L.a.a.g9%..6......"...<_......<U....Ii~....x....2......"....{3.sRZ_.(...?.)~.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	dropped
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8056), with no line terminators
Category:	downloaded
Size (bytes):	8056
Entropy (8bit):	5.787493289525059
Encrypted:	false
SSDEEP:	192:7ESfRJLkN3+3vrEBHFXeQtBXzn09rnPkc0gh:1HfIBHFXeQtUQcRh
MD5:	EC84870B79E338956A62E7BCBD3C9443
SHA1:	976EFDC16B73AD5E9D73102F7C36BE9E80543A49
SHA-256:	40F26CDFB53AED3B4234C4D682E478FDDF7FD5DDB806FA3BEDC871B0C23C2F90
SHA-512:	DA73E0019FCA2F216297E6D32B2AA84FD40F9D73EA77C863656458F57229EBBBBFBE7FE0E76529DA0A7811232CDA42B8AA97D43243773EC9BDDC05A114FE049D
Malicious:	false
Reputation:	low
URL:	https://sedo.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js?
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(V,f,g,l,m,v,x,z){V=b,function(c,d,U,B,C){for(U=b,B=c();!![];)try{if(C=-parseInt(U(465))/1+parseInt(U(429))/2(-parseInt(U(458))/3)+-parseInt(U(519))/4(parseInt(U(528))/5)+parseInt(U(498))/6+-parseInt(U(422))/7(-parseInt(U(502))/8)+parseInt(U(472))/9(-parseInt(U(463))/10)+-parseInt(U(426))/11*(-parseInt(U(427))/12),d===C)break;else B.push(B.shift())}catch(D){B.push(B.shift())}}(a,678001),f=this\|\|self,g=f[V(516)],l={},l[V(432)]='o',l[V(420)]='s',l[V(423)]='u',l[V(443)]='z',l[V(440)]='n',l[V(527)]='I',m=l,f[V(476)]=function(B,C,D,E,a4,G,H,I,J,K,L){if(a4=V,null===C\|\|C===void 0)return E;for(G=s(C),B[a4(482)][a4(462)]&&(G=G[a4(459)](B[a4(482)][a4(462)](C))),G=B[a4(455)][a4(508)]&&B[a4(473)]?B[a4(455)][a4(508)](new B[(a4(473))](G)):function(M,a5,N){for(a5=a4,M[a5(434)](),N=0;N<M[a5(510)];M[N]===M[N+1]?M[a5(500)](N+1,1):N+=1);return M}(G),H='nAsAaAb'.split('A'),H=H[a4(513)][a4(457)](H),I=0;I<G[a4(510)];J=G[I],K=o(B,C,J),H(K)?(L='s'===K&&!B[a4(461)](C

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87532
Entropy (8bit):	5.262415846264695
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7
MD5:	C9771CC3E90E18F5336EEDBD0FFFB2CF
SHA1:	6EE8AAA3AC1F4E0AE18717A3FD26892E9F0E4CC5
SHA-256:	3E7501D15C3630E791C8B20392EB9DEE31A9F65CE3EFDDE76CEF5C710141AB24
SHA-512:	C503341FA3A7176FD10BD8CD7A5717C8FAF971F87FA0C158F2D94FCD484AE3ED5031F49414DAE833FB806B7365B5699C21D2E655376F69ADB052B22F6F6982A7
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin_git/resources/public/JavaScripts/jquery-3.7.1.min.js?1724921946
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3162
Entropy (8bit):	4.830006603526534
Encrypted:	false
SSDEEP:	96:xGUL7Q6vvtgr/t2wiQIPvQ/HmjOI2RqakuAvu3fVMEl0fiCe:xGU/Q6vvtgr/t2wiQSQ/zI2Rqagu3f9X
MD5:	CFD16B174D7F7B046E20ADBC2E0A1094
SHA1:	EF062CEA98686FFBF69748C18B166D71BFC8EC07
SHA-256:	388BDB43BAAF9D4FFBB371E5B6E1EB633DB424A863A73D99981F5B11A007C9CB
SHA-512:	DA1C6A6557718844CF16F7E2AD4B5FE83BC305E7DB702A62E35F3077EAA10958C15F6A7F4885B496F48B0CF1D73815868C03975CE3E6566B8115FC62E3CCD8E4
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/typo3temp/assets/js/cfd16b174d7f7b046e20adbc2e0a1094.js?1689601391
Preview:	(function() {. /*. Decoding helper function. . @param {number} charCode. * @param {number} start. * @param {number} end. * @param {number} offset. * @return {string}. /. function decryptCharcode(charCode, start, end, offset) {. charCode = charCode + offset;. if (offset > 0 && charCode > end) {. charCode = start + (charCode - end - 1);. } else if (offset < 0 && charCode < start) {. charCode = end - (start - charCode - 1);. }. return String.fromCharCode(charCode);. }. /. Decodes string. . @param {string} value. * @param {number} offset. * @return {string}. /. function decryptString(value, offset) {. var result = '';. for (var i=0; i < value.length; i++) {. var charCode = value.charCodeAt(i);. if (charCode >= 0x2B && charCode <= 0x3A) {. result += decryptCharcode(charCode,0x2B,0x3A,offset);./ 0-9 . , - + / : */. } else if (charCode >= 0x40 && charCode <= 0x5A) {. result += decryptC

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4210
Entropy (8bit):	7.930002383326811
Encrypted:	false
SSDEEP:	96:zllcHitlIxv9vk7C1+I4wWHLihk/xVUYyuFbA9VDo:gIIHUCD4warUYyc03k
MD5:	1867771ADD1D5DBB17BD1AB7469C7FFF
SHA1:	8DFB8D9245D4ABBD0174B28D66422B2E211A6329
SHA-256:	8343010321A203AA9285287D0D107B0255EFAD786F6BC2E4D675652EFD828633
SHA-512:	76E269C9BC966301FE22359D4E6BEBE17FD0310E996E3DC2AD09ACE0470160B583E626B6EB22730F150A035714CA9BA26D4481D80CF1EE4853232ABDF134C7B5
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/zkLxDsbw1hz2/e3c69f63348c1ec6e547.png
Preview:	.PNG........IHDR...............6N...CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3162
Entropy (8bit):	4.830006603526534
Encrypted:	false
SSDEEP:	96:xGUL7Q6vvtgr/t2wiQIPvQ/HmjOI2RqakuAvu3fVMEl0fiCe:xGU/Q6vvtgr/t2wiQSQ/zI2Rqagu3f9X
MD5:	CFD16B174D7F7B046E20ADBC2E0A1094
SHA1:	EF062CEA98686FFBF69748C18B166D71BFC8EC07
SHA-256:	388BDB43BAAF9D4FFBB371E5B6E1EB633DB424A863A73D99981F5B11A007C9CB
SHA-512:	DA1C6A6557718844CF16F7E2AD4B5FE83BC305E7DB702A62E35F3077EAA10958C15F6A7F4885B496F48B0CF1D73815868C03975CE3E6566B8115FC62E3CCD8E4
Malicious:	false
Reputation:	low
Preview:	(function() {. /*. Decoding helper function. . @param {number} charCode. * @param {number} start. * @param {number} end. * @param {number} offset. * @return {string}. /. function decryptCharcode(charCode, start, end, offset) {. charCode = charCode + offset;. if (offset > 0 && charCode > end) {. charCode = start + (charCode - end - 1);. } else if (offset < 0 && charCode < start) {. charCode = end - (start - charCode - 1);. }. return String.fromCharCode(charCode);. }. /. Decodes string. . @param {string} value. * @param {number} offset. * @return {string}. /. function decryptString(value, offset) {. var result = '';. for (var i=0; i < value.length; i++) {. var charCode = value.charCodeAt(i);. if (charCode >= 0x2B && charCode <= 0x3A) {. result += decryptCharcode(charCode,0x2B,0x3A,offset);./ 0-9 . , - + / : */. } else if (charCode >= 0x40 && charCode <= 0x5A) {. result += decryptC

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 413 x 594, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13502
Entropy (8bit):	7.912202553387551
Encrypted:	false
SSDEEP:	384:/mKXXNN5Jr7k18sA6pXsox1amFbraxPpkJ:euNN3r7SJZRGmgxPC
MD5:	107694EE1E94990D97B7E58651FFD6A0
SHA1:	7DD9AE7BADF78BE01EA0623DF1E90171348716FF
SHA-256:	7AA2A3E9A9575A27F5593C3B0357423128C468A46ED20D284CE5A21555EE67BC
SHA-512:	5D695545E1516D28CA05933C88AEC08CA324A61804BD662102A1EEB7A515BA543343AD24FDA53ABA329AE803F622664B29D5A3461BCCBD264EC8950E8CA51002
Malicious:	false
Reputation:	low
URL:	http://img.sedoparking.com/templates/bg/arrows-curved.png
Preview:	.PNG........IHDR.......R........^....pHYs.................sRGB.........gAMA......a...4SIDATx....\.y........F.U.b.U....A...#V.......J..?....w..UD&.A...P&.....Q...#..qA.d\.E[...Y.....'...;....{.......+_....<.y.9.k.o.-J..%.C)I3..7o..e..........0....f.<.6/J...&.}.S..n.%...1........'........'X..+...4Z..;JTf.JV........)S-e.'Z.dO...y.'....a{mM.C...r...1.V.....L.K..@...:...H..N^.}..ex....N...\/k..l..P....\...j..:vr........_.3..n...!..n.?t....8.pNX...5.Dwd....8...`iB..Q=...L.:...`.b...L+Ne.....7tF.....V..x..S.e{.....:.....H..........]...!..`6.........ooqN......i......x.N.h......z1...%....T?.V.lD..+Bg9zZ..NB...D..-.U[%...~../..D.J......?..F.)5................J....k.I...W....5..ns.....^..%!o.}..g/.~.....<@......8.J'....T?.\E......X..........\|.vS.`....hY."....`.h..}?...J'^..y...7[....@.tP..5.ZQ....5...F.`,......&.&.6.....`VT:.T3.......A.`jy.....7.....z.0.*.T.p.7.G tP).........S...tP76..8@.`a........C.`.L;W).....~......t...Y."A...<.f!_... T

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	3.090787153125625
Encrypted:	false
SSDEEP:	192:jiHSINqv0tJ30DezSfPAXTZwC3D2N2xp1Fd/ar/+zi3LHZNwkQH0iWpXDt3TN8rB:jzAnP9j
MD5:	DEF00C11B1596DB4EFEE6A9FBE64FC27
SHA1:	BD298981E6D8D7E4FFA18ABCF687041F4246672D
SHA-256:	95C427FA3143B1896FAF42A6406686CE7602CB39052081BB32D12B51C9E047E4
SHA-512:	C056E95DBFA1AAB3A50DFF18C6D577DBFFEA72C93316FFC53B6B7AA41DCC7707A810D563894589A7305DE0B76610F88150B2034670DE368773B2B356F14AD30F
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/c7r/assets/static/images/icons/favicon.ico?v=dLJ3bx2xjj
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................@...@...@...........................@...A...A. .A. .A. .A...A. .A. .A...@.......................@...@...@...........................................................................@...@...@...............@...A...A.U.@...@...@..@..@..@..@..@...@...@...@..@..@..@..@...@.}.A.U.A. .@...........@...@...............................................................@...........@...A...@.j.@...@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@..@.}.A...........@...@...................................................@.......A. .@.}.@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...A.G.....@...@...........................................@.......A.U.@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (12711)
Category:	downloaded
Size (bytes):	25494
Entropy (8bit):	5.456497647529723
Encrypted:	false
SSDEEP:	384:2ni0Zfaxi4UNsQ4M0CCVD90z0nsnjaPlJkns1wG:2i6ai4UNJugBadJiG
MD5:	8D78EDF0B22BCBC41ED06A51E4AF136A
SHA1:	4ECFC381D1F38D51879E533EA9F86886B9D70C68
SHA-256:	8F1A7DED3CFA66E8D0ADD0A886B52056E6F07FEE8CA512E04B53149A866337F9
SHA-512:	791770D56A2891F172C3CB096FCC59C1DD4694997EEB95CBDDD5161698B2CFB3534BB1ACF565A491844F6D342AE5142FEFAB29AD3B4AA73355D963C1CD4C6B92
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3D87e1bf0796c9fd42%3AT%3D1728255929%3ART%3D1728255929%3AS%3DALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.coritta.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjgyNTU5ODcmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Best%20Home%20Warranty%20for%20Hvac&afdt=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEmwBlLqpj1YJdz7AzpZcgeGyRhp5zMxp8n1DEmNsr7hGBcgg34MnxBeRt-c9OxWGMfyh27HvGtg4vi3Woi_41qZIfViSTrEkCjKcSnu5_x2fLueh1V508qjLQKWCgp2wXmyKbwgvH5qd2vVtgD8&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301542%2C17301266%2C72717108&format=n3&ad=n3&nocache=491728262291388&num=0&output=afd_ads&domain_name=www.coritta.com&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1728262291390&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1227&frm=0&uio=-&cont=ab-default&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fwww.coritta.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%253D%26query%3DBest%2BHome%2BWarranty%2Bfor%2BHvac%26afdToken%3DChMI-fffhe_6iAMV4IH9Bx0b0DkAEmwBlLqpj1YJdz7AzpZcgeGyRhp5zMxp8n1DEmNsr7hGBcgg34MnxBeRt-c9OxWGMfyh27HvGtg4vi3Woi_41qZIfViSTrEkCjKcSnu5_x2fLueh1V508qjLQKWCgp2wXmyKbwgvH5qd2vVtgD8%26pcsa%3Dfalse%26nb%3D0%26nm%3D3
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpuhnqew5e", last modified: Tue Sep 17 11:16:31 2024, max compression, original size modulo 2^32 5491
Category:	downloaded
Size (bytes):	2448
Entropy (8bit):	7.915825988584021
Encrypted:	false
SSDEEP:	48:X2TRvvxBZQkdysZTyAxhqRa5U2Q5yJR/HKcUGm+H2baIjVIOfS35oklcB:eRnxB9gAxtU2Q5SzU7+HSaIqJ3YB
MD5:	5DA72F9934EC4DA8A4798966F0B6BFD8
SHA1:	F6973E32A9EFC3162635AD1FD0805FEDD8275BBA
SHA-256:	B3B6367472632D79597A664B7C1E5904E057AA7F11E9575667337BD101A7E0C5
SHA-512:	E806BA43043635444C7ECB7B6A5C067ED95B3B08E645A39738C9CE77F984D1FCA1A73392EC547F0B593716E685E348E68A8ABB23CB5DE77B94070CF6CA1D8773
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/PrivacyButton-62ab6c78.js
Preview:	.....e.f..tmpuhnqew5e..Xi......_A....h..IA1....`.....E.S.G.....K...{.:f..\|..`..bwu....]..m7..7N.;..r.T.7.......F.?s.T....q.T..c......u.]...,.;.n......d.n..YLk=..C....M..x.P..b^m.......e..6..U.d.v..+6.:.^W..]_......u...;.w^...m.G'.....n.rV.\|%.:.+2$...t.Dv..L..j0..M...+X=Y...)...........\|99....j.g.....r..7..l...vS\.w.b.yo......(..Di..I.O.m9..{Y..X.7U.~.....?..p..n.5...M...~.o......4eu....[.Gt...g./......h?..uU.......mW..{=[.Eu].aL.....jh...9.........]...../....n. ..h.9.q..i..e...[o.Z6.Wy.o..W..WHY...S......>..pT......-....E.).Xm.#p4#..Y.j..n6}.a[<.~{{.oC.v..........t.M].l...w\|'...c.[..i.w..:.....YVvu.....3..`...V......VAt.D..?..'....a...:3N..t.i?s\|O..T.. .\.X'...(pL...o.p....?.Y..^...1:2..i..q....I..Of.<r.9.dW..8...'..'8J.....I....D...>..X.!,.u`t.Bb..u$:..E..^.:..4.[.^A.O.r.[............-....4..Az..Y.C.".&.&v.N<.a:M.-M`d..>.h+../...D.T-....VG.T.$P.xD=\|.A.\|.R..z....P...0...j0.b{..eh...0..)...X.^b.......h..BQ.. .[.8..!n>.I.T.^..^"..c

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153142
Entropy (8bit):	5.540458002821616
Encrypted:	false
SSDEEP:	1536:gSG6arvU/wAQWPyXpKHhitCnAyYHLaUbxijIHWvxDZz7/wurgsjWbcbWgQWZpVqk:1H1YrCIHWpDB74u7RzqNYPCfaQBZwK0j
MD5:	D27A19DB587D4B9EAF1CC510572A6E98
SHA1:	87B647BF47D040A78B604F9C97754666609DF7C3
SHA-256:	92A7EDE603E356274ABC7CB275CBD4DF9614FA380FD02B9E375049A760F466B2
SHA-512:	4CCC6105BE357D88BC5F9229C3EF71C228DB1CF2512FCA04AB8B1B8293C23E5EFE2CED3F3D9653E3FB41352E330654CB2F72D461F89D49E31A7D0B485C033FE2
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301511,17301515,17301516,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":100,"afs_gpp_api":0}}};var n;function aa(a){v

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 230x101, components 3
Category:	dropped
Size (bytes):	30229
Entropy (8bit):	7.6614619332375105
Encrypted:	false
SSDEEP:	768:tF9RpiaTsfr3rZkGyvKb5Ywooend03umCI:tFX4aTsfr3rZk3Sbmw8mV
MD5:	F90B38EFE028D24F5514E9CF2203EED9
SHA1:	E11744A0C9753531F0A27B63AA64F5C6F3FA635B
SHA-256:	DAB36F28B5807E060A190A44401CBDE97E5F4FBC999692B7E5B75E29F170F82F
SHA-512:	3D46111096365E683637EE5F9EBB3F37E53A4B81DBB219B6E05722E46C09CE90BF2A5772324775F61FA0CE8E1FB6D5003360B5F2615C0BEF04A63B0263D9F619
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......`.......`.................0210....................0100................................e...........http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x='adobe:ns:meta/'>.<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-01-22</Attrib:Created>. <Attrib:ExtId>ae82471a-0c80-42b3-b7d8-ecbb7f494ea5</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>. </Attrib:Ads>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>2024 ICA Badges (230 x 101 px) - ICA-2024-Platinum</r

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27332, version 2.1310
Category:	downloaded
Size (bytes):	27332
Entropy (8bit):	7.991751157831881
Encrypted:	true
SSDEEP:	768:98lHID7bGsgKetE+hR2nTPXyAlFh6Zc6u2:qGDWsgKUR2RveI2
MD5:	8BB4BA711047411893D35612BC631AB9
SHA1:	FDDC00ECA2E66E4431C9615DF508A1A377ADCE42
SHA-256:	4BCE5252202292E4D9D6DE37A5BD004CB52D8C44E9F940BBCDD030EA569F29DC
SHA-512:	48BEA7A2A376B01D097E02409AAC713500AA7CFA9903378977178677A2764C0C8E07B692379B3722163BCB201F9649620347045B4503C0A35CBDD16F1E036470
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/dist/files/sourcesanspro-regular-webfont.woff2
Preview:	wOF2......j.......`...jQ...........................?FFTM..(........`..R.L..e.....`..{.6.$..(..V.. ..>..d..L?webf.[gMq.o.I+....L.(.]..c.M?odF........2.&U.....!7.d.B......."...'yu.....s,C...3{.(........9e...Y.,?+uT$..T.=i....?T.)).6..+...L..tl.!^A~..Z.C.... H$.DM..qw.e......,.g..s..C+.[<........{..\{.......%..M.?..P3..;...f,;N.i..rU.'E.U.s}TD8........hn...0.B....s...fImcAl....Y....J2...........Jy._....R...jj..... f........+...4.. 6.wd..#k.Lp.............k..W..>mq... .....6...P.9....._.f.^.._...Y...Z...Vu.8..n..".0N.kF.1.B,bX...c..`.b...A..W...d..3r.r..~w..#...Ch...a.,y.X..."...L...........g.kiUlY[+...t.H..0.@.....}..Z.[..>L.E-..N..1.d?.N....}.3a.......g.mD...K&.D.i..$.e.]-...?k.g.....wF..K)".p..FD/Y:.l.~.>a....'....S{P.dC....1...uK............./.B.D.!.)OO.s..M...w.M.7..v....t.@..)..J..I1..\|Ar..B...B.Sr...m.r.]..KU=.g.9$4.kU....K....*.0]....zh...g..w.z!.,~._..0.}...aP...2..%kv.U.\......2<.....I.xS.b......f..f....j.}E=..DBf.a..$H.L....B.$k.E.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (26006)
Category:	downloaded
Size (bytes):	26534
Entropy (8bit):	5.509517277549675
Encrypted:	false
SSDEEP:	384:2ni0Zfaxi4UNsQ4M0CGzM2t0iG2CVRYkxJVA+4Vwc:2i6ai4UNJyI2CVNV9c
MD5:	E8C3D8AAC45A8E28942FD4BBF1D30DDD
SHA1:	41C35B63D99FBF9F0450424BD0C4ABC50AD8F222
SHA-256:	B7D2668E89C203C9224A0A34F29E770E8B9EC36591C744F1DD9D66CDBFF8A38C
SHA-512:	790744AD046816D87E57D7BE8B79ABA0A8D124A3542EAFC0CA6355263E18A08B4B68F92DFDA6F7E5795CD25E8A75259534F8F4A00A664E93C6E7640A27207036
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3D87e1bf0796c9fd42%3AT%3D1728255929%3ART%3D1728255929%3AS%3DALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.coritta.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjgyNTU5NzQmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Replace%20Hvac%20System%20Cost&afdt=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj5ulDShI8Bb7iRptDBkDmxnWF4qf353j65aQvFz-IKHccRTuxxIucZ2b63EhAJbftDkzbBDaWuuRYuJLti9NXeWNbTMnmVHkdDlPUOz-6PAxKFfYM9qN9Qyxx-ANIn2stcqlhWRn5irL&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301542%2C17301266%2C72717108&format=n3&ad=n3&nocache=7331728262277972&num=0&output=afd_ads&domain_name=www.coritta.com&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1728262277973&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1227&frm=0&uio=-&cont=ab-default&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fwww.coritta.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%253D%26query%3DReplace%2BHvac%2BSystem%2BCost%26afdToken%3DChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj5ulDShI8Bb7iRptDBkDmxnWF4qf353j65aQvFz-IKHccRTuxxIucZ2b63EhAJbftDkzbBDaWuuRYuJLti9NXeWNbTMnmVHkdDlPUOz-6PAxKFfYM9qN9Qyxx-ANIn2stcqlhWRn5irL%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 12:02:59], progressive, precision 8, 1420x1082, components 3
Category:	downloaded
Size (bytes):	52602
Entropy (8bit):	7.4287422947114035
Encrypted:	false
SSDEEP:	768:/E6FrL65El0Krcmskr6siDLYu0QjUoqiacJVFsX665/XeD7rr2ghN:RY5A0KIIWDLYuXUohVFsX661OWKN
MD5:	F65D136F378CD22EED47C416D1D8097E
SHA1:	F59C9C299939E28F77B1FCD42DF7609FC6C529CB
SHA-256:	DA5FE47C053D2DDF43B3D159330C30276F942E26934DA65242D449644414358E
SHA-512:	942E4D95C8D5F722E06F089E000DB8A754F4AB6D0775C522DBBFE778AC01C4FB25E6109114F95B7559BC066258D7170D4E901D52B2E73A8A070EC86147AEECC4
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Domain-Parking-Profis.jpg
Preview:	......JFIF.....H.H..... Exif..II*...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 12:02:59.....................................:...........................................&...(.......................................H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...I%}.RI$...I$.$..N5L...Z0..w>..~..@n....+.i.v........Gj_g.Zo..u.....!.[.?..+./b....I....LJ.. .&.......=.W...N....%.{.....

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpmdgyjxbt", last modified: Tue Sep 17 11:16:30 2024, max compression, original size modulo 2^32 4399
Category:	downloaded
Size (bytes):	1695
Entropy (8bit):	7.883854507468435
Encrypted:	false
SSDEEP:	48:XzRsRSYn645e0oei9YyDKErV/uPOxuxQYnyHfs0:Vs0Y645y9PbhxuDn0
MD5:	B541F7BDEDF66BD5EAA04711DF6F0240
SHA1:	5AA0ED79236EE16D38FFA76225484B87D29C532E
SHA-256:	A2785C8FB44AE2D0868DF3753D418A2D66348057FEA9D6AC509B5D4D387ED741
SHA-512:	C38F06D7FD5592CA1288A09DEE20EBC7A5EB3A9D7C1124C83C0C91D66B895B77105EAF185A9F2BF3C654F299CDAF58430BE946FA2BFB6A9DE035FE148E8ACEB2
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/DefaultTabs-99ec4522.js
Preview:	.....e.f..tmpmdgyjxbt..Xmo.:..~.EAs.Ds......h.#...it5j.b.. ..4.}....B;..>Il....[.ZGR'.......%T...5..B..K...P. ..%a..O..d.B..}.b.1x...,.b`..;`#...1...l....z..7..x.p.^......t..U....}..\E~...OU..yL..Y}..#..,s...H....S..C...$.&h...Y~.... s..2..!.......W.....:f........O.O....:.B./.:.4.._......g..l....>.0.2.q.D.(.)[9...5.Jx........D.E..b.v.J...n.......\|N.=.oj.`./-..z...x......H.\..c.......<uFf.>]Z.....4_Dr7..:R\|<.`&Q..../..M...l...\|#.X.=H.a..X...a..v.i]...`.(..atM+.....j.....Z..:..E..A..3.9.y...'w.....0.r.9..L.>...9&...x...k.B.:HL..hx....,\|......^GZG+..Tk6."5=.x3X..G.27.Cm...2...t.#........].+-.z.q.n...k...X.9.![c.....".M....q\+K!..\....[i..h..&......m3..ek.q.!..]..%$.\|...6......=z...\|.D......7.....^... [h..CsJ.9.t\....j...D..Pd@ ....,.rd=.rq.).....m..D..b.# ......-..k..X)....&.V.8...BVn...v.uy.{.?....o.2..?..5....4...RH?..Q0..dg..H1.".*.9N!.+GRI.......@..2w^....C-J>...+..ea.z.. A-X9.e$....#I...N.$iU...)6t$+.....Te....B7 1..bB.

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HrPyY:zyY
MD5:	6CEA4FAAAFA38FD40BB35DE6589E85F6
SHA1:	8105D649FBDC85604236E65C53E97BCF0CBF5A36
SHA-256:	FC11A6B80A3B077C6ABCF624E3331E30045DEA7896F6539A7CB263E74964F5C0
SHA-512:	7DB4FBAAE22AA961987C0750E13E1B7A3CDEE6C0502A7C5093D4FAAE84454EF6709F8690278FF2AF9ED984601FDD8FFC59E887A34AE723C5BCAAE54125F4FCD4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkIQnKyAvL46BIFDVKKSaM=?alt=proto
Preview:	CgkKBw1SikmjGgA=

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	48097
Entropy (8bit):	4.541259077514592
Encrypted:	false
SSDEEP:	768:cfppX5/9YbZIqEGYbGqnq77SdMOsZff7pUbGA+dHeSZKFwj:CKYw3A9+
MD5:	5A2C392E7ACDF6E9DE6E00129500503C
SHA1:	C8D0F80381E4CE180B5EB3C4C98539907292A7BB
SHA-256:	878DA09A057EC8F1775CDC522E5F7EC44966DF547A87A9C29826BA114833C24B
SHA-512:	52223B04EB9121F05442DBC48519A95FDABB81C414772EE43DC837B58F797B97314796EF6D77EA6B7A1F3FEE5937EC039E617FCDF8B146822792ACCD2534E141
Malicious:	false
Reputation:	low
URL:	https://img.sedoparking.com/templates/images/hero_nc.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">. Creator: CorelDRAW 2018 (64-Bit) -->.<svg xmlns="http://www.w3.org/2000/svg" xml:space="preserve" width="1440px" height="140px" version="1.1" style="shape-rendering:geometricPrecision; text-rendering:geometricPrecision; image-rendering:optimizeQuality; fill-rule:evenodd; clip-rule:evenodd".viewBox="0 0 1451.085 141.382". xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <font id="FontID0" horiz-adv-x="666" font-variant="normal" style="fill-rule:nonzero" font-weight="400">..<font-face ...font-family="Arial">...<font-face-src>....<font-face-name name="Arial"/>...</font-face-src>..</font-face>. <missing-glyph><path d="M0 0z"/></missing-glyph>. <glyph unicode=" " horiz-adv-x="277" d=""/>. <glyph unicode="." horiz-adv-x="277" d="M90.9909 0l0 99.9962 99.9962 0 0 -99.9962 -99.9962 0z"/>. <glyph unicode="?" horiz-adv-x="556" d="M231.002 175.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 12:02:02], progressive, precision 8, 1420x1082, components 3
Category:	dropped
Size (bytes):	42237
Entropy (8bit):	7.182519169540984
Encrypted:	false
SSDEEP:	768:v0rmEN9TyI+Z00k1rrtxXrWY48KLz9FzcOuRtMiC1+Jvn:zIJ0C3WY48KtFwOuRSiPR
MD5:	232B19913357B4C657C182AEAB853992
SHA1:	F9D42EC577FAD344A249637BB0AFDF7F1F9D9171
SHA-256:	270838AC3C0E56430D40E9BA072A11C7212B45583840CF3B938C111D9748B98A
SHA-512:	8646D8764F0C86BFCF367BF682454B6B9B04B1E2105360DC6CB5DFFBCD44A843423A6164196D06B9393802035E692766D7C4C0408363EC30B70924922E5AFA55
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..II...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 12:02:02.....................................:...........................................&...(.......................................H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...I%}.RI$...I$.$.$..d.IJI%c.............$.e .h..J.v5Tl5.. ....T"A..(..I$.Z..$...I$.....I%}.RI&IK.I$...I%) . .I:.5%%{.z{_.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153116
Entropy (8bit):	5.540202567342547
Encrypted:	false
SSDEEP:	1536:ESG6arvU/wAQWPyXpKHhitCnAyYHLaUbxijIHWvxDZz7/wurgsjWbcbWgQWZpVqk:JH1YrCIHWpDB74u7RzqNYPCfaQBZwK0j
MD5:	07F949B9EF23FF6A565DC3773953D3E2
SHA1:	776BFB898E899519BC78047108846B9C2B6B2F4D
SHA-256:	3CA5B2D776C64537B81C174D289D6F5E87F1F0EAE6F2DA687CBB246897F541B7
SHA-512:	D9582DA770F1501111B74FEE2EE8CE38A52D75CD5158EF5A7648AF099325EA38FE7532F76466665D1CC4279E3A6661AEB7525767F33237BAB9F3D20190ACB17A
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301431,17301433,17301436,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":10,"afs_gpp_api":0}}};var n;function aa(a){var b=0;return function(){r

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	214519
Entropy (8bit):	5.906193140023946
Encrypted:	false
SSDEEP:	1536:cHGBkY+5UPEKaTV3Xv5H3nvNj8FBw1H7V8HHYAfuq0ciAIR4MJT0cKgrjgXrjETq:cv/xwBcyH/fuq0N6fcSbhgyTbDQ5W
MD5:	4D34395F5FC4601249FC0ADD1149B75B
SHA1:	525379A580FE74AD70FD218FFFC1E57289B931AA
SHA-256:	7738C8373A5B87AA8281BDC4960DE5026717881C83DF2666093718CA5AFFA444
SHA-512:	E1944C2C7B56777B4D4837ECE50F023919E7E7ECD296B8555E719BEDFC46E179987AEF67FF5E662F72DC98EAC6B0DE513C31A889EC49E1F2D3275EADAD568EF5
Malicious:	false
Reputation:	low
Preview:	(()=>{var __webpack_modules__={1424:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{"use strict";eval("__webpack_require__.r(__webpack_exports__);\n/* harmony export / __webpack_require__.d(__webpack_exports__, {\n/ harmony export / \"default\": () => (__WEBPACK_DEFAULT_EXPORT__)\n/ harmony export / });\n/ harmony import / var _helpers_GTMHelper__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(9796);\n/ harmony import / var _helpers_GTMHelper__WEBPACK_IMPORTED_MODULE_0___default = /#__PURE__/__webpack_require__.n(_helpers_GTMHelper__WEBPACK_IMPORTED_MODULE_0__);\n/ harmony import / var _helpers_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(1052);\n/ harmony import / var _helpers_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1___default = /#__PURE__/__webpack_require__.n(_helpers_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1__);\n/ harmony import / var _helpers_Debounce__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(6652);\n/ har

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29400)
Category:	downloaded
Size (bytes):	29802
Entropy (8bit):	5.245806072418599
Encrypted:	false
SSDEEP:	768:/veaVfq2uGhc6eIRE2yNQ4iyHuqpp0L0pvj8vCwF3Cn:/5VfqpGvPqZWyNf0L0pvjWCwF32
MD5:	FCFF8644D2012C95B22B7A521DA0C2DD
SHA1:	6250E5B45FE3EA26E0F1B17C9AA576C9F5AFA5D3
SHA-256:	420514B11077554F1CBC0425327EA7301D930BDD5C01DDA9BE6FAF4FD1927D19
SHA-512:	4BC35067AF2BA6F3E345F447AF34125B88FEB54A71A6B090AF899A343F9A64E0C5729F6C1C302431DF74CE38A5632428F05640FE80E07FE843DFE342F72C35A3
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin_git/resources/public/JavaScripts/splide.min.js?1724921946
Preview:	function r(n,t){for(var i=0;i<t.length;i++){var r=t[i];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(n,r.key,r)}}function Jt(n,t,i){t&&r(n.prototype,t),i&&r(n,i),Object.defineProperty(n,"prototype",{writable:!1})}./!. Splide.js. * Version : 4.1.4. * License : MIT. * Copyright: 2022 Naotoshi Fujita. */.var n,t;n=this,t=function(){"use strict";var v="(prefers-reduced-motion: reduce)",G=4,rn=5,r={CREATED:1,MOUNTED:2,IDLE:3,MOVING:G,SCROLLING:rn,DRAGGING:6,DESTROYED:7};function D(n){n.length=0}function o(n,t,i){return Array.prototype.slice.call(n,t,i)}function R(n){return n.bind.apply(n,[null].concat(o(arguments,1)))}function on(){}var p=setTimeout;function h(n){return requestAnimationFrame(n)}function u(n,t){return typeof t===n}function un(n){return!c(n)&&u("object",n)}var e=Array.isArray,x=R(u,"function"),C=R(u,"string"),en=R(u,"undefined");function c(n){return null===n}function m(n){try{return n instanceof(n.ownerDocument.default

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55651)
Category:	dropped
Size (bytes):	443013
Entropy (8bit):	5.565770993049353
Encrypted:	false
SSDEEP:	3072:UaC6+WKyy0ztEGIJ2TjD9yAZnSPdh7sGQZVq8bLlbT9jcc:FCk3yctEGIcTjDrZrHlT9H
MD5:	292F026AB8F4867FAE5824CB8F3D34A3
SHA1:	D6B96752D29BAAB2A3C907769109714B1B196B46
SHA-256:	06660678D49BFBE85FF7B4BA47D1FFE1E47F6B56AB0C24A3560119D23B5A5AE0
SHA-512:	C3F2BD22440FA925DDAB7F4DD5C55A7AD0D1A9B9E848F0A2529218B79760AF71FCAE2A0CEAD1BAF773977337CC0808C40869AF27CA175783045C56011A210020
Malicious:	false
Reputation:	low
Preview:	!function(){var e={"./src/FullHeader.js":./!*************************!\. !* ./src/FullHeader.js !. \*************************/function(e,n,r){"use strict";r.r(n);var t=r(/! ./utils/LoginService /"./src/utils/LoginService.js"),o=r(/! ./utils/searchHelpers /"./src/utils/searchHelpers.js"),a=r(/! ./Header */"./src/Header.js");n.default=class extends a.default{constructor(e,n){super(e,n),"loading"!==document.readyState?this.init():document.addEventListener("DOMContentLoaded",(()=>{this.init()}))}init(){this.LoginService=new t.default(this.lang);this.loginData=(async()=>{const e=await this.LoginService.getStatus();this.userLoginHandling(e.data)})();const e=window.location.search;this.$loginStatusLoggedOff=document.querySelector("#login-status-logged-off"),this.$loginStatusLogged=document.querySelector("#login-status-logged"),this.$watchlistStatusLoggedOff=document.querySelector("#watchlist-status-logged-off"),this.$watchlistStatusLogged=document.querySelector("#watchlist-s

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 477 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68061
Entropy (8bit):	7.991826692964678
Encrypted:	true
SSDEEP:	1536:3xKkzKqx+cdA9KhAjMt4v7KnCkGaSNTOW7ou9jHRcB1WO:4kh/A4AjMtb93un7outuQO
MD5:	B125DC28311A0C2BBE52C81E2B448DD6
SHA1:	571E1CCCDC8514618AD14D2822C2B9D39AD50B75
SHA-256:	678F9D972EFD3371793E158BA103863F55B38A40A89067CD9D476717A4E86801
SHA-512:	DADD0DD9460DE525488C0C02900AEA17F1F903019215CD979215F23EBC335EF912F6A0BACFA544E31672A4B4E280974E6BE7D4775C109CE59352A8C3C2BCA58A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............Ru....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:F9295479158111E8A9F9C70B84CCAA81" xmpMM:DocumentID="xmp.did:F929547A158111E8A9F9C70B84CCAA81"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F9295477158111E8A9F9C70B84CCAA81" stRef:documentID="xmp.did:F9295478158111E8A9F9C70B84CCAA81"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>j.....PIDATx..}..\U...No.[6.M.....@."% .X@..D..E..>..\|....C\|"...t...'......l.uvz...w.3;......0..;.{....?-I..e..

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpmdgyjxbt", last modified: Tue Sep 17 11:16:30 2024, max compression, original size modulo 2^32 4399
Category:	dropped
Size (bytes):	1695
Entropy (8bit):	7.883854507468435
Encrypted:	false
SSDEEP:	48:XzRsRSYn645e0oei9YyDKErV/uPOxuxQYnyHfs0:Vs0Y645y9PbhxuDn0
MD5:	B541F7BDEDF66BD5EAA04711DF6F0240
SHA1:	5AA0ED79236EE16D38FFA76225484B87D29C532E
SHA-256:	A2785C8FB44AE2D0868DF3753D418A2D66348057FEA9D6AC509B5D4D387ED741
SHA-512:	C38F06D7FD5592CA1288A09DEE20EBC7A5EB3A9D7C1124C83C0C91D66B895B77105EAF185A9F2BF3C654F299CDAF58430BE946FA2BFB6A9DE035FE148E8ACEB2
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmpmdgyjxbt..Xmo.:..~.EAs.Ds......h.#...it5j.b.. ..4.}....B;..>Il....[.ZGR'.......%T...5..B..K...P. ..%a..O..d.B..}.b.1x...,.b`..;`#...1...l....z..7..x.p.^......t..U....}..\E~...OU..yL..Y}..#..,s...H....S..C...$.&h...Y~.... s..2..!.......W.....:f........O.O....:.B./.:.4.._......g..l....>.0.2.q.D.(.)[9...5.Jx........D.E..b.v.J...n.......\|N.=.oj.`./-..z...x......H.\..c.......<uFf.>]Z.....4_Dr7..:R\|<.`&Q..../..M...l...\|#.X.=H.a..X...a..v.i]...`.(..atM+.....j.....Z..:..E..A..3.9.y...'w.....0.r.9..L.>...9&...x...k.B.:HL..hx....,\|......^GZG+..Tk6."5=.x3X..G.27.Cm...2...t.#........].+-.z.q.n...k...X.9.![c.....".M....q\+K!..\....[i..h..&......m3..ek.q.!..]..%$.\|...6......=z...\|.D......7.....^... [h..CsJ.9.t\....j...D..Pd@ ....,.rd=.rq.).....m..D..b.# ......-..k..X)....&.V.8...BVn...v.uy.{.?....o.2..?..5....4...RH?..Q0..dg..H1.".*.9N!.+GRI.......@..2w^....C-J>...+..ea.z.. A-X9.e$....#I...N.$iU...)6t$+.....Te....B7 1..bB.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	620
Entropy (8bit):	5.455520614126619
Encrypted:	false
SSDEEP:	12:TMHdPhRi/nzVV/KYf3nS31PHqgaPjW2K5v/bMtW2I0C24kAXKt9:2dzAjLf3S5Kg2K53bUW2bh4kAS
MD5:	38DC034A6892121319F8A432898F3CA2
SHA1:	E417E2636A04712260F2D5E5A799069F8E9036EC
SHA-256:	EB1677D0DED69FFBBC182C79EBA2F2E33E6F13D719BF4EB4F18F1F7ED62DFD4F
SHA-512:	EAAE9941ACB8D758E092ADA53679EB3DD8B0E9853FD3B26871400609A69C22CB4FBC588DB9D49D8648F75411B248A3E58B73213AEBCD35DBF49BC83C3BC02CC4
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/images/legacy/images/icons/icn-check-blue.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 79.5 79.5" style="enable-background:new 0 0 79.5 79.5;" xml:space="preserve">.<style type="text/css">...st0{fill:#0061AA;}.</style>.<g>..<path class="st0" d="M39.8,0C17.8,0,0,17.8,0,39.8c0,22,17.8,39.8,39.8,39.8c22,0,39.8-17.8,39.8-39.8C79.5,17.8,61.7,0,39.8,0z... M34.1,58.5L15.4,39.8l7.5-7.5l11.2,11.2L56.6,21l7.5,7.5L34.1,58.5z"/>.</g>.</svg>.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 11:29:28], progressive, precision 8, 1420x1082, components 3
Category:	dropped
Size (bytes):	36978
Entropy (8bit):	6.9636627771866975
Encrypted:	false
SSDEEP:	768:kSkp0pOrckp0psEsL000000000000000000002qWQ7jX/zG0OHuc45UV5hlBFroR:VI0ppI0pshtWQ7jX/oHL425hlBq
MD5:	34728207D8866591537B004617EBC934
SHA1:	C2349D2DA5E93B32B8B37DE746B895D4355DA876
SHA-256:	417E432A47F7DF09B95A50DD64EA392F008F3A3FE64389234D221FB59EF14F20
SHA-512:	B8300A4C33D067DF0E1D060DD03126E377F036266BE4D73D0D3A6AC9898B6E0CDC2B72A41D37C3DA68D3372BADA77CA70FCAEDA1360B3522D9E28BB838C57BC0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..II*...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 11:29:28.....................................:...........................................&...(.......................................H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...I%}.RI'k\..0K...)d...cc.$.....R..G......L.a.a.g9%..6......"...<_......<U....Ii~....x....2......"....{3.sRZ_.(...?.)~.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1559)
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	5.352426066542366
Encrypted:	false
SSDEEP:	48:0JhPOnK8lwSb6YS4tyPWp2PXihm0wQR2FgbnYfblV:8YDbL1tzAXr+0P
MD5:	19B23362660562A131DFBD77A4007151
SHA1:	B8FADB14AFB5EF10C2F835CE7DA431309A4321D7
SHA-256:	D2F6712FF927ABF0C6BCDE94066C397EB47FFB2E7852939A61CCFF6D455BF076
SHA-512:	386F817FD8843E59A860308FECAFCD4AE530542FB598D83F4B82A6A57E0EAB5970D4C985A4875A0B87F52E3A027831E37DB146FF35A5499E4D8079B1EF56F472
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads/i/iframe.html
Preview:	<!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="ktS5_mwlD7AZTbdI88mfFQ">if (window.name.match(/^{"name":"master-\d+"/)) {var script = document.createElement('script');script.src = "/adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\| href.indexOf('&pac=2') > 0) {script.src += '?pac=2';} else {script.src += '?pac=0';}}document.head.appendChild(script);window.IS_GOOGLE_AFS_IFRAME_ = true;}function populate(el) {var adBlock = document.getElementById('adBlock');adBlock.innerHTML += el;}function getMaster() {var m = null;var pIndex = window.name.indexOf('\|');if (pIndex > -1 && window.name.charAt(0) != '{') {try {m = window.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1520 x 500, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	537573
Entropy (8bit):	7.988877951560557
Encrypted:	false
SSDEEP:	12288:orYcqGIpRhLSLl0wrBVFH6aLHx7QZVemCG:xGIpRhMjrBVXHGV3CG
MD5:	2CA55CFD34932B173AFC0805F28AEACE
SHA1:	E8CEF798BF4B66E28ABD892F0303BF6458EFB43B
SHA-256:	83F14346B68DC3C90039B7331720DE1EDB570485320252332023EBFD0C4B4074
SHA-512:	7DD6274C9A8403A3D9CBBF9B62B00C5080C6DFDAE73E97DDD62DF0628453069DF5C12B54259CB1B1621C31B526596F9533F279390A05619F66533EABE2740BBE
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/user_upload/park-domains_bild.png
Preview:	.PNG........IHDR.............r..r....pHYs.................sRGB.........gAMA......a...3zIDATx...I.mK.&......{/"#..YDU...j. ..A@....p .......8.....@.4. ...e.........w......kYo.{.........9g....w.........$..D".H$..D".H$..D"....*$..D".H$..D".H$..D"....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$..D".....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$..D".....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$..D".....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 12:02:02], progressive, precision 8, 1420x1082, components 3
Category:	downloaded
Size (bytes):	42237
Entropy (8bit):	7.182519169540984
Encrypted:	false
SSDEEP:	768:v0rmEN9TyI+Z00k1rrtxXrWY48KLz9FzcOuRtMiC1+Jvn:zIJ0C3WY48KtFwOuRSiPR
MD5:	232B19913357B4C657C182AEAB853992
SHA1:	F9D42EC577FAD344A249637BB0AFDF7F1F9D9171
SHA-256:	270838AC3C0E56430D40E9BA072A11C7212B45583840CF3B938C111D9748B98A
SHA-512:	8646D8764F0C86BFCF367BF682454B6B9B04B1E2105360DC6CB5DFFBCD44A843423A6164196D06B9393802035E692766D7C4C0408363EC30B70924922E5AFA55
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Domain-Parking.jpg
Preview:	......JFIF.....H.H......Exif..II...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 12:02:02.....................................:...........................................&...(.......................................H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...I%}.RI$...I$.$.$..d.IJI%c.............$.e .h..J.v5Tl5.. ....T"A..(..I$.Z..$...I$.....I%}.RI&IK.I$...I%) . .I:.5%%{.z{_.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	25066
Entropy (8bit):	3.729531622434699
Encrypted:	false
SSDEEP:	384:NNQFuqx0sUTmVC557hGpcn6ZF04O3iNtCEkusgLPOcP1nHR4ZHx/B+spYPn+Hz5H:NqsqxEToCu8uF0lixLLWcRHyZp51
MD5:	F55C5F0057D84AA4EEEDAB2A8F4D558C
SHA1:	EDF55FA3D61D93E3EB7EB085F77890B752EBA049
SHA-256:	17CF6709088D4FF6D398CDE251F6394C88AB3CD1D2C3D1FFBE3357A6C54BDD2E
SHA-512:	B346380F6448BF2D3140BA49A71E58B03928F33BADBF29009EFBFF0E5DA0360F56FD53F36666AF56C26F74AF3240AB919E35AE108EA1088E4134F1DCA9F350F4
Malicious:	false
Reputation:	low
Preview:	<svg width="250" height="65" viewBox="0 0 250 65" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M80.1996 37.4998H88.9245V0H80.1996V11.5749C79.1612 11.0678 78.0925 10.6253 76.9996 10.2499C75.7027 9.86294 74.3524 9.6857 72.9996 9.72494C71.3876 9.74368 69.7966 10.0925 68.3246 10.7499C66.8114 11.3824 65.4547 12.338 64.3496 13.5499C63.1559 14.8902 62.2232 16.4419 61.5997 18.1249C60.9097 20.0921 60.5712 22.1654 60.5997 24.2499C60.4075 27.9197 61.4553 31.5476 63.5746 34.5498C64.4907 35.7777 65.6893 36.7665 67.0689 37.4323C68.4485 38.0982 69.9684 38.4215 71.4996 38.3748C73.0443 38.4016 74.5775 38.1035 75.9996 37.4998C77.5082 36.771 78.9192 35.8555 80.1996 34.7748V37.4998ZM80.1996 16.7999V29.9998V30.1248C79.4812 30.6472 78.6892 31.06 77.8496 31.3498C77.047 31.6376 76.2021 31.7897 75.3496 31.7998C74.5255 31.8754 73.6954 31.7512 72.9295 31.4379C72.1636 31.1246 71.4844 30.6313 70.9496 29.9998C69.8787 28.2466 69.3969 26.1966 69.5746 24.1499C69.4535

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 230x101, components 3
Category:	downloaded
Size (bytes):	30229
Entropy (8bit):	7.6614619332375105
Encrypted:	false
SSDEEP:	768:tF9RpiaTsfr3rZkGyvKb5Ywooend03umCI:tFX4aTsfr3rZk3Sbmw8mV
MD5:	F90B38EFE028D24F5514E9CF2203EED9
SHA1:	E11744A0C9753531F0A27B63AA64F5C6F3FA635B
SHA-256:	DAB36F28B5807E060A190A44401CBDE97E5F4FBC999692B7E5B75E29F170F82F
SHA-512:	3D46111096365E683637EE5F9EBB3F37E53A4B81DBB219B6E05722E46C09CE90BF2A5772324775F61FA0CE8E1FB6D5003360B5F2615C0BEF04A63B0263D9F619
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/zkLxDsbw1hz2/48d68b70659b28905e87.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......`.......`.................0210....................0100................................e...........http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x='adobe:ns:meta/'>.<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-01-22</Attrib:Created>. <Attrib:ExtId>ae82471a-0c80-42b3-b7d8-ecbb7f494ea5</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>. </Attrib:Ads>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>2024 ICA Badges (230 x 101 px) - ICA-2024-Platinum</r

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 01:05:12.298676014 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:05:12.298820019 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:05:12.314307928 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:05:14.174082994 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 01:05:14.548691988 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 01:05:14.970556974 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 7, 2024 01:05:15.298666954 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 01:05:16.799104929 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 01:05:19.861231089 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 01:05:21.954919100 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:05:22.064321041 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:05:22.064580917 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:05:22.901751041 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:22.901798964 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:22.901854992 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:22.902318954 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:22.902334929 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.557120085 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.557202101 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:23.562585115 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:23.562592030 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.563011885 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.577677011 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:23.619420052 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.903644085 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.903676033 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.903695107 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.903795004 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:23.903795004 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:23.903814077 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.904011011 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:23.991199017 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.991231918 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.991430044 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:23.991430044 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:23.991465092 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.992842913 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.992870092 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.992893934 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:23.992913008 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:23.992968082 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:23.992968082 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:23.993407965 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.078979015 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.079010010 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.079071045 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.079071045 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.079086065 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.079114914 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.079138994 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.079138994 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.079149961 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.079216957 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.079493999 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.080100060 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.080120087 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.080197096 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.080197096 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.080205917 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.080354929 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.080873013 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.080893040 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.080995083 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.081001997 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.081165075 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.167437077 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.167463064 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.167572975 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.167572975 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.167608023 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.167736053 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.168047905 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.168067932 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.168164015 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.168171883 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.168344975 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.168484926 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.168504953 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.168577909 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.168577909 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.168590069 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.168694019 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.169023991 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.169044018 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.169126034 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.169126034 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.169133902 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.169265985 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.169667959 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.169724941 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.169828892 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.172036886 CEST	49702	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.172056913 CEST	443	49702	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.200979948 CEST	49705	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.201029062 CEST	443	49705	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.201649904 CEST	49705	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.201649904 CEST	49705	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.201685905 CEST	443	49705	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.203174114 CEST	49706	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.203182936 CEST	443	49706	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.203377962 CEST	49706	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.203922033 CEST	49707	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.203972101 CEST	443	49707	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.203998089 CEST	49706	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.204010010 CEST	443	49706	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.204262018 CEST	49707	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.206281900 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.206329107 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.206631899 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.209378004 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.209419966 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.209791899 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.209794998 CEST	49707	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.209808111 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.209815979 CEST	443	49707	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.209994078 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.209994078 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.210035086 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.354425907 CEST	443	49698	104.98.116.138	192.168.2.7
Oct 7, 2024 01:05:24.354717970 CEST	49698	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:05:24.528290987 CEST	49711	80	192.168.2.7	162.255.119.216
Oct 7, 2024 01:05:24.528291941 CEST	49710	80	192.168.2.7	162.255.119.216
Oct 7, 2024 01:05:24.533180952 CEST	80	49711	162.255.119.216	192.168.2.7
Oct 7, 2024 01:05:24.533195972 CEST	80	49710	162.255.119.216	192.168.2.7
Oct 7, 2024 01:05:24.535259962 CEST	49711	80	192.168.2.7	162.255.119.216
Oct 7, 2024 01:05:24.535259962 CEST	49710	80	192.168.2.7	162.255.119.216
Oct 7, 2024 01:05:24.537637949 CEST	49710	80	192.168.2.7	162.255.119.216
Oct 7, 2024 01:05:24.542496920 CEST	80	49710	162.255.119.216	192.168.2.7
Oct 7, 2024 01:05:24.745294094 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 7, 2024 01:05:24.844439983 CEST	443	49705	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.856359959 CEST	443	49707	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.856982946 CEST	443	49706	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.874264002 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.878308058 CEST	49705	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.878346920 CEST	443	49705	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.885063887 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.898547888 CEST	49707	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.898549080 CEST	49706	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.924958944 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.933938026 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.945213079 CEST	49705	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.945246935 CEST	443	49705	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.945859909 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.945887089 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.947199106 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.947217941 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.947532892 CEST	49707	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.947551012 CEST	443	49707	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.947902918 CEST	49707	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.947917938 CEST	443	49707	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.975605011 CEST	49706	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.975630045 CEST	443	49706	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.975843906 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.975861073 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.976223946 CEST	49706	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.976233959 CEST	443	49706	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:24.976564884 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:24.976572037 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.047359943 CEST	80	49710	162.255.119.216	192.168.2.7
Oct 7, 2024 01:05:25.052084923 CEST	443	49707	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.052156925 CEST	443	49707	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.052237034 CEST	49707	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.052438021 CEST	443	49705	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.052460909 CEST	443	49705	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.052531004 CEST	49705	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.052580118 CEST	443	49705	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.052634001 CEST	49705	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.052759886 CEST	443	49705	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.052803040 CEST	443	49705	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.052855968 CEST	49705	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.055304050 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.055707932 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.055767059 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.073584080 CEST	443	49706	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.073610067 CEST	443	49706	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.073667049 CEST	443	49706	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.073702097 CEST	49706	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.073738098 CEST	49706	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.075150013 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.075172901 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.075227022 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.075242996 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.075489998 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.075539112 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.080284119 CEST	49707	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.080284119 CEST	49707	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.080307007 CEST	443	49707	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.080317974 CEST	443	49707	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.080568075 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.080588102 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.080598116 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.080604076 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.082113981 CEST	49705	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.082145929 CEST	443	49705	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.082156897 CEST	49705	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.082163095 CEST	443	49705	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.083446026 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.083475113 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.083489895 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.083494902 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.090687037 CEST	49706	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.090687037 CEST	49706	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.090701103 CEST	443	49706	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.090708971 CEST	443	49706	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.098174095 CEST	49710	80	192.168.2.7	162.255.119.216
Oct 7, 2024 01:05:25.100529909 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.100573063 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.100661993 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.101808071 CEST	49713	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.101860046 CEST	443	49713	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.101939917 CEST	49713	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.102003098 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.102021933 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.105325937 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.105338097 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.105407000 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.105521917 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.105535030 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.106134892 CEST	49713	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.106147051 CEST	443	49713	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.108508110 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.108534098 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.108591080 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.108716011 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.108730078 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.112274885 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.112365007 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.112468004 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.112955093 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.112988949 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.148505926 CEST	49717	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:25.153331995 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:25.153399944 CEST	49717	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:25.153548956 CEST	49717	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:25.158554077 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:25.747627020 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.750360966 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.753451109 CEST	443	49713	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.753957987 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.753988028 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.757121086 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.757128000 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.757574081 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.757585049 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.758204937 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.758208990 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.758636951 CEST	49713	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.758678913 CEST	443	49713	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.759279013 CEST	49713	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.759289026 CEST	443	49713	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.795644999 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.796365023 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.796447039 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.797069073 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.797074080 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.815310955 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 01:05:25.819875956 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:25.819896936 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:25.819911957 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:25.819955111 CEST	49717	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:25.819996119 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:25.820013046 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:25.820029020 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:25.820039988 CEST	49717	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:25.820082903 CEST	49717	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:25.820121050 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:25.820133924 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:25.820194006 CEST	49717	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:25.820349932 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:25.820626974 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:25.820667982 CEST	49717	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:25.824942112 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.852617025 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.852783918 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.852838993 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.854016066 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.854079008 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.855211020 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.855228901 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.855658054 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.855794907 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.855853081 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.856012106 CEST	443	49713	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.856105089 CEST	443	49713	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.856153965 CEST	49713	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.856311083 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.856333971 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.856367111 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.856373072 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.902338028 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.902400970 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.902458906 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:25.952306032 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.952368021 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:25.952439070 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.148576021 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.148576021 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.148638964 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.148664951 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.148925066 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.148956060 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.148992062 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.149003983 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.167515039 CEST	49713	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.167534113 CEST	443	49713	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.167542934 CEST	49713	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.167548895 CEST	443	49713	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.170937061 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.170943975 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.199275017 CEST	49720	443	192.168.2.7	142.250.186.36
Oct 7, 2024 01:05:26.199362040 CEST	443	49720	142.250.186.36	192.168.2.7
Oct 7, 2024 01:05:26.199453115 CEST	49720	443	192.168.2.7	142.250.186.36
Oct 7, 2024 01:05:26.200242043 CEST	49720	443	192.168.2.7	142.250.186.36
Oct 7, 2024 01:05:26.200280905 CEST	443	49720	142.250.186.36	192.168.2.7
Oct 7, 2024 01:05:26.213700056 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.213730097 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.213788033 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.217967987 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.217983961 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.219209909 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.225198984 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.225308895 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.225701094 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.226244926 CEST	49723	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.226269960 CEST	443	49723	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.226332903 CEST	49723	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.229542971 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.229562998 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.229630947 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.230894089 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.238413095 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:26.238446951 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:26.238507986 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:26.240077019 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:26.240091085 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:26.243664026 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.243697882 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.243771076 CEST	49723	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.243783951 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.243784904 CEST	443	49723	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.247179985 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.247212887 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.247273922 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.247766972 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.247786999 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.247972965 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.247984886 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.248907089 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.248925924 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.250842094 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.250859976 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.250912905 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.251163960 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.251173973 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.676163912 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.676307917 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.676321030 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.676348925 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.676362991 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.676373005 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.676378012 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.676400900 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.676403046 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.676415920 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.676419020 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.676434994 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.676453114 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.676469088 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.676496983 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.681261063 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.681274891 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.681298018 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.681406021 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.723149061 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.762485981 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.815907955 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.855247021 CEST	443	49720	142.250.186.36	192.168.2.7
Oct 7, 2024 01:05:26.855639935 CEST	49720	443	192.168.2.7	142.250.186.36
Oct 7, 2024 01:05:26.855669022 CEST	443	49720	142.250.186.36	192.168.2.7
Oct 7, 2024 01:05:26.857145071 CEST	443	49720	142.250.186.36	192.168.2.7
Oct 7, 2024 01:05:26.857574940 CEST	49720	443	192.168.2.7	142.250.186.36
Oct 7, 2024 01:05:26.869935036 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:26.870464087 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:26.870491982 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:26.871541977 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:26.871715069 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:26.897346973 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.898317099 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.898349047 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.898983955 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.898989916 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.901662111 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.902411938 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.902447939 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.903182983 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.903192997 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.903908014 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.904328108 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.904336929 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.905411959 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.905564070 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.905571938 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:26.905868053 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:26.911998987 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.912888050 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.912888050 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.912919044 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.912929058 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.917121887 CEST	443	49723	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.917478085 CEST	49723	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.917505026 CEST	443	49723	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.917944908 CEST	49723	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.917957067 CEST	443	49723	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.923779964 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.924556017 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.924570084 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.927187920 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.927192926 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.998455048 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.998526096 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.998641014 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.998815060 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.998815060 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:26.998857021 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:26.998863935 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.000827074 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.000889063 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.001147032 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.001147985 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.001147985 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.002146959 CEST	49729	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.002245903 CEST	443	49729	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.002899885 CEST	49729	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.004270077 CEST	49729	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.004270077 CEST	49730	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.004293919 CEST	443	49729	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.004307032 CEST	443	49730	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.004460096 CEST	49730	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.004503012 CEST	49730	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.004509926 CEST	443	49730	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.014957905 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.015104055 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.015299082 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.015533924 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.015554905 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.015582085 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.015588999 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.021733999 CEST	443	49723	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.021800995 CEST	443	49723	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.023060083 CEST	49731	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.023112059 CEST	443	49731	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.023216963 CEST	49723	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.023772001 CEST	49731	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.026501894 CEST	49723	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.026501894 CEST	49723	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.026514053 CEST	443	49723	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.026523113 CEST	443	49723	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.028521061 CEST	49731	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.028532028 CEST	443	49731	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.030250072 CEST	49732	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.030272961 CEST	443	49732	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.030435085 CEST	49732	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.030744076 CEST	49732	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.030755997 CEST	443	49732	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.033082962 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.033140898 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.033451080 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.033451080 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.033632040 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.033638000 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.038134098 CEST	49733	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.038183928 CEST	443	49733	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.038678885 CEST	49733	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.038831949 CEST	49733	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.038849115 CEST	443	49733	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.099488020 CEST	49720	443	192.168.2.7	142.250.186.36
Oct 7, 2024 01:05:27.099689007 CEST	443	49720	142.250.186.36	192.168.2.7
Oct 7, 2024 01:05:27.099726915 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.099870920 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.099878073 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.101443052 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:27.101443052 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:27.101469994 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.101605892 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.143420935 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.152483940 CEST	49720	443	192.168.2.7	142.250.186.36
Oct 7, 2024 01:05:27.152486086 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.152486086 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:27.152512074 CEST	443	49720	142.250.186.36	192.168.2.7
Oct 7, 2024 01:05:27.152513027 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.152533054 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.195257902 CEST	49720	443	192.168.2.7	142.250.186.36
Oct 7, 2024 01:05:27.195288897 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.195288897 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:27.207853079 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.207882881 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.207891941 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.207922935 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.207945108 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.207953930 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.207974911 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:27.207993984 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.208019972 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:27.208107948 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:27.289149046 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.289191008 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.289217949 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.289252043 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.289290905 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.289323092 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.289352894 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.289587021 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.293534994 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.293543100 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.295064926 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.297070980 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.297086000 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.297148943 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.297175884 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:27.297175884 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.297188997 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.297199965 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.297251940 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:27.297251940 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:27.298993111 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.299026966 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.299091101 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.299104929 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:27.299104929 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:27.301212072 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:27.301220894 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.307276011 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.307280064 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.307291031 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.307322979 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.307564974 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.310033083 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.310039043 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.365530968 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.376032114 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.377774954 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.377806902 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.383778095 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.383805037 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.383807898 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.383817911 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.383893013 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.383893013 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.390129089 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.396761894 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.396838903 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.397581100 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.397595882 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.402590990 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.402631998 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.402640104 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.405252934 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.408935070 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.414794922 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.414823055 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.420478106 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.420520067 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.420530081 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.421720028 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.421726942 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.426510096 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.426549911 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.426557064 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.429471016 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.432255030 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.438258886 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.438294888 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.438325882 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.438486099 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.438494921 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.463072062 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.463115931 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.463145971 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.465388060 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.465405941 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.467897892 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.468923092 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.468959093 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.468966007 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.469808102 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.472559929 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.477283001 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.479744911 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.482078075 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.482124090 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.482135057 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.486588955 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.486823082 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.489121914 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.489245892 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.494039059 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.495193005 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.495202065 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.498812914 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.499062061 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.499068975 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.501144886 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.503187895 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.503196001 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.507435083 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.511770010 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.511801958 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.511811972 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.515193939 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.515619040 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.520431995 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.521157980 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.525171041 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.525226116 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.525238037 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.526726007 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.526732922 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.526968002 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.529880047 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.534607887 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.534648895 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.534993887 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.535197973 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.535209894 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.539697886 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.544013023 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.544043064 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.544044018 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.544054985 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.545859098 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.581572056 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.647084951 CEST	49721	443	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:27.647119045 CEST	443	49721	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:27.740741014 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.740811110 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.740840912 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.740874052 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.740905046 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.740911007 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.740942955 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.740956068 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.740987062 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741029978 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741064072 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741091013 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.741097927 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741127968 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741162062 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741187096 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.741190910 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741203070 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741249084 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.741250038 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.741250992 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741260052 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741300106 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741302967 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.741309881 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741349936 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741378069 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.741383076 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741424084 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741436005 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.741441011 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.741810083 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.742146969 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.742155075 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.742691994 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.745706081 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.745755911 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.745898962 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.745908976 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.745944023 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.745980024 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.746052980 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.746171951 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.746180058 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.746632099 CEST	443	49732	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.746695995 CEST	443	49729	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.746825933 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.746855974 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.746884108 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.746903896 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.746912003 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.746934891 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.746948957 CEST	49734	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:27.747030973 CEST	443	49734	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:27.747116089 CEST	443	49731	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.747172117 CEST	443	49733	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.747205019 CEST	49734	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:27.747406960 CEST	443	49730	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.747639894 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.747663975 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.747674942 CEST	49734	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:27.747706890 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.747713089 CEST	443	49734	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:27.747737885 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.747747898 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.747770071 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.747800112 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.747946978 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.753437042 CEST	49725	443	192.168.2.7	142.250.181.228
Oct 7, 2024 01:05:27.753462076 CEST	443	49725	142.250.181.228	192.168.2.7
Oct 7, 2024 01:05:27.798264027 CEST	49729	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.798444033 CEST	49730	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.798445940 CEST	49733	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.798445940 CEST	49731	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.798476934 CEST	49732	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.816061974 CEST	49730	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.816087961 CEST	443	49730	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.817650080 CEST	49730	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.817657948 CEST	443	49730	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.818691015 CEST	49732	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.818727016 CEST	443	49732	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.819276094 CEST	49732	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.819295883 CEST	443	49732	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.819948912 CEST	49729	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.819956064 CEST	443	49729	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.820530891 CEST	49729	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.820538044 CEST	443	49729	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.820944071 CEST	49731	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.820951939 CEST	443	49731	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.821787119 CEST	49731	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.821791887 CEST	443	49731	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.822278976 CEST	49733	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.822285891 CEST	443	49733	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.823014021 CEST	49733	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.823029995 CEST	443	49733	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.916322947 CEST	443	49729	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.916389942 CEST	443	49729	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.916451931 CEST	49729	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.916898966 CEST	443	49732	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.916980028 CEST	443	49732	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.917037010 CEST	49732	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.918304920 CEST	443	49730	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.918361902 CEST	443	49730	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.918410063 CEST	49730	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.919982910 CEST	443	49733	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.920110941 CEST	443	49733	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.920180082 CEST	49733	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:27.924048901 CEST	443	49731	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.924094915 CEST	443	49731	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:27.924161911 CEST	49731	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.027573109 CEST	49729	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.027604103 CEST	443	49729	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.030478954 CEST	49731	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.030503988 CEST	443	49731	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.030519009 CEST	49731	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.030524969 CEST	443	49731	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.032913923 CEST	49732	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.032939911 CEST	443	49732	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.032952070 CEST	49732	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.032958984 CEST	443	49732	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.035459042 CEST	49730	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.035470009 CEST	443	49730	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.035481930 CEST	49730	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.035489082 CEST	443	49730	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.037728071 CEST	49733	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.037739992 CEST	443	49733	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.037753105 CEST	49733	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.037759066 CEST	443	49733	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.053036928 CEST	49717	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:28.057935953 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:28.062910080 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.062953949 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.063031912 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.070961952 CEST	49737	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.071000099 CEST	443	49737	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.071074009 CEST	49737	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.076116085 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.076142073 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.086221933 CEST	49737	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.086239100 CEST	443	49737	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.193588018 CEST	49738	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.193645000 CEST	443	49738	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.193718910 CEST	49738	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.199512959 CEST	49739	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.199572086 CEST	443	49739	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.199629068 CEST	49739	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.201596975 CEST	49740	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.201642036 CEST	443	49740	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.201699018 CEST	49740	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.202059984 CEST	49738	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.202078104 CEST	443	49738	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.239940882 CEST	49739	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.239979029 CEST	443	49739	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.240273952 CEST	49740	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.240319014 CEST	443	49740	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.249123096 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:28.277293921 CEST	49741	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.277328968 CEST	443	49741	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.277384043 CEST	49741	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.280869961 CEST	49742	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.280880928 CEST	443	49742	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.280940056 CEST	49742	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.288172960 CEST	49741	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.288186073 CEST	443	49741	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.288455963 CEST	49742	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.288466930 CEST	443	49742	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.298278093 CEST	49717	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:28.413909912 CEST	443	49734	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:28.437473059 CEST	49734	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:28.437562943 CEST	443	49734	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:28.438703060 CEST	443	49734	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:28.438770056 CEST	49734	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:28.441524029 CEST	49734	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:28.441603899 CEST	443	49734	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:28.500021935 CEST	49743	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:28.500081062 CEST	443	49743	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:28.500153065 CEST	49743	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:28.504759073 CEST	49743	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:28.504779100 CEST	443	49743	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:28.647496939 CEST	443	49734	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:28.647568941 CEST	49734	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:28.652334929 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:28.657150030 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:28.657213926 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:28.657727003 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:28.658857107 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:28.658889055 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:28.658953905 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:28.659348965 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:28.659360886 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:28.662457943 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:28.664625883 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:28.664665937 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:28.664737940 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:28.665056944 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:28.665077925 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:28.687417030 CEST	49747	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:28.692262888 CEST	80	49747	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:28.692323923 CEST	49747	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:28.692538023 CEST	49747	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:28.697361946 CEST	80	49747	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:28.714159012 CEST	443	49737	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.714438915 CEST	49737	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.714467049 CEST	443	49737	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.715584040 CEST	443	49737	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.715651035 CEST	49737	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.716082096 CEST	49737	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.716152906 CEST	443	49737	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.716233015 CEST	49737	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.716242075 CEST	443	49737	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.724553108 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.724773884 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.724807024 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.725867033 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.725976944 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.726278067 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.726345062 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.726492882 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.726505995 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.757358074 CEST	49737	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.770091057 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.875534058 CEST	443	49738	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.876251936 CEST	49738	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.876286030 CEST	443	49738	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.876709938 CEST	49738	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.876717091 CEST	443	49738	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.896408081 CEST	443	49740	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.896877050 CEST	49740	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.896927118 CEST	443	49740	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.898117065 CEST	49740	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.898123980 CEST	443	49740	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.917052031 CEST	443	49739	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.917649031 CEST	49739	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.917691946 CEST	443	49739	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.918227911 CEST	49739	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.918234110 CEST	443	49739	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.940085888 CEST	443	49742	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.940541983 CEST	49742	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.940560102 CEST	443	49742	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.941005945 CEST	49742	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.941010952 CEST	443	49742	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.950598001 CEST	443	49741	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.951001883 CEST	49741	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.951011896 CEST	443	49741	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.951416969 CEST	49741	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.951421022 CEST	443	49741	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.980056047 CEST	443	49738	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.980117083 CEST	443	49738	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.980191946 CEST	49738	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.980431080 CEST	49738	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.980431080 CEST	49738	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.980453968 CEST	443	49738	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.980463028 CEST	443	49738	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.983354092 CEST	49748	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.983416080 CEST	443	49748	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.983488083 CEST	49748	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.983650923 CEST	49748	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.983664989 CEST	443	49748	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.991664886 CEST	443	49737	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.991733074 CEST	443	49737	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.991792917 CEST	443	49737	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.991861105 CEST	49737	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.992794037 CEST	49737	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:28.992816925 CEST	443	49737	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:28.996823072 CEST	443	49740	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.996877909 CEST	443	49740	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.997016907 CEST	49740	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.997054100 CEST	49740	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.997073889 CEST	443	49740	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.997088909 CEST	49740	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.997097015 CEST	443	49740	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.999428988 CEST	49749	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.999461889 CEST	443	49749	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:28.999551058 CEST	49749	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.999763966 CEST	49749	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:28.999772072 CEST	443	49749	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.017677069 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.017729044 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.017764091 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.017797947 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.017811060 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.017839909 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.017878056 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.020178080 CEST	443	49739	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.020235062 CEST	443	49739	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.020297050 CEST	49739	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.020463943 CEST	49739	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.020482063 CEST	443	49739	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.020495892 CEST	49739	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.020502090 CEST	443	49739	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.023237944 CEST	49750	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.023271084 CEST	443	49750	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.023401976 CEST	49750	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.023533106 CEST	49750	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.023546934 CEST	443	49750	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.023776054 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.023812056 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.023822069 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.023849010 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.024091959 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.024207115 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.035085917 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.035254955 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.035283089 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.036365032 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.036407948 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.036429882 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.036684990 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.036811113 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.036825895 CEST	443	49736	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.036834955 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.036869049 CEST	49736	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.040992022 CEST	443	49742	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.041068077 CEST	443	49742	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.041167974 CEST	49742	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.041542053 CEST	49742	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.041542053 CEST	49742	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.041559935 CEST	443	49742	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.041564941 CEST	443	49742	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.044054985 CEST	49751	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.044090986 CEST	443	49751	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.044272900 CEST	49751	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.044410944 CEST	49751	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.044425964 CEST	443	49751	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.054471016 CEST	443	49741	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.054532051 CEST	443	49741	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.054682016 CEST	49741	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.054759026 CEST	49741	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.054773092 CEST	443	49741	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.054784060 CEST	49741	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.054789066 CEST	443	49741	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.056910038 CEST	49752	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.056942940 CEST	443	49752	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.057051897 CEST	49752	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.057277918 CEST	49752	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.057286978 CEST	443	49752	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.110929966 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:29.111077070 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:29.111099958 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:29.111161947 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:29.111217976 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:29.111231089 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:29.111249924 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:29.111255884 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:29.111267090 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:29.111278057 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:29.111289978 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:29.111298084 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:29.111310005 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:29.111332893 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:29.116163015 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:29.116199970 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:29.116216898 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:29.116231918 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:29.116255045 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:29.116290092 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:29.143321037 CEST	443	49743	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:29.143414021 CEST	49743	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:29.165563107 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.165606022 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.165829897 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.166852951 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.166863918 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.176654100 CEST	49743	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:29.176668882 CEST	443	49743	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:29.176981926 CEST	443	49743	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:29.291724920 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.330339909 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.330352068 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.331557035 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.331675053 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.331989050 CEST	80	49747	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:29.333900928 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.334022045 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.334547997 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.334563017 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.350940943 CEST	49743	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:29.434437037 CEST	49743	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:29.451236010 CEST	49747	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:29.470159054 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.475409031 CEST	443	49743	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:29.547178984 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.547784090 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.547796011 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.548942089 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.549017906 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.549025059 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.549314022 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.549701929 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.549767017 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.550134897 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.550144911 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.572273970 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.572312117 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.572338104 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.572421074 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.572438955 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.572695971 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.572824955 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.572844982 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.572953939 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.577982903 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.578033924 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.578169107 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.578185081 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.584295988 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.584356070 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.584364891 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.590323925 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.590425014 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.590435028 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.619453907 CEST	443	49743	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:29.619522095 CEST	443	49743	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:29.619641066 CEST	49743	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:29.624066114 CEST	443	49748	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.634701967 CEST	443	49749	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.642441034 CEST	49743	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:29.642469883 CEST	443	49743	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:29.642488956 CEST	49743	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:29.642494917 CEST	443	49743	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:29.650772095 CEST	49748	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.650825977 CEST	443	49748	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.651374102 CEST	49748	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.651381016 CEST	443	49748	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.654995918 CEST	49749	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.655009985 CEST	443	49749	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.656069040 CEST	49749	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.656080961 CEST	443	49749	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.658813000 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.658921957 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.658940077 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.660720110 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.660943031 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.660958052 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.666934013 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.667040110 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.667049885 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.671829939 CEST	443	49750	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.673310041 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.673583031 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.673593044 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.677505016 CEST	49750	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.677516937 CEST	443	49750	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.679521084 CEST	443	49751	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.679649115 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.679995060 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.680011988 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.685709000 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.685805082 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.685812950 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.690399885 CEST	443	49752	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.692071915 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.692190886 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.692198992 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.697900057 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.698050976 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.698060989 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.703705072 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.703772068 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.703780890 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.709599018 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.709738016 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.709748030 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.715321064 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.715501070 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.715522051 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.721189976 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.721213102 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.721337080 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.721349001 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.721652985 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.727062941 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.745682001 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.745731115 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.745786905 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.745815992 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.745932102 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.746171951 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.748178005 CEST	443	49748	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.748248100 CEST	443	49748	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.748364925 CEST	49748	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.750799894 CEST	443	49749	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.750864029 CEST	443	49749	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.751056910 CEST	49749	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.752089024 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.752113104 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.752172947 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.752188921 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.752521038 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.755409956 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.755641937 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.757376909 CEST	49752	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.758043051 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.764019012 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.764044046 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.764189005 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.764204979 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.764379978 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.769721031 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.775608063 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.775643110 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.775681019 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.775692940 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.776048899 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.780721903 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.782598972 CEST	49751	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.786808968 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.786851883 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.787117958 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.787137032 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.787237883 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.791330099 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.794751883 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.796597958 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.796704054 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.796726942 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.796747923 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.797245026 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.801516056 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.806262016 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.806337118 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.806456089 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.806474924 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.806705952 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.810302019 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.814536095 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.814594030 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.814613104 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.818547010 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.818625927 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.818630934 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.818639040 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.818866014 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.822649956 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.825423956 CEST	49750	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.825433969 CEST	443	49750	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.826220989 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.826234102 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.826505899 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.826531887 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.826571941 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.826581955 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.826647997 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.826740026 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.829046011 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.829130888 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.829576015 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:29.830156088 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.830431938 CEST	49749	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.830431938 CEST	49749	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.830456018 CEST	443	49749	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.830461979 CEST	443	49749	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.830569029 CEST	49751	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.830590963 CEST	443	49751	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.831104040 CEST	49751	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.831111908 CEST	443	49751	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.834045887 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.834068060 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.834289074 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.834300995 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.835308075 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.837882042 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.840293884 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.840316057 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.840341091 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.840378046 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.840388060 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.840403080 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.844944000 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.845113993 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.845127106 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.845166922 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.845176935 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.845668077 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.845699072 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.845715046 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.845763922 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.845777988 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.845799923 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.845860958 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.847136974 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.847269058 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.847279072 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.849421024 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.849529028 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.849538088 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.851788044 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.854046106 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.854068041 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.854144096 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.854155064 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.856497049 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.858638048 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.858731031 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.858772993 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.858782053 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.858839989 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.861169100 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.863250017 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.863262892 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.863322973 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.863403082 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.863414049 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.865631104 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.866317034 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.866326094 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.867965937 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.868011951 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.868029118 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.870284081 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.871229887 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.871238947 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.872621059 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.872699022 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.872714996 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.875077009 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.875148058 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.875154972 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.875257969 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:29.875377893 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:29.875406027 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:29.922559023 CEST	443	49750	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.922631025 CEST	443	49750	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.923127890 CEST	49750	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.926131964 CEST	443	49751	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.926222086 CEST	443	49751	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:29.927236080 CEST	49751	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:29.932379961 CEST	80	49711	162.255.119.216	192.168.2.7
Oct 7, 2024 01:05:29.933653116 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.933676958 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.933759928 CEST	49711	80	192.168.2.7	162.255.119.216
Oct 7, 2024 01:05:29.933826923 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.933826923 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.933840990 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.933882952 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.934489965 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.934530020 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.934556007 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.934562922 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.934581041 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.934920073 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.934988022 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:29.935059071 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:29.935338974 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:30.072417974 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.072465897 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.072499990 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.072530985 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.072546959 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.072559118 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.072696924 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.078250885 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.078284979 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.078413963 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.078437090 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.078449965 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.078536987 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.084748030 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.084877014 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.084884882 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.090816975 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.090945959 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.090955019 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.159070015 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.159177065 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.159192085 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.161041021 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.161508083 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.161509037 CEST	49752	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.161516905 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.161535025 CEST	443	49752	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.162982941 CEST	49752	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.162986994 CEST	443	49752	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.165883064 CEST	49748	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.165915966 CEST	443	49748	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.165934086 CEST	49748	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.165942907 CEST	443	49748	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.167257071 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.167409897 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.167417049 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.168294907 CEST	49750	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.168294907 CEST	49750	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.168320894 CEST	443	49750	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.168330908 CEST	443	49750	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.170424938 CEST	49751	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.170424938 CEST	49751	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.170443058 CEST	443	49751	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.170459986 CEST	443	49751	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.173480988 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.173572063 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.173578978 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.174026012 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:30.179847956 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.179956913 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.179964066 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.184051037 CEST	49756	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.184096098 CEST	443	49756	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.184160948 CEST	49756	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.184294939 CEST	49756	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.184312105 CEST	443	49756	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.185779095 CEST	49757	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.185806036 CEST	443	49757	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.186023951 CEST	49757	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.186033010 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.186239958 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.186245918 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.189629078 CEST	49746	443	192.168.2.7	142.250.186.132
Oct 7, 2024 01:05:30.189637899 CEST	443	49746	142.250.186.132	192.168.2.7
Oct 7, 2024 01:05:30.190660954 CEST	49745	443	192.168.2.7	204.93.142.142
Oct 7, 2024 01:05:30.190676928 CEST	443	49745	204.93.142.142	192.168.2.7
Oct 7, 2024 01:05:30.192264080 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.192646980 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.192652941 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.198158979 CEST	49758	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.198168039 CEST	443	49758	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.198225975 CEST	49758	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.198379993 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.198885918 CEST	49758	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.198901892 CEST	443	49758	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.198951006 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.198957920 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.199120045 CEST	49757	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.199131966 CEST	443	49757	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.203988075 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.204472065 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.204478979 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.208322048 CEST	49759	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.208333969 CEST	443	49759	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.208425045 CEST	49759	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.208586931 CEST	49759	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.208599091 CEST	443	49759	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.209918976 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.210777044 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.210783958 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.213821888 CEST	49711	80	192.168.2.7	162.255.119.216
Oct 7, 2024 01:05:30.215785980 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.216114044 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.216121912 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.218621969 CEST	80	49711	162.255.119.216	192.168.2.7
Oct 7, 2024 01:05:30.221436977 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.221544981 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.221551895 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.227504969 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.227664948 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.227672100 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.229007959 CEST	49760	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:30.229018927 CEST	443	49760	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:30.229140997 CEST	49760	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:30.229686975 CEST	49760	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:30.229700089 CEST	443	49760	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:30.245773077 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.245887995 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.246001005 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.246011019 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.246288061 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.246566057 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.252387047 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.252484083 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.252882957 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.252891064 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.253189087 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.258460999 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.264492989 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.264517069 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.264539003 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.264547110 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.264602900 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.270621061 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.275809050 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.275852919 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.276071072 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.276079893 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.276319981 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.281080961 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.286274910 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.286350012 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.286356926 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.291891098 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.291927099 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.291941881 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.291959047 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.292045116 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.301820993 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.315124989 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.315164089 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.315258026 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.315269947 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.315361977 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.315377951 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.315390110 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.315500975 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.315741062 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.316143036 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.316303968 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.316310883 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.323642015 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.323669910 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.323790073 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.323800087 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.324002981 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.327414989 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.327824116 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.327850103 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.328468084 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.328476906 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.328794956 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.330617905 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.334475040 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.334594011 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.334597111 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.334614038 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.334743977 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.338313103 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.340614080 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.340697050 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.340784073 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.340856075 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.341022015 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.341041088 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.343034983 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.343151093 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.343161106 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.345351934 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.345451117 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.345459938 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.347635984 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.347873926 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.347882032 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.349956036 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.350008965 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.350017071 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.352354050 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.352891922 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.352900028 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.354545116 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.354624987 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.354633093 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.356970072 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.357215881 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.357223988 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.359144926 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.359205008 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.359215975 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.361507893 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.361732960 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.361745119 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.363794088 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.363841057 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.363851070 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.366292000 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.366358995 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.366369009 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.368402004 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.368490934 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.368500948 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.370803118 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.370959044 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.370974064 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.373094082 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.373194933 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.373204947 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.376106024 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.376318932 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.376328945 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.376391888 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.376480103 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.379173994 CEST	49753	443	192.168.2.7	142.250.186.46
Oct 7, 2024 01:05:30.379192114 CEST	443	49753	142.250.186.46	192.168.2.7
Oct 7, 2024 01:05:30.521436930 CEST	443	49752	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.522248030 CEST	443	49752	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.522336006 CEST	49752	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.522581100 CEST	49752	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.522581100 CEST	49752	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.522603035 CEST	443	49752	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.522617102 CEST	443	49752	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.528964043 CEST	49761	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.529006958 CEST	443	49761	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.529144049 CEST	49761	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.529670954 CEST	49761	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.529685974 CEST	443	49761	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.849636078 CEST	443	49757	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.850177050 CEST	49757	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.850213051 CEST	443	49757	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.850832939 CEST	49757	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.850838900 CEST	443	49757	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.851381063 CEST	443	49759	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.851732016 CEST	49759	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.851767063 CEST	443	49759	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.852200031 CEST	49759	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.852210045 CEST	443	49759	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.852538109 CEST	443	49756	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.852927923 CEST	49756	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.852948904 CEST	443	49756	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.853355885 CEST	49756	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.853362083 CEST	443	49756	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.856956005 CEST	443	49758	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.857362986 CEST	49758	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.857377052 CEST	443	49758	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.857820988 CEST	49758	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.857825994 CEST	443	49758	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.872493029 CEST	443	49760	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:30.872564077 CEST	49760	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:30.874171972 CEST	49760	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:30.874180079 CEST	443	49760	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:30.874859095 CEST	443	49760	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:30.875941992 CEST	49760	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:30.919410944 CEST	443	49760	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:30.947007895 CEST	443	49757	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.947151899 CEST	443	49757	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.947222948 CEST	49757	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.947324991 CEST	49757	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.947343111 CEST	443	49757	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.947349072 CEST	49757	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.947355986 CEST	443	49757	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.950253963 CEST	443	49759	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.950314999 CEST	443	49759	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.950364113 CEST	49759	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.950510979 CEST	49759	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.950535059 CEST	443	49759	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.950546026 CEST	49759	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.950551987 CEST	443	49759	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.951001883 CEST	49762	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.951025009 CEST	443	49762	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.951083899 CEST	49762	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.951508999 CEST	49762	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.951522112 CEST	443	49762	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.953324080 CEST	49763	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.953358889 CEST	443	49763	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.953418016 CEST	49763	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.953571081 CEST	49763	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.953584909 CEST	443	49763	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.956688881 CEST	443	49756	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.956758976 CEST	443	49756	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.956820011 CEST	49756	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.957931042 CEST	443	49758	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.957993984 CEST	443	49758	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.958048105 CEST	49758	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.962498903 CEST	49758	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.962527037 CEST	443	49758	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:30.962542057 CEST	49758	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:30.962549925 CEST	443	49758	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.079600096 CEST	49756	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.079647064 CEST	443	49756	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.079663992 CEST	49756	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.079670906 CEST	443	49756	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.104237080 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.109097004 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.112781048 CEST	49766	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.112827063 CEST	443	49766	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.112878084 CEST	49766	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.113452911 CEST	49767	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.113495111 CEST	443	49767	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.113606930 CEST	49767	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.114119053 CEST	49766	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.114141941 CEST	443	49766	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.114890099 CEST	49767	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.114908934 CEST	443	49767	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.119930983 CEST	49768	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.119966984 CEST	443	49768	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.120027065 CEST	49768	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.125078917 CEST	49770	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.125118971 CEST	443	49770	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.125206947 CEST	49770	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.128391027 CEST	49768	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.128410101 CEST	443	49768	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.129060030 CEST	49770	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.129075050 CEST	443	49770	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.150600910 CEST	443	49760	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:31.150669098 CEST	443	49760	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:31.150722980 CEST	49760	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:31.164820910 CEST	49760	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:31.164839983 CEST	443	49760	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:31.164864063 CEST	49760	443	192.168.2.7	184.28.90.27
Oct 7, 2024 01:05:31.164870977 CEST	443	49760	184.28.90.27	192.168.2.7
Oct 7, 2024 01:05:31.195277929 CEST	443	49761	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.199845076 CEST	49761	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.199870110 CEST	443	49761	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.200071096 CEST	49761	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.200077057 CEST	443	49761	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.202740908 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.202914000 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.202964067 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.202965021 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.202976942 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.203046083 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.203052044 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.203066111 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.203077078 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.203089952 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.203113079 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.203130007 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.203852892 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.203872919 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.203885078 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.203896046 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.203907967 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.203973055 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.203973055 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.204685926 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.204786062 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.204878092 CEST	80	49722	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.260590076 CEST	49722	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.298635960 CEST	443	49761	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.298743010 CEST	443	49761	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.298809052 CEST	49761	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.365840912 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:31.365900993 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:31.365973949 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:31.367527962 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:31.367548943 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:31.369061947 CEST	49761	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.369083881 CEST	443	49761	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.369096994 CEST	49761	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.369103909 CEST	443	49761	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.378400087 CEST	49772	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.378438950 CEST	443	49772	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.378509998 CEST	49772	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.379020929 CEST	49772	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.379040003 CEST	443	49772	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.438889980 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.443882942 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.538197041 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.538410902 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.538420916 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.538470030 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.538490057 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.538530111 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.538539886 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.538603067 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.538650990 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.538841009 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.538887024 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.538899899 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.538929939 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.539262056 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.539275885 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.539294958 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.539304018 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.539308071 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.539320946 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.539333105 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.539335966 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.539357901 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.540107965 CEST	80	49744	205.234.175.175	192.168.2.7
Oct 7, 2024 01:05:31.540157080 CEST	49744	80	192.168.2.7	205.234.175.175
Oct 7, 2024 01:05:31.590317965 CEST	443	49762	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.593424082 CEST	443	49763	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.666623116 CEST	49762	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.666659117 CEST	443	49762	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.666737080 CEST	49763	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.666773081 CEST	443	49763	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.667226076 CEST	49762	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.667232037 CEST	443	49762	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.667289019 CEST	49763	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.667299032 CEST	443	49763	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.761760950 CEST	443	49768	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.761945963 CEST	443	49762	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.761976004 CEST	443	49770	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.762134075 CEST	443	49762	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.762213945 CEST	49762	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.764250040 CEST	443	49766	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.766057014 CEST	443	49763	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.766132116 CEST	443	49763	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.766187906 CEST	49763	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.766241074 CEST	49766	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.766257048 CEST	443	49766	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.766659021 CEST	443	49766	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.766676903 CEST	443	49766	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.766716957 CEST	49766	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.766731024 CEST	443	49766	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.766748905 CEST	49766	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.766768932 CEST	49766	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.767416000 CEST	443	49766	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.774370909 CEST	49766	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.774476051 CEST	443	49766	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.774535894 CEST	49766	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.774549961 CEST	443	49766	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.838151932 CEST	443	49767	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.838392973 CEST	49768	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.838428020 CEST	443	49768	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.838841915 CEST	49768	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.838850975 CEST	443	49768	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.839093924 CEST	49762	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.839112997 CEST	443	49762	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.839128971 CEST	49762	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.839135885 CEST	443	49762	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.840500116 CEST	49770	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.840524912 CEST	443	49770	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.841265917 CEST	49770	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.841284990 CEST	443	49770	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.841468096 CEST	49763	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.841505051 CEST	443	49763	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.841519117 CEST	49763	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.841527939 CEST	443	49763	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.843539953 CEST	49767	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.843558073 CEST	443	49767	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.844113111 CEST	443	49767	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.844126940 CEST	443	49767	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.844192982 CEST	49767	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.844202042 CEST	443	49767	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.844253063 CEST	49767	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.844852924 CEST	443	49767	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.845612049 CEST	49773	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.845655918 CEST	443	49773	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.845747948 CEST	49773	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.845926046 CEST	49773	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.845938921 CEST	443	49773	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.846250057 CEST	49767	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.846326113 CEST	443	49767	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.846405029 CEST	49767	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.858747959 CEST	49774	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.858764887 CEST	443	49774	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.858819008 CEST	49774	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.859092951 CEST	49774	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.859100103 CEST	443	49774	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.877511024 CEST	49766	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.887413979 CEST	443	49767	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:31.935148954 CEST	443	49768	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.935218096 CEST	443	49768	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.935309887 CEST	49768	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.935509920 CEST	49768	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.935523987 CEST	443	49768	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.935534954 CEST	49768	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.935539961 CEST	443	49768	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.936918020 CEST	443	49770	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.936986923 CEST	443	49770	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.937062025 CEST	49770	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.939358950 CEST	49770	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.939378977 CEST	443	49770	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.939404964 CEST	49770	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.939412117 CEST	443	49770	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.946072102 CEST	49775	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.946100950 CEST	443	49775	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.946357012 CEST	49775	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.947040081 CEST	49775	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.947055101 CEST	443	49775	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.947277069 CEST	49776	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.947313070 CEST	443	49776	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.947375059 CEST	49776	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.947565079 CEST	49776	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:31.947582006 CEST	443	49776	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:31.978041887 CEST	49767	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:31.978056908 CEST	443	49767	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:32.025998116 CEST	443	49772	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.028115034 CEST	49772	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.028135061 CEST	443	49772	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.029299974 CEST	49772	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.029305935 CEST	443	49772	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.038285971 CEST	443	49766	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:32.038371086 CEST	443	49766	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:32.038455963 CEST	49766	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:32.039446115 CEST	49766	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:32.039470911 CEST	443	49766	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:32.039953947 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.040885925 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.040901899 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.041877985 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.042124987 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.042691946 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.042756081 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.043180943 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.043190002 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.054505110 CEST	49779	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:32.054550886 CEST	443	49779	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:32.054641008 CEST	49779	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:32.054847002 CEST	49779	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:32.054862976 CEST	443	49779	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:32.080645084 CEST	49767	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:32.113378048 CEST	443	49767	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:32.113465071 CEST	443	49767	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:32.113526106 CEST	49767	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:32.128793955 CEST	443	49772	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.128860950 CEST	443	49772	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.128992081 CEST	49767	443	192.168.2.7	172.217.16.193
Oct 7, 2024 01:05:32.129009962 CEST	443	49767	172.217.16.193	192.168.2.7
Oct 7, 2024 01:05:32.129019976 CEST	49772	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.145685911 CEST	49772	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.145709038 CEST	443	49772	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.145741940 CEST	49772	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.145750046 CEST	443	49772	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.180721998 CEST	49780	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.180758953 CEST	443	49780	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.180831909 CEST	49780	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.181654930 CEST	49780	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.181670904 CEST	443	49780	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.247411013 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.247781992 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.324549913 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.324611902 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.324655056 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.324687958 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.324704885 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.324722052 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.324767113 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.330846071 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.330914021 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.330945015 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.330959082 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.331044912 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.331063032 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.338537931 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.338612080 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.338641882 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.349282026 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.349354029 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.349366903 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.416757107 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.416786909 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.416812897 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.416868925 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.416886091 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.416903019 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.420130968 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.420209885 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.420218945 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.426799059 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.426985025 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.426996946 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.432750940 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.433367968 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.433377981 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.439017057 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.441481113 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.441490889 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.445307016 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.445394993 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.445405006 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.451539040 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.453562021 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.453581095 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.457768917 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.457865953 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.457880974 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.464088917 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.467303038 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.467317104 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.470266104 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.470345020 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.470361948 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.476569891 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.476603985 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.476739883 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.476748943 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.479314089 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.482693911 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.489025116 CEST	443	49773	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.505573988 CEST	443	49774	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.509301901 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.509337902 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.509358883 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.509377003 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.509500980 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.509663105 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.510149002 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.510179043 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.510202885 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.510211945 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.511245966 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.512537003 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.518886089 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.518923998 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.519186020 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.519197941 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.523289919 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.524687052 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.530589104 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.530618906 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.530817032 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.530833960 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.530949116 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.536053896 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.541134119 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.541160107 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.541361094 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.541373968 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.543268919 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.546443939 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.551404953 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.551431894 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.551525116 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.551546097 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.555229902 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.556345940 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.560944080 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.560978889 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.561125040 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.561137915 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.563404083 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.566195011 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.569750071 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.569868088 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.569999933 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.570009947 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.571218014 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.573940039 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.578133106 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.578161955 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.578294039 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.578305006 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.579273939 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.581918955 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.583234072 CEST	49773	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.586303949 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.586333990 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.586415052 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.586426973 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.587218046 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.589864016 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.593722105 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.593756914 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.593869925 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.593883991 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.595323086 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.596018076 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.596064091 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.596504927 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.596513987 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.601560116 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.601820946 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.601851940 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.601890087 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.601902008 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.601934910 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.603085995 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.603395939 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.603404045 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.604940891 CEST	443	49776	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.605393887 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.607404947 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.607430935 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.607702971 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.610018015 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.610054016 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.610105038 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.610105038 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.610116959 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.610270977 CEST	443	49775	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.612297058 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.614619970 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.614726067 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.614737034 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.615258932 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.615272999 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.617146969 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.617373943 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.617386103 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.619330883 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.622823000 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.622912884 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.622920990 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.623366117 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.623373032 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.623934984 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.624079943 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.624089003 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.628324032 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.628557920 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.628631115 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.628936052 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.628950119 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.633446932 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.633642912 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.633785963 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.634527922 CEST	49781	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:32.634565115 CEST	443	49781	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:32.634625912 CEST	49781	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:32.655278921 CEST	49781	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:32.655289888 CEST	443	49781	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:32.661374092 CEST	49774	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.661514997 CEST	49775	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.689275980 CEST	49773	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.689305067 CEST	443	49773	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.690648079 CEST	49773	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.690653086 CEST	443	49773	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.691313982 CEST	49774	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.691318035 CEST	443	49774	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.692007065 CEST	49774	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.692011118 CEST	443	49774	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.712034941 CEST	49776	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.712053061 CEST	443	49776	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.734472990 CEST	49776	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.734489918 CEST	443	49776	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.738364935 CEST	49775	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.738378048 CEST	443	49775	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.754036903 CEST	49775	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.754053116 CEST	443	49775	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.768795013 CEST	443	49779	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:32.785653114 CEST	443	49773	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.785734892 CEST	443	49773	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.785789013 CEST	49773	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.788921118 CEST	443	49774	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.788991928 CEST	443	49774	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.789042950 CEST	49774	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.803253889 CEST	49782	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:32.803306103 CEST	443	49782	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:32.803368092 CEST	49782	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:32.804117918 CEST	49783	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:32.804177046 CEST	443	49783	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:32.804224014 CEST	49783	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:32.805094004 CEST	49784	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:32.805124044 CEST	443	49784	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:32.805200100 CEST	49784	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:32.805354118 CEST	49779	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:32.805372953 CEST	443	49779	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:32.805618048 CEST	49734	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:32.805814028 CEST	443	49779	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:32.805833101 CEST	443	49779	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:32.805867910 CEST	49779	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:32.805876970 CEST	443	49779	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:32.805902958 CEST	49779	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:32.805916071 CEST	49779	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:32.806042910 CEST	49782	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:32.806060076 CEST	443	49782	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:32.806492090 CEST	49783	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:32.806509018 CEST	443	49783	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:32.806550980 CEST	443	49779	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:32.806819916 CEST	49784	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:32.806847095 CEST	443	49784	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:32.807229042 CEST	49779	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:32.807338953 CEST	49779	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:32.807446003 CEST	443	49779	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:32.824361086 CEST	49773	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.824381113 CEST	443	49773	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.824392080 CEST	49773	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.824398041 CEST	443	49773	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.826672077 CEST	49774	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.826678038 CEST	443	49774	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.829924107 CEST	443	49776	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.829988003 CEST	443	49776	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.830029964 CEST	49776	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.837821007 CEST	49776	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.837838888 CEST	443	49776	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.837883949 CEST	49776	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.837892056 CEST	443	49776	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.841229916 CEST	443	49780	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.843135118 CEST	49785	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.843162060 CEST	443	49785	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.843214989 CEST	49785	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.845097065 CEST	49786	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.845119953 CEST	443	49786	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.845164061 CEST	49786	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.846329927 CEST	49780	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.846345901 CEST	443	49780	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.846939087 CEST	49780	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.846945047 CEST	443	49780	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.847404957 CEST	443	49734	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:32.847410917 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.847799063 CEST	49785	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.847820044 CEST	443	49785	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.848135948 CEST	49786	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.848150969 CEST	443	49786	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.849692106 CEST	49787	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.849724054 CEST	443	49787	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.849776030 CEST	49787	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.849920034 CEST	49787	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.849935055 CEST	443	49787	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.856770039 CEST	443	49775	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.856833935 CEST	443	49775	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.856901884 CEST	49775	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.865894079 CEST	49771	443	192.168.2.7	142.250.185.238
Oct 7, 2024 01:05:32.865932941 CEST	443	49771	142.250.185.238	192.168.2.7
Oct 7, 2024 01:05:32.867249012 CEST	49775	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.867249012 CEST	49775	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.867265940 CEST	443	49775	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.867275000 CEST	443	49775	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.872888088 CEST	49788	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.872920990 CEST	443	49788	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.873013973 CEST	49788	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.873183012 CEST	49788	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.873202085 CEST	443	49788	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.880096912 CEST	49779	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:32.880125046 CEST	443	49779	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:32.921890020 CEST	49698	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:05:32.922307014 CEST	49789	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:05:32.922343969 CEST	443	49789	104.98.116.138	192.168.2.7
Oct 7, 2024 01:05:32.922425985 CEST	49789	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:05:32.923891068 CEST	49789	443	192.168.2.7	104.98.116.138
Oct 7, 2024 01:05:32.923909903 CEST	443	49789	104.98.116.138	192.168.2.7
Oct 7, 2024 01:05:32.926841974 CEST	443	49698	104.98.116.138	192.168.2.7
Oct 7, 2024 01:05:32.952766895 CEST	443	49780	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.952840090 CEST	443	49780	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.952887058 CEST	49780	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.953059912 CEST	49780	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.953078032 CEST	443	49780	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.953084946 CEST	49780	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.953090906 CEST	443	49780	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.955590010 CEST	49790	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.955615997 CEST	443	49790	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.955679893 CEST	49790	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.955821991 CEST	49790	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:32.955840111 CEST	443	49790	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:32.995145082 CEST	49779	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:33.010103941 CEST	443	49734	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.010946035 CEST	49734	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.011064053 CEST	443	49734	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.011135101 CEST	49734	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.038836956 CEST	443	49779	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:33.039030075 CEST	443	49779	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:33.039160967 CEST	49779	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:33.050959110 CEST	49779	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:33.050983906 CEST	443	49779	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:33.251143932 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:33.251241922 CEST	49717	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:33.303128004 CEST	443	49781	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:33.303515911 CEST	49781	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:33.303534031 CEST	443	49781	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:33.304034948 CEST	443	49781	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:33.304049969 CEST	443	49781	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:33.304105043 CEST	49781	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:33.304115057 CEST	443	49781	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:33.304156065 CEST	49781	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:33.305119991 CEST	443	49781	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:33.305331945 CEST	49781	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:33.305407047 CEST	443	49781	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:33.305469990 CEST	49781	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:33.305476904 CEST	443	49781	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:33.380100012 CEST	49781	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:33.430250883 CEST	443	49782	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.430958033 CEST	49782	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.430978060 CEST	443	49782	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.432076931 CEST	443	49782	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.432168007 CEST	49782	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.432789087 CEST	49782	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.432857990 CEST	443	49782	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.433547974 CEST	49782	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.433557034 CEST	443	49782	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.455890894 CEST	443	49784	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.456379890 CEST	443	49783	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.464591980 CEST	49784	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.464607000 CEST	443	49784	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.465089083 CEST	49783	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.465115070 CEST	443	49783	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.465563059 CEST	443	49783	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.465763092 CEST	443	49784	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.465832949 CEST	49784	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.469281912 CEST	49783	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.469378948 CEST	443	49783	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.471534014 CEST	49784	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.471618891 CEST	443	49784	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.472318888 CEST	49783	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.472647905 CEST	49784	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.472656965 CEST	443	49784	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.490852118 CEST	443	49786	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.498019934 CEST	443	49787	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.507864952 CEST	443	49788	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.509533882 CEST	49786	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.509543896 CEST	443	49786	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.510580063 CEST	49786	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.510597944 CEST	443	49786	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.511245966 CEST	49787	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.511265993 CEST	443	49787	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.512103081 CEST	49787	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.512108088 CEST	443	49787	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.512552977 CEST	49788	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.512574911 CEST	443	49788	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.513418913 CEST	49788	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.513425112 CEST	443	49788	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.519403934 CEST	443	49783	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.520464897 CEST	443	49785	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.521557093 CEST	49785	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.521581888 CEST	443	49785	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.522306919 CEST	49784	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.522847891 CEST	49785	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.522855043 CEST	443	49785	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.574171066 CEST	443	49781	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:33.574285984 CEST	443	49781	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:33.574336052 CEST	49781	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:33.593686104 CEST	49781	443	192.168.2.7	142.250.185.97
Oct 7, 2024 01:05:33.593702078 CEST	443	49781	142.250.185.97	192.168.2.7
Oct 7, 2024 01:05:33.601632118 CEST	443	49790	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.606025934 CEST	49790	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.606050968 CEST	443	49790	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.606157064 CEST	443	49786	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.606220961 CEST	443	49786	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.606434107 CEST	49786	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.607325077 CEST	49790	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.607330084 CEST	443	49790	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.609528065 CEST	443	49787	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.609606981 CEST	443	49788	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.609674931 CEST	443	49788	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.609695911 CEST	443	49787	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.609730005 CEST	49788	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.609752893 CEST	49787	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.610806942 CEST	49787	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.610822916 CEST	443	49787	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.610832930 CEST	49787	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.610837936 CEST	443	49787	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.617511034 CEST	49786	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.617518902 CEST	443	49786	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.617603064 CEST	49786	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.617608070 CEST	443	49786	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.625225067 CEST	443	49785	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.625273943 CEST	443	49785	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.625344992 CEST	49785	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.626070976 CEST	49788	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.626106977 CEST	443	49788	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.626122952 CEST	49788	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.626128912 CEST	443	49788	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.636445045 CEST	49785	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.636455059 CEST	443	49785	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.639421940 CEST	443	49782	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.639511108 CEST	49782	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.640574932 CEST	49793	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.640607119 CEST	443	49793	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.640680075 CEST	49793	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.641752005 CEST	49793	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.641765118 CEST	443	49793	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.645292997 CEST	49794	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.645302057 CEST	443	49794	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.645441055 CEST	49794	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.645859957 CEST	49794	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.645870924 CEST	443	49794	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.646385908 CEST	49795	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.646420956 CEST	443	49795	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.646471977 CEST	49795	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.648011923 CEST	49796	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.648046970 CEST	443	49796	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.648102045 CEST	49796	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.648509979 CEST	49795	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.648521900 CEST	443	49795	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.648731947 CEST	49796	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.648744106 CEST	443	49796	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.654155970 CEST	49717	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:33.658920050 CEST	80	49717	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:33.707324028 CEST	443	49790	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.707403898 CEST	443	49790	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.707526922 CEST	49790	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.707629919 CEST	49790	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.707629919 CEST	49790	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.707654953 CEST	443	49790	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.707667112 CEST	443	49790	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.712146044 CEST	49797	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.712194920 CEST	443	49797	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.712260008 CEST	49797	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.712443113 CEST	49797	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:33.712460995 CEST	443	49797	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:33.715805054 CEST	443	49782	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.715935946 CEST	443	49782	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.716026068 CEST	49782	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.716780901 CEST	49782	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.716780901 CEST	49782	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.716798067 CEST	443	49782	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.717284918 CEST	49782	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.746059895 CEST	443	49783	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.746288061 CEST	443	49783	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.746345043 CEST	49783	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.747574091 CEST	443	49784	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.747756004 CEST	443	49784	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.747904062 CEST	49784	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.750365019 CEST	49784	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.750381947 CEST	443	49784	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:33.751431942 CEST	49783	443	192.168.2.7	142.250.185.78
Oct 7, 2024 01:05:33.751447916 CEST	443	49783	142.250.185.78	192.168.2.7
Oct 7, 2024 01:05:34.284673929 CEST	443	49795	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.285247087 CEST	443	49794	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.285382032 CEST	49795	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.285417080 CEST	443	49795	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.285804033 CEST	443	49793	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.286148071 CEST	49795	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.286153078 CEST	443	49795	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.286823034 CEST	49794	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.286855936 CEST	443	49794	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.287411928 CEST	49794	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.287416935 CEST	443	49794	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.287888050 CEST	49793	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.287899971 CEST	443	49793	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.288378000 CEST	49793	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.288382053 CEST	443	49793	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.297538042 CEST	443	49796	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.297966957 CEST	49796	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.297981977 CEST	443	49796	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.298360109 CEST	49796	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.298365116 CEST	443	49796	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.333211899 CEST	80	49747	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:34.333295107 CEST	49747	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:34.363003969 CEST	443	49797	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.363951921 CEST	49797	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.364001989 CEST	443	49797	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.364548922 CEST	49797	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.364567041 CEST	443	49797	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.382777929 CEST	443	49794	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.382934093 CEST	443	49794	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.383141041 CEST	443	49795	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.383174896 CEST	49794	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.383224964 CEST	443	49795	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.383282900 CEST	49795	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.383949041 CEST	443	49793	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.384094954 CEST	443	49793	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.384156942 CEST	49793	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.391886950 CEST	49794	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.391901016 CEST	443	49794	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.391913891 CEST	49794	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.391918898 CEST	443	49794	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.392083883 CEST	49795	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.392100096 CEST	443	49795	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.392121077 CEST	49795	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.392127991 CEST	443	49795	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.394639969 CEST	49798	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.394671917 CEST	443	49798	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.394834042 CEST	49798	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.395020962 CEST	49798	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.395032883 CEST	443	49798	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.396697044 CEST	49793	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.396702051 CEST	443	49793	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.398713112 CEST	443	49796	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.398840904 CEST	443	49796	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.398938894 CEST	49796	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.400446892 CEST	49799	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.400476933 CEST	443	49799	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.400535107 CEST	49799	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.400975943 CEST	49796	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.400984049 CEST	443	49796	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.402667046 CEST	49800	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.402694941 CEST	443	49800	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.402780056 CEST	49800	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.403165102 CEST	49799	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.403179884 CEST	443	49799	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.403774977 CEST	49801	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.403796911 CEST	443	49801	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.403968096 CEST	49801	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.404115915 CEST	49801	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.404128075 CEST	443	49801	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.404491901 CEST	49800	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.404508114 CEST	443	49800	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.495321035 CEST	443	49797	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.495378017 CEST	443	49797	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.495686054 CEST	49797	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.495809078 CEST	49797	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.495829105 CEST	443	49797	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.495845079 CEST	49797	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.495851994 CEST	443	49797	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.500936031 CEST	49802	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.500969887 CEST	443	49802	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:34.501244068 CEST	49802	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.501244068 CEST	49802	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:34.501283884 CEST	443	49802	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.045521021 CEST	443	49801	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.051393986 CEST	443	49800	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.051724911 CEST	443	49799	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.052431107 CEST	443	49798	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.159759045 CEST	49799	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.163220882 CEST	49798	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.164407969 CEST	443	49802	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.220181942 CEST	49802	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.220207930 CEST	443	49802	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.228579044 CEST	49802	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.228589058 CEST	443	49802	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.236516953 CEST	49798	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.236555099 CEST	443	49798	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.255418062 CEST	443	49801	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.255491972 CEST	49801	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.259046078 CEST	49798	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.259066105 CEST	443	49798	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.259418011 CEST	443	49800	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.259485960 CEST	49800	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.302691936 CEST	49801	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.302704096 CEST	443	49801	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.310542107 CEST	49801	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.310558081 CEST	443	49801	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.314737082 CEST	49800	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.314749002 CEST	443	49800	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.319067001 CEST	49800	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.319072962 CEST	443	49800	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.323184967 CEST	49799	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.323205948 CEST	443	49799	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.326913118 CEST	49799	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.326919079 CEST	443	49799	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.327579021 CEST	443	49802	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.327631950 CEST	443	49802	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.327682972 CEST	49802	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.331500053 CEST	49802	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.331517935 CEST	443	49802	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.331523895 CEST	49802	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.331528902 CEST	443	49802	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.354415894 CEST	443	49798	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.354497910 CEST	443	49798	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.354552984 CEST	49798	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.407315016 CEST	443	49801	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.407432079 CEST	443	49801	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.407474995 CEST	49801	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.424506903 CEST	443	49800	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.424808979 CEST	443	49800	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.424860954 CEST	49800	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.425688028 CEST	443	49799	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.425853014 CEST	443	49799	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.425930977 CEST	49799	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.443329096 CEST	49798	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.443361044 CEST	443	49798	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.443377018 CEST	49798	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.443393946 CEST	443	49798	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.448973894 CEST	49801	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.448996067 CEST	443	49801	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.449006081 CEST	49801	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.449012041 CEST	443	49801	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.450392008 CEST	49800	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.450411081 CEST	443	49800	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.451791048 CEST	49799	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.451791048 CEST	49799	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.451805115 CEST	443	49799	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.451812983 CEST	443	49799	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.489850044 CEST	49804	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.489886999 CEST	443	49804	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.490005970 CEST	49804	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.492635012 CEST	49804	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.492659092 CEST	443	49804	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.495471001 CEST	49805	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.495508909 CEST	443	49805	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.495606899 CEST	49805	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.495786905 CEST	49805	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.495799065 CEST	443	49805	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.498024940 CEST	49806	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.498035908 CEST	443	49806	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.498090029 CEST	49806	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.498353004 CEST	49806	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.498364925 CEST	443	49806	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.499680996 CEST	49807	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.499700069 CEST	443	49807	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.499763012 CEST	49807	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.502218008 CEST	49808	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.502258062 CEST	443	49808	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.502310038 CEST	49808	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.502640009 CEST	49807	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.502656937 CEST	443	49807	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.503230095 CEST	49808	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:35.503249884 CEST	443	49808	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:35.659766912 CEST	49747	80	192.168.2.7	91.195.240.19
Oct 7, 2024 01:05:35.664554119 CEST	80	49747	91.195.240.19	192.168.2.7
Oct 7, 2024 01:05:36.134958982 CEST	443	49804	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.144037008 CEST	443	49806	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.155980110 CEST	443	49805	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.168041945 CEST	443	49808	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.229109049 CEST	49804	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.229141951 CEST	443	49804	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.234251976 CEST	49804	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.234257936 CEST	443	49804	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.234535933 CEST	49806	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.234565020 CEST	443	49806	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.237320900 CEST	49806	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.237325907 CEST	443	49806	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.237890959 CEST	49805	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.237899065 CEST	443	49805	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.238909006 CEST	49805	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.238914013 CEST	443	49805	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.239543915 CEST	49808	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.239604950 CEST	443	49808	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.240660906 CEST	49808	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.240674973 CEST	443	49808	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.329860926 CEST	443	49804	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.330005884 CEST	443	49804	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.330148935 CEST	49804	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.333827019 CEST	443	49806	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.333899021 CEST	443	49806	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.333982944 CEST	49806	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.337897062 CEST	443	49805	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.337946892 CEST	443	49805	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.338032961 CEST	49805	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.340365887 CEST	443	49808	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.340437889 CEST	443	49808	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.340609074 CEST	49808	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.379812002 CEST	49804	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.379812956 CEST	49804	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.379844904 CEST	443	49804	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.379856110 CEST	443	49804	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.382394075 CEST	49806	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.382458925 CEST	443	49806	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.382491112 CEST	49806	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.382509947 CEST	443	49806	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.383832932 CEST	49805	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.383832932 CEST	49805	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.383852959 CEST	443	49805	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.383862972 CEST	443	49805	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.385461092 CEST	49808	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.385462046 CEST	49808	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.385502100 CEST	443	49808	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.385514975 CEST	443	49808	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.624525070 CEST	49811	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.624588013 CEST	443	49811	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.624655008 CEST	49811	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.651185989 CEST	49811	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.651218891 CEST	443	49811	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.687494993 CEST	49812	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.687541008 CEST	443	49812	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.687603951 CEST	49812	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.699367046 CEST	49813	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.699424028 CEST	443	49813	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.699485064 CEST	49813	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.701277971 CEST	49814	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.701292038 CEST	443	49814	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.701389074 CEST	49814	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.701654911 CEST	49812	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.701684952 CEST	443	49812	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.703540087 CEST	49813	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.703553915 CEST	443	49813	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.704123974 CEST	49814	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:36.704133987 CEST	443	49814	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:36.765331030 CEST	443	49720	142.250.186.36	192.168.2.7
Oct 7, 2024 01:05:36.765480042 CEST	443	49720	142.250.186.36	192.168.2.7
Oct 7, 2024 01:05:36.765548944 CEST	49720	443	192.168.2.7	142.250.186.36
Oct 7, 2024 01:05:37.065139055 CEST	49720	443	192.168.2.7	142.250.186.36
Oct 7, 2024 01:05:37.065160990 CEST	443	49720	142.250.186.36	192.168.2.7
Oct 7, 2024 01:05:37.205527067 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:37.205576897 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:37.205650091 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:37.206712961 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:37.206763983 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:37.207258940 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:37.210746050 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:37.210755110 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:37.211637020 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:37.211663008 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:37.253458023 CEST	443	49814	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.254776955 CEST	49814	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.254802942 CEST	443	49814	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.259107113 CEST	49814	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.259111881 CEST	443	49814	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.286747932 CEST	443	49811	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.287849903 CEST	49811	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.287904024 CEST	443	49811	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.288774967 CEST	49811	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.288786888 CEST	443	49811	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.343861103 CEST	443	49813	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.344976902 CEST	49813	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.345000982 CEST	443	49813	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.346363068 CEST	49813	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.346369028 CEST	443	49813	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.354412079 CEST	443	49814	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.354489088 CEST	443	49814	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.354548931 CEST	49814	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.354784966 CEST	49814	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.354804039 CEST	443	49814	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.354815006 CEST	49814	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.354820967 CEST	443	49814	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.359515905 CEST	49817	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.359563112 CEST	443	49817	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.359688044 CEST	49817	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.360167027 CEST	49817	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.360186100 CEST	443	49817	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.365782976 CEST	443	49812	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.366667986 CEST	49812	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.366703033 CEST	443	49812	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.367503881 CEST	49812	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.367510080 CEST	443	49812	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.390571117 CEST	443	49811	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.390639067 CEST	443	49811	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.390846014 CEST	49811	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.391212940 CEST	49811	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.391258001 CEST	443	49811	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.391287088 CEST	49811	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.391303062 CEST	443	49811	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.402802944 CEST	49818	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.402829885 CEST	443	49818	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.402935028 CEST	49818	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.403225899 CEST	49818	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.403249025 CEST	443	49818	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.442328930 CEST	443	49813	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.442497015 CEST	443	49813	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.442635059 CEST	49813	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.442823887 CEST	49813	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.442837000 CEST	443	49813	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.442858934 CEST	49813	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.442864895 CEST	443	49813	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.447904110 CEST	49819	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.447945118 CEST	443	49819	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.448019981 CEST	49819	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.448221922 CEST	49819	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.448235035 CEST	443	49819	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.471626043 CEST	443	49812	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.471859932 CEST	443	49812	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.471949100 CEST	49812	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.483861923 CEST	49812	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.483891010 CEST	443	49812	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.483897924 CEST	49812	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:37.483905077 CEST	443	49812	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.669953108 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:37.672427893 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:37.777293921 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:37.858297110 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 01:05:37.858309984 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:37.910738945 CEST	443	49817	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.943809986 CEST	443	49807	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:37.989286900 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:37.989317894 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:37.993202925 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:37.993246078 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:37.993284941 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.008359909 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.008387089 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.009593964 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.009608030 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.009741068 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.012460947 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.012713909 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.012722969 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.012792110 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.013185978 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.013258934 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.025063992 CEST	49817	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.025089025 CEST	443	49817	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.025872946 CEST	49817	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.025881052 CEST	443	49817	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.026873112 CEST	49807	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.026889086 CEST	443	49807	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.027892113 CEST	49807	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.027899027 CEST	443	49807	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.048027039 CEST	443	49818	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.051192045 CEST	49818	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.051215887 CEST	443	49818	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.052301884 CEST	49818	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.052315950 CEST	443	49818	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.066622972 CEST	49820	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.066689014 CEST	443	49820	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.066792011 CEST	49820	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.069420099 CEST	49820	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.069436073 CEST	443	49820	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.074168921 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.074189901 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.113111019 CEST	443	49819	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.114732981 CEST	49819	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.114758968 CEST	443	49819	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.115669966 CEST	49819	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.115675926 CEST	443	49819	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.125817060 CEST	443	49807	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.125891924 CEST	443	49807	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.126051903 CEST	49807	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.126405954 CEST	443	49817	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.126516104 CEST	443	49817	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.126610994 CEST	49817	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.148545027 CEST	49807	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.148545027 CEST	49807	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.148570061 CEST	443	49807	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.148581028 CEST	443	49807	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.148713112 CEST	443	49818	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.148791075 CEST	443	49818	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.148849010 CEST	49818	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.155488968 CEST	49818	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.155502081 CEST	443	49818	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.155561924 CEST	49818	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.155567884 CEST	443	49818	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.158936024 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.158947945 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.173894882 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.216322899 CEST	443	49819	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.216504097 CEST	443	49819	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.216555119 CEST	49819	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.306665897 CEST	49817	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.306689978 CEST	443	49817	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.306711912 CEST	49817	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.306719065 CEST	443	49817	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.309762001 CEST	49819	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.309794903 CEST	443	49819	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.309829950 CEST	49819	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.309837103 CEST	443	49819	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.313225985 CEST	49821	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.313271046 CEST	443	49821	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.313355923 CEST	49821	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.314193964 CEST	49821	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.314208984 CEST	443	49821	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.347733021 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.361392021 CEST	49822	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.361438036 CEST	443	49822	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.361499071 CEST	49822	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.365621090 CEST	49823	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.365665913 CEST	443	49823	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.365905046 CEST	49823	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.367536068 CEST	49822	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.367551088 CEST	443	49822	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.367875099 CEST	49823	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.367887974 CEST	443	49823	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.369719982 CEST	49824	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.369744062 CEST	443	49824	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.369834900 CEST	49824	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.369924068 CEST	49824	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.369935989 CEST	443	49824	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.400247097 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.400526047 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.400603056 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.410778999 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.410811901 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.430814028 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.430867910 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.430972099 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.431529045 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.431545019 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.703098059 CEST	443	49820	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.703973055 CEST	49820	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.703999996 CEST	443	49820	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.705321074 CEST	49820	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.705332041 CEST	443	49820	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.802478075 CEST	443	49820	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.802541018 CEST	443	49820	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.802609921 CEST	49820	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.803035975 CEST	49820	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.803051949 CEST	443	49820	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.803076982 CEST	49820	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.803082943 CEST	443	49820	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.806226969 CEST	49826	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.806269884 CEST	443	49826	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.806365967 CEST	49826	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.806695938 CEST	49826	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.806714058 CEST	443	49826	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.892265081 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.892612934 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.892647982 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.895900965 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:38.895970106 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:38.965389967 CEST	443	49821	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.965905905 CEST	49821	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.965931892 CEST	443	49821	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:38.966412067 CEST	49821	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:38.966419935 CEST	443	49821	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.001204967 CEST	443	49823	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.002538919 CEST	49823	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.002563953 CEST	443	49823	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.002635956 CEST	49823	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.002640009 CEST	443	49823	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.016623974 CEST	443	49824	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.017190933 CEST	49824	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.017204046 CEST	443	49824	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.017822027 CEST	49824	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.017826080 CEST	443	49824	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.076407909 CEST	443	49821	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.076560974 CEST	443	49821	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.076626062 CEST	49821	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.076740980 CEST	49821	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.076764107 CEST	443	49821	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.076778889 CEST	49821	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.076786041 CEST	443	49821	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.079982996 CEST	49827	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.080024004 CEST	443	49827	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.080136061 CEST	49827	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.080430984 CEST	49827	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.080444098 CEST	443	49827	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.102935076 CEST	443	49823	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.103001118 CEST	443	49823	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.103080988 CEST	49823	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.103380919 CEST	49823	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.103380919 CEST	49823	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.103391886 CEST	443	49823	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.103399038 CEST	443	49823	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.106336117 CEST	49828	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.106369019 CEST	443	49828	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.106442928 CEST	49828	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.106636047 CEST	49828	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.106647968 CEST	443	49828	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.117341042 CEST	443	49824	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.117361069 CEST	443	49824	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.117439985 CEST	49824	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.117448092 CEST	443	49824	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.117547989 CEST	443	49824	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.117738962 CEST	49824	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.117738962 CEST	49824	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.117738962 CEST	49824	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.117753029 CEST	443	49824	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.120701075 CEST	49829	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.120754004 CEST	443	49829	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.120899916 CEST	49829	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.121032953 CEST	49829	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.121062994 CEST	443	49829	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.184330940 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:39.184513092 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:39.184526920 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:39.184686899 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:39.199908018 CEST	443	49822	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.201071978 CEST	49822	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.201097012 CEST	443	49822	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.202435017 CEST	49822	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.202445030 CEST	443	49822	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.301745892 CEST	443	49822	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.301918983 CEST	443	49822	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.301980972 CEST	49822	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.302520037 CEST	49822	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.302536964 CEST	443	49822	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.302546024 CEST	49822	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.302551985 CEST	443	49822	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.306761980 CEST	49830	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.306787014 CEST	443	49830	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.306957006 CEST	49830	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.307122946 CEST	49830	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.307136059 CEST	443	49830	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.360209942 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:39.360238075 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:39.454886913 CEST	443	49826	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.456183910 CEST	49826	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.456204891 CEST	443	49826	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.456927061 CEST	49826	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.456935883 CEST	443	49826	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.549882889 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:39.550081015 CEST	49824	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.550106049 CEST	443	49824	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.556415081 CEST	443	49826	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.556503057 CEST	443	49826	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.556575060 CEST	49826	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.568932056 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:39.569067955 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:39.569148064 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:39.577481031 CEST	49826	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.577497005 CEST	443	49826	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.582856894 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:39.582881927 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:39.591689110 CEST	49831	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.591739893 CEST	443	49831	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.591811895 CEST	49831	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.594109058 CEST	49831	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.594121933 CEST	443	49831	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.601162910 CEST	49832	80	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:39.605981112 CEST	80	49832	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:39.606085062 CEST	49832	80	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:39.606373072 CEST	49832	80	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:39.611148119 CEST	80	49832	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:39.720518112 CEST	443	49827	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.721398115 CEST	49827	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.721420050 CEST	443	49827	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.724030018 CEST	49827	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.724039078 CEST	443	49827	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.745379925 CEST	443	49828	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.746288061 CEST	49828	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.746313095 CEST	443	49828	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.747400045 CEST	49828	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.747406006 CEST	443	49828	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.781820059 CEST	443	49829	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.782488108 CEST	49829	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.782511950 CEST	443	49829	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.783662081 CEST	49829	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.783668041 CEST	443	49829	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.819209099 CEST	443	49827	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.819351912 CEST	443	49827	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.819430113 CEST	49827	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.819591999 CEST	49827	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.819591999 CEST	49827	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.819611073 CEST	443	49827	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.819619894 CEST	443	49827	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.823599100 CEST	49833	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.823633909 CEST	443	49833	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.823749065 CEST	49833	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.823985100 CEST	49833	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.823998928 CEST	443	49833	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.845360994 CEST	443	49828	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.845437050 CEST	443	49828	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.845510006 CEST	49828	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.845523119 CEST	443	49828	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.845652103 CEST	443	49828	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.845709085 CEST	49828	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.845848083 CEST	49828	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.845858097 CEST	443	49828	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.852437019 CEST	49834	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.852473974 CEST	443	49834	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.852574110 CEST	49834	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.852754116 CEST	49834	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.852767944 CEST	443	49834	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.886838913 CEST	443	49829	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.886898994 CEST	443	49829	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.886955023 CEST	49829	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.886979103 CEST	443	49829	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.887032032 CEST	443	49829	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.887063980 CEST	49829	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.887095928 CEST	49829	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.887427092 CEST	49829	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.887442112 CEST	443	49829	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.887566090 CEST	49829	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.887600899 CEST	443	49829	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.894742012 CEST	49835	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.894784927 CEST	443	49835	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.894855022 CEST	49835	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.895257950 CEST	49835	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.895272970 CEST	443	49835	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.983129025 CEST	443	49830	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.983684063 CEST	49830	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.983711958 CEST	443	49830	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:39.984412909 CEST	49830	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:39.984426022 CEST	443	49830	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.046650887 CEST	80	49710	162.255.119.216	192.168.2.7
Oct 7, 2024 01:05:40.046794891 CEST	49710	80	192.168.2.7	162.255.119.216
Oct 7, 2024 01:05:40.067106009 CEST	80	49832	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:40.069396019 CEST	49710	80	192.168.2.7	162.255.119.216
Oct 7, 2024 01:05:40.070370913 CEST	49836	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:40.070420980 CEST	443	49836	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:40.070914030 CEST	49836	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:40.071244955 CEST	49836	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:40.071261883 CEST	443	49836	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:40.074341059 CEST	80	49710	162.255.119.216	192.168.2.7
Oct 7, 2024 01:05:40.088362932 CEST	443	49830	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.088404894 CEST	443	49830	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.088486910 CEST	443	49830	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.088490963 CEST	49830	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.088566065 CEST	49830	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.088766098 CEST	49830	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.088787079 CEST	443	49830	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.088795900 CEST	49830	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.088800907 CEST	443	49830	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.092308998 CEST	49837	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.092344046 CEST	443	49837	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.092588902 CEST	49837	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.092758894 CEST	49837	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.092772007 CEST	443	49837	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.160408974 CEST	49832	80	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:40.233192921 CEST	443	49831	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.234184980 CEST	49831	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.234247923 CEST	443	49831	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.235006094 CEST	49831	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.235012054 CEST	443	49831	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.330692053 CEST	443	49831	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.330992937 CEST	443	49831	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.331253052 CEST	49831	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.332173109 CEST	49831	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.332194090 CEST	443	49831	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.340009928 CEST	49838	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.340055943 CEST	443	49838	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.340961933 CEST	49838	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.340961933 CEST	49838	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.340993881 CEST	443	49838	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.469144106 CEST	443	49833	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.469652891 CEST	49833	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.469679117 CEST	443	49833	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.470110893 CEST	49833	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.470118046 CEST	443	49833	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.513520956 CEST	443	49834	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.514168024 CEST	49834	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.514197111 CEST	443	49834	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.514571905 CEST	49834	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.514578104 CEST	443	49834	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.533493042 CEST	443	49835	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.534006119 CEST	49835	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.534038067 CEST	443	49835	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.534554958 CEST	49835	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.534563065 CEST	443	49835	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.561388016 CEST	443	49836	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:40.561809063 CEST	49836	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:40.561830044 CEST	443	49836	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:40.562190056 CEST	443	49836	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:40.562781096 CEST	49836	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:40.562781096 CEST	49836	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:40.562805891 CEST	443	49836	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:40.562855005 CEST	443	49836	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:40.567431927 CEST	443	49833	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.567588091 CEST	443	49833	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.567656994 CEST	49833	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.567766905 CEST	49833	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.567786932 CEST	443	49833	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.567796946 CEST	49833	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.567804098 CEST	443	49833	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.570302010 CEST	49839	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.570342064 CEST	443	49839	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.570420980 CEST	49839	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.570585966 CEST	49839	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.570600986 CEST	443	49839	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.613887072 CEST	443	49834	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.614104986 CEST	443	49834	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.614183903 CEST	49834	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.614274979 CEST	49834	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.614295959 CEST	443	49834	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.614306927 CEST	49834	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.614311934 CEST	443	49834	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.617749929 CEST	49840	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.617789030 CEST	443	49840	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.617887020 CEST	49840	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.618050098 CEST	49840	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.618065119 CEST	443	49840	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.641040087 CEST	443	49835	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.641143084 CEST	443	49835	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.641206980 CEST	49835	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.641367912 CEST	49835	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.641386986 CEST	443	49835	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.641405106 CEST	49835	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.641419888 CEST	443	49835	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.644133091 CEST	49841	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.644186974 CEST	443	49841	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.644345999 CEST	49841	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.644484043 CEST	49841	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.644500017 CEST	443	49841	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.658406973 CEST	49836	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:40.744067907 CEST	443	49837	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.744582891 CEST	49837	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.744601011 CEST	443	49837	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.745085955 CEST	49837	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.745091915 CEST	443	49837	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.844343901 CEST	443	49837	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.844556093 CEST	443	49837	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.844619036 CEST	49837	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.845532894 CEST	49837	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.845532894 CEST	49837	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.845547915 CEST	443	49837	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.845551968 CEST	443	49837	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.853287935 CEST	49842	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.853344917 CEST	443	49842	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.853409052 CEST	49842	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.854399920 CEST	49842	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.854413986 CEST	443	49842	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.977232933 CEST	443	49838	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.990200043 CEST	49838	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.990219116 CEST	443	49838	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:40.991528988 CEST	49838	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:40.991542101 CEST	443	49838	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.013851881 CEST	443	49836	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:41.013936043 CEST	443	49836	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:41.014007092 CEST	49836	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:41.086066961 CEST	443	49838	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.086167097 CEST	443	49838	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.086227894 CEST	49838	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.095102072 CEST	49836	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:41.095160961 CEST	443	49836	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:41.224215031 CEST	443	49839	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.254014015 CEST	443	49840	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.271744013 CEST	49839	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.303719044 CEST	49840	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.326423883 CEST	443	49841	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.366919041 CEST	49841	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.493124008 CEST	443	49842	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.583947897 CEST	49842	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.734621048 CEST	49842	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.734656096 CEST	443	49842	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.735332012 CEST	49842	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.735338926 CEST	443	49842	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.735512018 CEST	49838	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.735512018 CEST	49838	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.735543966 CEST	443	49838	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.735553980 CEST	443	49838	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.740474939 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:41.740515947 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:41.740572929 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:41.740958929 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:41.740972042 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:41.741878986 CEST	49839	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.741890907 CEST	443	49839	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.742782116 CEST	49839	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.742786884 CEST	443	49839	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.743349075 CEST	49840	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.743376017 CEST	443	49840	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.744133949 CEST	49840	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.744152069 CEST	443	49840	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.744481087 CEST	49841	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.744493008 CEST	443	49841	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.745165110 CEST	49841	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.745168924 CEST	443	49841	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.830938101 CEST	443	49842	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.831034899 CEST	443	49842	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.831144094 CEST	49842	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.839493036 CEST	443	49840	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.839509964 CEST	443	49839	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.839638948 CEST	443	49839	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.839695930 CEST	49839	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.839795113 CEST	443	49840	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.839843988 CEST	49840	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:41.846051931 CEST	443	49841	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.846210957 CEST	443	49841	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:41.846276999 CEST	49841	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.191184998 CEST	49842	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.191211939 CEST	443	49842	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.191226959 CEST	49842	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.191235065 CEST	443	49842	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.191829920 CEST	49840	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.191857100 CEST	443	49840	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.191931009 CEST	49839	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.191950083 CEST	443	49839	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.191962957 CEST	49839	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.191970110 CEST	443	49839	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.191982985 CEST	49840	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.191988945 CEST	443	49840	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.198996067 CEST	49841	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.198996067 CEST	49841	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.199009895 CEST	443	49841	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.199018002 CEST	443	49841	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.208018064 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.208261013 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.208275080 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.208666086 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.209342003 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.209424973 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.209501982 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.212668896 CEST	49844	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.212716103 CEST	443	49844	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.212809086 CEST	49844	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.215657949 CEST	49845	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.215696096 CEST	443	49845	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.215748072 CEST	49845	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.216701984 CEST	49845	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.216715097 CEST	443	49845	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.216749907 CEST	49844	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.216770887 CEST	443	49844	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.218596935 CEST	49846	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.218620062 CEST	443	49846	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.218735933 CEST	49846	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.218818903 CEST	49846	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.218827963 CEST	443	49846	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.219014883 CEST	49847	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.219041109 CEST	443	49847	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.219197989 CEST	49847	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.223400116 CEST	49847	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.223414898 CEST	443	49847	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.223923922 CEST	49848	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.223954916 CEST	443	49848	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.224004984 CEST	49848	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.224690914 CEST	49848	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.224703074 CEST	443	49848	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.251410007 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.688760996 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.688812017 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.688838959 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.688867092 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.688883066 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.688894987 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.688925982 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.688975096 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.689030886 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.689040899 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.689466953 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.689502954 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.689517021 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.689524889 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.689580917 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.689588070 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.693502903 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.693557978 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.693566084 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.776505947 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.776557922 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.776568890 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.776807070 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.776849985 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.776858091 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.776951075 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.776989937 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.776997089 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.777045965 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.777084112 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.777091980 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.777910948 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.777960062 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.777973890 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.777981997 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.778022051 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.778028965 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.778084040 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.778117895 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.778126955 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.778707027 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.778749943 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.778749943 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.778759956 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.778801918 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.778815031 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.778934002 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.778971910 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.778980017 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.787317991 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.787381887 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.787394047 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.850905895 CEST	443	49845	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.857294083 CEST	443	49848	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.857500076 CEST	443	49846	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.864021063 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.864065886 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.864089012 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.864101887 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.864142895 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.864150047 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.864257097 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.864295959 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.864303112 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.864314079 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.864471912 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.864820004 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.864828110 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.864876032 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.864912987 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.864921093 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.864960909 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.865422010 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.865430117 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.865473986 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.865485907 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.865533113 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.866350889 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.866401911 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.866445065 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.866483927 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.866488934 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.866506100 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.866547108 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.866554022 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.866599083 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.866647959 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.890280008 CEST	443	49844	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.892146111 CEST	443	49847	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.896666050 CEST	49847	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.896691084 CEST	443	49847	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.897411108 CEST	49847	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.897416115 CEST	443	49847	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.897855997 CEST	49845	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.897870064 CEST	443	49845	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.898741961 CEST	49845	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.898746967 CEST	443	49845	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.899198055 CEST	49848	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.899219036 CEST	443	49848	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.899699926 CEST	49848	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.899704933 CEST	443	49848	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.900145054 CEST	49846	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.900157928 CEST	443	49846	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.901025057 CEST	49846	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.901030064 CEST	443	49846	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.902971029 CEST	49844	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.902987003 CEST	443	49844	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.903692007 CEST	49844	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.903697014 CEST	443	49844	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.914629936 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:42.914654970 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:42.914714098 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:42.915116072 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:42.915123940 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:42.915164948 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:42.915693045 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:42.915704966 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:42.915860891 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:42.915870905 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:42.930603981 CEST	49843	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:42.930629969 CEST	443	49843	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:42.932087898 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:42.932128906 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:42.932260036 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:42.932888985 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:42.932929039 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:42.933128119 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:42.934356928 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:42.934370995 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:42.934592009 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:42.934607983 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:42.995646954 CEST	443	49845	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.995892048 CEST	443	49845	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.995939970 CEST	443	49845	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.995995998 CEST	49845	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.996258974 CEST	443	49846	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.996284962 CEST	443	49846	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.996285915 CEST	443	49848	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.996330976 CEST	49846	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.996332884 CEST	443	49846	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.996392965 CEST	443	49848	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.996412992 CEST	49846	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.996438026 CEST	49848	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.996726990 CEST	49845	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.996752024 CEST	443	49845	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.996778965 CEST	49845	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.996783972 CEST	443	49845	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.998553991 CEST	49846	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.998567104 CEST	443	49846	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.999073029 CEST	49846	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.999078989 CEST	443	49846	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.999774933 CEST	49848	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.999774933 CEST	49848	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:42.999802113 CEST	443	49848	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:42.999814987 CEST	443	49848	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.004156113 CEST	443	49847	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.004209042 CEST	443	49844	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.004306078 CEST	443	49844	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.004317045 CEST	443	49847	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.004350901 CEST	49844	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.004375935 CEST	49847	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.007675886 CEST	49847	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.007697105 CEST	443	49847	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.007709026 CEST	49847	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.007714987 CEST	443	49847	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.009113073 CEST	49844	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.009119034 CEST	443	49844	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.016602039 CEST	49853	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.016650915 CEST	443	49853	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.016714096 CEST	49853	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.018629074 CEST	49854	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.018637896 CEST	443	49854	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.018690109 CEST	49854	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.025217056 CEST	49855	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.025268078 CEST	443	49855	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.025333881 CEST	49855	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.026066065 CEST	49853	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.026079893 CEST	443	49853	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.027117014 CEST	49854	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.027127981 CEST	443	49854	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.027371883 CEST	49855	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.027391911 CEST	443	49855	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.029687881 CEST	49856	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.029715061 CEST	443	49856	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.030045986 CEST	49856	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.030045986 CEST	49856	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.030072927 CEST	443	49856	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.212047100 CEST	49857	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.212120056 CEST	443	49857	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.212193012 CEST	49857	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.223902941 CEST	49857	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.223937035 CEST	443	49857	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.371452093 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.371767044 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.371779919 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.372832060 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.372991085 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.374167919 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.374236107 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.374272108 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.379874945 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.380361080 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.380369902 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.381457090 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.381535053 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.381963015 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.382039070 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.382179976 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.382186890 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.393573999 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.396770000 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.396792889 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.397896051 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.397957087 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.398425102 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.398494959 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.398567915 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.398576021 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.406107903 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.406347036 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.406363010 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.410144091 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.410237074 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.410660028 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.410847902 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.410931110 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.410943985 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.415405035 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.526523113 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.526560068 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.526588917 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.526601076 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.526633978 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.526645899 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.526650906 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.526700974 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.526704073 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.526710987 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.526756048 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.526762009 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.527180910 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.527215958 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.527232885 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.527239084 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.527276993 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.528745890 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.528748989 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.528779984 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.528789997 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.531255960 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.543540001 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.543581963 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.543618917 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.543641090 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.543648958 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.543664932 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.544090033 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.544125080 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.544133902 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.544140100 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.544205904 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.544564962 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.544632912 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.544672012 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.544677973 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.545562029 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.545619011 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.545661926 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.545685053 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.545696974 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.545746088 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.545753002 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.545793056 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.545835972 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.545842886 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.546097040 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.546133041 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.546139002 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.548413992 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.548491955 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.548500061 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.550307989 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.550347090 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.550360918 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.550368071 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.550406933 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.550412893 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.567236900 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.567369938 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.567425013 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.567440033 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.567565918 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.567612886 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.567622900 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.567723989 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.567814112 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.567816019 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.567842007 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.567929029 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.567936897 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.568062067 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.568134069 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.568141937 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.571588993 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.571640015 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.571650982 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.594759941 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.613655090 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.613940001 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.613985062 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.613986015 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.614001036 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.614279985 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.614284992 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.614569902 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.614598036 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.614605904 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.614619017 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.614655972 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.615143061 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.615200043 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.615230083 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.615262032 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.615262985 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.615274906 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.615375042 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.616039991 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.616071939 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.616102934 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.616142988 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.616142988 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.616148949 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.616847038 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.616874933 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.616909981 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.616915941 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.616969109 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.616975069 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.630094051 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.630130053 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.630147934 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.630165100 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.630495071 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.630511999 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.630517006 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.630769968 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.630861998 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.630913973 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.630973101 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.631005049 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.631525040 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.631551981 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.631577015 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.631583929 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.631597996 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.631984949 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.632194996 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632231951 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632250071 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.632270098 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632308960 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.632318974 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632354975 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632380009 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632380962 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.632399082 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632400036 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632422924 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.632586956 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632613897 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632623911 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.632631063 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632661104 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.632668018 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632700920 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632729053 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632734060 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.632740021 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.632772923 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.633121967 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.633152962 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.633183002 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.633218050 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.633218050 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.633220911 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.633230925 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.633409977 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.633435965 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.633451939 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.633485079 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.633491993 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.633531094 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.633559942 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.633568048 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.633574009 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.633610010 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.633615971 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.633954048 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.634417057 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.634454966 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.634459972 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.634469032 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.634497881 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.634505033 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.634538889 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.634566069 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.634574890 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.634581089 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.634613991 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.634851933 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.634907007 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.634922028 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.655123949 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.655172110 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.655282974 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.655297041 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.655323029 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.655349016 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.655694008 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.655761957 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.655772924 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.656086922 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.656127930 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.656127930 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.656143904 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.656207085 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.656344891 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.656379938 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.656379938 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.656390905 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.657001972 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.657057047 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.657094955 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.657118082 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.657238007 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.657244921 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.657304049 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.657910109 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.657978058 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.658019066 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.658035994 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.658061981 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.658423901 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.658865929 CEST	49852	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.658881903 CEST	443	49852	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.661794901 CEST	49858	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.661828995 CEST	443	49858	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.661915064 CEST	49858	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.662133932 CEST	49858	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.662148952 CEST	443	49858	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.668288946 CEST	443	49856	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.668853045 CEST	49856	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.668876886 CEST	443	49856	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.669681072 CEST	49856	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.669687986 CEST	443	49856	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.671508074 CEST	443	49855	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.672522068 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.672558069 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.672630072 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.672950983 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.672965050 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.672986031 CEST	49855	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.673012018 CEST	443	49855	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.674051046 CEST	49855	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.674057961 CEST	443	49855	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.674515963 CEST	443	49854	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.674998999 CEST	49854	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.675015926 CEST	443	49854	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.681149006 CEST	49854	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.681158066 CEST	443	49854	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.681864977 CEST	443	49853	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.682285070 CEST	49853	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.682298899 CEST	443	49853	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.682945967 CEST	49853	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.682950974 CEST	443	49853	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.701121092 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.701162100 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.701184988 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.701195955 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.701266050 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.701272964 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.701478004 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.701514006 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.701524019 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.701530933 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.701576948 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.701584101 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.702112913 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.702167988 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.702176094 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.702286005 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.702305079 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.702317953 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.702348948 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.702374935 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.702382088 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.702408075 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.702523947 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.703035116 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.703094959 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.703109026 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.703129053 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.703156948 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.703164101 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.703203917 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.703917980 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.703963041 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.703969002 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.704016924 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.704020977 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.704026937 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.704051971 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.704087973 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.704087973 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.704096079 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.704171896 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.704214096 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.706568956 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.706568956 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.706585884 CEST	443	49849	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.706629038 CEST	49849	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.716980934 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.717034101 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.717044115 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.717052937 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.717084885 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.717103004 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.717109919 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.717149973 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.717291117 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.717303991 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.717318058 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.717350960 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.717382908 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.717391968 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.717401028 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.717415094 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.717529058 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.717538118 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.717784882 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.717820883 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.717827082 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.717837095 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.717900991 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.717906952 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.718074083 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.718095064 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.718169928 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.718225002 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.718230963 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.718295097 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.718302011 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.718341112 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.718353987 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.718378067 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.718388081 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.718410969 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.718410969 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.718420029 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.718466043 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.718861103 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719125032 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719172001 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719203949 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.719208002 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719218969 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719223022 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.719259977 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.719310045 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719350100 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719376087 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.719389915 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719404936 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.719501019 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.719532967 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719569921 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719569921 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.719583035 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719614983 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.719625950 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719667912 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719675064 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.719682932 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719703913 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.719717026 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.719832897 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719928026 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719960928 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719968081 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.719974995 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.719999075 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.720825911 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.720865965 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.720875025 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.720881939 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.720909119 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.721401930 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.721438885 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.721440077 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.721448898 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.721482992 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.721483946 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.721493959 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.721524000 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.721541882 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.722203970 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.722240925 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.722275019 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.722281933 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.722296000 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.722312927 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.722337961 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.722343922 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.722359896 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.723157883 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.723202944 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.723210096 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.723257065 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.767477036 CEST	443	49856	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.767700911 CEST	443	49856	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.767818928 CEST	49856	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.768037081 CEST	49856	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.768037081 CEST	49856	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.768066883 CEST	443	49856	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.768075943 CEST	443	49856	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.771482944 CEST	443	49855	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.771522045 CEST	443	49855	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.771569967 CEST	49855	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.771579981 CEST	443	49855	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.771622896 CEST	49855	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.771694899 CEST	49855	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.771713018 CEST	443	49855	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.771723032 CEST	49855	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.771728039 CEST	443	49855	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.772026062 CEST	49861	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.772063971 CEST	443	49861	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.772119045 CEST	49861	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.773641109 CEST	49861	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.773654938 CEST	443	49861	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.777276993 CEST	49862	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.777287960 CEST	443	49862	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.777338982 CEST	49862	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.777450085 CEST	49862	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.777462006 CEST	443	49862	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.778538942 CEST	443	49854	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.778918982 CEST	443	49854	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.778958082 CEST	49854	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.779823065 CEST	49854	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.779823065 CEST	49854	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.779833078 CEST	443	49854	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.779840946 CEST	443	49854	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.783854008 CEST	49863	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.783936024 CEST	443	49863	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.784003019 CEST	49863	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.784097910 CEST	443	49853	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.784182072 CEST	49863	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.784216881 CEST	443	49863	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.784430981 CEST	443	49853	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.784477949 CEST	49853	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.784549952 CEST	49853	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.784555912 CEST	443	49853	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.784568071 CEST	49853	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.784574986 CEST	443	49853	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.787256002 CEST	49864	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.787292004 CEST	443	49864	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.787412882 CEST	49864	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.787581921 CEST	49864	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.787600994 CEST	443	49864	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.803936005 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.803987980 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.804027081 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.804037094 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.804037094 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.804050922 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.804073095 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.804176092 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.804327011 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.804347038 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.804354906 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.804410934 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.804486036 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.804548979 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.804555893 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.804635048 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.804713964 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.804822922 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.804827929 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.804836035 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.804868937 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.804910898 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.805048943 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.805186987 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.805207014 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.805259943 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.805397034 CEST	49850	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.805416107 CEST	443	49850	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.806364059 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.806423903 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.806435108 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.806449890 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.806466103 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.806488037 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.806548119 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.806591034 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.806608915 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.806653023 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.807058096 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.807102919 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.807192087 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.807234049 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.807307005 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.807351112 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.807352066 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.807367086 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.807403088 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.807424068 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.807442904 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.807482004 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.807487011 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.807498932 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.807531118 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.807539940 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.808294058 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.808357954 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.808391094 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.808434963 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.808439970 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.808449030 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.808485985 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.808631897 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.808672905 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.808680058 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.808686972 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.808716059 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.809081078 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.809128046 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.809133053 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.809144974 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.809180021 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.809334993 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.809380054 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.809385061 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.809391022 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.809418917 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.810096979 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.810143948 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.810146093 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.810157061 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.810192108 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.810213089 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.810256004 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.810286045 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.810292006 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.810306072 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.851309061 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.851428986 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.851438999 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.853723049 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.858436108 CEST	443	49857	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.860946894 CEST	49857	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.860984087 CEST	443	49857	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.861839056 CEST	49857	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.861845016 CEST	443	49857	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.866832018 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.867779016 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.867820978 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.867912054 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.868520975 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.868529081 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.868695021 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.869282961 CEST	49867	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:43.869312048 CEST	443	49867	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:43.869380951 CEST	49867	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:43.869986057 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.870018959 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.870119095 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.870754957 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.870763063 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.870824099 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.872174025 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.872189999 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.872315884 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.872328997 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.872544050 CEST	49867	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:43.872556925 CEST	443	49867	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:43.872802973 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.872813940 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.873045921 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.873061895 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.878863096 CEST	49870	443	192.168.2.7	108.156.60.21
Oct 7, 2024 01:05:43.878879070 CEST	443	49870	108.156.60.21	192.168.2.7
Oct 7, 2024 01:05:43.878925085 CEST	49870	443	192.168.2.7	108.156.60.21
Oct 7, 2024 01:05:43.879260063 CEST	49870	443	192.168.2.7	108.156.60.21
Oct 7, 2024 01:05:43.879271984 CEST	443	49870	108.156.60.21	192.168.2.7
Oct 7, 2024 01:05:43.893217087 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.893286943 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.893321037 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.893331051 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.893367052 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.893733978 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.893754959 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.893795967 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.893802881 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.893829107 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.894126892 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.894160032 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.894182920 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.894188881 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.894226074 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.894234896 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.894359112 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.894381046 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.894412041 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.894418001 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.894447088 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.894462109 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.894951105 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.894973993 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.895025969 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.895031929 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.895060062 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.895081997 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.898202896 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.898230076 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.898272038 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.898277998 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.898313046 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.898343086 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.898606062 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.898627996 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.898663044 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.898668051 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.898696899 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.898727894 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.899285078 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.899310112 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.899355888 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.899362087 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.899395943 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.899406910 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.958312035 CEST	443	49857	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.958442926 CEST	443	49857	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.958494902 CEST	49857	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.958683968 CEST	49857	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.958698034 CEST	443	49857	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.958709002 CEST	49857	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.958714962 CEST	443	49857	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.961389065 CEST	49871	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.961427927 CEST	443	49871	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.961581945 CEST	49871	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.961716890 CEST	49871	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:43.961730957 CEST	443	49871	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:43.980345011 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.980374098 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.980424881 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.980439901 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.980479956 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.980498075 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.980863094 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.980886936 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.980925083 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.980931997 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.980959892 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.980961084 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.980969906 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.980981112 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.981004000 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.981010914 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.981035948 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.981044054 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.981057882 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.981120110 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.981281996 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.981302977 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.981338024 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.981343985 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.981368065 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.981389046 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.981946945 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.981972933 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.982007027 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.982012987 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.982043982 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.982057095 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.982539892 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.982563019 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.982603073 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.982609034 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.982636929 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.982650995 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.982754946 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.982786894 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.982816935 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.982822895 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.982842922 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.982862949 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.983196974 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.983218908 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.983279943 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:43.983288050 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:43.983371019 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.067207098 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.067226887 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.067316055 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.067327976 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.067369938 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.067421913 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.067437887 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.067490101 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.067497015 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.067570925 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.068325043 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.068341970 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.068399906 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.068406105 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.068447113 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.068631887 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.068648100 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.068692923 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.068700075 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.068991899 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.069219112 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.069257021 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.069272995 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.069278002 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.069298983 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.069323063 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.069344044 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.069610119 CEST	49851	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.069622993 CEST	443	49851	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.069972992 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.070019960 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.070225000 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.070986032 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.071011066 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.119400978 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.119443893 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.120502949 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.120502949 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.120536089 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.132620096 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.133074999 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.133102894 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.134289026 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.134350061 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.134762049 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.134828091 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.134907961 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.136708975 CEST	443	49858	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.137079954 CEST	49858	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.137093067 CEST	443	49858	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.137747049 CEST	443	49858	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.138109922 CEST	49858	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.138169050 CEST	49858	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.138175964 CEST	443	49858	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.138195992 CEST	443	49858	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.175401926 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.175674915 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.175688028 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.196494102 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.196861982 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.196877003 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.199877024 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.200181961 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.200380087 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.200472116 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.200582027 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.200598955 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.267105103 CEST	443	49858	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.267191887 CEST	49858	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.272512913 CEST	49858	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.272547960 CEST	443	49858	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.275415897 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.275597095 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.280508995 CEST	49874	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.280550957 CEST	443	49874	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.280637980 CEST	49874	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.280934095 CEST	49874	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.280949116 CEST	443	49874	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.283667088 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.283710003 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.283740997 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.283771038 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.283787012 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.283829927 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.283869982 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.283884048 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.283920050 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.283946991 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.283972979 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.284003019 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.284008980 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.284017086 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.284054041 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.288202047 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.288264036 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.288471937 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.288480043 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.331608057 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.332120895 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.332161903 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.332165003 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.332606077 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.332618952 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.332981110 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.332997084 CEST	443	49867	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:44.333184958 CEST	49867	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:44.333215952 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.333218098 CEST	443	49867	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:44.333281994 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.333580017 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.333653927 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.333969116 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.334037066 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.334122896 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.334201097 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.334209919 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.334321976 CEST	443	49867	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:44.334625006 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.334666967 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.334697008 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.334727049 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.334769011 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.334769964 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.334769964 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.334791899 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.334925890 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.335160971 CEST	49867	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:44.335180998 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.335242033 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.335268974 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.335313082 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.335321903 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.335351944 CEST	443	49867	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:44.335405111 CEST	49867	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:44.335414886 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.337168932 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.337491035 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.337511063 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.338866949 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.338922977 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.339302063 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.339359045 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.339368105 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.339396954 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.339415073 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.339456081 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.339531898 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.339540958 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.351052999 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.351603031 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.351613045 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.352669001 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.352737904 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.353159904 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.353159904 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.353168011 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.353219032 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.377731085 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.377757072 CEST	49867	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:44.377768993 CEST	443	49867	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:44.377774000 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.377827883 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.377919912 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.377955914 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.377985001 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.378026009 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.378072023 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.378103971 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.378134966 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.378201008 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.378233910 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.378262997 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.378281116 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.378304958 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.378321886 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.378321886 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.378333092 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.379039049 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.379071951 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.379084110 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.379091024 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.379112959 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.379169941 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.379206896 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.379237890 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.379245043 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.379270077 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.379302979 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.379398108 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.383404970 CEST	49859	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.383420944 CEST	443	49859	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.393455982 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.393572092 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.393585920 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.421560049 CEST	443	49864	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.422990084 CEST	443	49861	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.425704002 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.425749063 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.425785065 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.425810099 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.425864935 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.425877094 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.425911903 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.425939083 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.425972939 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.426027060 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.426034927 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.426065922 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.426094055 CEST	443	49862	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.426103115 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.426110029 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.426183939 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.426882982 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.426951885 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.426999092 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.427006006 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.427159071 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.427191019 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.427208900 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.427216053 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.427256107 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.427966118 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.427995920 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.428014040 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.428020954 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.428050995 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.428117990 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.428126097 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.428157091 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.428884029 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.428945065 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.428973913 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.429176092 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.429186106 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.429231882 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.440864086 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.444762945 CEST	443	49863	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.469413996 CEST	443	49867	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:44.469486952 CEST	443	49867	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:44.469585896 CEST	49867	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:44.470146894 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.470244884 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.470269918 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.470293045 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.470318079 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.470354080 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.470381975 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.470395088 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.470401049 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.470935106 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.470963955 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.470999002 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.471008062 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.471054077 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.474910975 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.475104094 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.475212097 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.475219965 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.477046013 CEST	49862	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.477130890 CEST	49864	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.477565050 CEST	49861	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.485506058 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.485551119 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.485583067 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.485614061 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.485630989 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.485644102 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.485656977 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.485672951 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.485692024 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.485704899 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.486198902 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.486232042 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.486273050 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.486283064 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.486329079 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.486340046 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.488325119 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.488363028 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.488419056 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.488446951 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.488462925 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.488478899 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.488517046 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.488527060 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.488543034 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.488564968 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.489212990 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.489308119 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.489314079 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.489754915 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.489939928 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.489953041 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.490335941 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.490398884 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.490442991 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.490457058 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.490483046 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.490526915 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.490566969 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.490570068 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.490583897 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.490611076 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.490643978 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.490675926 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.490714073 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.490720987 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.490763903 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.490834951 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.490896940 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.490906954 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.490906954 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.493719101 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.495119095 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.495196104 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.495203018 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.495229006 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.495237112 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.516505957 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.516547918 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.516580105 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.516608953 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.516623020 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.516741037 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.516829967 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.516838074 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.516877890 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.516908884 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.516946077 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.516947031 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.516957045 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.517612934 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.517671108 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.517678022 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.517947912 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.518140078 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.518192053 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.518332005 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.518363953 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.518385887 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.518393040 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.518408060 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.519141912 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.519171953 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.519203901 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.519217968 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.519224882 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.519289017 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.519402981 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.532426119 CEST	49864	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.532443047 CEST	443	49864	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.535891056 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.537378073 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.537385941 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.537944078 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.557101965 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.557133913 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.557174921 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.557220936 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.557245016 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.557245970 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.557291985 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.557300091 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.557872057 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.557917118 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.557967901 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.557979107 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.558126926 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.558171034 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.558178902 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.558269978 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.558804035 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.558856964 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.558923006 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.558929920 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.558984995 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.559021950 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.559026957 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.559035063 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.559753895 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.559782982 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.559793949 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.559803963 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.559815884 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.559860945 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.559911013 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.559925079 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.572240114 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.572308064 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.572386980 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.572395086 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.572449923 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.572495937 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.572541952 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.572551012 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.572593927 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.572841883 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.572910070 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.572945118 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.572987080 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.572994947 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.573035002 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.573549986 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.573618889 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.573653936 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.573663950 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.573671103 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.573709965 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.573751926 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.573760033 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.573793888 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.574465036 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.574518919 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.574553967 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.574584007 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.574595928 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.574604034 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.574616909 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.575320005 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.577250004 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.577259064 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.578550100 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.578614950 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.578650951 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.578671932 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.578680038 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.578690052 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.578728914 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.578887939 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.578929901 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.578937054 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.578969955 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579000950 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579030991 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579041958 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.579049110 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579071045 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.579370975 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579480886 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579524994 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579554081 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579562902 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.579581976 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579602003 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.579663038 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579698086 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579752922 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579766035 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.579771996 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579898119 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579900026 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.579943895 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.579945087 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579957008 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.579994917 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.579999924 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.580027103 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.580055952 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.580099106 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.580105066 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.580142975 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.580593109 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.580643892 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.580655098 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.580660105 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.580723047 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.580754995 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.580765009 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.580770969 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.580787897 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.580818892 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.580940962 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.580965996 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.580986023 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.580991030 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.581028938 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.581070900 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.581079006 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.581095934 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.581113100 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.581142902 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.581432104 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.581466913 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.581502914 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.581516027 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.581557035 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.581590891 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.581615925 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.581621885 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.581705093 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.582345009 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.582400084 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.582405090 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.582545042 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.583017111 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.583072901 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.583091021 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.593163967 CEST	443	49871	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.598526955 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.604463100 CEST	443	49870	108.156.60.21	192.168.2.7
Oct 7, 2024 01:05:44.610872030 CEST	49864	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.610888958 CEST	443	49864	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.615226984 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.615288019 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.615299940 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.635601044 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.637645960 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.637653112 CEST	49871	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.640115023 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.640134096 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.640373945 CEST	49870	443	192.168.2.7	108.156.60.21
Oct 7, 2024 01:05:44.640388012 CEST	443	49870	108.156.60.21	192.168.2.7
Oct 7, 2024 01:05:44.640410900 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.640418053 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.641367912 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.641381979 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.641433954 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.641552925 CEST	443	49870	108.156.60.21	192.168.2.7
Oct 7, 2024 01:05:44.641585112 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.641602993 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.641611099 CEST	49870	443	192.168.2.7	108.156.60.21
Oct 7, 2024 01:05:44.641653061 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.643572092 CEST	49871	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.643582106 CEST	443	49871	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.643922091 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.643953085 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.644006014 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.644011974 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.644040108 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.644108057 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.644117117 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.644133091 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.644174099 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.647406101 CEST	443	49863	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.650723934 CEST	49863	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.653650045 CEST	49871	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.653656006 CEST	443	49871	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.654037952 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.654126883 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.658855915 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.658898115 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.658936024 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.658958912 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.658972025 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.659020901 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.659306049 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.659349918 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.659358978 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.659410954 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.659418106 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.659425974 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.659455061 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.660114050 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.660121918 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.660167933 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.660177946 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.660387993 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.660429955 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.660439968 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.660459042 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.660485029 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.660492897 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.660507917 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.660556078 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.660598040 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.660605907 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.660645962 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.661324024 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.661379099 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.661403894 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.661451101 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.662237883 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.662278891 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.662288904 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.662297010 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.662313938 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.662336111 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.663038015 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.663083076 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.663117886 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.663161993 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.663191080 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.663242102 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.670233011 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.670295000 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.670331001 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.670386076 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.670396090 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.670474052 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.670773983 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.670785904 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.670810938 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.670844078 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.670918941 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.670928001 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.670984030 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.670998096 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.671006918 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.671061993 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.671705961 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.671782970 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.671792984 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.671798944 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.671839952 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.671839952 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.671853065 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.671904087 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.672777891 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.672837973 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.672856092 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.672859907 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.672878027 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.672899961 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.672941923 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.672946930 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.672986031 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.673645973 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.673688889 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.673733950 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.673788071 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.682091951 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.682248116 CEST	49870	443	192.168.2.7	108.156.60.21
Oct 7, 2024 01:05:44.682274103 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.682480097 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.682485104 CEST	443	49870	108.156.60.21	192.168.2.7
Oct 7, 2024 01:05:44.682507992 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.682737112 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.682749987 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.682780981 CEST	49870	443	192.168.2.7	108.156.60.21
Oct 7, 2024 01:05:44.682799101 CEST	443	49870	108.156.60.21	192.168.2.7
Oct 7, 2024 01:05:44.683563948 CEST	49861	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.683583975 CEST	443	49861	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.684385061 CEST	49861	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.684391022 CEST	443	49861	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.684777975 CEST	49862	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.684792042 CEST	443	49862	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.685470104 CEST	49862	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.685475111 CEST	443	49862	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.686005116 CEST	49863	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.686022997 CEST	443	49863	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.686537981 CEST	49863	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.686543941 CEST	443	49863	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.702877998 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.702950001 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.705425978 CEST	443	49864	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.705550909 CEST	443	49864	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.705619097 CEST	443	49864	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.705733061 CEST	49864	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.711364985 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.711601019 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.711999893 CEST	49864	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.711999893 CEST	49864	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.712019920 CEST	443	49864	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.712028980 CEST	443	49864	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.722894907 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.725474119 CEST	49870	443	192.168.2.7	108.156.60.21
Oct 7, 2024 01:05:44.725977898 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.738992929 CEST	443	49874	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.745801926 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.745882988 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.745912075 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.745934010 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.745946884 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.745948076 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.745973110 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.745980024 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.745995045 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.746006966 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.746030092 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.746031046 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.746042013 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.746077061 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.746763945 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.746812105 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.747173071 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.747212887 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.747220993 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.747227907 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.747251034 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.747257948 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.747261047 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.747268915 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.747294903 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.747639894 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.747663975 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.747685909 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.747694969 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.747711897 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.747741938 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.747747898 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.747790098 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.747853994 CEST	443	49871	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.747931957 CEST	443	49871	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.748449087 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.748501062 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.748536110 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.748537064 CEST	49871	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.748545885 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.748555899 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.748641968 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.748718977 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.748744011 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.748750925 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.748780012 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.748789072 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.748831987 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.748841047 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.748881102 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.749428034 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.749476910 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.749485016 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.749501944 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.749524117 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.749548912 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.761188984 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.761248112 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.761276960 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.761284113 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.761373043 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.761473894 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.761528969 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.761573076 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.761645079 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.761708021 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.761765003 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.761781931 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.761909962 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.761953115 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.766858101 CEST	49860	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.766885996 CEST	443	49860	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.767601013 CEST	49874	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.767616987 CEST	443	49874	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.768289089 CEST	443	49874	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.769495010 CEST	49874	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.769589901 CEST	443	49874	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.770222902 CEST	49874	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.780872107 CEST	443	49861	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.780950069 CEST	443	49861	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.781219959 CEST	49861	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.782815933 CEST	443	49862	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.782946110 CEST	49871	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.782967091 CEST	443	49871	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.782996893 CEST	49871	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.783005953 CEST	443	49871	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.783395052 CEST	443	49862	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.783463955 CEST	443	49862	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.783528090 CEST	49862	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.784905910 CEST	443	49863	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.785437107 CEST	443	49863	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.785496950 CEST	49863	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.785826921 CEST	49863	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.785851002 CEST	443	49863	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.785861969 CEST	49863	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.785868883 CEST	443	49863	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.786578894 CEST	49861	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.786578894 CEST	49861	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.786596060 CEST	443	49861	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.786604881 CEST	443	49861	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.789289951 CEST	49862	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.789294004 CEST	443	49862	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.789329052 CEST	49862	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.789335012 CEST	443	49862	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.790951014 CEST	49867	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:44.790972948 CEST	443	49867	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:44.792824030 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.794166088 CEST	49875	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.794192076 CEST	443	49875	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.794451952 CEST	49875	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.794739008 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.795393944 CEST	49869	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.795403957 CEST	443	49869	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.795656919 CEST	49876	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.795687914 CEST	443	49876	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.795753002 CEST	49876	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.796430111 CEST	49865	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.796438932 CEST	443	49865	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.797418118 CEST	49877	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.797462940 CEST	443	49877	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.797703981 CEST	49877	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.799598932 CEST	49878	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.799633980 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.799819946 CEST	49878	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.800637960 CEST	49879	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.800679922 CEST	443	49879	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.800762892 CEST	49879	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.801184893 CEST	49868	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.801198959 CEST	443	49868	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.801712036 CEST	49878	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.801736116 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.802134037 CEST	49875	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.802151918 CEST	443	49875	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.803050995 CEST	49876	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.803073883 CEST	443	49876	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.803415060 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.803431034 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.803560019 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.803620100 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.803633928 CEST	49866	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.803643942 CEST	443	49866	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.803661108 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.803709030 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.803729057 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.803754091 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.803769112 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.803805113 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.803811073 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.803817987 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.803845882 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.804415941 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.804431915 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.804446936 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.804536104 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.804542065 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.804969072 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.805017948 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.805023909 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.805557013 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.805571079 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.805620909 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.806046963 CEST	49877	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.806058884 CEST	443	49877	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.806067944 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.806077957 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.806142092 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.806361914 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.806379080 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.806982040 CEST	49879	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.807002068 CEST	443	49879	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.807094097 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.807100058 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.807425022 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.807446003 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.807504892 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.807982922 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.808000088 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.808543921 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.808593988 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.808602095 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.809163094 CEST	49884	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.809182882 CEST	443	49884	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.809231997 CEST	49884	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.809396029 CEST	49884	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:44.809401035 CEST	443	49884	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:44.810503006 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.810551882 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.810587883 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.810609102 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.810617924 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.810630083 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.810658932 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.810684919 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.810718060 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.810729980 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.811007977 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.811062098 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.811070919 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.815176964 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.815213919 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.815247059 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.815279007 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.815298080 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.815311909 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.815401077 CEST	443	49874	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.854840994 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.854912043 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.859760046 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.859795094 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.859850883 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.860373974 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.860383987 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.863975048 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.863986015 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.864043951 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.864310026 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.864319086 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.866789103 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.866830111 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.866889000 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.867536068 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.867542982 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.867594957 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.868041039 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.868060112 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.868345022 CEST	49889	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:44.868385077 CEST	443	49889	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:44.868453979 CEST	49889	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:44.868802071 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.868815899 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.869074106 CEST	49889	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:44.869090080 CEST	443	49889	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:44.892096996 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.892169952 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.892199993 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.892260075 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.892282009 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.892369986 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.892441034 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.892515898 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.892620087 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.892625093 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.892693043 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.892736912 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.892741919 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.893377066 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.893416882 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.893421888 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.893449068 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.893485069 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.893500090 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.893505096 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.893554926 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.893558979 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.894292116 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.894320965 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.894332886 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.894337893 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.894381046 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.894381046 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.894388914 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.894423008 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.895116091 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.895188093 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.895220995 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.895232916 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.895237923 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.895275116 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.895279884 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.898648977 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.898730040 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.898766041 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.898787022 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.898796082 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.898845911 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.898864985 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.898910046 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.898910046 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.898915052 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.899044037 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.899077892 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.899081945 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.899091005 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.899152994 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.899188995 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.899220943 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.899224043 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.899224043 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.899235010 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.899279118 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.899871111 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.899945974 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.899979115 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.899993896 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.900001049 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.900033951 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.900068045 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.900106907 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.900106907 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.900113106 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.900731087 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.900774956 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.900784969 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.900791883 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.900852919 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.900857925 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.904757023 CEST	443	49874	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.904859066 CEST	443	49874	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.904941082 CEST	49874	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.905692101 CEST	49874	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.905705929 CEST	443	49874	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.929256916 CEST	443	49870	108.156.60.21	192.168.2.7
Oct 7, 2024 01:05:44.929280996 CEST	443	49870	108.156.60.21	192.168.2.7
Oct 7, 2024 01:05:44.929287910 CEST	443	49870	108.156.60.21	192.168.2.7
Oct 7, 2024 01:05:44.929317951 CEST	443	49870	108.156.60.21	192.168.2.7
Oct 7, 2024 01:05:44.929339886 CEST	49870	443	192.168.2.7	108.156.60.21
Oct 7, 2024 01:05:44.929354906 CEST	443	49870	108.156.60.21	192.168.2.7
Oct 7, 2024 01:05:44.929367065 CEST	443	49870	108.156.60.21	192.168.2.7
Oct 7, 2024 01:05:44.929380894 CEST	49870	443	192.168.2.7	108.156.60.21
Oct 7, 2024 01:05:44.929402113 CEST	49870	443	192.168.2.7	108.156.60.21
Oct 7, 2024 01:05:44.931174040 CEST	49870	443	192.168.2.7	108.156.60.21
Oct 7, 2024 01:05:44.931197882 CEST	443	49870	108.156.60.21	192.168.2.7
Oct 7, 2024 01:05:44.940274954 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.943419933 CEST	49890	443	192.168.2.7	3.164.206.74
Oct 7, 2024 01:05:44.943449974 CEST	443	49890	3.164.206.74	192.168.2.7
Oct 7, 2024 01:05:44.943528891 CEST	49890	443	192.168.2.7	3.164.206.74
Oct 7, 2024 01:05:44.943789959 CEST	49890	443	192.168.2.7	3.164.206.74
Oct 7, 2024 01:05:44.943805933 CEST	443	49890	3.164.206.74	192.168.2.7
Oct 7, 2024 01:05:44.955832958 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.981616020 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.981736898 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.981776953 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.981785059 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.981834888 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.981834888 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.981851101 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.981934071 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.982445955 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.982486010 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.982518911 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.982523918 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.982549906 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.982570887 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.983155012 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.983216047 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.983220100 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.983232021 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.983284950 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.984008074 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.984050989 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.984061956 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.984066963 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.984105110 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.984112024 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.984118938 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.984122992 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.984666109 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.984910965 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.984951973 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.984957933 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.984961987 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.984994888 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.986309052 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.986366987 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.986426115 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.986471891 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.986475945 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.986525059 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.986598969 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.986725092 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.986773968 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.986777067 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.986790895 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.986840963 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.986882925 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.986887932 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.986974001 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.986978054 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.987030029 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.987035036 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.987071037 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.987076998 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.987087965 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.987126112 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.987135887 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.987139940 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.987168074 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.987904072 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.987960100 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.987966061 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.987973928 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.988024950 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.988898039 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.988985062 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.988993883 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.989005089 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.989049911 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.989068031 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.989068031 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.989073992 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:44.989109993 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:44.989120960 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.024864912 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.024955988 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.070255995 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.070322037 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.070342064 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.070352077 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.070374966 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.070394993 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.070400953 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.070419073 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.070771933 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.070815086 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.070821047 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.070858955 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.071039915 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.071098089 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.071151018 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.071201086 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.071223974 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.071265936 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.071732044 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.071770906 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.071782112 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.071785927 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.071816921 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.071877003 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.071908951 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.071917057 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.071922064 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.071990967 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.072592974 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.072643042 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.072647095 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.072652102 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.072695017 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.072732925 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.072777033 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.072777987 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.072786093 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.072824001 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.073683023 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.073735952 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.073735952 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.073745012 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.073765993 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.073775053 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.073777914 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.073784113 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.073822021 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.073915005 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.073980093 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074023962 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074023962 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074031115 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074047089 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074099064 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074120998 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074179888 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074186087 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074255943 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074263096 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074268103 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074337959 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074429035 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074472904 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074476004 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074485064 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074520111 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074522018 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074529886 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074559927 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074584007 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074625969 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074630022 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074671984 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074809074 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074858904 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074901104 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074901104 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074908018 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074922085 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074963093 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.074979067 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074979067 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.074986935 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.075005054 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.075368881 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.075416088 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.075427055 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.075505018 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.075532913 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.075545073 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.075579882 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.075584888 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.075594902 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.075637102 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.075651884 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.075651884 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.075659990 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.075679064 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.075679064 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.075700998 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.075705051 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.075773954 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.076461077 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.076507092 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.076556921 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.076556921 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.076561928 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.076618910 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.076627970 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.076647997 CEST	49872	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.076659918 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.076668024 CEST	443	49872	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.076672077 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.076675892 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.076808929 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.080215931 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.080276012 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.080327034 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.080327034 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.080332994 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.080343962 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.080399036 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.080418110 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.080424070 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.080457926 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.080951929 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.081053019 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.081058025 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.081111908 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.082879066 CEST	49891	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.082926989 CEST	443	49891	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.082988977 CEST	49891	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.083626032 CEST	49891	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.083640099 CEST	443	49891	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.088705063 CEST	49892	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.088740110 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.088808060 CEST	49892	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.089035034 CEST	49892	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.089046955 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.095801115 CEST	49893	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.095844030 CEST	443	49893	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.095896959 CEST	49893	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.096726894 CEST	49893	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.096746922 CEST	443	49893	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.116067886 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.116146088 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.161338091 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.161412001 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.161412954 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.161425114 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.161459923 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.161468983 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.161479950 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.161488056 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.161514044 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.161520958 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.161593914 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.161597967 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.161653042 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.161667109 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.161706924 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.161724091 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.161730051 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.161752939 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.161835909 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.161859035 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.161863089 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.161896944 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.162352085 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.162401915 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.162401915 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.162415028 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.162493944 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.162765026 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.162789106 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.162867069 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.162867069 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.162872076 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.163011074 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.163037062 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.163074017 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.163079023 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.163101912 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.163711071 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.163733006 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.163791895 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.163796902 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.163830996 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.164151907 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.164185047 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.164232969 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.164237976 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.164293051 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.204061031 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.204088926 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.204199076 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.204199076 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.204214096 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.249047995 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.249082088 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.249141932 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.249152899 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.249196053 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.249449968 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.249469995 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.249532938 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.249532938 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.249541998 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.249936104 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.249958992 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.250000954 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.250005960 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.250092983 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.250475883 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.250497103 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.250535011 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.250550032 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.250579119 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.250744104 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.250766993 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.250808954 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.250808954 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.250816107 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.251446962 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.251477957 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.251571894 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.251573086 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.251580000 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.251775026 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.251800060 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.251841068 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.251847982 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.251939058 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.267194986 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.267484903 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.267496109 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.268537998 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.268626928 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.269320965 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.269393921 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.269548893 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.269556999 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.273993969 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.274233103 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.274243116 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.275253057 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.275314093 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.275928974 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.276048899 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.276070118 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.276257992 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.277556896 CEST	49878	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.277570963 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.277942896 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.278167963 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.278470039 CEST	49878	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.278542042 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.278623104 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.278631926 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.278723955 CEST	49878	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.278979063 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.279412985 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.279484987 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.279505014 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.290833950 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.291066885 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.291085958 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.291812897 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.291843891 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.291887045 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.291896105 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.291954041 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.292712927 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.292768955 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.293376923 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.293427944 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.293442965 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.293473959 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.317585945 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.317874908 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.317895889 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.318464041 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.318799973 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.318913937 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.318938971 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.319309950 CEST	443	49889	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.319487095 CEST	49889	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.319506884 CEST	443	49889	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.320887089 CEST	443	49889	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.320962906 CEST	49889	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.321305990 CEST	49889	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.321388006 CEST	443	49889	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.321412086 CEST	49889	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.321577072 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.321819067 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.321829081 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.322166920 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.322479963 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.322545052 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.322596073 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.323398113 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.323399067 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.323406935 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.331418037 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.331429005 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.335655928 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.335889101 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.335899115 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.336833000 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.336867094 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.336916924 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.336924076 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.336954117 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.336955070 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.337013960 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.337018013 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.337037086 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.337064981 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.337102890 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.337112904 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.337112904 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.337112904 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.337120056 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.337157965 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.337409019 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.337472916 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.337528944 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.337563992 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.337615967 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.337620974 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.337631941 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.337719917 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.337727070 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.337884903 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.337903976 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.337963104 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.337963104 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.337970018 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.338252068 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.338277102 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.338327885 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.338330984 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.338330984 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.338341951 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.338385105 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.338388920 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.338416100 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.338500023 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.338753939 CEST	49873	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.338762045 CEST	443	49873	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.346942902 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.346954107 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.354201078 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.354522943 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.354552984 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.355714083 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.355781078 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.356728077 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.356827021 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.358226061 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.358234882 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.359407902 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.362080097 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.367391109 CEST	443	49889	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.367400885 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.378218889 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.393531084 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.409147024 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.421134949 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.421216965 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.421246052 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.421264887 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.421283007 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.421315908 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.421333075 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.421341896 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.421380997 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.421381950 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.421395063 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.421437025 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.421566010 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.421627998 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.421693087 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.421726942 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.421736956 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.421777010 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.422640085 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.422689915 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.422724962 CEST	49878	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.422728062 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.422739983 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.422770977 CEST	49878	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.422779083 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.423319101 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.423324108 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.423352957 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.423372030 CEST	49878	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.423377991 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.423413992 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.423429012 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.423429966 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.423463106 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.423480034 CEST	49878	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.423495054 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.423512936 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.423521042 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.423557997 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.423571110 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.423583031 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.423604012 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.423610926 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.423708916 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.424325943 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.424407005 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.424458981 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.424469948 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.424480915 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.424518108 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.424544096 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.424598932 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.424674988 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.424680948 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.425226927 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.425295115 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.425302029 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.426214933 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.427463055 CEST	49878	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.427476883 CEST	443	49878	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.427978039 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.428018093 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.428066969 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.428081989 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.429233074 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.429303885 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.429316044 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.429325104 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.429379940 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.429385900 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.430459023 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.430619955 CEST	49889	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.430619955 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.430629015 CEST	443	49889	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.433495998 CEST	49894	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.433543921 CEST	443	49894	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.433643103 CEST	49894	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.434029102 CEST	49894	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.434046984 CEST	443	49894	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.437655926 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.437699080 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.437738895 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.437738895 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.437758923 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.437794924 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.437800884 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.437808990 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.437839985 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.437864065 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.437870026 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.437880039 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.437900066 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.437925100 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.437959909 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.437969923 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.438517094 CEST	443	49889	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.438560963 CEST	49889	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.438571930 CEST	443	49889	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.438797951 CEST	443	49877	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.438851118 CEST	443	49889	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.438905001 CEST	49889	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.439518929 CEST	49889	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.439532042 CEST	443	49889	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.439546108 CEST	49889	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.439579010 CEST	49889	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.441687107 CEST	49877	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.441705942 CEST	443	49877	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.442245007 CEST	49877	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.442251921 CEST	443	49877	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.442457914 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.442502975 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.442513943 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.447668076 CEST	443	49884	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.448699951 CEST	49884	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.448738098 CEST	443	49884	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.449137926 CEST	49884	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.449146032 CEST	443	49884	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.451976061 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.452023983 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.452059031 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.452073097 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.452092886 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.452121973 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.452141047 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.452148914 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.452178955 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.452187061 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.452827930 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.452869892 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.452877045 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.452888012 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.452922106 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.452929020 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.456774950 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.456834078 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.456861973 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.456866980 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.456873894 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.456877947 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.456916094 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.456921101 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.456932068 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.456938982 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.457492113 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.457540035 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.457545042 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.457722902 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.457763910 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.457770109 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.461760044 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.461808920 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.461813927 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.461888075 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.461930990 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.461937904 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.467492104 CEST	443	49876	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.467525959 CEST	443	49875	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.468019962 CEST	49876	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.468050957 CEST	443	49876	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.468576908 CEST	49876	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.468585968 CEST	443	49876	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.468872070 CEST	49875	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.468888998 CEST	443	49875	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.469403982 CEST	443	49879	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.469468117 CEST	49875	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.469472885 CEST	443	49875	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.469880104 CEST	49879	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.469897032 CEST	443	49879	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.470556021 CEST	49879	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.470562935 CEST	443	49879	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.471916914 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.471940041 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.493860960 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.493916035 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.493947983 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.493963003 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.493983030 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.494028091 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.494035006 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.494287968 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.494317055 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.494335890 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.494343996 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.494394064 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.494589090 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.494638920 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.494672060 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.494678974 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.494687080 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.494724035 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.494731903 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.494767904 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.494797945 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.494802952 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.494810104 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.494846106 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.494951963 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.494998932 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.495034933 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.495042086 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.495070934 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.499459028 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.499488115 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.499500036 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.499509096 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.499514103 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.499541044 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.499566078 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.499634981 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.499641895 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.509335995 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.509411097 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.509464979 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.509489059 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.509759903 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.509814978 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.509824038 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510059118 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510102034 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.510109901 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510240078 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.510305882 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510338068 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510363102 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.510374069 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510428905 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.510471106 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510519981 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.510529041 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510565042 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510571957 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510587931 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510613918 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.510623932 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510736942 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510763884 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.510780096 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510783911 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.510791063 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.510854006 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.511221886 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.511303902 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.511336088 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.511356115 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.511363029 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.511409044 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.511416912 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.511440039 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.511503935 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.511537075 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.511547089 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.511565924 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.511604071 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.511615038 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512135983 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512166977 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512196064 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512252092 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.512252092 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.512262106 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512326956 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512362003 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512378931 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.512391090 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512425900 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512430906 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.512439013 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512482882 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.512490034 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512732029 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512785912 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.512793064 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512829065 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512861013 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512891054 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512909889 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.512917042 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.512943983 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.513717890 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.513773918 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.513781071 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.514624119 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.514755011 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.514853001 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.514859915 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.514938116 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.514976025 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.514981985 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.515028954 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.515065908 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.515098095 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.515103102 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.515196085 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.515711069 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.515798092 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.515853882 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.515858889 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.515928030 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.516000986 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.516391993 CEST	49882	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.516405106 CEST	443	49882	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.527877092 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.527914047 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.527940989 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.527962923 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.528002024 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.528018951 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.528458118 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.528502941 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.528512001 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.528551102 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.528589964 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.528599024 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.529159069 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.529187918 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.529211044 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.529218912 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.529258966 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.529283047 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.529289007 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.529299974 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.529326916 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.530112028 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.530139923 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.530162096 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.530169010 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.530196905 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.530205965 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.530214071 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.530257940 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.530934095 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.531040907 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.531059980 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.531109095 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.531120062 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.531162024 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.532639980 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.537342072 CEST	443	49877	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.537445068 CEST	443	49877	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.537512064 CEST	49877	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.537704945 CEST	49877	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.537705898 CEST	49877	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.537719011 CEST	443	49877	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.537729979 CEST	443	49877	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.538583994 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.538630009 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.538640022 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.538649082 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.538774014 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.538781881 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.539133072 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.539180040 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.539191961 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.539197922 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.539244890 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.539249897 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.539261103 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.539308071 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.539314985 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.540122986 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.540169001 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.540201902 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.540206909 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.540215969 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.540246010 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.540256977 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.540283918 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.540290117 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.540297031 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.540363073 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.540555000 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.541071892 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.541137934 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.541169882 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.541176081 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.541184902 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.541223049 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.541225910 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.541235924 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.541279078 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.541918993 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.542619944 CEST	49895	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.542666912 CEST	443	49895	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.542819977 CEST	49895	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.542975903 CEST	49895	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.542992115 CEST	443	49895	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.543365002 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.543720961 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.544115067 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.544152975 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.544183016 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.544195890 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.544231892 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.544240952 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.544836044 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.544881105 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.544886112 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.544945955 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.544981003 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.544986010 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.544995070 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.545032978 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.545428991 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.545523882 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.545568943 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.545572996 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.545615911 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.545645952 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.545661926 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.545666933 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.545706034 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.546364069 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.546411037 CEST	443	49884	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.546426058 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.546433926 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.546473980 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.546478033 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.546514988 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.546519995 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.546525955 CEST	443	49884	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.546587944 CEST	49884	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.547079086 CEST	49884	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.547102928 CEST	443	49884	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.547122002 CEST	49884	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.547128916 CEST	443	49884	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.547300100 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.547352076 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.547354937 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.547360897 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.547410011 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.547414064 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.547483921 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.547519922 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.547585964 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.547595978 CEST	443	49885	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.547606945 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.547633886 CEST	49885	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.548151970 CEST	49896	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.548201084 CEST	443	49896	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.548307896 CEST	49896	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.548682928 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.549088955 CEST	49892	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.549113035 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.549417019 CEST	49896	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.549458027 CEST	443	49896	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.550190926 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.550275087 CEST	49892	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.550582886 CEST	49892	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.550656080 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.550731897 CEST	49892	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.550740957 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.551548958 CEST	443	49891	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.551733971 CEST	49891	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.551745892 CEST	443	49891	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.552841902 CEST	443	49891	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.552911043 CEST	49891	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.553033113 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.553082943 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.553093910 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.553308964 CEST	49891	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.553385973 CEST	443	49891	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.553524971 CEST	49891	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.553535938 CEST	443	49891	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.554488897 CEST	49897	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.554519892 CEST	443	49897	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.554617882 CEST	49897	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.554894924 CEST	49897	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.554909945 CEST	443	49897	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.566803932 CEST	443	49893	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.567574978 CEST	49893	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.567598104 CEST	443	49893	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.567986012 CEST	443	49893	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.568530083 CEST	49893	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.568598986 CEST	443	49893	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.568860054 CEST	49893	443	192.168.2.7	104.16.140.114
Oct 7, 2024 01:05:45.570909977 CEST	443	49875	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.571063995 CEST	443	49875	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.571130037 CEST	49875	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.571218014 CEST	49875	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.571234941 CEST	443	49875	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.571245909 CEST	49875	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.571252108 CEST	443	49875	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.572622061 CEST	443	49879	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.572865963 CEST	443	49879	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.572921038 CEST	443	49879	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.572935104 CEST	49879	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.572972059 CEST	49879	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.573020935 CEST	49879	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.573040009 CEST	443	49879	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.573051929 CEST	49879	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.573059082 CEST	443	49879	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.573537111 CEST	443	49876	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.573935032 CEST	443	49876	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.573991060 CEST	49876	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.574228048 CEST	49876	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.574234962 CEST	443	49876	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.574248075 CEST	49876	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.574254036 CEST	443	49876	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.576359987 CEST	49898	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.576386929 CEST	443	49898	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.576502085 CEST	49898	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.576725960 CEST	49898	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.576736927 CEST	443	49898	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.577598095 CEST	49899	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.577629089 CEST	443	49899	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.577709913 CEST	49899	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.577858925 CEST	49900	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.577884912 CEST	443	49900	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.577943087 CEST	49899	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.577961922 CEST	443	49899	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.577967882 CEST	49900	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.578191996 CEST	49900	443	192.168.2.7	13.107.246.60
Oct 7, 2024 01:05:45.578205109 CEST	443	49900	13.107.246.60	192.168.2.7
Oct 7, 2024 01:05:45.582869053 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.582962990 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.582988977 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.583010912 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.583023071 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.583065987 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.583436966 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.583498955 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.583522081 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.583540916 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.583548069 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.583590031 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.584104061 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.584137917 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.584162951 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.584189892 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.584192038 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.584202051 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.584244013 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.584253073 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.584295034 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.585095882 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.585146904 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.585175991 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.585189104 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.585207939 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.585221052 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.585247040 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.586009979 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.586034060 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.586042881 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.586055994 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.586064100 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.586071968 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.586123943 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.586200953 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.586230993 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.586245060 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.586252928 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.586288929 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.586302996 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.586850882 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.586879969 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.586894035 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.586904049 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.586949110 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.586955070 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.587575912 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.587605000 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.587625980 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.587634087 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.587663889 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.587672949 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.587678909 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.587735891 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.588426113 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.588476896 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.588507891 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.588526011 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.588536978 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.588583946 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.589344978 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.589395046 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.589427948 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.589437962 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.589445114 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.589488983 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.590689898 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.596991062 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.597891092 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.597930908 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.597954035 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.597951889 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.597970009 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.597981930 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598011017 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.598033905 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598066092 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598077059 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.598094940 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598138094 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598140001 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.598145962 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598221064 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.598221064 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.598225117 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598234892 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598268032 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598308086 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.598308086 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.598526955 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598535061 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598573923 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598579884 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.598664045 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598690033 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598707914 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.598725080 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598752022 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598758936 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.598768950 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.598795891 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.598824024 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.598829031 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599075079 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599122047 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599148035 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.599154949 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599217892 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599226952 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.599252939 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599276066 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.599283934 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599312067 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.599540949 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599590063 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.599600077 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599667072 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599700928 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599709034 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.599709034 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.599714994 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599764109 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.599764109 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.599812031 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599863052 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.599872112 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599910975 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.599920988 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.599971056 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.600220919 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.600282907 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.600307941 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.600313902 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.600367069 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.600367069 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.600390911 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.600430012 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.600440025 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.600446939 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.600471020 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.600472927 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.600523949 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.600531101 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.600536108 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.600581884 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.600604057 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.600641012 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.600677967 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.600724936 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.600724936 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.600732088 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.601361990 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.601408005 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.601418972 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.601425886 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.601453066 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.601470947 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.601476908 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.601499081 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.602322102 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.602386951 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.602394104 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.602721930 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.611404896 CEST	443	49893	104.16.140.114	192.168.2.7
Oct 7, 2024 01:05:45.618506908 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.618552923 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.618575096 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.618577003 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.618591070 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.618638992 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.618645906 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.618650913 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.618674040 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.618680954 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.618688107 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.618726015 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.618736029 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.619030952 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.619086981 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.619095087 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.619138956 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.619263887 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.619292974 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.619318008 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.619324923 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.619352102 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.619363070 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.619398117 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.619410038 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.619422913 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.620018959 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.620045900 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.620070934 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.620074987 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.620085955 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.620105982 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.620110035 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.620134115 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.620141983 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.620157957 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.620162010 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.620213032 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.620220900 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.620264053 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.620918036 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.620975971 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.620985031 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.621037006 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.621048927 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.621056080 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.621085882 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.625006914 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.625057936 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.625075102 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.625106096 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.625159979 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.625400066 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.625451088 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.625462055 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.625813961 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.625868082 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.626113892 CEST	49886	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.626131058 CEST	443	49886	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.628621101 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.628696918 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.628725052 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.631354094 CEST	49901	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.631406069 CEST	443	49901	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.631481886 CEST	49901	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.631856918 CEST	49902	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.631865025 CEST	443	49902	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.631917000 CEST	49902	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.632350922 CEST	49901	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.632364988 CEST	443	49901	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.632548094 CEST	49902	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.632560015 CEST	443	49902	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.641845942 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.641911983 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.671518087 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.671740055 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.671793938 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.671816111 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.671837091 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.671885014 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.671894073 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.671932936 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.672307014 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.672367096 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.672400951 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.672455072 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.672909975 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.672964096 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.673013926 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.673074007 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.673109055 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.673156977 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.674531937 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.674561977 CEST	49892	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.674571037 CEST	49891	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.674595118 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.674840927 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.676037073 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.676096916 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.676131964 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.676178932 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.676251888 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.676306963 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.676357985 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.676409960 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.676443100 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.676497936 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.676548004 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.676599026 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.676640034 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.676691055 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.678177118 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.678323984 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.678364992 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.678375959 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.678807974 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.678817987 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.678855896 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.678864956 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.679239988 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.679286003 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.679290056 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.679307938 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.679327011 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.679361105 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.679414034 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.679425001 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.679466963 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.680059910 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.680105925 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.680128098 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.680135012 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.680145979 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.680165052 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.680176020 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.680181980 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.680242062 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.681032896 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.681078911 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.681086063 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.681093931 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.681124926 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.681875944 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.681922913 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.681946039 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.681953907 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.681974888 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.682014942 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.682061911 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.682070971 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.682126045 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.682837963 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.682893991 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.685369968 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.685388088 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.685445070 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.685528040 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.685589075 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.685596943 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.685681105 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.685683012 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.685693026 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.685730934 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.685785055 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.685836077 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.685873985 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.685873985 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.685880899 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.686153889 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.686201096 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.686202049 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.686213970 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.686294079 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.686436892 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.686463118 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.686476946 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.686491013 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.686536074 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.686537027 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.686626911 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.686635971 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.686657906 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.686690092 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.686717033 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.686873913 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.686924934 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.686952114 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.686997890 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.687042952 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.687043905 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.687048912 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.687129021 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.687170029 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.687182903 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.687182903 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.687187910 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.687197924 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.687228918 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.687228918 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.687237024 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.687242031 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.687254906 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.687279940 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.687302113 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.687313080 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.687329054 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.687429905 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.687469006 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.687477112 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.687485933 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.687546968 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.687784910 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.687833071 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.687973976 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.688015938 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.688054085 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.688100100 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.688409090 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.688426971 CEST	443	49890	3.164.206.74	192.168.2.7
Oct 7, 2024 01:05:45.688450098 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.688462019 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.688467979 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.688520908 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.688544035 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.688579082 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.688627958 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.688636065 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.688644886 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.688668966 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.688679934 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.688930988 CEST	49890	443	192.168.2.7	3.164.206.74
Oct 7, 2024 01:05:45.688955069 CEST	443	49890	3.164.206.74	192.168.2.7
Oct 7, 2024 01:05:45.690026999 CEST	443	49890	3.164.206.74	192.168.2.7
Oct 7, 2024 01:05:45.690080881 CEST	49890	443	192.168.2.7	3.164.206.74
Oct 7, 2024 01:05:45.690102100 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.690170050 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.690176010 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.690218925 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.690239906 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.690246105 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.690268993 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.690367937 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.690397978 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.690433025 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.690440893 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.690445900 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.690464020 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.690464020 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.690532923 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.690890074 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.690952063 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.690993071 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.691099882 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.691143990 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.691145897 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.691145897 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.691154003 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.691179991 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.691195011 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.691200018 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.691207886 CEST	49890	443	192.168.2.7	3.164.206.74
Oct 7, 2024 01:05:45.691246033 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.691283941 CEST	443	49890	3.164.206.74	192.168.2.7
Oct 7, 2024 01:05:45.691577911 CEST	49890	443	192.168.2.7	3.164.206.74
Oct 7, 2024 01:05:45.691591024 CEST	443	49890	3.164.206.74	192.168.2.7
Oct 7, 2024 01:05:45.691772938 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.691822052 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.691823959 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.691833973 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.691874027 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.691883087 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.691891909 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.691906929 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.691915989 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.691958904 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.691965103 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.691991091 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.692006111 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.692037106 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.692091942 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.692091942 CEST	49881	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.692101002 CEST	443	49881	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.692429066 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.692610025 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.692640066 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.692651987 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.692663908 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.692663908 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.692688942 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.692694902 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.692717075 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.693041086 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.693089008 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.693089962 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.693104029 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.693135977 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.693552971 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.693583012 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.693598986 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.693607092 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.693639040 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.693737030 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.693780899 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.693789005 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.693835974 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.709541082 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.709610939 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.709646940 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.709697962 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.709791899 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.709842920 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.709983110 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.710026026 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.710028887 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.710041046 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.710071087 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.710084915 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.710294962 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.710342884 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.710345984 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.710362911 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.710376024 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.710382938 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.710395098 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.710401058 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.710422039 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.710747957 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.710786104 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.710793018 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.710800886 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.710844040 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.710942984 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.710972071 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.710993052 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.710999966 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.711011887 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.711015940 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.711051941 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.711060047 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.711071014 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.711097956 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.711106062 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.711118937 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.711786985 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.711815119 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.711843014 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.711850882 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.711880922 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.711920977 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.711966038 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.711968899 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.711980104 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.712012053 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.712021112 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.712032080 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.712043047 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.712068081 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.712085962 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.712091923 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.712716103 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.712749004 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.712766886 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.712775946 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.712801933 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.712836981 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.712872982 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.712877035 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.712887049 CEST	443	49880	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.712914944 CEST	49880	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.713468075 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.713546038 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.715980053 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.716032982 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.716067076 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.716087103 CEST	49892	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.716099024 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.716134071 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.716140032 CEST	49892	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.716147900 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.716182947 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.716192007 CEST	49892	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.716200113 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.716243982 CEST	49892	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.716250896 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.716777086 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.716803074 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.716830015 CEST	49892	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.716840029 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.716876984 CEST	49892	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.720640898 CEST	443	49892	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.720654011 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.720710993 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.721153975 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.721209049 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.723366976 CEST	443	49891	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.723489046 CEST	443	49891	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.723623991 CEST	49891	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.723896980 CEST	49891	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.723925114 CEST	443	49891	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.727308989 CEST	49903	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.727355003 CEST	443	49903	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.727405071 CEST	49903	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.727863073 CEST	49903	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.727875948 CEST	443	49903	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.728214979 CEST	49904	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.728249073 CEST	443	49904	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.728370905 CEST	49904	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.728718996 CEST	49904	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.728732109 CEST	443	49904	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.730460882 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.730515003 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.730535984 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.730561972 CEST	443	49883	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.730586052 CEST	49883	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.736491919 CEST	49890	443	192.168.2.7	3.164.206.74
Oct 7, 2024 01:05:45.760116100 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.760163069 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.760190964 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.760227919 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.760251999 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.760255098 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.760287046 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.760294914 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.760313034 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.760329008 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.760401964 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.760447025 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.760896921 CEST	49887	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.760920048 CEST	443	49887	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.770678043 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.770740986 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.770764112 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.770788908 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.770808935 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.770826101 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.770931959 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.770967960 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.770977974 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.770986080 CEST	443	49888	104.16.141.114	192.168.2.7
Oct 7, 2024 01:05:45.771008015 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.771023989 CEST	49888	443	192.168.2.7	104.16.141.114
Oct 7, 2024 01:05:45.771279097 CEST	443	49888	104.16.141.114	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 01:05:24.484210014 CEST	192.168.2.7	1.1.1.1	0x667e	Standard query (0)	coritta.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:24.490514040 CEST	192.168.2.7	1.1.1.1	0x10e5	Standard query (0)	coritta.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:25.107671022 CEST	192.168.2.7	1.1.1.1	0xe520	Standard query (0)	www.coritta.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:25.107824087 CEST	192.168.2.7	1.1.1.1	0xc73b	Standard query (0)	www.coritta.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:26.139170885 CEST	192.168.2.7	1.1.1.1	0x8b16	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:26.139841080 CEST	192.168.2.7	1.1.1.1	0x484	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:26.193584919 CEST	192.168.2.7	1.1.1.1	0xb78c	Standard query (0)	img.sedoparking.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:26.194439888 CEST	192.168.2.7	1.1.1.1	0xbd84	Standard query (0)	img.sedoparking.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:26.195538044 CEST	192.168.2.7	1.1.1.1	0xfef5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:26.195744038 CEST	192.168.2.7	1.1.1.1	0x104b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:26.196285963 CEST	192.168.2.7	1.1.1.1	0xfd1	Standard query (0)	img.sedoparking.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:26.197031975 CEST	192.168.2.7	1.1.1.1	0x4de9	Standard query (0)	img.sedoparking.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:26.222762108 CEST	192.168.2.7	1.1.1.1	0xbe3a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:26.222945929 CEST	192.168.2.7	1.1.1.1	0x4608	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:27.646382093 CEST	192.168.2.7	1.1.1.1	0x681a	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:27.646382093 CEST	192.168.2.7	1.1.1.1	0x21fc	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 7, 2024 01:05:28.043574095 CEST	192.168.2.7	1.1.1.1	0x6d9e	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:28.043999910 CEST	192.168.2.7	1.1.1.1	0x595e	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 7, 2024 01:05:28.639662027 CEST	192.168.2.7	1.1.1.1	0xcbf8	Standard query (0)	img.sedoparking.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:28.640151024 CEST	192.168.2.7	1.1.1.1	0xb261	Standard query (0)	img.sedoparking.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:28.650607109 CEST	192.168.2.7	1.1.1.1	0xc89a	Standard query (0)	img.sedoparking.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:28.651205063 CEST	192.168.2.7	1.1.1.1	0x5b8	Standard query (0)	img.sedoparking.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:28.656594992 CEST	192.168.2.7	1.1.1.1	0x95a3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:28.657273054 CEST	192.168.2.7	1.1.1.1	0x97bd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:28.662457943 CEST	192.168.2.7	1.1.1.1	0xb3c7	Standard query (0)	www.coritta.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:28.662853956 CEST	192.168.2.7	1.1.1.1	0x920b	Standard query (0)	www.coritta.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:31.103132963 CEST	192.168.2.7	1.1.1.1	0x72a5	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:31.103291035 CEST	192.168.2.7	1.1.1.1	0x3838	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:31.239140987 CEST	192.168.2.7	1.1.1.1	0x10b9	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:31.239399910 CEST	192.168.2.7	1.1.1.1	0x3ecf	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 7, 2024 01:05:32.045322895 CEST	192.168.2.7	1.1.1.1	0xc30f	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:32.045516014 CEST	192.168.2.7	1.1.1.1	0xb590	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:37.181689978 CEST	192.168.2.7	1.1.1.1	0x19ef	Standard query (0)	www.sedo.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:37.184386969 CEST	192.168.2.7	1.1.1.1	0xec9b	Standard query (0)	www.sedo.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:38.421458960 CEST	192.168.2.7	1.1.1.1	0xeeb	Standard query (0)	sedo.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:38.422020912 CEST	192.168.2.7	1.1.1.1	0x9452	Standard query (0)	sedo.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:39.593035936 CEST	192.168.2.7	1.1.1.1	0x6252	Standard query (0)	sedo.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:39.593535900 CEST	192.168.2.7	1.1.1.1	0xcc40	Standard query (0)	sedo.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:42.906478882 CEST	192.168.2.7	1.1.1.1	0x84db	Standard query (0)	cdn.sedo.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:42.906677008 CEST	192.168.2.7	1.1.1.1	0xa532	Standard query (0)	cdn.sedo.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:43.663508892 CEST	192.168.2.7	1.1.1.1	0x3f07	Standard query (0)	cdn.sedo.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:43.663774014 CEST	192.168.2.7	1.1.1.1	0x481d	Standard query (0)	cdn.sedo.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:43.871407986 CEST	192.168.2.7	1.1.1.1	0xe406	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:43.871701956 CEST	192.168.2.7	1.1.1.1	0x3264	Standard query (0)	widget.trustpilot.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:44.858846903 CEST	192.168.2.7	1.1.1.1	0x4de7	Standard query (0)	sedo.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:44.859095097 CEST	192.168.2.7	1.1.1.1	0x75f1	Standard query (0)	sedo.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:44.935694933 CEST	192.168.2.7	1.1.1.1	0x5e2f	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:44.935920000 CEST	192.168.2.7	1.1.1.1	0xfef6	Standard query (0)	widget.trustpilot.com	65	IN (0x0001)	false
Oct 7, 2024 01:05:46.108356953 CEST	192.168.2.7	1.1.1.1	0xd6e3	Standard query (0)	app.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:46.108515978 CEST	192.168.2.7	1.1.1.1	0x6c69	Standard query (0)	app.usercentrics.eu	65	IN (0x0001)	false
Oct 7, 2024 01:05:46.757875919 CEST	192.168.2.7	1.1.1.1	0x951d	Standard query (0)	app.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:46.758214951 CEST	192.168.2.7	1.1.1.1	0x76fe	Standard query (0)	app.usercentrics.eu	65	IN (0x0001)	false
Oct 7, 2024 01:05:48.744138956 CEST	192.168.2.7	1.1.1.1	0xed07	Standard query (0)	api.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:48.744504929 CEST	192.168.2.7	1.1.1.1	0x7fab	Standard query (0)	api.usercentrics.eu	65	IN (0x0001)	false
Oct 7, 2024 01:05:51.080043077 CEST	192.168.2.7	1.1.1.1	0x2dc9	Standard query (0)	api.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:51.080374002 CEST	192.168.2.7	1.1.1.1	0xdec9	Standard query (0)	api.usercentrics.eu	65	IN (0x0001)	false
Oct 7, 2024 01:05:52.948090076 CEST	192.168.2.7	1.1.1.1	0xa899	Standard query (0)	app.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:52.948216915 CEST	192.168.2.7	1.1.1.1	0x2e09	Standard query (0)	app.usercentrics.eu	65	IN (0x0001)	false
Oct 7, 2024 01:05:57.613384008 CEST	192.168.2.7	1.1.1.1	0xe20	Standard query (0)	consent-api.service.consent.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:57.613795996 CEST	192.168.2.7	1.1.1.1	0x3710	Standard query (0)	consent-api.service.consent.usercentrics.eu	65	IN (0x0001)	false
Oct 7, 2024 01:05:57.635638952 CEST	192.168.2.7	1.1.1.1	0x1138	Standard query (0)	uct.service.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:57.636094093 CEST	192.168.2.7	1.1.1.1	0xed5a	Standard query (0)	uct.service.usercentrics.eu	65	IN (0x0001)	false
Oct 7, 2024 01:05:58.295360088 CEST	192.168.2.7	1.1.1.1	0xef82	Standard query (0)	uct.service.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:58.295526981 CEST	192.168.2.7	1.1.1.1	0x8409	Standard query (0)	uct.service.usercentrics.eu	65	IN (0x0001)	false
Oct 7, 2024 01:06:27.191369057 CEST	192.168.2.7	1.1.1.1	0xc4cc	Standard query (0)	www.coritta.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:06:27.191534042 CEST	192.168.2.7	1.1.1.1	0x6140	Standard query (0)	www.coritta.com	65	IN (0x0001)	false
Oct 7, 2024 01:06:28.370807886 CEST	192.168.2.7	1.1.1.1	0xbf57	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:06:28.371536016 CEST	192.168.2.7	1.1.1.1	0xb465	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 7, 2024 01:06:28.481478930 CEST	192.168.2.7	1.1.1.1	0xee1	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:06:28.481884003 CEST	192.168.2.7	1.1.1.1	0x4c2a	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 7, 2024 01:06:35.337361097 CEST	192.168.2.7	1.1.1.1	0x2e65	Standard query (0)	www.coritta.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:06:35.337522984 CEST	192.168.2.7	1.1.1.1	0xdbba	Standard query (0)	www.coritta.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 01:05:24.516613960 CEST	1.1.1.1	192.168.2.7	0x667e	No error (0)	coritta.com		162.255.119.216	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:25.138345957 CEST	1.1.1.1	192.168.2.7	0xe520	No error (0)	www.coritta.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:25.138345957 CEST	1.1.1.1	192.168.2.7	0xe520	No error (0)	parkingpage.namecheap.com		91.195.240.19	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:25.151967049 CEST	1.1.1.1	192.168.2.7	0xc73b	No error (0)	www.coritta.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:26.145826101 CEST	1.1.1.1	192.168.2.7	0x8b16	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:26.146445990 CEST	1.1.1.1	192.168.2.7	0x484	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 01:05:26.211366892 CEST	1.1.1.1	192.168.2.7	0x104b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 01:05:26.211426020 CEST	1.1.1.1	192.168.2.7	0xfef5	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:26.211456060 CEST	1.1.1.1	192.168.2.7	0xb78c	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:26.211456060 CEST	1.1.1.1	192.168.2.7	0xb78c	No error (0)	sedo.cachefly.net	vip1.g5.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:26.211456060 CEST	1.1.1.1	192.168.2.7	0xb78c	No error (0)	vip1.g5.cachefly.net		205.234.175.175	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:26.211534977 CEST	1.1.1.1	192.168.2.7	0xbd84	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:26.211904049 CEST	1.1.1.1	192.168.2.7	0xfd1	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:26.211904049 CEST	1.1.1.1	192.168.2.7	0xfd1	No error (0)	sedo.cachefly.net	vip1.g5.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:26.211904049 CEST	1.1.1.1	192.168.2.7	0xfd1	No error (0)	vip1.g5.cachefly.net		205.234.175.175	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:26.229710102 CEST	1.1.1.1	192.168.2.7	0xbe3a	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:26.229999065 CEST	1.1.1.1	192.168.2.7	0x4608	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 01:05:26.237370968 CEST	1.1.1.1	192.168.2.7	0x4de9	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:26.237370968 CEST	1.1.1.1	192.168.2.7	0x4de9	No error (0)	sedo.cachefly.net	vip1.g5.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:27.743314981 CEST	1.1.1.1	192.168.2.7	0x681a	No error (0)	syndicatedsearch.goog		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:28.050230980 CEST	1.1.1.1	192.168.2.7	0x6d9e	No error (0)	syndicatedsearch.goog		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:28.646363020 CEST	1.1.1.1	192.168.2.7	0xcbf8	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:28.646363020 CEST	1.1.1.1	192.168.2.7	0xcbf8	No error (0)	sedo.cachefly.net		205.234.175.175	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:28.650331020 CEST	1.1.1.1	192.168.2.7	0xb261	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:28.650331020 CEST	1.1.1.1	192.168.2.7	0xb261	No error (0)	sedo.cachefly.net	vip1.g5.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:28.657639027 CEST	1.1.1.1	192.168.2.7	0xc89a	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:28.657639027 CEST	1.1.1.1	192.168.2.7	0xc89a	No error (0)	sedo.cachefly.net	vip1.g5.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:28.657639027 CEST	1.1.1.1	192.168.2.7	0xc89a	No error (0)	vip1.g5.cachefly.net		204.93.142.142	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:28.658407927 CEST	1.1.1.1	192.168.2.7	0x5b8	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:28.658407927 CEST	1.1.1.1	192.168.2.7	0x5b8	No error (0)	sedo.cachefly.net	vip1.g5.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:28.663409948 CEST	1.1.1.1	192.168.2.7	0x95a3	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:28.663948059 CEST	1.1.1.1	192.168.2.7	0x97bd	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 01:05:28.684420109 CEST	1.1.1.1	192.168.2.7	0xb3c7	No error (0)	www.coritta.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:28.684420109 CEST	1.1.1.1	192.168.2.7	0xb3c7	No error (0)	parkingpage.namecheap.com		91.195.240.19	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:28.686961889 CEST	1.1.1.1	192.168.2.7	0x920b	No error (0)	www.coritta.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:31.109884977 CEST	1.1.1.1	192.168.2.7	0x72a5	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:31.109884977 CEST	1.1.1.1	192.168.2.7	0x72a5	No error (0)	googlehosted.l.googleusercontent.com		172.217.16.193	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:31.110075951 CEST	1.1.1.1	192.168.2.7	0x3838	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:31.246346951 CEST	1.1.1.1	192.168.2.7	0x10b9	No error (0)	syndicatedsearch.goog		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:32.051808119 CEST	1.1.1.1	192.168.2.7	0xc30f	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:32.051808119 CEST	1.1.1.1	192.168.2.7	0xc30f	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.97	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:32.054028034 CEST	1.1.1.1	192.168.2.7	0xb590	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:05:34.523453951 CEST	1.1.1.1	192.168.2.7	0x217	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:34.523453951 CEST	1.1.1.1	192.168.2.7	0x217	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:37.189398050 CEST	1.1.1.1	192.168.2.7	0x19ef	No error (0)	www.sedo.com		104.16.140.114	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:37.189398050 CEST	1.1.1.1	192.168.2.7	0x19ef	No error (0)	www.sedo.com		104.16.141.114	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:38.428311110 CEST	1.1.1.1	192.168.2.7	0xeeb	No error (0)	sedo.com		104.16.140.114	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:38.428311110 CEST	1.1.1.1	192.168.2.7	0xeeb	No error (0)	sedo.com		104.16.141.114	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:39.599584103 CEST	1.1.1.1	192.168.2.7	0x6252	No error (0)	sedo.com		104.16.140.114	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:39.599584103 CEST	1.1.1.1	192.168.2.7	0x6252	No error (0)	sedo.com		104.16.141.114	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:42.913244009 CEST	1.1.1.1	192.168.2.7	0x84db	No error (0)	cdn.sedo.com		104.16.141.114	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:42.913244009 CEST	1.1.1.1	192.168.2.7	0x84db	No error (0)	cdn.sedo.com		104.16.140.114	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:43.671468019 CEST	1.1.1.1	192.168.2.7	0x3f07	No error (0)	cdn.sedo.com		104.16.141.114	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:43.671468019 CEST	1.1.1.1	192.168.2.7	0x3f07	No error (0)	cdn.sedo.com		104.16.140.114	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:43.878361940 CEST	1.1.1.1	192.168.2.7	0xe406	No error (0)	widget.trustpilot.com		108.156.60.21	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:43.878361940 CEST	1.1.1.1	192.168.2.7	0xe406	No error (0)	widget.trustpilot.com		108.156.60.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:43.878361940 CEST	1.1.1.1	192.168.2.7	0xe406	No error (0)	widget.trustpilot.com		108.156.60.107	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:43.878361940 CEST	1.1.1.1	192.168.2.7	0xe406	No error (0)	widget.trustpilot.com		108.156.60.63	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:44.865459919 CEST	1.1.1.1	192.168.2.7	0x4de7	No error (0)	sedo.com		104.16.140.114	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:44.865459919 CEST	1.1.1.1	192.168.2.7	0x4de7	No error (0)	sedo.com		104.16.141.114	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:44.942784071 CEST	1.1.1.1	192.168.2.7	0x5e2f	No error (0)	widget.trustpilot.com		3.164.206.74	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:44.942784071 CEST	1.1.1.1	192.168.2.7	0x5e2f	No error (0)	widget.trustpilot.com		3.164.206.20	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:44.942784071 CEST	1.1.1.1	192.168.2.7	0x5e2f	No error (0)	widget.trustpilot.com		3.164.206.15	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:44.942784071 CEST	1.1.1.1	192.168.2.7	0x5e2f	No error (0)	widget.trustpilot.com		3.164.206.124	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:46.114917040 CEST	1.1.1.1	192.168.2.7	0xd6e3	No error (0)	app.usercentrics.eu		35.190.14.188	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:46.764348030 CEST	1.1.1.1	192.168.2.7	0x951d	No error (0)	app.usercentrics.eu		35.190.14.188	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:48.750642061 CEST	1.1.1.1	192.168.2.7	0xed07	No error (0)	api.usercentrics.eu		35.241.3.184	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:51.086559057 CEST	1.1.1.1	192.168.2.7	0x2dc9	No error (0)	api.usercentrics.eu		35.241.3.184	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:52.954821110 CEST	1.1.1.1	192.168.2.7	0xa899	No error (0)	app.usercentrics.eu		35.190.14.188	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:57.620125055 CEST	1.1.1.1	192.168.2.7	0xe20	No error (0)	consent-api.service.consent.usercentrics.eu		35.201.111.240	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:57.642112017 CEST	1.1.1.1	192.168.2.7	0x1138	No error (0)	uct.service.usercentrics.eu		34.95.108.180	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:05:58.301971912 CEST	1.1.1.1	192.168.2.7	0xef82	No error (0)	uct.service.usercentrics.eu		34.95.108.180	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:06:27.211198092 CEST	1.1.1.1	192.168.2.7	0x6140	No error (0)	www.coritta.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:06:27.385664940 CEST	1.1.1.1	192.168.2.7	0xc4cc	No error (0)	www.coritta.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:06:27.385664940 CEST	1.1.1.1	192.168.2.7	0xc4cc	No error (0)	parkingpage.namecheap.com		91.195.240.19	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:06:28.377573013 CEST	1.1.1.1	192.168.2.7	0xbf57	No error (0)	syndicatedsearch.goog		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:06:28.490123034 CEST	1.1.1.1	192.168.2.7	0xee1	No error (0)	syndicatedsearch.goog		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:06:35.344460964 CEST	1.1.1.1	192.168.2.7	0x2e65	No error (0)	www.coritta.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 01:06:35.344460964 CEST	1.1.1.1	192.168.2.7	0x2e65	No error (0)	parkingpage.namecheap.com		91.195.240.19	A (IP address)	IN (0x0001)	false
Oct 7, 2024 01:06:35.514583111 CEST	1.1.1.1	192.168.2.7	0xdbba	No error (0)	www.coritta.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49710	162.255.119.216	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:05:24.537637949 CEST	426	OUT	GET / HTTP/1.1 Host: coritta.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:05:25.047359943 CEST	285	IN	HTTP/1.1 302 Found Date: Sun, 06 Oct 2024 23:05:24 GMT Content-Type: text/html; charset=utf-8 Content-Length: 46 Connection: keep-alive Location: http://www.coritta.com/ X-Served-By: Namecheap URL Forward Server: namecheap-nginx Data Raw: 3c 61 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 63 6f 72 69 74 74 61 2e 63 6f 6d 2f 27 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href='http://www.coritta.com/'>Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49717	91.195.240.19	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:05:25.153548956 CEST	430	OUT	GET / HTTP/1.1 Host: www.coritta.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:05:25.819875956 CEST	1236	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:05:25 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_koUj9n95bbIo23m9kNoSnfUqxO1L/yDlW8XqlaNnKpNE9OTq+RwtIaGVSZZhdOdKjk+RENEOfZDRgztEpAFlzA== last-modified: Sun, 06 Oct 2024 23:05:25 GMT x-cache-miss-from: parking-75d9cf65f9-fvx6t server: Parking/1.0 content-encoding: gzip Data Raw: 32 43 42 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ac 59 eb 6e db b8 12 fe 7f 9e 42 eb 45 0e da ad 65 cb 4e 9c d8 72 52 20 6d d3 6e b7 6d d2 f4 b2 bd 21 28 28 89 b2 58 4b a4 2a 52 be d4 6b e0 bc c6 79 bd f3 24 67 48 4a b2 24 cb 6e b2 d8 1a 8d 25 72 66 38 97 6f 66 48 fa f4 97 27 57 8f df 7d 7a 7d 61 04 22 0a 1f 9e ca bf 46 88 e8 e4 ac 85 69 cb 30 3c 24 90 89 3c 27 64 ee 74 8a 97 67 af 9e ce e7 4f ae 3f fd f1 82 7d 7e 1e cc dc cb f3 eb 8b 47 8f ae cf 9f bc 9d 9f cf df 9e ff f1 e8 fc 92 2e c3 0f f3 fe ec e5 a7 a3 e0 3d 1d cd ad e3 1f d7 2f 9c e0 c5 23 7f f6 ed e9 fb c7 dc 7b 1a 3a c7 ef bc eb 60 e1 8c de 7c fc f0 31 7d 7e 24 0e 7b ee 03 36 f4 3f 5d cd ba 7c f8 bd f7 f2 d9 eb 09 3a 7c 72 d1 7b d9 15 bf bf 3f 7a 79 71 f9 ea f1 f9 fc e2 fc fc fa ec ec eb 94 bd ff 36 a2 a3 81 e3 3c 67 fd c3 68 34 bd 64 6f a9 ff fe fb e2 0a c8 97 4f c2 0f c3 8f df 43 74 49 5f c4 97 17 a3 ab 77 df 1f bc 99 8b e7 e8 d9 9f 6f 3f 7f 0e bc 2b ef c5 b7 e9 83 37 17 97 17 57 fe e7 27 6f 26 3f c4 45 7c fe 34 fc 71 7e 76 06 a6 63 e4 3d 3c [TRUNCATED] Data Ascii: 2CBYnBEeNrR mnm!((XK*Rky$gHJ$n%rf8ofH'W}z}a"Fi0<$<'dtgO?}~G.=/#{:`\|1}~${6?]\|:\|r{?zyq6<gh4doOCtI_wo?+7W'o&?E\|4q~vc=<@cqJo[O!~:.MMo0gibn h%hE5#xDQ),7'<<#.6KP"M:V;BQi$8QUYMH,(T2 XO.mF("X%&:i2'`1q9\|B2gE]!\|+8m]ATc\|Fby!
Oct 7, 2024 01:05:25.819896936 CEST	1236	IN	Data Raw: 81 70 8e 51 e2 06 99 1e bf 80 17 42 42 a7 ff 32 b2 7f 09 0e cf 5a 04 1c d0 2a 86 c4 32 06 07 91 08 4d 70 37 a6 93 cd 44 90 60 ff ac d5 ed 92 68 d2 e1 d8 63 31 4a a4 7d 52 9f ae c0 51 1c 22 81 79 37 64 13 c6 bb 72 fe ab 7c ec 28 11 dd 87 a7 5c 2c Data Ascii: pQBB2Z*2Mp7D`hc1J}RQ"y7dr\|(\,!oT,$?pteezx u",D[+sf576a3dfM@-0cYcs)kyUF n}N2)YC +ppV5aV>J8g:'
Oct 7, 2024 01:05:25.819911957 CEST	1236	IN	Data Raw: 69 0c 54 06 a9 55 8d cc 2e 51 bb 81 5a 11 bc 93 8a 44 31 b4 6d b1 df f6 8c e8 f6 86 d7 19 b6 ac de 22 50 49 57 35 7f bc 53 69 f5 e4 0a 33 e5 fb f5 de d0 dd 5e f5 06 9e 2d ed 9b 68 ee 64 00 18 3f 43 ee f2 35 83 23 c5 72 bf 0d 15 d2 db 9b d1 cc 76 Data Ascii: iTU.QZD1m"PIW5Si3^-hd?C5#rvW7)f$4pYfUny_~i)**mL\Wuhf$`18 U p>[Wq,1qn#%]}BmmJui ~nUL=zl\fdzl)>8^
Oct 7, 2024 01:05:25.819996119 CEST	672	IN	Data Raw: 56 0b a7 4e a1 60 39 24 3b 94 37 92 28 2f 9d eb f2 0e bc e1 c3 05 a2 41 9a 64 20 a4 a8 45 31 2e 0b 47 f8 e1 28 e4 8a 57 c9 c3 42 91 37 6e b9 ad 3b 58 13 c4 f9 9c 95 ef d5 cb 66 71 08 98 6e ce 39 cb be 09 e0 0c f0 1e ee 0f 3b ff 06 0c 30 a2 99 4c Data Ascii: VN`9$;7(/Ad E1.G(WB7n;Xfqn9;0L\|o]\NevW-UH\.X'bBOc?hI-;>#0xJSbsNBIsK~R6z* 96$Hx0[HAu
Oct 7, 2024 01:05:25.820013046 CEST	1236	IN	Data Raw: 78 36 ae 4f bf f6 b3 b5 ea e0 47 ca f1 f4 98 e0 3c c8 5f eb 6f ad d2 4a 2b e4 e3 1f 20 0d be 10 83 58 25 5b 65 46 08 d1 a9 15 15 95 12 22 35 75 17 62 6e 72 18 e1 12 ce c5 c0 c7 ad 75 d8 a1 c6 9e 8a 6c 1c c5 c5 3b 7b 17 14 37 14 f5 79 6a e8 3c 25 Data Ascii: x6OG<_oJ+ X%[eF"5ubnrul;{7yj<%MRVqALflX`vRC>s'Z68E+h.W7WZOAoF~Z}`FkHd<y7^<zP~m8
Oct 7, 2024 01:05:25.820029020 CEST	224	IN	Data Raw: 8a ca da 13 95 50 2d 53 6c 1b 92 8e 2e 78 8c 94 71 d7 95 44 27 44 46 ba 0b 1b df 68 e7 e5 e8 70 1d 95 8b 6d 1b 17 45 94 ee 36 92 3c 73 1b 4e 3a 1e 6f b3 b9 2d 1c e3 9d b2 ce bd f9 6d 3d 6d 9b cc 12 62 2f d9 ac 08 69 dc 1a ad 14 24 89 eb 0d 0a 32 Data Ascii: P-Sl.xqD'DFhpmE6<sN:o-m=mb/i$21AzNvGX.ehDkt]WazS.%%3mXnbz+[7B5s:r5.r8x?\(RcH'=uW{;Kxz3
Oct 7, 2024 01:05:25.820121050 CEST	1236	IN	Data Raw: 78 ca 7a 78 82 e8 89 7c 63 81 40 de 15 e4 95 2f e8 5c 1e f3 17 06 0e 01 ce 49 42 27 56 ca 8e b1 75 e9 6e 33 53 e8 f7 32 df f1 d7 77 b9 fc db d9 b9 d7 0a de cd 73 2e b5 d7 35 04 84 dc 86 37 0f 42 e8 e3 e7 69 de 47 04 be cf 51 02 af f3 50 47 94 8d Data Ascii: xzx\|c@/\IB'Vun3S2ws.57BiGQPG3>Yco"eQ:w<0}F'y~6^y>f*@^td>#VUuoXs/=Z-o]H
Oct 7, 2024 01:05:25.820133924 CEST	224	IN	Data Raw: a0 a8 98 48 a0 b3 b1 30 4d f9 eb 8e 94 19 9f c1 38 d6 28 bc b5 82 11 d4 b7 e8 ad b3 89 a2 76 bf 01 8d b4 9b b2 76 8f 78 e5 fc db 0e c9 c9 88 e2 85 24 87 98 98 a6 f4 a4 4e 1d 5d 06 49 25 0c f3 9c c1 e6 0a 9f b5 d3 14 39 98 59 53 da cb a3 a1 49 ac Data Ascii: H0M8(vvx$N]I%9YSIR}1PZngWv3Z#*&5`bNZ+2HwbU7UC.j8M'^NBm8fMZnE6^T2/
Oct 7, 2024 01:05:25.820349932 CEST	1236	IN	Data Raw: bb 0c d3 e3 47 58 92 ac 4b 1e f8 34 74 40 ec a7 de e4 a1 94 14 66 91 36 a5 00 d6 0a d6 89 a0 6e e8 f9 d6 41 6f e7 68 ce ce a1 f6 8f bc 9a 9a 96 58 6f 84 d8 1d 74 3a 95 c1 28 42 72 19 42 d4 02 90 a4 45 07 e4 f8 43 cb db 2c 09 e7 b9 95 2b ae bc e9 Data Ascii: GXK4t@f6nAohXot:(BrBEC,+tj*HGuXs879i)EyRed~s4?_83kkY!E+/Q0r%]cBa[z=PTPTgG}kUHbZ]gJIg/j>~uxh
Oct 7, 2024 01:05:25.820626974 CEST	298	IN	Data Raw: be e8 97 d5 7b ff c3 fe 8f 3f bc eb e3 7f 03 ff 40 e5 14 53 27 8b 3e 5f 8f ae b2 84 27 a5 39 53 ef c9 97 87 4b 3c 77 39 1b e6 be 41 9a 05 93 94 7b 78 76 96 11 6c 3f c1 ff 64 62 a5 ee 25 e1 7a 63 39 66 58 1f 6e 3f f9 49 8a 9f 3b 0c 6c 88 8f e0 c1 Data Ascii: {?@S'>_'9SK<w9A{xvl?db%zc9fXn?I;lx-XJs9Lj~#l{oG52Y`&FahNq@/\N?FO~,_1aq+iM~J}nnwu:m-i\A;je"& 21
Oct 7, 2024 01:05:28.053036928 CEST	705	OUT	GET /search/tsc.php?ses=ogcV_WvEfM___dYD1L7gly3SU3IFN9HcA91vILohR6NX1LY0h0GqkOW2ripKZAwuNsWOj5Wu8FJUUlfANAIwIaBJnJ9Vm74aDQXwlM2lW2qZlBDAVJC63G2CGJZjTE5YH8dqnVz71Qih3Kh12xmeBytsHwZss1FnK42YSGH5dN1i_NTKeNTiUrm1Pi4cWMe8OnDvJO7l3n4dGb2LVoH6Xv6rGPykqqjmRLOQEdwDO__xEFbM_kRTKpeFxKCywnaMkelLJ3O9yYyOhllddUAU_1YlbmIyR7ztiIkekOMue5Zy0j7V-mPWYaY1uKvM6mJatLrHOTnZba3HPGFq6PPeZcc-HJbU1Xxes0VAyI2sDdG1LvnYBxU6dfBvpMu&cv=2 HTTP/1.1 Host: www.coritta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.coritta.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:05:28.249123096 CEST	181	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:05:28 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-fzfjv server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49722	205.234.175.175	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:05:26.225701094 CEST	397	OUT	GET /templates/bg/arrows-curved.png HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.coritta.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:05:26.676163912 CEST	540	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:26 GMT Content-Type: image/png Content-Length: 13502 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Expires: Sun, 13 Oct 2024 23:05:26 GMT X-CFHash: "107694ee1e94990d97b7e58651ffd6a0" X-CFF: B Last-Modified: Tue, 12 Oct 2021 05:19:02 GMT X-CF3: H CF4Age: 0 x-cf-tsc: 1724339305 CF4ttl: 31536000.000 X-CF2: H Server: CFS 1124 X-CF-ReqID: 5048a84aadaa1fa7467657aeabecfe30 X-CF1: 11696:fM.iad2:cf:nom:cacheN.iad2-01:H Accept-Ranges: bytes
Oct 7, 2024 01:05:26.676307917 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 9d 00 00 02 52 08 06 00 00 00 18 89 18 5e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 Data Ascii: PNGIHDRR^pHYssRGBgAMAa4SIDATx\yFUbUA#VJ?.wUD&AP&Q#qAd\E[Y';{+_<y9ko-J%C)I37oe
Oct 7, 2024 01:05:26.676321030 CEST	1236	IN	Data Raw: 50 e9 00 f5 d9 bf 64 6e a0 ee 50 fd 00 fb a8 74 80 fa ec 5f 32 47 f5 03 1c a0 d2 01 16 8b ea 07 51 a3 d2 01 16 8b ea 07 51 a3 d2 01 96 8f ea 07 d1 a0 d2 01 96 8f ea 07 d1 a0 d2 01 dc 94 2a ad b7 32 ad 36 a8 7e 10 12 42 07 70 9d 96 ae 4e 74 5b 3e Data Ascii: PdnPt_2GQQ26~BpNt[>u.5uS=Ov&7\|W~h+ov7[__Q%5M65*%}Y~RWZ:Ygou'Zg?t@5t)AHN$Q&u!
Oct 7, 2024 01:05:26.676348925 CEST	1236	IN	Data Raw: 76 9e 89 36 42 e7 b0 50 03 88 c1 03 00 55 99 eb 8c 36 42 e7 68 36 80 b6 76 d5 ce 46 28 63 d8 a5 c1 03 5a 6f 00 e6 31 f3 28 35 a1 33 81 fc 9a 06 ad 36 42 d9 07 94 87 8f f9 9e 33 78 00 60 0e 33 8d 52 13 3a 53 2a 36 a2 be fb e3 0b 95 1f 0f b1 0c b4 Data Ascii: v6BPU6Bh6vF(cZo1(536B3x`3R:S*6jQjBgVW3tBY`SR:f)M<N RZo&4B.hNu"Bg1RS}x``c7:c<7<J8AuL/tS\2`!t
Oct 7, 2024 01:05:26.676362991 CEST	672	IN	Data Raw: dc 62 3d d4 7b fa 4a ef 7f 5f e8 88 27 08 1d a0 1a 79 f5 13 f2 be 9f 49 e4 57 34 64 49 4b 94 5e 63 30 a1 76 4b 3f 47 6d 16 84 0e 50 b1 e2 c0 d1 10 4f 3d 98 d6 f0 94 84 56 5e 0d 89 5e 33 cf 35 36 84 9a 82 f9 38 76 ca c0 34 08 1d a0 46 a1 9e f9 36 Data Ascii: b={J_'yIW4dIK^c0vK?GmPO=V^^3568v4F6 2/M)x8,FkBk}0zsL>vgU\qh)<sXTcM6?G8HROP%eQ_kvi:?Ilm!5xS
Oct 7, 2024 01:05:26.676378012 CEST	1236	IN	Data Raw: 09 99 57 f7 86 d5 50 4a 35 14 37 ef 43 a7 8c 00 02 3c 60 aa 21 ad 94 0d 1e 82 28 42 41 85 4e d9 41 00 65 fa 2a 6b 40 80 e3 4a 41 94 88 3c b0 ad b9 47 8f f6 7a ec 19 0a 4f b0 a1 53 56 ac 01 99 32 ff 9a 30 05 07 f8 63 4c 18 89 ec a5 f7 99 9a f3 56 Data Ascii: WPJ57C<`!(BANAek@JA<GzOSV20cLVSf-/i0H_nd)[z?H%DB2tI6$Km05;}_+j(FEZtO^"{??J.1DfS:}&k~
Oct 7, 2024 01:05:26.676400900 CEST	1236	IN	Data Raw: 07 ef 46 ae 69 bd 01 35 53 d9 cd 77 df fa f6 0d 59 30 42 27 3a a6 f5 e6 e7 69 07 b4 de 80 aa 2c 29 70 f2 7f 35 a1 13 27 df 46 ae 2d ce 7a 03 e6 56 e9 39 6a b3 20 74 e0 df c8 35 d7 6b 03 d3 b3 a7 0c 24 d9 8b 55 9e a3 36 0b 42 07 85 54 8b b4 b3 4c Data Ascii: Fi5SwY0B':i,)p5'F-zV9j t5k$U6BTLmzu6,'Xi:uH9)BGp:<=i7"t0}?W\e1Z) t0v,;v8uNkT8(BpbAZI:wG\|CsRj
Oct 7, 2024 01:05:26.676419020 CEST	1236	IN	Data Raw: 84 1e ed 6d f7 68 c7 a1 6e b5 86 ce a8 bc 0d a7 1a 97 b4 c8 19 a5 02 be 4f 03 f0 57 cf ac 09 f5 cc 2f 8a 5d 06 13 50 87 85 86 4e 19 01 04 78 a1 6f aa a1 9e 6d c9 69 a5 7a 0c 27 60 5e 4b 0b 9d 32 02 08 f0 4a aa 95 a9 88 b4 be 67 83 68 2f d1 29 15 Data Ascii: mhnOW/]PNxomiz'`^K2Jgh/)&D@=c8:eL5!WO@e}x9:e_n}RUd]g_@]B7S`fN}~?Ff)I=P~.tJ,?@6lH>t~WcyxM
Oct 7, 2024 01:05:26.676434994 CEST	1236	IN	Data Raw: 1e af 5a 6f 9c 72 0d 2c 83 bb 23 d1 27 21 74 dc 95 9a 97 f6 8e 24 9b be b4 de 38 e5 1a a8 9f eb 23 d1 27 21 74 3c 60 5b 6f 9c 76 00 44 4e cb c3 44 e9 17 5d 1f 89 3e 09 a1 e3 11 df 2e 99 a3 f5 06 54 c3 4e a8 29 ad cf 7d d0 7b d9 9b 43 86 8f 42 e8 Data Ascii: Zor,#'!t$8#'!t<`[ovDND]>.TN)}{CBkNo#'!t<%s>p:m=?-0:Qz1ayw^:JV]nyzc1Y:zm&:mA~c{.:qnA8
Oct 7, 2024 01:05:26.676453114 CEST	1236	IN	Data Raw: 4c 6a f4 03 bf fb cc b7 d6 12 49 2e 99 37 cf 98 97 a6 00 58 b6 fd 73 e1 ec 40 02 21 04 cf a9 e3 3e f9 a5 3f be d0 92 c1 ca 25 f3 e6 19 53 09 71 01 14 e0 86 83 10 92 41 72 8f 76 1c 7c a2 26 fd c2 bc 0d a7 b2 b3 a2 f5 3a 6b 40 80 3b 0e da 71 89 ea Data Ascii: LjI.7Xs@!>?%SqArv\|&:k@;qjc\6q@Kf2ppjSzTDDXC6$(GcTier!HAF&Cj<tv";=~Hj }ZuBB}@@IGJ
Oct 7, 2024 01:05:26.681261063 CEST	1236	IN	Data Raw: 67 76 fe 4f bd d1 7a 03 16 2a e4 fd 37 93 22 74 e6 97 4a 08 53 6f b4 de 80 ba 45 b7 7e 33 0e a1 53 2d af 37 9c 32 f5 06 d4 43 8b 7e 7b f7 51 e3 5c 0c a7 48 9f 84 d0 a9 47 de 7a f3 f5 ac 37 36 9c 02 95 ba f9 eb fb af de 10 e4 08 9d 7a 79 7f d6 1b Data Ascii: gvOz*7"tJSoE~3S-72C~{Q\HGz76zyNs]Bgq:^sfB tkVV:5X8$=?cf-8\|ApgiN;eGuOG-nn'7&G-&qNT
Oct 7, 2024 01:05:31.104237080 CEST	396	OUT	GET /templates/logos/sedo_logo.png HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.coritta.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:05:31.202740908 CEST	540	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:31 GMT Content-Type: image/png Content-Length: 15086 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Expires: Sun, 13 Oct 2024 23:05:31 GMT X-CFHash: "def00c11b1596db4efee6a9fbe64fc27" X-CFF: B Last-Modified: Mon, 11 Jan 2021 07:44:34 GMT X-CF3: H CF4Age: 0 x-cf-tsc: 1724339300 CF4ttl: 31536000.000 X-CF2: H Server: CFS 1124 X-CF-ReqID: 5cdb7f9218657df67990ba25efa21c3a X-CF1: 11696:fM.iad2:cf:nom:cacheN.iad2-01:H Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49744	205.234.175.175	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:05:28.657727003 CEST	302	OUT	GET /templates/bg/arrows-curved.png HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:05:29.110929966 CEST	540	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:29 GMT Content-Type: image/png Content-Length: 13502 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Expires: Sun, 13 Oct 2024 23:05:29 GMT X-CFHash: "107694ee1e94990d97b7e58651ffd6a0" X-CFF: B Last-Modified: Tue, 12 Oct 2021 05:19:02 GMT X-CF3: H CF4Age: 0 x-cf-tsc: 1697895099 CF4ttl: 31536000.000 X-CF2: H Server: CFS 1124 X-CF-ReqID: 8be35bd9c1f0638406846e7ef098dbe3 X-CF1: 11696:fQ.iad2:cf:nom:cacheN.iad2-01:H Accept-Ranges: bytes
Oct 7, 2024 01:05:29.111077070 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 9d 00 00 02 52 08 06 00 00 00 18 89 18 5e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 Data Ascii: PNGIHDRR^pHYssRGBgAMAa4SIDATx\yFUbUA#VJ?.wUD&AP&Q#qAd\E[Y';{+_<y9ko-J%C)I37oe
Oct 7, 2024 01:05:29.111099958 CEST	224	IN	Data Raw: 50 e9 00 f5 d9 bf 64 6e a0 ee 50 fd 00 fb a8 74 80 fa ec 5f 32 47 f5 03 1c a0 d2 01 16 8b ea 07 51 a3 d2 01 16 8b ea 07 51 a3 d2 01 96 8f ea 07 d1 a0 d2 01 96 8f ea 07 d1 a0 d2 01 dc 94 2a ad b7 32 ad 36 a8 7e 10 12 42 07 70 9d 96 ae 4e 74 5b 3e Data Ascii: PdnPt_2GQQ26~BpNt[>u.5uS=Ov&7\|W~h+ov7[__Q%5M65*%}Y~RWZ:Ygou'Zg?t@5t)A
Oct 7, 2024 01:05:29.111217976 CEST	1236	IN	Data Raw: 48 a7 4e b5 24 51 26 88 b2 af 99 7f cc d3 8a 75 21 c0 07 fb fb 7f f6 74 bb f7 37 2f f4 04 58 b0 99 42 e7 28 ad 0b a6 55 67 2b 23 b1 01 a4 4e 53 15 01 4e 23 80 b0 70 95 86 ce 38 04 11 e0 05 02 08 0b 51 7b e8 8c 93 07 91 34 ce 88 e8 35 f3 d2 54 a2 Data Ascii: HN$Q&u!t7/XB(Ug+#NSN#p8Q{45TZ6KQo+jHBp~*wBG99:A;kBcDwY9:J!nOBI0)/BgTUP"gU>`dm8ti83lMtrBl;e]PDQ)
Oct 7, 2024 01:05:29.111231089 CEST	1236	IN	Data Raw: 09 b4 f9 ee 8f 2f 74 c4 53 5c 32 07 60 c4 d8 e0 21 74 dc 12 4a f5 73 89 75 1f 00 32 e6 d4 02 42 c7 59 aa 93 a8 c1 2d 9f d7 7e f2 d6 5b 22 57 cd cf d7 ba 00 88 d5 a1 e0 21 74 dc e7 fd e4 1b 23 d7 40 e4 b4 bc 7d f7 f6 f9 e7 ec 9b 84 8e 47 7c 9f 7c Data Ascii: /tS\2`!tJsu2BY-~["W!t#@}G\|\|cWqNS+BosjO5Zo@j#ty-BM8_:ak c!tf$[x@7N;\|DXN\R-ozk*Nz76p,
Oct 7, 2024 01:05:29.111249924 CEST	1236	IN	Data Raw: b0 d0 cc df 49 ec eb 6c ff 6d b1 21 35 fc 78 de d2 53 a6 95 97 57 4e 8b a8 9e fa e6 7b bd 5f ad 68 49 4d 40 da b7 fb a2 f5 47 26 3c 1f 98 0f 7e 64 de 36 ef ab 9e 3c 7a d4 f7 bd b2 19 45 e8 00 ee b1 01 b4 25 99 b4 63 1e bf 5e a6 61 58 15 9a 32 bb Data Ascii: Ilm!5xSWN{_hIM@G&<~d6<zE%c^aX2d<>7?pC)uBI8?*JQZZ&&+u'nJTc&JD:542f~OG-Cp3P5Bpcp3j
Oct 7, 2024 01:05:29.111255884 CEST	1236	IN	Data Raw: 9d e3 a5 a2 e4 86 6f d5 0f ad 37 00 13 58 ca 45 70 84 ce 84 b4 92 8e f9 ed 60 d3 b7 d3 0f fe f0 4f 5f 5d 4f 54 72 95 0d a7 00 c6 58 78 f0 10 3a d3 4b 4d f8 b4 b3 4c 6d fa 54 fd b0 e1 14 c0 11 16 1a 3c 84 ce 1c 7c ac 7e d8 70 0a 60 8c 87 3a 93 e7 Data Ascii: o7XEp`O_]OTrXx:KMLmT<\|~p`:BTh[6FN\|RJ_Dx75!tXU<bLO_gZ%N;o"U;l#t#kfgUjBgu-_Zo\Q29w
Oct 7, 2024 01:05:29.111267090 CEST	1236	IN	Data Raw: 22 8c a2 38 d2 66 16 84 0e 30 bb d4 fc 26 db ce 32 b5 19 63 fb 6d 12 45 18 ad a8 c6 d3 99 c8 57 4c 60 9f 56 a2 9a 12 f2 46 56 ad 1f 0e 24 b9 f2 8b 1f 5f e8 08 9e 40 e8 00 55 18 b6 df 62 5d ff 99 85 0d 24 dd c8 56 95 24 4d 95 65 4d ad e4 69 f3 67 Data Ascii: "8f0&2cmEWL`VFV$_@Ub]$V$MeMig4=)1J~N10pB<ivbK4Wdi.mEN7Ujau3JfJ>{z00-BO>~)O?}VY<>QBX!%+BXBLk@v
Oct 7, 2024 01:05:29.111278057 CEST	552	IN	Data Raw: d7 f1 eb df 6f fd c5 7a a6 92 ab 6c 38 05 30 46 10 eb 3c c1 85 4e 49 6a 5e da 3b 92 6c fa 56 fd 1c 6c 38 e5 ac 37 00 87 3d 34 cf 0b d7 3f f8 a9 bf 77 f3 84 1c 3a 07 8a e9 b7 0f ef bf ea d5 37 2a 0f 9f 64 b0 ae 75 72 95 d6 1b 80 21 af d7 79 a2 08 Data Ascii: ozl80F<NIj^;lVl87=4?w:7*dur!yog[Kv[lsk<07}jE:%^V?\(yEScAh:yYp]>9L5nk v=7]zGnt>@2 tf`O=zcpOqD"K
Oct 7, 2024 01:05:29.111289978 CEST	1236	IN	Data Raw: 21 74 3c a6 95 f4 ed 25 73 3e b6 de d8 70 0a 9c cc d7 09 b5 e3 10 3a 81 f0 6d e4 da 1a 0e 1e d8 3d 3f 2d 01 30 c2 df 09 b5 e3 10 3a e1 f1 ee a0 51 ce 7a 03 0e 31 0f 61 79 f1 83 77 5e da 90 00 11 3a e1 4a b5 56 9d 5d a5 6e 79 d5 7a 63 f0 00 31 f3 Data Ascii: !t<%s>p:m=?-0:Qz1ayw^:JV]nyzc1Y:zm&:mA~c{.:qnA81G-":g'S[>\[T?RG!t0k~20pBG[mpNDG!tp"O;(pQL
Oct 7, 2024 01:05:29.116163015 CEST	1236	IN	Data Raw: 94 04 95 dc a5 1a 82 4b 66 0a 9d 32 02 08 70 df 70 a3 6a cf bc dc 53 7a c5 54 44 92 12 44 58 86 b9 43 a7 8c 00 02 fc b2 bf 36 24 a9 28 d5 b3 ad b9 bd 47 d2 63 cf 10 ea 54 69 e8 94 1d ac 01 65 72 89 21 04 c0 1f e5 aa 48 92 e4 41 1e 46 26 98 98 9a Data Ascii: Kf2ppjSzTDDXC6$(GcTier!HAF&Cj<tv";=~Hj }ZuBB}@@IGJ6vZCK\|R^h.xS:Pj#RMP*~R\2/TcXjWo)IvCh
Oct 7, 2024 01:05:31.438889980 CEST	301	OUT	GET /templates/logos/sedo_logo.png HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:05:31.538197041 CEST	564	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:31 GMT Content-Type: image/png Content-Length: 15086 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Expires: Sun, 13 Oct 2024 23:05:31 GMT X-CFHash: "def00c11b1596db4efee6a9fbe64fc27" X-CFF: B Last-Modified: Mon, 11 Jan 2021 07:44:34 GMT X-CF3: H x-cf-rand: 5.010 CF4Age: 2099882 x-cf-tsc: 1699994980 CF4ttl: 29436118.000 X-CF2: H Server: CFS 1124 X-CF-ReqID: e9424e5b1fe3efe2bd45e4f0290a31f2 X-CF1: 11696:fQ.iad2:cf:nom:cacheN.iad2-01:H Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49747	91.195.240.19	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:05:28.692538023 CEST	671	OUT	GET /search/tsc.php?ses=ogcV_WvEfM___dYD1L7gly3SU3IFN9HcA91vILohR6NX1LY0h0GqkOW2ripKZAwuNsWOj5Wu8FJUUlfANAIwIaBJnJ9Vm74aDQXwlM2lW2qZlBDAVJC63G2CGJZjTE5YH8dqnVz71Qih3Kh12xmeBytsHwZss1FnK42YSGH5dN1i_NTKeNTiUrm1Pi4cWMe8OnDvJO7l3n4dGb2LVoH6Xv6rGPykqqjmRLOQEdwDO__xEFbM_kRTKpeFxKCywnaMkelLJ3O9yYyOhllddUAU_1YlbmIyR7ztiIkekOMue5Zy0j7V-mPWYaY1uKvM6mJatLrHOTnZba3HPGFq6PPeZcc-HJbU1Xxes0VAyI2sDdG1LvnYBxU6dfBvpMu&cv=2 HTTP/1.1 Host: www.coritta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:05:29.331989050 CEST	181	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:05:29 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-2wkqx server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49832	104.16.140.114	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:05:39.606373072 CEST	441	OUT	GET /redirect.php?id=22 HTTP/1.1 Host: sedo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 01:05:40.067106009 CEST	741	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 06 Oct 2024 23:05:40 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Mon, 07 Oct 2024 00:05:40 GMT Location: https://sedo.com/redirect.php?id=22 Set-Cookie: __cf_bm=qWJ_mJkmPLVq_3Ml5LBDgpfKkFjW5caBtOIFvibUL8Q-1728255940-1.0.1.1-n94aNWY_9NAinJIHJqXdQsxAHDOaC2ia.EPTEMn9VQUOWeqp0DZemfQCJcVcOOVZHVZsQF5N.zieGmM0V59mdw; path=/; expires=Sun, 06-Oct-24 23:35:40 GMT; domain=.sedo.com; HttpOnly Vary: Accept-Encoding Server: cloudflare CF-RAY: 8ce94c2918297d0c-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 7, 2024 01:06:25.072906017 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	50050	91.195.240.19	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:05:59.186373949 CEST	944	OUT	GET /caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Best+Home+Warranty+for+Hvac&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEmwBlLqpj1YJdz7AzpZcgeGyRhp5zMxp8n1DEmNsr7hGBcgg34MnxBeRt-c9OxWGMfyh27HvGtg4vi3Woi_41qZIfViSTrEkCjKcSnu5_x2fLueh1V508qjLQKWCgp2wXmyKbwgvH5qd2vVtgD8&pcsa=false&nb=0 HTTP/1.1 Host: www.coritta.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA
Oct 7, 2024 01:05:59.883210897 CEST	1236	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:05:59 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_d+2q8pArsVOdVq/dni7mjylXQTt2u596l0c+Lgbf/fkm8HkHb9ATNMjhfr2jBclovDbsWxtP7W32Z12nyFzxKA== last-modified: Sun, 06 Oct 2024 23:05:59 GMT x-cache-miss-from: parking-75d9cf65f9-2wkqx server: Parking/1.0 content-encoding: gzip Data Raw: 32 32 35 0d 0a 1f 8b 08 00 00 00 00 00 00 03 7c 90 4f 73 da 30 10 c5 ef fd 14 1b 1f 7a 21 fc 4d 9a c0 14 33 63 02 94 04 42 e2 04 02 e4 d2 91 65 19 0b 64 c9 91 d6 36 ce a7 af 80 4e 4b 2f d5 41 9a b7 9a 7d 6f 7f db bd 18 3c dd cd d7 cf 43 88 31 11 bd ee e1 06 41 e4 c6 75 98 74 00 42 82 a4 4a c2 40 28 ba db b1 d2 7d 1c 15 c5 c0 5f 3f 4c d4 fb 7d 9c d3 99 e7 0f fb 7d df 1b bc 16 5e f1 ea 3d f4 bd 99 2c c5 b2 68 e5 d3 f5 75 bc 90 9d a2 71 f3 e9 4f 82 78 d2 8f f2 ed 68 71 67 c2 91 08 6e e6 a1 1f ef 83 ce cb 6a b9 ca ee af f1 aa 49 2b aa 1d ad 9f f2 ba 69 7f 34 a7 3f 9e 37 e4 6a 30 6c 4e eb 38 5e 5c 4f 87 b3 c7 3b af 18 7a 9e ef ba 3f c3 4a eb a3 9d 7a da bc 3d 85 6f 1f f5 50 f2 db 64 5b 8a 95 3f c7 56 f6 ad 73 23 1a b4 32 dd 04 51 3d da 25 ed f1 6e 1c 74 bc f9 ec 71 1b 47 ba b5 ed 53 a1 f2 41 60 96 7b 7c be 5d 5e b5 de 9b 2d 59 8e 3e f7 13 cf 75 2d 3a 23 61 af 9b 30 24 40 63 a2 0d 43 d7 c9 30 aa b6 9d 5e 17 39 0a d6 a3 4a 73 44 52 a3 2a f9 2a 03 93 7e af 9e 9e 3e 33 08 63 95 30 58 12 ad 89 c4 12 22 a5 61 [TRUNCATED] Data Ascii: 225\|Os0z!M3cBed6NK/A}o<C1AutBJ@(}_?L}}^=,huqOxhqgnjI+i4?7j0lN8^\O;z?Jz=oPd[?Vs#2Q=%ntqGSA`{\|]^-Y>u-:#a0$@cC0^9JsDR*~>3c0X"a/LSfHr%k)I\'HF!nrNY(.JseB<Jf>JJ'&dj8K:nsCe; O,G:H2c.aRNh&XmMf"046m,=9Q/Ll%\c\[XO.'d~571Y[o+jf-;Hm
Oct 7, 2024 01:05:59.883241892 CEST	1236	IN	Data Raw: 81 f6 a5 2d b0 0b ec c3 a2 28 30 08 06 94 44 d9 dc 48 a2 20 4a 8e 3d aa fe 7b 0f 2f 92 28 89 f2 24 8b 45 30 13 9b e4 39 3c 97 ef dc 98 75 91 1f 87 8d 53 49 92 bf de ad d7 34 3b ae 38 89 59 81 4b c1 57 58 66 5d 91 ac 00 59 09 5f a7 ec c8 f8 5a ec Data Ascii: -(0DH J={/($E09<uSI4;8YKWXf]Y_ZWo3[''J78wO+o9s~Ov%9XzLZgjt"xjPQE.p!M#}eEc`sW$nbW_idoI
Oct 7, 2024 01:05:59.883254051 CEST	448	IN	Data Raw: 99 25 56 cb 40 1d 31 5e 3c 45 b3 02 ca 76 75 5b 77 7d e8 fd 8a 4f 09 66 5a cf 0e c8 a0 1b ab 1f 2c 0a 2d 3f 45 15 aa f9 6d b9 87 73 ef 17 dd 42 33 93 de 76 e6 43 0a 80 f2 67 1c 5d 7f 61 30 52 5c 6f eb 30 3a fa 7e 35 ec 64 1f 35 33 7b a5 04 65 d0 Data Ascii: %V@1^<Evu[w}OfZ,-?EmsB3vCg]a0R\o0:~5d53{e&#i$:gAw5\f%g:.Tdv4ec?Iw}F2C1J5XH#?gpc#[w R#r(M72`;6VZm7m_Ciyn
Oct 7, 2024 01:05:59.883316040 CEST	1236	IN	Data Raw: a6 7d 21 19 0c f0 06 68 4b 01 11 e2 75 24 54 b7 e8 ba dd 1c 0e 0f 07 c3 1f c6 e2 10 d0 46 22 b8 20 99 0a c6 8c fd 93 98 c8 2d ec 37 78 1f 6e a3 09 7b bd f8 7e f6 88 67 7f 84 e8 3a ce 66 bc ff 38 e9 27 37 80 d3 f2 58 cc bc 73 d6 87 e8 79 f7 3c 65 Data Ascii: }!hKu$TF" -7xn{~g:f8'7Xsy<e3E>EvXoN~,pDk'y>_}"k"(.0A&=7B,VUAkVvU4~HVP*'ww6=hr=2\|DCHiI
Oct 7, 2024 01:05:59.883326054 CEST	120	IN	Data Raw: 3d 02 39 d0 d0 20 e7 d9 1d a7 87 6a c6 38 87 9e d1 a8 28 8a a1 c5 2e 4c bf fb 10 78 e7 40 14 c4 e2 7f 39 22 8b 3e 33 ce ab cf 5d 10 be 8f d2 0c b8 38 1e 71 9c 52 a1 d6 81 e4 ff 01 b2 c3 ca b3 63 e0 6f 66 93 f5 7a e0 4b c8 46 b5 67 f2 f3 8b c0 5c Data Ascii: =9 j8(.Lx@9">3]8qRcofzKFg\W[\UKYuC08XxMscy
Oct 7, 2024 01:05:59.883344889 CEST	1236	IN	Data Raw: 35 37 31 0d 0a ec 5b 59 b3 a3 b8 15 fe 2b 2e 1e 32 49 55 7b 2e 3b b8 d3 b7 a7 6c bc 62 83 c1 c6 0b 4e a5 5c 20 f6 dd 80 0d 66 aa ff 7b 24 b8 be 4b 77 27 35 79 4a 1e e6 56 5d 1b 2d 96 8e a4 a3 ef 7c e7 20 b5 ad 27 5e f4 96 ea 56 70 97 47 9d 52 74 Data Ascii: 571[Y+.2IU{.;lbN\ f{$Kw'5yJV]-\| '^VpGRtIt8Kv3xzpe#7;L/LH&wY1LNc(p8np}&r3l$4FZZKwY8QG10Shgw~k1#@I}2bOrYi1\|<em
Oct 7, 2024 01:05:59.883356094 CEST	224	IN	Data Raw: 0d eb 5c 4e 09 0e d8 97 c9 82 5c 36 f7 a8 16 4d 22 88 d9 a6 52 5d 32 5f 6d 6a 76 4a e3 3e cd a6 33 83 31 c6 a7 53 52 16 4b 4b db b1 b2 8d db e1 50 1d e5 fb 69 5c 5a e3 68 46 d8 b1 e9 ad ef 71 2c 73 9b a3 78 58 2f 8b 6a cf b8 22 1b 44 14 59 f9 5b Data Ascii: \N\6M"R]2_mjvJ>31SRKKPi\ZhFq,sxX/j"DY[pVnEipQTVU!O uoT"*mMY^g>jtB&227&o{d893w-k&XAFrZq#7
Oct 7, 2024 01:05:59.883574963 CEST	1236	IN	Data Raw: ef 17 ec 9d b9 e0 1b 86 28 b3 7c eb 1e b4 98 1c a6 81 cc ef 38 49 38 44 d0 7f 71 64 77 a0 ce a2 71 34 9c fb ca e8 0e 6a 69 af dd 96 c7 22 aa 85 60 b9 2a f2 f0 2f e0 f6 4c c2 95 41 37 7b 1f b0 06 61 14 e2 2b 33 40 3c da 4a 95 8e 59 77 48 e3 95 65 Data Ascii: (\|8I8Dqdwq4ji"`/LA7{a+3@<JYwHeV\|7l7K=Gh;7M:B}g`/D>zm}uoAwSwnB~m#x}<X9g-$plp!nv!~//?<)jo
Oct 7, 2024 01:05:59.883920908 CEST	224	IN	Data Raw: f6 87 a6 bc 7a 68 da 78 a8 75 15 fc ab a3 1e 0e f6 2b dd 62 66 de 7f 26 ce c7 4c 7a 9b d2 e4 7c 5c 4d a6 bf e3 fc 4b ba 27 b1 ed b8 09 19 aa 47 b1 63 71 75 90 07 2f 5c fa 12 24 af 0e 3b 52 5e 0d 80 5e 05 52 95 e9 dc fa 73 1f 08 b4 b4 31 6a c0 d8 Data Ascii: zhxu+bf&Lz\|\MK'Gcqu/\$;R^^Rs1jE=Oi_7hQxk3hlkx$RgI%99YW.:JyRgj_w*VtC?3L7;Lic_ rAZk
Oct 7, 2024 01:05:59.975486994 CEST	1219	IN	Data Raw: c4 8d 32 f9 48 5f c6 49 59 8e c7 c5 01 aa 37 aa 2e 87 9a ee cc 87 21 df a8 f4 6a 38 1c b9 d7 fa 04 5d 27 5e ea c3 4e 9e c1 72 9b e8 f8 f7 7e 31 7b 28 47 c4 ae ef 59 c5 d1 19 5b 73 b7 de 7b 5d b1 96 31 ab d8 c6 cb 73 1e aa 73 1e dc 5c 06 90 f2 65 Data Ascii: 2H_IY7.!j8]'^Nr~1{(GY[s{]1ss\eaz\|Ku,Z:5z;GsviAS"$X%IZt@hy%Z-fc AEzvR{/.dPZ'=G3QtG{&3{c+hq1-W9XA;
Oct 7, 2024 01:06:00.125957966 CEST	1219	OUT	GET /search/tsc.php?ses=ogc-QQjMP_D8zbhc7KavHbk7y3QaBoacs8wk2ad_tF17ceqEI2KzylxJb1jm6zwQg2rLRx6F40i46oGa5aDZZntsKdTU6Ne0ekAQBrVFmtdDlG1embhOymmN7RXJWOKswV5gJ6jl32wiSffVO8kKOPvuIt7Tw3jCiWpgxFNSwP0SQAwE3uI4wnQL-zOOscwjIjAPKqvH8CiJhENZFfOG7w3SqVw6gXGi7Y9yQxcSl4p6Mhxbk5jkCcOUJb8bo7gqEZQnGitpP6401QjlD5_5yTpzETDCcjp2vuwKS6d3f5sVAXRNzBjsdxr5DVI6y5q0R51tprSgWTm2AojN8U7MCWlZIhfNg9QGlDlAHiPBycxMVTvKXslxCjKLsrk&cv=2 HTTP/1.1 Host: www.coritta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Best+Home+Warranty+for+Hvac&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEmwBlLqpj1YJdz7AzpZcgeGyRhp5zMxp8n1DEmNsr7hGBcgg34MnxBeRt-c9OxWGMfyh27HvGtg4vi3Woi_41qZIfViSTrEkCjKcSnu5_x2fLueh1V508qjLQKWCgp2wXmyKbwgvH5qd2vVtgD8&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA
Oct 7, 2024 01:06:00.324378967 CEST	181	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:06:00 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-n7q88 server: Parking/1.0
Oct 7, 2024 01:06:05.182843924 CEST	946	OUT	GET /caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Cost+of+a+New+Ac+and+Furnace&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj3wtYOe7rzx_1g0wON-N8H__C4RQ1CeooGzFWtQkJCJwnMJ1w-u4cuLbMWU_7XM46bcpZ97UYjuhVirX9hk929rs6qaClYRSjBdJEFMkHJUbEGAnwvyWdh41fmZ1VUQ8tfWlxX7SZjj5&pcsa=false&nb=0 HTTP/1.1 Host: www.coritta.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	50065	91.195.240.19	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:06:00.334707975 CEST	771	OUT	GET /search/tsc.php?ses=ogc-QQjMP_D8zbhc7KavHbk7y3QaBoacs8wk2ad_tF17ceqEI2KzylxJb1jm6zwQg2rLRx6F40i46oGa5aDZZntsKdTU6Ne0ekAQBrVFmtdDlG1embhOymmN7RXJWOKswV5gJ6jl32wiSffVO8kKOPvuIt7Tw3jCiWpgxFNSwP0SQAwE3uI4wnQL-zOOscwjIjAPKqvH8CiJhENZFfOG7w3SqVw6gXGi7Y9yQxcSl4p6Mhxbk5jkCcOUJb8bo7gqEZQnGitpP6401QjlD5_5yTpzETDCcjp2vuwKS6d3f5sVAXRNzBjsdxr5DVI6y5q0R51tprSgWTm2AojN8U7MCWlZIhfNg9QGlDlAHiPBycxMVTvKXslxCjKLsrk&cv=2 HTTP/1.1 Host: www.coritta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA
Oct 7, 2024 01:06:00.974385977 CEST	181	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:06:00 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-b9tc5 server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	50051	91.195.240.19	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:06:04.746700048 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Oct 7, 2024 01:06:05.326189041 CEST	946	OUT	GET /caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Cost+of+a+New+Ac+and+Furnace&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj3wtYOe7rzx_1g0wON-N8H__C4RQ1CeooGzFWtQkJCJwnMJ1w-u4cuLbMWU_7XM46bcpZ97UYjuhVirX9hk929rs6qaClYRSjBdJEFMkHJUbEGAnwvyWdh41fmZ1VUQ8tfWlxX7SZjj5&pcsa=false&nb=0 HTTP/1.1 Host: www.coritta.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	50847	91.195.240.19	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:06:05.331912041 CEST	946	OUT	GET /caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Cost+of+a+New+Ac+and+Furnace&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj3wtYOe7rzx_1g0wON-N8H__C4RQ1CeooGzFWtQkJCJwnMJ1w-u4cuLbMWU_7XM46bcpZ97UYjuhVirX9hk929rs6qaClYRSjBdJEFMkHJUbEGAnwvyWdh41fmZ1VUQ8tfWlxX7SZjj5&pcsa=false&nb=0 HTTP/1.1 Host: www.coritta.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA
Oct 7, 2024 01:06:06.008872986 CEST	1236	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:06:05 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_oCAoDhwAD+yLjt/7iRwZxQk8umsKHbEi6+DTOQCFRIwCK8Y+dhT+B1Pl7TdzufXug9x0YVphaaim/ikQNnOcIw== last-modified: Sun, 06 Oct 2024 23:06:05 GMT x-cache-miss-from: parking-75d9cf65f9-d8c6n server: Parking/1.0 content-encoding: gzip Data Raw: 38 34 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ac 59 fb 73 d3 b8 16 fe fd fe 15 22 3b bd 03 db 38 71 d2 26 4d 1d ca 4c 1f b0 b0 94 47 d9 b2 d0 65 18 46 b6 e5 58 c4 b6 bc 96 9c 07 b9 f9 df ef 91 64 3b b6 e3 84 76 67 c9 d0 d8 7a 7c 3a 8f ef 9c 23 29 4f 1f 5d bd bb bc bd 7b ff 1c f9 22 0c 9e 3d 95 7f 51 80 a3 c9 59 8b 44 2d 84 5c 2c b0 81 5d 3b 60 ce 74 4a 96 67 6f 5e cc e7 57 37 77 bf bf 66 7f bd f2 67 ce db f3 9b e7 17 17 37 e7 57 7f cc cf e7 7f 9c ff 7e 71 fe 36 5a 06 9f e6 fd d9 f5 dd b1 ff 31 3a 9d 9b c3 1f 37 af 6d ff f5 85 37 fb fe e2 e3 25 77 5f 04 f6 f0 d6 bd f1 17 f6 e9 87 cf 9f 3e a7 af 8e c5 51 cf 39 64 23 ef ee dd ac cb 47 7f f7 ae 7f 7b 3f c1 47 57 cf 7b d7 5d f1 f2 e3 f1 f5 f3 b7 6f 2e cf e7 cf cf cf 6f ce ce be b1 cb 73 76 e5 cf cf af 0e 97 d7 df 45 f7 84 7e 98 ff b5 b8 99 8e d2 90 bf 7e 69 3f a7 c3 c3 ab db 77 37 97 2f 3e bc 9a 5f be 1e dd 1d ba fe ed e1 45 ef 7d 70 72 eb fe 48 bd cf e9 e4 74 61 de fd 19 fb 18 d3 b0 4b a7 37 6f a3 77 ce ab f9 d9 19 a8 4e b0 fb ec 69 48 04 46 8e 8f 13 4e [TRUNCATED] Data Ascii: 841Ys";8q&MLGeFXd;vgz\|:#)O]{"=QYD-\,];`tJgo^W7wfg7W~q6Z1:7m7%w_>Q9d#G{?GW{]o.osvE~~i?w7/>_E}prHtaK7owNiHFNY+1j={3%TqX_<[2G^I>!\<XPuv5^3!9k(,-HdSWg.QM#(:f;a%$QUY%Ih,(TQ 7hImZJ QaC$hN3(!`ExyHXLt.:A>5?PoD{*
Oct 7, 2024 01:06:06.008888960 CEST	1236	IN	Data Raw: 34 9a fe 07 65 ff 60 85 b3 16 05 6d 5b 45 93 58 c6 60 0d 1a e2 09 e9 c6 d1 64 d3 e1 27 c4 3b 6b 75 bb 34 9c 74 38 71 59 8c 13 89 2b 4d d3 15 24 8c 41 56 c2 bb 01 9b 30 de 95 fd df e4 63 47 41 74 9f 3d e5 62 09 7e 2d c0 ba bf 3e 42 91 b4 55 40 7f Data Ascii: 4e`m[EX`d';ku4t8qY+M$AV0cGAt=b~->BU@9tExPZ$"0V:c# ap=cccN)kU,sA1.i{2,+6'TVXRV3<!!28XQiB{r
Oct 7, 2024 01:06:06.008899927 CEST	448	IN	Data Raw: 28 db 62 bf ee d9 a0 fb 2b 5e 9f b0 a5 f5 d6 00 15 74 55 f5 c7 3b 85 56 4f 8e 30 52 be 5f ee cd b8 fb 8b de 30 67 4b fa a6 31 0f 52 00 94 9f 61 67 f9 9e c1 91 62 b9 5f 87 ca d0 fb ab d1 3c ed a1 66 66 53 4a 8c 10 b6 49 78 42 56 c5 e1 c4 a3 0b e2 Data Ascii: (b+^tU;VO0R_0gK1Ragb_<ffSJIxBV\6KCTT\=WehyRMyIbpp p>[Wq,AJ\|8Xf{GY(e[+Wm]j_-S$);9\6"pLlo?K8zz-
Oct 7, 2024 01:06:06.008912086 CEST	1236	IN	Data Raw: 0b 05 b0 a1 37 50 5b 09 68 18 3c 75 a4 ea 0d ba f6 7b a3 d1 d1 a8 e4 8f 52 e3 26 a0 4b 89 60 61 a8 54 50 05 b6 7c 79 22 6f 80 ef e1 a1 dd 77 6a f0 59 e3 fd e1 0d 1e fe 1b a2 67 71 b6 85 fd ef 49 5f 5b 01 9c 16 b9 f2 cc bb 0d 3d 72 4e 07 a7 75 e8 Data Ascii: 7P[h<u{R&K`aTP\|y"owjYgqI_[=rNu:$S3:goa}\|NF2bdn.U[2gG2h8A&!Sekmbu+^X6XB9jrmCL+dd;!$a(U5)
Oct 7, 2024 01:06:06.008924007 CEST	224	IN	Data Raw: 1d 8b ed 57 3f b2 57 00 39 f6 6c 28 4e a8 3f 60 21 90 5a 47 2f a3 13 91 94 15 78 71 5a 0f 8c 3d 60 da 67 af 3a 81 ad 82 77 44 d6 2e c5 41 a0 bb ea 16 80 03 18 45 8b 9d a8 ea 28 e6 61 46 3f 06 6f 9e 9e 92 24 79 bc 40 e7 86 16 06 1c ef 18 00 69 3e Data Ascii: W?W9l(N?`!ZG/xqZ=`g:wD.AE(aF?o$y@i>\|8u/82[ ?`a4)XZq95->}Yy$k9VzrL6aq\>LQ"w<e'[A&t0@f
Oct 7, 2024 01:06:06.008999109 CEST	1236	IN	Data Raw: d2 6a 92 3f 2d 93 b4 46 ab f1 84 12 b6 ca b8 47 4c fa ec 62 4e 11 94 b4 2b ec c4 81 66 4b a3 ea 6a 32 6a b0 a2 cd 6c c4 b2 ca 88 65 71 2b 95 a6 c4 64 2c 05 9d b1 e4 4c c6 cd 85 52 9a 2e e7 14 69 29 23 46 b8 c0 b3 9a 0c 05 30 07 b1 69 ba 92 a3 d2 Data Ascii: j?-FGLbN+fKj2jleq+d,LR.i)#F0i?aY&)iiuG5VY&VZiMh[}@lG;ypNg@g$Xw5VA~\|]!]1\BHm/1PuJP9F'y!RQ<B(
Oct 7, 2024 01:06:06.009085894 CEST	224	IN	Data Raw: 6f be 63 57 9d d9 1b 2f d4 5e 01 8f 4f 3d d7 71 a6 84 2d fa fd 58 98 84 5b af c4 e5 85 78 6b f0 e1 b0 66 55 2a 6b b3 e1 c6 22 17 f2 7a 7b 35 02 e6 39 83 db 4c 81 e7 7d af 5d 0f de 6c 55 14 37 fc ac d2 16 04 62 56 69 be 8d cb 8b 0a 27 57 99 41 77 Data Ascii: ocW/^O=q-X[xkfU*k"z{59L}]lU7bVi'WAw(<q({jTCj2E:vpR`FoiTNRFx\[k={(M6S]Pd^z(XVuR:U5Vsj)
Oct 7, 2024 01:06:06.009098053 CEST	1236	IN	Data Raw: 35 3c 35 c3 a1 4e d4 e6 e6 89 23 69 ba a9 ee 82 ca 15 bb b8 a0 40 df 1a f4 05 7b e5 1d cc fc bd f1 0e b5 9f ea d8 ea 72 10 20 6b 0f b5 51 22 54 4c f3 a0 27 a6 ef 49 6f e3 58 77 77 00 d0 37 ba 1a 47 3a 42 04 88 ec d8 1b 1d ea d7 6c f8 ca 4f a3 09 Data Ascii: 5<5N#i@{r kQ"TL'IoXww7G:BlO=KGmHE5()&44@<f)TQUrF\|v~nJ}u^,}\\/+Pm7skK&s)X8{!@t/XZv.y,hudXf9
Oct 7, 2024 01:06:06.009119987 CEST	224	IN	Data Raw: ad 15 cc a0 b1 85 bd ce 26 8a 5a fb 06 34 d2 6e ca 5a 3b e2 95 cf df 76 0a 27 23 4a 16 92 1c 62 62 9a 51 4b 9d 12 7a 02 24 93 30 82 e7 1c 36 34 d8 d6 0e 3f e4 64 c1 9a d2 5e 31 1b ba d8 4a ea 3c 28 e5 49 f9 be 9e a9 7d df 05 14 aa e0 57 2b 45 02 Data Ascii: &Z4nZ;v'#JbbQKz$064?d^1J<(I}W+E[q@2!6:J"v#9sNZ!nG6N<PQuFW':vDigglfuZFf/yy@_F=,I%\| SrWJ
Oct 7, 2024 01:06:06.009130001 CEST	1099	IN	Data Raw: 0a b3 48 87 52 00 6b 05 eb 44 50 d7 d4 1e b9 e8 ed 5c cd d9 b9 d4 ff 51 ac a6 a6 25 d6 2b c6 76 fb 9d 4e 65 32 8a 90 5c 06 63 b5 00 24 69 d1 01 45 fc a1 e5 6d d6 68 39 b7 b8 e2 ca 9f 4e 87 aa 8e 01 2b 80 14 7f a4 af 04 15 6b 4e 02 17 5d 2e e8 45 Data Ascii: HRkDP\Q%+vNe2\c$iEmh9N+kN].EmJr@Y+@O.}CMf-c-+hq1-O9XI;&&zVZ0F6;YD&S]N)9\]78nLFHV4p^TX^x2P~
Oct 7, 2024 01:06:06.097290993 CEST	30	IN	Data Raw: 31 33 0d 0a 02 1d 4a 0d 00 00 00 ff ff 03 00 8b f2 95 1f a4 5a 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 13JZ0
Oct 7, 2024 01:06:06.792810917 CEST	1221	OUT	GET /search/tsc.php?ses=ogc-pHY9hg6S8tYf34s_xrgsU7s_49KmerisVUCDZX1RSAIR5RZu49QIYaEkiLJAfVzBuB_3dqEC-8eAixiSYOyFnI09k7eqeOz8T9_Xbote5sXdw3WC116Zb6Et1jdV8eQTnv3C-dwj5YCghl-gAN_3VW_JRbz5mP_q89GOBkhZonllZ0iMpSu9YsyoC769uyf8sVGhEEvgInuM7s8eLmWK8Y4-i4A88poLHrqicMMx8_EL990_EJqXDjE7UF4TQVM-cUYlhyMNSNT7fiWLecHzhLi2IP39cPqiQUKunV4QjBFXlDt88XDKQxO0yVrPVYA4Wtho3Eokg1KFZMQYvLCu-cmwpMb_Iuti-FhxufUD-KgniMRik4aJ5wz&cv=2 HTTP/1.1 Host: www.coritta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Cost+of+a+New+Ac+and+Furnace&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj3wtYOe7rzx_1g0wON-N8H__C4RQ1CeooGzFWtQkJCJwnMJ1w-u4cuLbMWU_7XM46bcpZ97UYjuhVirX9hk929rs6qaClYRSjBdJEFMkHJUbEGAnwvyWdh41fmZ1VUQ8tfWlxX7SZjj5&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA
Oct 7, 2024 01:06:07.301666975 CEST	181	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:06:07 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-d8c6n server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	50862	91.195.240.19	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:06:08.046757936 CEST	771	OUT	GET /search/tsc.php?ses=ogc-pHY9hg6S8tYf34s_xrgsU7s_49KmerisVUCDZX1RSAIR5RZu49QIYaEkiLJAfVzBuB_3dqEC-8eAixiSYOyFnI09k7eqeOz8T9_Xbote5sXdw3WC116Zb6Et1jdV8eQTnv3C-dwj5YCghl-gAN_3VW_JRbz5mP_q89GOBkhZonllZ0iMpSu9YsyoC769uyf8sVGhEEvgInuM7s8eLmWK8Y4-i4A88poLHrqicMMx8_EL990_EJqXDjE7UF4TQVM-cUYlhyMNSNT7fiWLecHzhLi2IP39cPqiQUKunV4QjBFXlDt88XDKQxO0yVrPVYA4Wtho3Eokg1KFZMQYvLCu-cmwpMb_Iuti-FhxufUD-KgniMRik4aJ5wz&cv=2 HTTP/1.1 Host: www.coritta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA
Oct 7, 2024 01:06:08.685136080 CEST	181	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:06:08 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-fvx6t server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	50890	91.195.240.19	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:06:14.223695040 CEST	942	OUT	GET /caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Replace+Hvac+System+Cost&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj5ulDShI8Bb7iRptDBkDmxnWF4qf353j65aQvFz-IKHccRTuxxIucZ2b63EhAJbftDkzbBDaWuuRYuJLti9NXeWNbTMnmVHkdDlPUOz-6PAxKFfYM9qN9Qyxx-ANIn2stcqlhWRn5irL&pcsa=false&nb=0 HTTP/1.1 Host: www.coritta.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA
Oct 7, 2024 01:06:14.892059088 CEST	1236	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:06:14 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_gJjKY2hPkkV3OqmmhGT/8oYofF5XUqmMtllYbuY+KIaPEkUp7aI4QRBOijCbwkakcndEk+h+tv5PdYdlB5Kyyg== last-modified: Sun, 06 Oct 2024 23:06:14 GMT x-cache-miss-from: parking-75d9cf65f9-b9tc5 server: Parking/1.0 content-encoding: gzip Data Raw: 32 32 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 6c 90 c1 72 da 30 10 86 ef 79 0a c5 87 5e 28 10 12 92 92 29 66 c6 80 49 08 24 60 12 9a b8 97 ce 5a 5e db 8a 65 c9 b1 64 3b ee d3 57 86 4e 9b ce 54 07 cb bb 33 fa fe fd 76 7c 3a df cc 9e fc ad 4b 12 9d f1 c9 b8 fd 12 0e 22 b6 2d 14 16 21 21 68 e8 42 18 70 49 d3 14 1b fb 7e 51 d7 73 cf bf 5b c9 ef cb a4 a2 0f 8e e7 4e a7 9e 33 7f ac 9d fa d1 b9 9b 3a 0f a2 e1 cf f5 79 b5 f6 87 c9 5e 5c d7 67 57 3f bd 55 90 ac a6 51 f5 ba d8 cf 54 b8 e0 c1 d5 53 e8 25 ef c1 f5 ee e5 f9 a5 5c 0e f5 c5 80 76 e4 28 f2 37 55 5f 8d de 06 eb 9b 6d 0c 17 73 77 b0 ee eb db fd 70 ed 3e dc cf 9c da 75 1c cf b6 7f c4 77 af 2b ff 3c d9 a6 e9 b7 8b cd 5b 96 25 37 4f fd 91 f4 65 b4 b8 7c d9 bf 65 f7 9a 73 3f 28 fd ce 6a 09 5b 37 dd e7 5f 60 39 f4 76 d3 0d 7b 9d 05 75 0a 29 15 a1 9b 76 92 8e ae 2e b7 a1 1f f2 e9 e5 aa 69 62 db 36 ea 08 e1 64 9c a1 06 42 13 28 14 6a db 2a 75 d4 1d 59 93 b1 66 9a e3 84 ca 82 69 0d 3d 2a b3 4f 22 50 f9 d7 ee f1 da 61 ce 81 22 b9 ad 80 92 c7 46 69 cc c8 4c 2a [TRUNCATED] Data Ascii: 229lr0y^()fI$`Z^ed;WNT3v\|:K"-!!hBpI~Qs[N3:y^\gW?UQTS%\v(7U_mswp>uw+<[%7Oe\|es?(j[7_`9v{u)v.ib6dB(juYfi=O"Pa"FiLMvdYPTDH"EIcmbXRh&fN+F{(>34U8YVf:PB`:g?1!ZC7i$bhG] @w#X`#5WSQE#bS`Ue(nyb$2?R-ujt9}Lm1cji&7`El571Y[o+jf-;
Oct 7, 2024 01:06:14.892199993 CEST	1236	IN	Data Raw: b1 e3 48 6d 81 f6 a5 2d b0 0b ec c3 a2 28 30 08 06 94 44 d9 dc 48 a2 20 4a 8e 3d aa fe 7b 0f 2f 92 28 89 f2 24 8b 45 30 13 9b e4 39 3c 97 ef dc 98 6e e3 54 92 e4 af 77 eb 35 cd 8e 2b 4e 62 56 e0 52 f0 15 66 59 83 4a a0 63 45 f8 3a 65 47 c6 d7 62 Data Ascii: Hm-(0DH J={/($E09<nTw5+NbVRfYJcE:eGb,?9SJUs~Zy+u~#Nu(/IRc"0PSoV]2*rv<>@o$\|}Y\|m2\i{-.+M"W.'tS2Mz$sK
Oct 7, 2024 01:06:14.892211914 CEST	448	IN	Data Raw: cc 12 ab 65 a0 8e 18 2f 9e a2 59 01 65 bb ba ad bb 3e f4 7e c5 a7 04 33 ad 67 07 64 d0 8d d5 0f 16 85 96 9f a2 0a d5 fc b6 dc c3 b9 f7 8b 6e a1 99 49 6f 3b f3 21 05 40 f9 33 8e ae bf 30 18 29 ae b7 75 18 1d 7d bf 1a 76 b2 8f 9a 99 bd 52 82 32 68 Data Ascii: e/Ye>~3gdnIo;!@30)u}vR2h4pZ.3[H*2ln2$IiK#,v2BFa$fR-;xj~wXf~9~ikjoHBW&Y0itrIN+6Y]c6t/!<c
Oct 7, 2024 01:06:14.892498970 CEST	1236	IN	Data Raw: d3 be 90 0c 06 78 03 b4 a5 80 08 f1 3a 12 aa 5b 74 dd 6e 0e 87 87 83 e1 0f 63 71 08 68 23 11 5c 90 4c 05 63 c6 fe 49 4c e4 16 f6 1b bc 0f b7 d1 84 bd 5e 7c 3f 7b c4 b3 3f 42 74 1d 67 33 de 7f 9c f4 93 1b c0 69 79 2c 66 de 39 eb 43 f4 bc 7b 9e b2 Data Ascii: x:[tncqh#\LcIL^\|?{?Btg3iy,f9C{VdS?m^?,]nw7ZE'GH8QUlV{5Gr A!j5ksC~?*qTT?$+M(N4SJRG9IGE>]!$4h
Oct 7, 2024 01:06:14.892509937 CEST	1236	IN	Data Raw: ee 11 c8 81 86 06 39 cf ee 38 3d 54 33 c6 39 f4 8c 46 45 51 0c 2d 76 61 fa dd 87 c0 3b 07 a2 20 16 ff cb 11 59 f4 99 71 5e 7d ee 82 f0 7d 94 66 c0 c5 f1 88 e3 94 0a af 0e 24 ff 0f 84 1d 56 9e 1d 03 7f 33 9b ac d7 03 5f 42 36 aa 3d 93 9f 5f 04 e6 Data Ascii: 98=T39FEQ-va; Yq^}}f$V3_B6=_VZuP]kSk571[YH+3e_H@nu 81a/(bG]j&zf!r=P7"q]Y?AefRbaRW*O(
Oct 7, 2024 01:06:14.892522097 CEST	1236	IN	Data Raw: f7 71 9c 26 3e 99 97 9b d9 32 bc 22 8b fb c4 27 8a 62 86 03 40 83 16 5f 4c 54 c6 3f fe 89 5e ae 2d 5e c3 67 d5 be 14 f1 4b 4a 77 b6 79 d3 39 95 25 e4 54 86 2a fc 13 56 9b 9d b6 7c 80 5f eb 26 8f 5b 00 8c 9f ff 04 a8 3f 01 ea ff 09 a0 aa f2 95 55 Data Ascii: q&>2"'b@_LT?^-^gKJwy9%T*V\|_&[?U@1',H~iV_sFsL=cC$Rt_dz].h$Xo\|&pEr}Q7~HSt:Gw;{\|saVctt:ar
Oct 7, 2024 01:06:14.892638922 CEST	1236	IN	Data Raw: 31 95 e7 ed d8 3b e2 53 19 6f fa 7d 5b d4 f5 d9 cf fd fe 8e e5 b6 62 48 fc 6c 99 2c 0c 4a 0a 5c b3 1c 78 3e 09 e4 86 10 8e 16 4e bc 36 6f de e8 f4 c4 6d 99 ea ba 6b 23 65 3c af 76 77 8d d1 f1 99 b1 bb fb 42 6d 5f 64 0a c2 c8 6f a3 e8 36 f4 49 94 Data Ascii: 1;So}[bHl,J\x>N6omk#e<vwBm_do6I{.O%lc`9^"&+/<VN.6GEC'V6btq>~wg=pT,rU;NZ=kl*.Y:2
Oct 7, 2024 01:06:14.892651081 CEST	560	IN	Data Raw: 68 06 b8 b3 39 84 69 61 b6 65 2a 0f 2b ba 06 ba 9b 64 ac ef ca 85 bf 0c 8b a5 97 c2 fa b1 eb fe 7f a3 bc a0 39 8a 19 11 de 6b 59 6f 62 07 72 39 f0 ce d7 63 17 d3 42 cc 2e 03 31 c9 0d 0e 11 83 1b f4 7a 44 78 70 54 16 11 ea 24 bd d5 ca 09 c3 75 20 Data Ascii: h9iae+d9kYobr9cB.1zDxpT$u RDBjAoST.Ve,vksTZ)63,(LLKrua*,,N89qe-`kxXb<sxP0HMp%%3
Oct 7, 2024 01:06:15.078689098 CEST	1217	OUT	GET /search/tsc.php?ses=ogcpCtxtojopBEXJ3abXvbInowugRdqwmZI40XyGVD7wS_QL_j0E8TY6mbcX673XhXWgKoJGgg1v5wqQwKdGdzLvK9jHNmYfPh905BS5AMubCa7gJ36K2LckXQf_JERgi46OW7wVJP5DPbUNNa5wm0R5pSe_eBEGU73VfsIRZoBiorc2f7gnI2S1LvuaXEm21y9GCO6cKAlfrncFpO652lscss8Hz9m69KpmWKPEb_fxyShWacSDjzIuB_MdIApYtUFfC3d3c3DqkJG1fzd04ZYGUcYVM3fWqjgMt7WHKdPRRtyfp17f97GIRqJ2nDTo3FGdtjjHNEgSxggjI-5ynx3YFtUEvO8ONddfoN0D8OHJSZKXbygDkpQvmRj&cv=2 HTTP/1.1 Host: www.coritta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Replace+Hvac+System+Cost&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj5ulDShI8Bb7iRptDBkDmxnWF4qf353j65aQvFz-IKHccRTuxxIucZ2b63EhAJbftDkzbBDaWuuRYuJLti9NXeWNbTMnmVHkdDlPUOz-6PAxKFfYM9qN9Qyxx-ANIn2stcqlhWRn5irL&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA
Oct 7, 2024 01:06:15.277146101 CEST	181	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:06:15 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-nz24j server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	50901	91.195.240.19	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:06:15.291229010 CEST	771	OUT	GET /search/tsc.php?ses=ogcpCtxtojopBEXJ3abXvbInowugRdqwmZI40XyGVD7wS_QL_j0E8TY6mbcX673XhXWgKoJGgg1v5wqQwKdGdzLvK9jHNmYfPh905BS5AMubCa7gJ36K2LckXQf_JERgi46OW7wVJP5DPbUNNa5wm0R5pSe_eBEGU73VfsIRZoBiorc2f7gnI2S1LvuaXEm21y9GCO6cKAlfrncFpO652lscss8Hz9m69KpmWKPEb_fxyShWacSDjzIuB_MdIApYtUFfC3d3c3DqkJG1fzd04ZYGUcYVM3fWqjgMt7WHKdPRRtyfp17f97GIRqJ2nDTo3FGdtjjHNEgSxggjI-5ynx3YFtUEvO8ONddfoN0D8OHJSZKXbygDkpQvmRj&cv=2 HTTP/1.1 Host: www.coritta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA
Oct 7, 2024 01:06:15.930569887 CEST	181	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:06:15 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-lw9z8 server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	50891	91.195.240.19	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:06:19.768918991 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Oct 7, 2024 01:06:27.213226080 CEST	949	OUT	GET /caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Best+Home+Warranty+for+Hvac&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEmwBlLqpj1YJdz7AzpZcgeGyRhp5zMxp8n1DEmNsr7hGBcgg34MnxBeRt-c9OxWGMfyh27HvGtg4vi3Woi_41qZIfViSTrEkCjKcSnu5_x2fLueh1V508qjLQKWCgp2wXmyKbwgvH5qd2vVtgD8&pcsa=false&nb=0&nm=3 HTTP/1.1 Host: www.coritta.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	50910	91.195.240.19	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:06:27.391496897 CEST	949	OUT	GET /caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Best+Home+Warranty+for+Hvac&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEmwBlLqpj1YJdz7AzpZcgeGyRhp5zMxp8n1DEmNsr7hGBcgg34MnxBeRt-c9OxWGMfyh27HvGtg4vi3Woi_41qZIfViSTrEkCjKcSnu5_x2fLueh1V508qjLQKWCgp2wXmyKbwgvH5qd2vVtgD8&pcsa=false&nb=0&nm=3 HTTP/1.1 Host: www.coritta.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA
Oct 7, 2024 01:06:28.063774109 CEST	1236	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:06:27 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_WwFSauS0XIS3RRy4NgvQQ4owyKdY0JljyfFZq0gA1vUZr+/YXfMUEP7UUv5h9LhbdIIyHPG0vuEF0FeIRBbYQw== last-modified: Sun, 06 Oct 2024 23:06:27 GMT x-cache-miss-from: parking-75d9cf65f9-lw9z8 server: Parking/1.0 content-encoding: gzip Data Raw: 32 32 36 0d 0a 1f 8b 08 00 00 00 00 00 00 03 7c 90 41 73 da 30 10 85 ef fd 15 8a 0f bd 24 80 69 68 9a 4c 31 33 26 d8 c1 40 08 86 78 c0 b9 74 d6 b6 6c 2b c8 12 91 64 2b ee af af 80 4e 9b 5e aa 83 34 6f 35 fb de 7e 3b bc 98 3c dd 3f c7 2b 0f 95 aa a2 a3 e1 f1 46 14 58 e1 58 98 59 08 65 a0 a0 03 59 42 79 ba df e3 d6 79 f4 b5 9e 84 f1 6c ce 5f 82 b2 49 97 6e e8 8d c7 a1 3b d9 68 57 6f dc d9 d8 5d b2 96 6e f5 97 66 11 0f ca 88 dd 69 fb e6 67 38 4f ca f9 38 6f 5e fd e8 5e 66 3e 4d 6e 9e b3 b0 7c 4f ee d6 bb ed ae 0e 06 ea ba 9f 5e f2 db 3c 7e 6a 7a f2 f6 ad bf 78 58 15 70 3d f1 fa 8b 9e 9a 46 83 85 b7 7c bc 77 b5 e7 ba a1 e3 fc d8 6a 7f 03 f5 c6 de 05 9b eb f5 ba 1d 2c 8b 26 0c 07 5c b7 f3 2c b6 67 f4 b5 cd fd 97 37 bb 70 fb 4d f4 22 2e 7b f1 2e 7f 8c bc d5 b7 28 6a be 96 77 8b 32 c9 82 a0 9d ae 1e ec a6 f6 7c db c7 c1 7a 9c c4 a1 76 1c 83 8e 21 1b 0d 2b ac 00 a5 25 08 89 95 63 d5 2a ef dc 5a a3 a1 22 8a e2 51 ca 05 51 0a ba 29 af 3e b3 44 1e be 77 ce cf 18 4b 85 a6 bc c2 68 0b 42 00 53 2d ca b9 40 d3 06 [TRUNCATED] Data Ascii: 226\|As0$ihL13&@xtl+d+N^4o5~;<?+FXXYeYByyl_In;hWo]nfig8O8o^^f>Mn\|O^<~jzxXp=F\|wj,&\,g7pM".{.(jw2\|zv!+%cZ"QQ)>DwKhBS-@R"PGpHv`}BY(LafF$SsWEvd;}U;CX$$b[dXc\|HDDr#Q$V?k)h4x[$H`jXaQ@M2RuN~]:)0^bJ}Lck)`A(/832Y[o+jf-;H
Oct 7, 2024 01:06:28.063832045 CEST	224	IN	Data Raw: 6d 81 f6 a5 2d b0 0b ec c3 a2 28 30 08 06 94 44 d9 dc 48 a2 20 4a 8e 3d aa fe 7b 0f 2f 92 28 89 f2 24 8b 45 30 13 9b e4 39 3c 97 ef dc 98 75 91 1f 87 8d 53 49 92 bf de ad d7 34 3b ae 38 89 59 81 4b c1 57 58 66 5d 91 ac 00 59 09 5f a7 ec c8 f8 5a Data Ascii: m-(0DH J={/($E09<uSI4;8YKWXf]Y_ZWo3[''J78wO+o9s~Ov%9XzLZgjt"xjPQE.p!M#}eEc`sW$
Oct 7, 2024 01:06:28.063842058 CEST	1236	IN	Data Raw: 6e 62 ca c1 00 57 5f e6 84 f6 b4 69 12 00 90 64 ee 6f 49 16 68 7e ab fd 13 c9 1c af 4d e8 31 c2 12 69 2e 7c ac 4b 02 58 a5 53 26 6a a7 13 65 03 84 8f 5e 71 69 4f 65 13 b2 8b 60 0d c6 f7 35 4e 11 2c 05 5a 7b 2f 60 67 52 26 29 7b f3 cf 94 53 40 7a Data Ascii: nbW_idoIh~M1i.\|KXS&je^qiOe`5N,Z{/`gR&){S@z[)P3^8{O 0\&du#0;+GKnlRJ#JUx"D.d fUYN7RqymdQ)@7C6b0v9$NrUeVmCxy^
Oct 7, 2024 01:06:28.063883066 CEST	959	IN	Data Raw: e9 14 5f 1e 43 fc 69 eb 79 6e f7 0f c6 92 cf 81 10 df 0b b4 d0 03 ea 95 88 c3 cb 88 18 2a 15 77 30 97 b3 7a e0 81 1c 8c 2c eb b6 25 5b 06 98 29 30 ee 81 46 4e da ec bc fb 01 7b 0a 7d b7 79 98 c8 d5 6f a9 1d 83 8d 77 af 7a c5 ae 88 8a 87 a8 51 6c Data Ascii: _Ciyn*w0z,%[)0FN{}yowzQlk1`=JRIc$%IG1p\|N9UCDUc`9Mv&WGoi1]UnoG@-}vgk?gsRIs}!hKu$T
Oct 7, 2024 01:06:28.064179897 CEST	1236	IN	Data Raw: 35 37 31 0d 0a ec 1b 69 8f aa 4a f6 fb fc 0a c3 4b e6 cd 4b da 6e 16 17 e8 d7 7d 5f 14 77 05 17 50 c4 c9 c4 b0 09 c8 2a 20 a0 37 f7 bf 4f 15 88 4b 2f b7 9d e4 25 33 c9 bc fe 60 53 55 a7 4e 1d aa 4e 9d 9d 3b 70 bd 65 af 7b 90 25 d2 9f 45 d6 27 98 Data Ascii: 571iJKKn}_wP* 7OK/%3`SUNN;pe{%E'$N92O_;@?j`H<q5>HBTE%irVpuEkX8p?\@O%W<\h"htU"QIz,`QF-;u;mU!M}y
Oct 7, 2024 01:06:28.064191103 CEST	224	IN	Data Raw: ed a4 68 2b b2 23 8f e4 f5 b1 9a aa 8c df 5e 5b c3 d0 ed ec 96 0e 4b d6 70 6b cf d7 67 64 94 1e b1 d9 c4 0b da f1 51 da f1 ba 27 ed b4 b6 38 a0 ab c2 bc 76 9c 4f d7 35 45 aa af ab c4 64 a3 8d db fd ae 9d ae d6 e3 e6 40 64 a2 86 58 ee e1 29 4f f5 Data Ascii: h+#^[KpkgdQ'8vO5Ed@dX)O_E"`EyV$BW-[;.6T}]j0x3c&94AE8.Vu-;\m7;Kokk^IuBM
Oct 7, 2024 01:06:28.064296007 CEST	1236	IN	Data Raw: d8 6a a6 fa ac ad c6 fd 95 dc 11 c6 f1 80 36 39 6a d5 da ef 94 ba 56 91 38 c1 eb 35 23 59 70 9c 63 bf cc 4d fb db cd 70 80 aa 15 91 3c 44 42 15 63 f8 6e 1a 0c 09 bc 2a 55 f1 79 8c 09 4b da 58 04 cb 89 34 98 c8 89 25 04 33 7a 51 91 00 77 fa 31 3f Data Ascii: j69jV85#YpcMp<DBcnUyKX4%3zQw1?sKZ'Pb9pnfz:lwJ+2VyE&#,5?vuEAs0-eI=zsl77=v{tpr^e/CNk7L?2 RX
Oct 7, 2024 01:06:28.064306021 CEST	224	IN	Data Raw: 33 a3 a8 3f 54 c8 28 06 36 ce 17 6f 46 54 27 cb de 96 39 5a 55 a4 aa 00 c5 c8 8b 73 d5 eb 8f 00 1a 6f 05 48 c7 2c 5a d9 8e 94 fe d1 9f e0 ee d6 78 04 ad 17 57 e2 f1 6a e1 64 65 64 77 7e 6e 11 d1 23 d6 15 97 58 c7 33 0e 3d 79 83 fd 3b fc f8 d1 15 Data Ascii: 3?T(6oFT'9ZUsoH,ZxWjdedw~n#X3=y;h`p9E ARc"bay]@q:!<2uKcIKbe?$Qb^5o,"B2QYF@idqz>qf>$\Gt
Oct 7, 2024 01:06:28.064412117 CEST	1236	IN	Data Raw: f8 12 83 74 cf f1 16 ba 98 d7 c6 2a 4a 91 77 6f 9c 5b ba 97 50 c5 50 1e dc 06 83 ae 5c 2a 86 08 80 dd 98 20 e8 24 00 46 bd 92 1f c5 bf 2d 31 0b 04 b5 d9 42 b9 7e aa 0f 34 c6 8c 1a 54 fe b7 b3 b7 57 8d 69 65 fa f7 fc c5 1e 05 24 07 6f 28 ef d8 ed Data Ascii: tJwo[PP\ $F-1B~4TWie$o(v7-~r[1$~L%Y<rCG'^7otzLu2W}/2aQt$J]Mb6xir0/vD\|WoO'F"m!x[+vfR
Oct 7, 2024 01:06:28.064436913 CEST	224	IN	Data Raw: 3f d2 db 43 5e 60 31 f4 f0 8a f3 ea 54 dd d7 63 f2 6d ad 9b dc 74 09 de 72 db 82 00 c5 5d ae c2 70 71 72 48 e1 a1 68 ba 9b a8 28 47 1c b1 4f 49 c2 54 f3 97 5b b0 52 a4 eb 80 00 92 a0 8a 85 f2 42 fa 98 43 dd d5 79 e4 b8 a4 64 19 05 a8 16 ca 62 d0 Data Ascii: ?C^`1Tcmtr]pqrHh(GOIT[RBCydbpgslTVtt7XK/cFyAs3"r.]b"7,"Iz@?smA/#p\0t->hOXpE!A
Oct 7, 2024 01:06:28.150626898 CEST	410	IN	Data Raw: 38 a9 b4 00 52 36 f1 25 d2 39 6c 22 67 20 45 59 e8 51 98 98 96 e4 2a 55 3a eb c2 0e 37 55 4e 59 16 29 f0 55 7a 59 9c 70 2a 34 10 38 3f 73 e2 24 ca 22 5a c0 96 39 0a 20 d7 64 ed f1 b2 07 7d 1f 11 b0 c4 ea 1f a0 e5 5d cb 2d 67 9f 79 e6 82 27 f2 a0 Data Ascii: 8R6%9l"g EYQU:7UNY)UzYp48?s$"Z9 d}]-gy'arMJJf+n3J4yPkKTt!)TN/72:9}-ySEOi<![1\|M)h9iYtVxIC52F^W9f>iQ(
Oct 7, 2024 01:06:28.482917070 CEST	1224	OUT	GET /search/tsc.php?ses=ogcIFkxMK596zNYawpg_O0Wt2YOEEX8bW8J1uHYSLKtkhss92zYBbx3RWv2fJCD_NRDXVsDv1NgoEvRunHRanHMHd9NxspjAmdhU2GssD5KSUd6E_IVx7VeBoj1DxIyzZvF-PnOzNHgkTyxCk7sULllDqM7drA2-18ObpivKwcSGeBGYd6ol_wtEqCVK0OolHdcHG6AMuikrpUx9FtE8CpCquhWSq79ktnUFw2Sov_ePWpCSHszdF-LxRwGXr910k7iSE-LbkFYPQ6DNt9SAlx9bNCTrnZgOkDQo7C4IQdvTk_cWS4fBmOVqfvhcxZ3PNpWPCthBaC7vb5XsBGjc-SOWGiy9S03z83y9I2BHap7rRodcEnXDr7KXrCS&cv=2 HTTP/1.1 Host: www.coritta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Best+Home+Warranty+for+Hvac&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEmwBlLqpj1YJdz7AzpZcgeGyRhp5zMxp8n1DEmNsr7hGBcgg34MnxBeRt-c9OxWGMfyh27HvGtg4vi3Woi_41qZIfViSTrEkCjKcSnu5_x2fLueh1V508qjLQKWCgp2wXmyKbwgvH5qd2vVtgD8&pcsa=false&nb=0&nm=3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA
Oct 7, 2024 01:06:28.676655054 CEST	181	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:06:28 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-lw9z8 server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	50911	91.195.240.19	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:06:32.954166889 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	50918	91.195.240.19	80	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 01:06:35.360364914 CEST	771	OUT	GET /search/tsc.php?ses=ogcIFkxMK596zNYawpg_O0Wt2YOEEX8bW8J1uHYSLKtkhss92zYBbx3RWv2fJCD_NRDXVsDv1NgoEvRunHRanHMHd9NxspjAmdhU2GssD5KSUd6E_IVx7VeBoj1DxIyzZvF-PnOzNHgkTyxCk7sULllDqM7drA2-18ObpivKwcSGeBGYd6ol_wtEqCVK0OolHdcHG6AMuikrpUx9FtE8CpCquhWSq79ktnUFw2Sov_ePWpCSHszdF-LxRwGXr910k7iSE-LbkFYPQ6DNt9SAlx9bNCTrnZgOkDQo7C4IQdvTk_cWS4fBmOVqfvhcxZ3PNpWPCthBaC7vb5XsBGjc-SOWGiy9S03z83y9I2BHap7rRodcEnXDr7KXrCS&cv=2 HTTP/1.1 Host: www.coritta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=87e1bf0796c9fd42:T=1728255929:RT=1728255929:S=ALNI_Mb2kbD26_7qiBOXHgT3KUhSbR1pHA
Oct 7, 2024 01:06:36.000197887 CEST	181	IN	HTTP/1.1 200 OK date: Sun, 06 Oct 2024 23:06:35 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-d8c6n server: Parking/1.0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.7	49702	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:23 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:23 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:23 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230523Z-1657d5bbd48cpbzgkvtewk0wu000000002mg00000000wdpn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:23 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-06 23:05:23 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-06 23:05:23 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-06 23:05:24 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-06 23:05:24 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-06 23:05:24 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-06 23:05:24 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-06 23:05:24 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-06 23:05:24 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-06 23:05:24 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.7	49705	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:24 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:24 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230524Z-1657d5bbd48p2j6x2quer0q02800000002rg00000000t072 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:25 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.7	49708	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:24 UTC	192	OUT	GET /rules/rule120100v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:25 UTC	471	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:24 GMT Content-Type: text/xml Content-Length: 1000 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB097AFC9" x-ms-request-id: a79f927d-a01e-0098-24c9-168556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230524Z-1657d5bbd4824mj9d6vp65b6n400000002w00000000096pv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:25 UTC	1000	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 35 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH T="5">

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49707	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:24 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:24 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230524Z-1657d5bbd482krtfgrg72dfbtn00000002bg00000000g7t9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:25 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49706	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:24 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:25 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230525Z-1657d5bbd48xlwdx82gahegw4000000002tg00000000mbx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:25 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49709	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:24 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:24 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c59bb0f9-701e-0097-2d01-17b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230524Z-1657d5bbd48vlsxxpe15ac3q7n00000002pg000000005r2n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:25 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49715	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:25 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230525Z-1657d5bbd48f7nlxc7n5fnfzh0000000027000000000p4be x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.7	49712	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:25 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:25 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230525Z-1657d5bbd48qjg85buwfdynm5w00000002qg00000000grw5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:25 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.7	49713	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:25 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:25 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b27588a3-a01e-003d-6001-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230525Z-1657d5bbd48xdq5dkwwugdpzr000000002wg00000000qn1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:25 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49714	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:25 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230525Z-1657d5bbd4824mj9d6vp65b6n400000002wg0000000083fk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49716	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:25 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:25 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230525Z-1657d5bbd48lknvp09v995n790000000028g00000000ha8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:25 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49726	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:26 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230526Z-1657d5bbd482tlqpvyz9e93p5400000002q000000000hprt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49727	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:26 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230526Z-1657d5bbd48t66tjar5xuq22r800000002q0000000004q13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:26 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49724	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:26 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:26 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230526Z-1657d5bbd48cpbzgkvtewk0wu000000002p000000000pwvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.7	49723	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:26 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:26 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230526Z-1657d5bbd48gqrfwecymhhbfm800000001d000000000na9u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:27 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49728	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:26 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230526Z-1657d5bbd48jwrqbupe3ktsx9w00000002r000000000xbsu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49725	142.250.181.228	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:27 UTC	448	OUT	GET /adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.coritta.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:27 UTC	843	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153126 Date: Sun, 06 Oct 2024 23:05:27 GMT Expires: Sun, 06 Oct 2024 23:05:27 GMT Cache-Control: private, max-age=3600 ETag: "738281486145427305" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-06 23:05:27 UTC	547	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 34 36 35 30 35 35 37 35 37 31 34 36 35 32 30 33 39 34 39 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 33 37 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,173
2024-10-06 23:05:27 UTC	1390	IN	Data Raw: 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 Data Ascii: eServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpb
2024-10-06 23:05:27 UTC	1390	IN	Data Raw: 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 Data Ascii: e:g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8Cla
2024-10-06 23:05:27 UTC	1390	IN	Data Raw: 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 Data Ascii: ypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&
2024-10-06 23:05:27 UTC	1390	IN	Data Raw: 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 64 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: reak a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Md(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Md(g)};b.prototype.bd=function(g){this.de(2,g)};b.prototype.
2024-10-06 23:05:27 UTC	1390	IN	Data Raw: 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 Data Ascii: (w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Wa);break;case 2:h(l.Wa);break;default:throw Error
2024-10-06 23:05:27 UTC	1390	IN	Data Raw: 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f Data Ascii: \|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=O
2024-10-06 23:05:27 UTC	1390	IN	Data Raw: 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 Data Ascii: {id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|ty
2024-10-06 23:05:27 UTC	1390	IN	Data Raw: 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: ion(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype
2024-10-06 23:05:27 UTC	1390	IN	Data Raw: 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e Data Ascii: e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49721	205.234.175.175	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:27 UTC	605	OUT	GET /templates/images/hero_nc.svg HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.coritta.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:27 UTC	483	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:27 GMT Content-Type: image/svg+xml Content-Length: 48097 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * X-CFF: B Last-Modified: Thu, 05 Oct 2023 09:16:15 GMT Vary: Accept-Encoding x-cf-rand: 4.749 X-CF3: M CF4Age: 0 x-cf-tsc: 1696583686 CF4ttl: 31536000.000 X-CF2: H Server: CFS 1124 X-CF-ReqID: 50a685057284712db0ace98a481507ae X-CF1: 11696:fO.iad2:nom:cacheN.iad2-01:H Accept-Ranges: bytes
2024-10-06 23:05:27 UTC	15901	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 21 2d 2d 20 43 72 65 61 74 6f 72 3a 20 43 6f 72 65 6c 44 52 41 57 20 32 30 31 38 20 28 36 34 2d 42 69 74 29 20 2d 2d 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 77 69 64 74 68 3d 22 31 34 34 30 70 78 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">... Creator: CorelDRAW 2018 (64-Bit) --><svg xmlns="http://www.w3.org/2000/svg" xml:space="preserve" width="1440px"
2024-10-06 23:05:27 UTC	16384	IN	Data Raw: 20 2d 31 37 2e 31 38 32 31 2c 2d 32 35 2e 38 33 38 35 20 2d 34 31 2e 38 34 33 32 2c 2d 34 35 2e 38 33 33 34 20 2d 37 34 2e 30 30 35 2c 2d 36 30 2e 30 30 36 34 20 2d 33 32 2e 33 33 36 33 2c 2d 31 34 2e 31 35 31 32 20 2d 36 38 2e 38 33 37 33 2c 2d 32 31 2e 31 35 30 35 20 2d 31 30 39 2e 35 30 33 2c 2d 32 31 2e 31 35 30 35 20 2d 36 37 2e 33 33 32 38 2c 30 20 2d 31 31 38 2e 38 33 35 2c 31 33 2e 39 39 38 36 20 2d 31 35 34 2e 31 35 39 2c 34 31 2e 38 32 31 33 20 2d 33 35 2e 33 32 33 36 2c 32 37 2e 39 39 37 32 20 2d 35 37 2e 38 32 36 2c 36 39 2e 33 33 38 38 20 2d 36 37 2e 36 35 39 39 2c 31 32 34 2e 31 35 36 7a 22 2f 3e 0a 20 20 20 3c 67 6c 79 70 68 20 75 6e 69 63 6f 64 65 3d 22 74 22 20 68 6f 72 69 7a 2d 61 64 76 2d 78 3d 22 32 37 37 22 20 64 3d 22 4d 32 35 36 2e Data Ascii: -17.1821,-25.8385 -41.8432,-45.8334 -74.005,-60.0064 -32.3363,-14.1512 -68.8373,-21.1505 -109.503,-21.1505 -67.3328,0 -118.835,13.9986 -154.159,41.8213 -35.3236,27.9972 -57.826,69.3388 -67.6599,124.156z"/> <glyph unicode="t" horiz-adv-x="277" d="M256.
2024-10-06 23:05:27 UTC	15812	IN	Data Raw: 39 20 30 7a 22 2f 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 36 32 39 22 20 63 6c 61 73 73 3d 22 66 69 6c 31 31 22 20 64 3d 22 4d 34 30 30 2e 31 34 37 20 31 34 31 2e 30 37 37 63 2d 30 2e 34 37 38 2c 2d 30 2e 33 34 31 20 2d 30 2e 39 35 39 2c 2d 30 2e 36 37 39 20 2d 31 2e 34 34 31 2c 2d 31 2e 30 31 32 20 2d 35 2e 32 31 32 2c 2d 33 2e 35 35 20 2d 31 30 2e 36 35 31 2c 2d 36 2e 37 39 38 20 2d 31 36 2e 33 39 32 2c 2d 39 2e 34 34 32 6c 30 20 2d 30 2e 30 37 35 20 34 2e 33 30 36 20 31 2e 39 36 33 63 31 2e 34 33 35 2c 30 2e 36 38 20 32 2e 37 39 35 2c 31 2e 34 33 36 20 34 2e 32 33 2c 32 2e 31 31 35 20 30 2e 36 38 2c 30 2e 33 37 38 20 31 2e 33 36 2c 30 2e 37 35 36 20 32 2e 30 33 39 2c 31 2e 31 33 33 6c 32 2e 30 34 20 31 2e 32 30 39 63 31 2e 33 36 2c 30 2e Data Ascii: 9 0z"/> <path id="path629" class="fil11" d="M400.147 141.077c-0.478,-0.341 -0.959,-0.679 -1.441,-1.012 -5.212,-3.55 -10.651,-6.798 -16.392,-9.442l0 -0.075 4.306 1.963c1.435,0.68 2.795,1.436 4.23,2.115 0.68,0.378 1.36,0.756 2.039,1.133l2.04 1.209c1.36,0.

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49730	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:27 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:27 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230527Z-1657d5bbd48gqrfwecymhhbfm800000001g0000000009sv4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:27 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49732	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:27 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:27 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230527Z-1657d5bbd48lknvp09v995n790000000025000000000x8ps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:27 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49729	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:27 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230527Z-1657d5bbd48dfrdj7px744zp8s000000029000000000vkkp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49731	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:27 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230527Z-1657d5bbd48dfrdj7px744zp8s000000029000000000vkkr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	49733	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:27 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:27 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230527Z-1657d5bbd48sdh4cyzadbb374800000002hg0000000065a8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:27 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49737	142.250.186.46	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:28 UTC	703	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.coritta.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:28 UTC	1037	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Content-Security-Policy: script-src 'nonce-ktS5_mwlD7AZTbdI88mfFQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none' Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 1560 Date: Sun, 06 Oct 2024 23:05:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-06 23:05:28 UTC	353	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6b 74 53 35 5f 6d 77 6c 44 37 41 5a 54 62 64 49 38 38 6d 66 46 51 22 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6e Data Ascii: <!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="ktS5_mwlD7AZTbdI88mfFQ">if (window.n
2024-10-06 23:05:28 UTC	1207	IN	Data Raw: 61 64 73 65 6e 73 65 2f 73 65 61 72 63 68 2f 61 64 73 2e 6a 73 22 3b 76 61 72 20 68 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 69 66 20 28 21 21 68 72 65 66 20 26 26 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 27 29 20 3e 20 30 29 29 20 7b 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 31 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 31 27 29 20 3e 20 30 29 20 7b 73 63 72 69 70 74 2e 73 72 63 20 2b 3d 20 27 3f 70 61 63 3d 31 27 3b 7d 20 65 6c 73 65 20 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 32 27 29 20 3e 20 30 20 7c 7c 20 Data Ascii: adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49736	142.250.186.46	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:28 UTC	1500	OUT	GET /afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.coritta.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301542%2C17301266%2C72717108&format=r3%7Cs&nocache=3421728255926863&num=0&output=afd_ads&domain_name=www.coritta.com&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1728255926885&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1146&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fwww.coritta.com%2F HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.coritta.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:29 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 06 Oct 2024 23:05:28 GMT Expires: Sun, 06 Oct 2024 23:05:28 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-KBeW4WovuFpWW-SSMeyiJQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-06 23:05:29 UTC	583	IN	Data Raw: 33 38 63 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 38c6<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 72 69 67 68 74 3a 31 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 31 30 32 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 30 70 78 3b 7d 2e 73 69 31 32 38 7b 68 65 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 Data Ascii: right:10px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si102{border-radius:15px;height:30px;width:0px;}.si128{height:1px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shr
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 20 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 22 20 64 61 74 61 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 31 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f Data Ascii: -align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;-ms-flex-wrap:wrap; -webkit-flex-wrap:wrap; flex-wrap:wrap;" data-ad-container="1"><div class="i_ div rssAttrContainer" style="-ms-flex-direction:row; -webkit-bo
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d Data Ascii: "-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:center; -webkit-box-pack:center; -webkit-justify-content:center; justify-content:center;-ms-flex-align:center; -webkit-box-align:center; -
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 63 6f 72 69 74 74 61 2e 63 6f 6d 2f 63 61 66 2f 3f 73 65 73 3d 59 33 4a 6c 50 54 45 33 4d 6a 67 79 4e 54 55 35 4d 6a 55 6d 64 47 4e 70 5a 44 31 33 64 33 63 75 59 32 39 79 61 58 52 30 59 53 35 6a 62 32 30 32 4e 7a 41 7a 4d 54 64 69 4e 57 46 6d 59 57 49 35 4d 69 34 78 4d 44 63 34 4d 44 4d 79 4e 43 5a 30 59 58 4e 72 50 58 4e 6c 59 58 4a 6a 61 43 5a 6b 62 32 31 68 61 57 34 39 59 32 39 79 61 58 52 30 59 53 35 6a 62 32 30 6d 59 56 39 70 5a 44 30 7a 4a 6e 4e 6c 63 33 4e 70 62 32 34 39 56 6e 42 35 63 69 31 32 4e 6b 68 51 57 47 6c 70 54 55 78 35 61 6d 52 66 63 Data Ascii: -webkit-flex-direction:row; flex-direction:row;"><a href="http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfc
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 66 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 61 64 5f 69 63 6f 6e 73 2f 73 74 61 6e 64 61 72 64 2f 70 75 62 6c 69 73 68 65 72 5f 69 63 6f 6e 5f 69 6d 61 67 65 2f 73 65 61 72 63 68 2e 73 76 67 3f 63 3d 25 32 33 31 39 36 37 64 32 22 20 61 6c 74 3d 22 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 63 6c 61 73 73 3d 22 69 6d 67 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 33 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 Data Ascii: mg src="https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2" alt="" loading="lazy" class="img"></div></div></div><div class="i_ div si33" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-fle
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 70 3b 70 63 73 61 3d 66 61 6c 73 65 22 20 64 61 74 61 2d 6e 62 3d 22 30 22 20 74 61 72 67 65 74 3d 22 5f 74 6f 70 22 20 63 6c 61 73 73 3d 22 69 5f 20 61 20 73 69 31 34 34 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 Data Ascii: p;pcsa=false" data-nb="0" target="_top" class="i_ a si144" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justif

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49738	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:28 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:28 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230528Z-1657d5bbd487nf59mzf5b3gk8n00000002a00000000091ux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:28 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	49740	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:28 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230528Z-1657d5bbd48sqtlf1huhzuwq7000000002cg00000000c5se x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49739	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:28 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230528Z-1657d5bbd48dfrdj7px744zp8s00000002d000000000br20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49742	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:28 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:28 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230528Z-1657d5bbd48tnj6wmberkg2xy800000002tg000000004yu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:29 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49741	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:28 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230528Z-1657d5bbd48jwrqbupe3ktsx9w00000002sg00000000shtq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	49746	142.250.186.132	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:29 UTC	489	OUT	GET /adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:29 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153116 Date: Sun, 06 Oct 2024 23:05:29 GMT Expires: Sun, 06 Oct 2024 23:05:29 GMT Cache-Control: private, max-age=3600 ETag: "10219094081532329741" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-06 23:05:29 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 34 36 35 30 35 35 37 35 37 31 34 36 35 32 30 33 39 34 39 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 33 31 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301431,173
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 Data Ascii: ProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQs
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 Data Ascii: (a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArra
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e Data Ascii: (a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 64 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 64 3d 66 75 6e 63 74 Data Ascii: ase "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Md(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Md(g)};b.prototype.bd=function(g){this.de(2,g)};b.prototype.Md=funct
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 Data Ascii: var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Wa);break;case 2:h(l.Wa);break;default:throw Error("Unexpe
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 Data Ascii: unction"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.se
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a Data Ascii: st:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Obj
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 Data Ascii: eturn h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries
2024-10-06 23:05:29 UTC	1390	IN	Data Raw: 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 71 28 Data Ascii: ;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}return b}});q(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:29 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-06 23:05:29 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=236413 Date: Sun, 06 Oct 2024 23:05:29 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49745	204.93.142.142	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:29 UTC	371	OUT	GET /templates/images/hero_nc.svg HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:29 GMT Content-Type: image/svg+xml Content-Length: 48097 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * X-CFF: B Last-Modified: Thu, 05 Oct 2023 09:16:15 GMT Vary: Accept-Encoding X-CF3: H CF4Age: 135871 x-cf-tsc: 1728255930 CF4ttl: 31400128.000 X-CF2: M Accept-Ranges: bytes Server: CFS 0215 X-CF1: 11696:dB.for1:nom:cacheN.for1-01:D X-CF-ReqID: 7fe1b7bf47cbca523675bcbcbb0c0cb8
2024-10-06 23:05:29 UTC	15914	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 21 2d 2d 20 43 72 65 61 74 6f 72 3a 20 43 6f 72 65 6c 44 52 41 57 20 32 30 31 38 20 28 36 34 2d 42 69 74 29 20 2d 2d 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 77 69 64 74 68 3d 22 31 34 34 30 70 78 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">... Creator: CorelDRAW 2018 (64-Bit) --><svg xmlns="http://www.w3.org/2000/svg" xml:space="preserve" width="1440px"
2024-10-06 23:05:29 UTC	16384	IN	Data Raw: 2e 38 33 38 35 20 2d 34 31 2e 38 34 33 32 2c 2d 34 35 2e 38 33 33 34 20 2d 37 34 2e 30 30 35 2c 2d 36 30 2e 30 30 36 34 20 2d 33 32 2e 33 33 36 33 2c 2d 31 34 2e 31 35 31 32 20 2d 36 38 2e 38 33 37 33 2c 2d 32 31 2e 31 35 30 35 20 2d 31 30 39 2e 35 30 33 2c 2d 32 31 2e 31 35 30 35 20 2d 36 37 2e 33 33 32 38 2c 30 20 2d 31 31 38 2e 38 33 35 2c 31 33 2e 39 39 38 36 20 2d 31 35 34 2e 31 35 39 2c 34 31 2e 38 32 31 33 20 2d 33 35 2e 33 32 33 36 2c 32 37 2e 39 39 37 32 20 2d 35 37 2e 38 32 36 2c 36 39 2e 33 33 38 38 20 2d 36 37 2e 36 35 39 39 2c 31 32 34 2e 31 35 36 7a 22 2f 3e 0a 20 20 20 3c 67 6c 79 70 68 20 75 6e 69 63 6f 64 65 3d 22 74 22 20 68 6f 72 69 7a 2d 61 64 76 2d 78 3d 22 32 37 37 22 20 64 3d 22 4d 32 35 36 2e 39 39 20 37 38 2e 34 39 36 38 6c 31 32 Data Ascii: .8385 -41.8432,-45.8334 -74.005,-60.0064 -32.3363,-14.1512 -68.8373,-21.1505 -109.503,-21.1505 -67.3328,0 -118.835,13.9986 -154.159,41.8213 -35.3236,27.9972 -57.826,69.3388 -67.6599,124.156z"/> <glyph unicode="t" horiz-adv-x="277" d="M256.99 78.4968l12
2024-10-06 23:05:29 UTC	110	IN	Data Raw: 74 68 20 69 64 3d 22 70 61 74 68 36 32 39 22 20 63 6c 61 73 73 3d 22 66 69 6c 31 31 22 20 64 3d 22 4d 34 30 30 2e 31 34 37 20 31 34 31 2e 30 37 37 63 2d 30 2e 34 37 38 2c 2d 30 2e 33 34 31 20 2d 30 2e 39 35 39 2c 2d 30 2e 36 37 39 20 2d 31 2e 34 34 31 2c 2d 31 2e 30 31 32 20 2d 35 2e 32 31 32 2c 2d 33 2e 35 35 20 2d 31 30 2e 36 Data Ascii: th id="path629" class="fil11" d="M400.147 141.077c-0.478,-0.341 -0.959,-0.679 -1.441,-1.012 -5.212,-3.55 -10.6
2024-10-06 23:05:29 UTC	11392	IN	Data Raw: 35 31 2c 2d 36 2e 37 39 38 20 2d 31 36 2e 33 39 32 2c 2d 39 2e 34 34 32 6c 30 20 2d 30 2e 30 37 35 20 34 2e 33 30 36 20 31 2e 39 36 33 63 31 2e 34 33 35 2c 30 2e 36 38 20 32 2e 37 39 35 2c 31 2e 34 33 36 20 34 2e 32 33 2c 32 2e 31 31 35 20 30 2e 36 38 2c 30 2e 33 37 38 20 31 2e 33 36 2c 30 2e 37 35 36 20 32 2e 30 33 39 2c 31 2e 31 33 33 6c 32 2e 30 34 20 31 2e 32 30 39 63 31 2e 33 36 2c 30 2e 37 35 35 20 32 2e 37 31 39 2c 31 2e 36 36 32 20 34 2e 30 30 33 2c 32 2e 35 36 38 20 30 2e 37 35 32 2c 30 2e 35 30 35 20 31 2e 34 39 37 2c 31 2e 30 31 39 20 32 2e 32 33 33 2c 31 2e 35 34 31 6c 2d 31 2e 30 31 38 20 30 7a 22 2f 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 36 33 33 22 20 63 6c 61 73 73 3d 22 66 69 6c 31 34 22 20 64 3d 22 4d 34 34 34 2e 34 30 36 Data Ascii: 51,-6.798 -16.392,-9.442l0 -0.075 4.306 1.963c1.435,0.68 2.795,1.436 4.23,2.115 0.68,0.378 1.36,0.756 2.039,1.133l2.04 1.209c1.36,0.755 2.719,1.662 4.003,2.568 0.752,0.505 1.497,1.019 2.233,1.541l-1.018 0z"/> <path id="path633" class="fil14" d="M444.406
2024-10-06 23:05:29 UTC	4297	IN	Data Raw: 2d 35 2e 33 36 37 2c 2d 32 2e 31 35 37 20 2d 31 2e 34 31 33 2c 2d 31 2e 34 34 31 20 2d 32 2e 31 36 39 2c 2d 33 2e 34 31 33 20 2d 32 2e 30 38 36 2c 2d 35 2e 34 34 31 20 30 2c 2d 34 2e 37 34 33 20 33 2e 31 35 38 2c 2d 37 2e 35 39 20 37 2e 30 32 38 2c 2d 37 2e 35 39 7a 6d 34 2e 30 30 36 20 36 2e 31 34 39 63 2d 30 2e 31 31 39 2c 2d 33 2e 30 34 34 20 2d 31 2e 39 33 35 2c 2d 34 2e 35 34 35 20 2d 34 2e 30 37 34 2c 2d 34 2e 35 34 35 20 2d 32 2e 35 35 38 2c 2d 30 2e 30 30 32 20 2d 34 2e 36 39 34 2c 31 2e 39 37 31 20 2d 34 2e 39 32 33 2c 34 2e 35 34 35 6c 38 2e 39 39 37 20 30 7a 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 39 22 20 63 6c 61 73 73 3d 22 66 69 6c 31 37 22 20 64 3d 22 4d 32 39 33 2e 39 30 31 20 37 30 2e 37 33 39 63 31 2e Data Ascii: -5.367,-2.157 -1.413,-1.441 -2.169,-3.413 -2.086,-5.441 0,-4.743 3.158,-7.59 7.028,-7.59zm4.006 6.149c-0.119,-3.044 -1.935,-4.545 -4.074,-4.545 -2.558,-0.002 -4.694,1.971 -4.923,4.545l8.997 0z"/> <path id="Path_9" class="fil17" d="M293.901 70.739c1.

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49748	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:29 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:29 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230529Z-1657d5bbd48sqtlf1huhzuwq7000000002f0000000002gwz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:29 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49749	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:29 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:29 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230529Z-1657d5bbd48tqvfc1ysmtbdrg000000002c000000000yzta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:29 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49750	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:29 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230529Z-1657d5bbd48brl8we3nu8cxwgn000000030g0000000064p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49753	142.250.186.46	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:29 UTC	555	OUT	GET /adsense/domains/caf.js?pac=2 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:30 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153142 Date: Sun, 06 Oct 2024 23:05:29 GMT Expires: Sun, 06 Oct 2024 23:05:29 GMT Cache-Control: private, max-age=3600 ETag: "2050075480741932640" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-06 23:05:30 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 34 36 35 30 35 35 37 35 37 31 34 36 35 32 30 33 39 34 39 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301
2024-10-06 23:05:30 UTC	1390	IN	Data Raw: 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 Data Ascii: Domain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29t
2024-10-06 23:05:30 UTC	1390	IN	Data Raw: 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 Data Ascii: ,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Ui
2024-10-06 23:05:30 UTC	1390	IN	Data Raw: 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 Data Ascii: _!==b)throw new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyD
2024-10-06 23:05:30 UTC	1390	IN	Data Raw: 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 64 65 28 32 Data Ascii: ":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Md(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Md(g)};b.prototype.bd=function(g){this.de(2
2024-10-06 23:05:30 UTC	1390	IN	Data Raw: 28 72 28 76 29 29 7d 63 61 74 63 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 64 65 Data Ascii: (r(v))}catch(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Wa);break;case 2:h(l.Wa);break;de
2024-10-06 23:05:30 UTC	1390	IN	Data Raw: 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 Data Ascii: object"&&k!==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)ret
2024-10-06 23:05:30 UTC	1390	IN	Data Raw: 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 Data Ascii: \|k===p.key)return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prot
2024-10-06 23:05:30 UTC	1390	IN	Data Raw: 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 Data Ascii: turn c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iter
2024-10-06 23:05:30 UTC	1390	IN	Data Raw: 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 Data Ascii: r(var e=b.length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49751	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:29 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230529Z-1657d5bbd48sqtlf1huhzuwq7000000002d0000000008w9v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49752	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:30 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230530Z-1657d5bbd48wd55zet5pcra0cg00000002ng000000009up9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49757	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:30 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:30 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 10df1352-f01e-00aa-105a-178521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230530Z-1657d5bbd48lknvp09v995n790000000028g00000000hake x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:30 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	49759	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:30 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230530Z-1657d5bbd482tlqpvyz9e93p5400000002m000000000vyzg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49756	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:30 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:30 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 7c825ef0-601e-0001-5f02-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230530Z-1657d5bbd48vlsxxpe15ac3q7n00000002fg00000000vr11 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:30 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49758	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:30 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230530Z-1657d5bbd48tnj6wmberkg2xy800000002qg00000000gav6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	49760	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:30 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-06 23:05:31 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=236347 Date: Sun, 06 Oct 2024 23:05:31 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-06 23:05:31 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49761	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:31 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:31 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230531Z-1657d5bbd482krtfgrg72dfbtn00000002ag00000000m87d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:31 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:31 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230531Z-1657d5bbd48f7nlxc7n5fnfzh0000000029g00000000c8yc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:31 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:31 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:31 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230531Z-1657d5bbd482lxwq1dp2t1zwkc00000002dg00000000a7h3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:31 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	49766	172.217.16.193	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:31 UTC	736	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:32 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 06 Oct 2024 22:23:01 GMT Expires: Mon, 07 Oct 2024 21:23:01 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 2550 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-06 23:05:32 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 31 39 36 37 64 32 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#1967d2' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:31 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:31 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230531Z-1657d5bbd482tlqpvyz9e93p5400000002q000000000hq5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:31 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:31 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:31 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230531Z-1657d5bbd482tlqpvyz9e93p5400000002r000000000ener x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:31 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	49767	172.217.16.193	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:31 UTC	737	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:32 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 06 Oct 2024 22:23:01 GMT Expires: Mon, 07 Oct 2024 21:23:01 GMT Cache-Control: public, max-age=82800 Age: 2551 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-06 23:05:32 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:32 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:32 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 11b227e2-601e-0002-7f6b-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230532Z-1657d5bbd48xlwdx82gahegw4000000002s000000000w16z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:32 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	49771	142.250.185.238	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:32 UTC	373	OUT	GET /adsense/domains/caf.js?pac=2 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:32 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153142 Date: Sun, 06 Oct 2024 23:05:32 GMT Expires: Sun, 06 Oct 2024 23:05:32 GMT Cache-Control: private, max-age=3600 ETag: "16072079364621576101" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-06 23:05:32 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 34 36 35 30 35 35 37 35 37 31 34 36 35 32 30 33 39 34 39 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301
2024-10-06 23:05:32 UTC	1390	IN	Data Raw: 65 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 Data Ascii: eDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29
2024-10-06 23:05:32 UTC	1390	IN	Data Raw: 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 Data Ascii: 0,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array U
2024-10-06 23:05:32 UTC	1390	IN	Data Raw: 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: __!==b)throw new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnProperty
2024-10-06 23:05:32 UTC	1390	IN	Data Raw: 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4d 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 64 65 28 Data Ascii: t":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Md(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Md(g)};b.prototype.bd=function(g){this.de(
2024-10-06 23:05:32 UTC	1390	IN	Data Raw: 6c 28 72 28 76 29 29 7d 63 61 74 63 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 57 61 29 3b 62 72 65 61 6b 3b 64 Data Ascii: l(r(v))}catch(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Wa);break;case 2:h(l.Wa);break;d
2024-10-06 23:05:32 UTC	1390	IN	Data Raw: 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 Data Ascii: "object"&&k!==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)re
2024-10-06 23:05:32 UTC	1390	IN	Data Raw: 7c 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f Data Ascii: \|\|k===p.key)return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.pro
2024-10-06 23:05:32 UTC	1390	IN	Data Raw: 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 Data Ascii: eturn c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.ite
2024-10-06 23:05:32 UTC	1390	IN	Data Raw: 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 Data Ascii: or(var e=b.length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:32 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:32 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2c548d6-d01e-0082-4f03-17e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230532Z-1657d5bbd48762wn1qw4s5sd3000000002dg00000000ty64 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:32 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:32 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:32 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 7709e3c3-b01e-0097-5e02-174f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230532Z-1657d5bbd48cpbzgkvtewk0wu000000002sg000000008h9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:32 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49776	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:32 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:32 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5a5a1e5c-a01e-001e-18f5-1649ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230532Z-1657d5bbd48q6t9vvmrkd293mg00000002pg000000006frq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:32 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:32 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:32 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230532Z-1657d5bbd48jwrqbupe3ktsx9w00000002rg00000000wq6t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:32 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	49734	142.250.185.78	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:32 UTC	878	OUT	GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=fbhts9fcqnlg&aqid=uBcDZ8WZNaeUiM0P5ZLx4QU&psid=3259787283&pbt=bs&adbx=385.203125&adby=413.015625&adbh=612&adbw=493&adbah=171%2C212%2C212&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=681010707&csala=32%7C0%7C1587%7C1092%7C417&lle=0&ifv=1&hpt=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.coritta.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:33 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-CZZmY5GJtfLQaxbRUSjdlA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 06 Oct 2024 23:05:32 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	49779	142.250.185.97	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:32 UTC	495	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:33 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 06 Oct 2024 22:23:01 GMT Expires: Mon, 07 Oct 2024 21:23:01 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 2551 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-06 23:05:33 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 31 39 36 37 64 32 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#1967d2' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:32 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:32 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230532Z-1657d5bbd48jwrqbupe3ktsx9w00000002xg000000004tnh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:32 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	49781	142.250.185.97	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:33 UTC	496	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:33 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 06 Oct 2024 22:23:01 GMT Expires: Mon, 07 Oct 2024 21:23:01 GMT Cache-Control: public, max-age=82800 Age: 2552 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-06 23:05:33 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	49782	142.250.185.78	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:33 UTC	836	OUT	GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=g9i2m58a1jd9&aqid=uBcDZ8WZNaeUiM0P5ZLx4QU&pbt=bs&adbx=481.5&adby=1025.015625&adbh=16&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo80_3ph&errv=681010707&csala=15%7C0%7C1604%7C1092%7C418&lle=0&ifv=0&hpt=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.coritta.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:33 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-DHVgxiZvh0TXTs0z_EixNw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 06 Oct 2024 23:05:33 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	49783	142.250.185.78	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:33 UTC	878	OUT	GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=ko55oyhuooxu&aqid=uBcDZ8WZNaeUiM0P5ZLx4QU&psid=3259787283&pbt=bv&adbx=385.203125&adby=413.015625&adbh=612&adbw=493&adbah=171%2C212%2C212&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=681010707&csala=32%7C0%7C1587%7C1092%7C417&lle=0&ifv=1&hpt=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.coritta.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:33 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-VSwvpjOthYuEeBdXzNS88g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 06 Oct 2024 23:05:33 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	49784	142.250.185.78	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:33 UTC	836	OUT	GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=zi4t9f74l073&aqid=uBcDZ8WZNaeUiM0P5ZLx4QU&pbt=bv&adbx=481.5&adby=1025.015625&adbh=16&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo80_3ph&errv=681010707&csala=15%7C0%7C1604%7C1092%7C418&lle=0&ifv=0&hpt=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.coritta.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:33 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-h-9M49E3VtdOd19kT3yItg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 06 Oct 2024 23:05:33 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:33 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:33 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230533Z-1657d5bbd4824mj9d6vp65b6n400000002ug00000000fuq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:33 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:33 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 04801829-801e-00ac-6301-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230533Z-1657d5bbd48qjg85buwfdynm5w00000002tg000000005tuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49788	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:33 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230533Z-1657d5bbd48tnj6wmberkg2xy800000002t0000000006f5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:33 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:33 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230533Z-1657d5bbd48xlwdx82gahegw4000000002tg00000000mcca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:33 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:33 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230533Z-1657d5bbd48xlwdx82gahegw4000000002rg00000000vd15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:34 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230534Z-1657d5bbd48cpbzgkvtewk0wu000000002m000000000xdem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:34 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:34 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230534Z-1657d5bbd48f7nlxc7n5fnfzh000000002b0000000005y5y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:34 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:34 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:34 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230534Z-1657d5bbd48vlsxxpe15ac3q7n00000002n000000000c06e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:34 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:34 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 938e68e0-901e-0029-0160-17274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230534Z-1657d5bbd48dfrdj7px744zp8s00000002c000000000ge00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:34 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230534Z-1657d5bbd48qjg85buwfdynm5w00000002p000000000rrb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:35 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:35 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230535Z-1657d5bbd482lxwq1dp2t1zwkc00000002eg000000006q1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:35 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230535Z-1657d5bbd48xsz2nuzq4vfrzg800000002kg000000004mku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:35 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:35 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230535Z-1657d5bbd487nf59mzf5b3gk8n000000029000000000cp4r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:35 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:35 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:35 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230535Z-1657d5bbd48xlwdx82gahegw4000000002t000000000ng2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:35 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:35 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:35 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230535Z-1657d5bbd48dfrdj7px744zp8s00000002f0000000004sqv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:35 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:36 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:36 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230536Z-1657d5bbd48dfrdj7px744zp8s00000002cg00000000fmzw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:36 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:36 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:36 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230536Z-1657d5bbd48gqrfwecymhhbfm800000001b000000000vme4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:36 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:36 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:36 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230536Z-1657d5bbd482lxwq1dp2t1zwkc00000002f000000000442w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:36 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:36 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:36 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230536Z-1657d5bbd48lknvp09v995n79000000002ag000000007194 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:36 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:37 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:37 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230537Z-1657d5bbd48sdh4cyzadbb374800000002kg000000002b44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:37 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:37 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:37 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 821e4157-c01e-0014-3301-17a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230537Z-1657d5bbd48p2j6x2quer0q02800000002ug00000000ew3k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:37 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:37 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:37 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 897bc565-f01e-0096-5e60-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230537Z-1657d5bbd482lxwq1dp2t1zwkc00000002fg000000002eza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:37 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:37 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230537Z-1657d5bbd48xsz2nuzq4vfrzg800000002k0000000006s1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.7	49815	104.16.140.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:38 UTC	656	OUT	GET /services/parking.php3 HTTP/1.1 Host: www.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:38 UTC	781	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 06 Oct 2024 23:05:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: campaignId=; Max-Age=86400; Path=/; Secure; HttpOnly Location: https://sedo.com/services/parking.php3 X-Sedo-Request-Id: ID-774c87d589-6mgfb-3d563cfddcf7cc95e8c1695fd5366a4e X-Frame-Options: sameorigin X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw; path=/; expires=Sun, 06-Oct-24 23:35:38 GMT; domain=.sedo.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=2592000 Server: cloudflare CF-RAY: 8ce94c1ceb61c47c-EWR
2024-10-06 23:05:38 UTC	172	IN	Data Raw: 61 36 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a6<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>openresty</center></body></html>
2024-10-06 23:05:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:38 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230538Z-1657d5bbd48xsz2nuzq4vfrzg800000002hg000000008449 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:38 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:38 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230538Z-1657d5bbd48dfrdj7px744zp8s00000002b000000000n3us x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:38 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:38 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:38 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230538Z-1657d5bbd48sqtlf1huhzuwq7000000002d0000000008wve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:38 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:38 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: f196d52c-b01e-0002-1604-171b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230538Z-1657d5bbd48xdq5dkwwugdpzr00000000300000000008btt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:38 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 2f576d96-401e-0047-3902-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230538Z-1657d5bbd482tlqpvyz9e93p5400000002mg00000000u9hq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:38 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:38 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb96d6a-f01e-003f-17e5-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230538Z-1657d5bbd48lknvp09v995n79000000002a0000000008gf2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:39 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:38 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:39 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0607cd43-401e-0078-1b00-174d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230539Z-1657d5bbd48tnj6wmberkg2xy800000002n000000000uk0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:39 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:39 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:39 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5ff6bd9-301e-005d-3af2-16e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230539Z-1657d5bbd48vhs7r2p1ky7cs5w00000002w000000000rz67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:39 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.7	49825	104.16.140.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:39 UTC	819	OUT	GET /services/parking.php3 HTTP/1.1 Host: sedo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:39 UTC	530	IN	HTTP/1.1 302 Moved Temporarily Date: Sun, 06 Oct 2024 23:05:39 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Set-Cookie: campaignId=; Max-Age=86400; Path=/; Secure; HttpOnly x-sedo-request-id: ID-774c87d589-xpxrx-8d426d58e72d5d46e46f14ad711d80dd x-content-type-options: nosniff strict-transport-security: max-age=2592000 x-frame-options: sameorigin location: http://sedo.com/redirect.php?id=22 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ce94c243e75236a-EWR
2024-10-06 23:05:39 UTC	224	IN	Data Raw: 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 73 65 64 6f 2e 63 6f 6d 2f 72 65 64 69 72 65 63 74 2e 70 68 70 3f 69 64 3d 32 32 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: da<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="http://sedo.com/redirect.php?id=22">here</a>.</p></body></html>
2024-10-06 23:05:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:39 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230539Z-1657d5bbd482tlqpvyz9e93p5400000002tg000000004ne8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:39 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:39 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:39 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0c165d1d-a01e-000d-7dfe-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230539Z-1657d5bbd48xdq5dkwwugdpzr0000000030g000000005stb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:39 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:39 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:39 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230539Z-1657d5bbd482lxwq1dp2t1zwkc00000002d000000000bq6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:39 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:39 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:39 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 33b4d0ae-a01e-0032-35ff-161949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230539Z-1657d5bbd48tnj6wmberkg2xy800000002sg000000008gfz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:39 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:39 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:39 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 960edd56-701e-005c-4100-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230539Z-1657d5bbd48sqtlf1huhzuwq7000000002e0000000005tac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:39 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:39 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:39 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: b738acd5-401e-0067-1502-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230539Z-1657d5bbd48xdq5dkwwugdpzr000000002vg00000000vvx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:40 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:40 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:40 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: fe430463-401e-0047-1f75-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230540Z-1657d5bbd487nf59mzf5b3gk8n000000029g00000000as4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:40 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:40 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:40 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230540Z-1657d5bbd48jwrqbupe3ktsx9w00000002ug00000000gcut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:40 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:40 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:40 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 0480ed94-801e-00ac-5102-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230540Z-1657d5bbd4824mj9d6vp65b6n400000002rg00000000vv7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:40 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:40 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:40 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230540Z-1657d5bbd48sqtlf1huhzuwq7000000002a000000000pczk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:40 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.7	49836	104.16.140.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:40 UTC	829	OUT	GET /redirect.php?id=22 HTTP/1.1 Host: sedo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw; campaignId=
2024-10-06 23:05:41 UTC	745	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 06 Oct 2024 23:05:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close pragma: no-cache set-cookie: session=e8de16dbea38ff0797b368d643674e0e; expires=Wed, 09 Oct 2024 23:05:40 GMT; Max-Age=259200; path=/; secure; HttpOnly x-sedo-request-id: ID-774c87d589-wpq6c-14fbca8339a9b6cf4709e843bbb0840c strict-transport-security: max-age=2592000 x-frame-options: sameorigin x-content-type-options: nosniff x-ua-compatible: IE=edge expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate location: /us/park-domains/?tracked=&partnerid=&language=us CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ce94c2d0c9142b8-EWR
2024-10-06 23:05:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:40 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:40 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: db28c537-d01e-0065-47fe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230540Z-1657d5bbd48wd55zet5pcra0cg00000002m000000000ft6b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:40 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:40 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:41 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:41 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cb759915-201e-003f-5f03-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230541Z-1657d5bbd482lxwq1dp2t1zwkc00000002cg00000000eb3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:41 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:41 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:41 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:41 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230541Z-1657d5bbd48vhs7r2p1ky7cs5w0000000310000000003v7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:41 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:41 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:41 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:41 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 84e7aa3f-c01e-008e-74ff-167381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230541Z-1657d5bbd48p2j6x2quer0q02800000002w0000000009a79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:41 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:41 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:41 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:41 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 03c3f781-101e-000b-56fe-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230541Z-1657d5bbd48xlwdx82gahegw4000000002v000000000e9eb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:41 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:41 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:41 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:41 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76165599-601e-000d-1a02-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230541Z-1657d5bbd4824mj9d6vp65b6n400000002r000000000wwe8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:41 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.7	49843	104.16.140.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:42 UTC	901	OUT	GET /us/park-domains/?tracked=&partnerid=&language=us HTTP/1.1 Host: sedo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw; campaignId=; session=e8de16dbea38ff0797b368d643674e0e
2024-10-06 23:05:42 UTC	454	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:42 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-sedo-request-id: ID-774c87d589-xpxrx-5c3fc6f9631b72432b3ebd391842f828 x-content-type-options: nosniff content-language: en age: 3170 x-frame-options: sameorigin strict-transport-security: max-age=2592000 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ce94c374e427ca5-EWR
2024-10-06 23:05:42 UTC	915	IN	Data Raw: 37 64 64 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 21 2d 2d 20 0a 09 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 6f 77 65 72 65 64 20 62 79 20 54 59 50 4f 33 20 2d 20 69 6e 73 70 69 72 69 6e 67 20 70 65 6f 70 6c 65 20 74 6f 20 73 68 61 72 65 21 0a 09 54 59 50 4f 33 20 69 73 20 61 20 66 72 65 65 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 43 6f 6e 74 65 6e 74 20 4d 61 6e 61 67 65 6d 65 6e 74 20 46 72 61 6d 65 77 6f 72 6b 20 69 6e 69 74 69 61 6c 6c 79 20 63 72 65 61 74 65 64 20 62 79 20 4b 61 73 70 65 72 20 53 6b 61 61 72 68 6f 6a 20 61 6e 64 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 Data Ascii: 7dd9<!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8">... This website is powered by TYPO3 - inspiring people to share!TYPO3 is a free open source Content Management Framework initially created by Kasper Skaarhoj and licensed under
2024-10-06 23:05:42 UTC	1369	IN	Data Raw: 73 2c 20 65 61 72 6e 20 6d 6f 6e 65 79 20 77 69 74 68 20 64 6f 6d 61 69 6e 73 2c 20 61 64 76 65 72 74 69 73 69 6e 67 20 6f 6e 20 64 6f 6d 61 69 6e 73 2c 20 74 75 72 6e 69 6e 67 20 74 72 61 66 66 69 63 20 69 6e 74 6f 20 6d 6f 6e 65 79 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 22 20 2f 3e 0a 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 65 64 6f 2e 63 6f 6d 2f 64 69 73 74 2f 63 73 73 2f 74 79 70 6f 33 2f 6d 61 69 6e 2e 63 73 73 3f 31 37 32 34 39 32 32 31 39 35 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0a 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 Data Ascii: s, earn money with domains, advertising on domains, turning traffic into money" /><meta name="twitter:card" content="summary" /><link rel="stylesheet" href="https://cdn.sedo.com/dist/css/typo3/main.css?1724922195" media="all"><script src="https://c
2024-10-06 23:05:42 UTC	1369	IN	Data Raw: 39 37 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 63 6f 6e 66 69 67 22 20 63 6f 6e 74 65 6e 74 3d 22 2f 63 37 72 2f 61 73 73 65 74 73 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 62 72 6f 77 73 65 72 63 6f 6e 66 69 67 2e 78 6d 6c 3f 76 3d 64 4c 4a 33 62 78 32 78 6a 6a 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 36 30 61 39 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 2f 75 73 2f 70 61 72 6b 2d 64 6f 6d 61 69 6e 73 2f 22 2f 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 68 Data Ascii: 97"> <meta name="msapplication-config" content="/c7r/assets/static/images/icons/browserconfig.xml?v=dLJ3bx2xjj"> <meta name="theme-color" content="#0060a9"><link rel="canonical" href="/us/park-domains/"/><link rel="alternate" hreflang="en-US" h
2024-10-06 23:05:42 UTC	1369	IN	Data Raw: 2d 35 20 31 32 2d 38 20 31 39 2d 38 20 38 20 30 20 31 34 20 33 20 32 30 20 38 6c 33 38 20 33 39 63 36 20 36 20 38 20 31 32 20 38 20 32 30 7a 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 2d 66 6f 6e 74 2d 69 63 6f 6e 2d 65 64 69 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 32 39 39 20 31 35 36 63 31 39 20 31 39 20 33 38 20 33 38 20 35 36 20 35 38 2d 34 39 20 34 38 2d 39 38 20 39 36 2d 31 34 38 20 31 34 35 2d 31 39 2d 31 39 2d 33 37 2d 33 38 2d 35 36 2d 35 37 20 35 30 2d 34 39 20 39 39 2d 39 37 20 31 34 38 2d 31 34 36 7a 20 6d 37 30 20 34 34 63 2d 31 39 2d 31 39 2d 33 37 2d 33 38 2d 35 36 2d Data Ascii: -5 12-8 19-8 8 0 14 3 20 8l38 39c6 6 8 12 8 20z"></path> </symbol> <symbol id="s-font-icon-edit" viewBox="0 0 512 512"> <path d="m299 156c19 19 38 38 56 58-49 48-98 96-148 145-19-19-37-38-56-57 50-49 99-97 148-146z m70 44c-19-19-37-38-56-
2024-10-06 23:05:42 UTC	1369	IN	Data Raw: 32 31 20 32 31 2d 36 20 30 2d 31 30 20 34 2d 31 30 20 39 20 30 20 30 20 30 20 30 20 30 20 31 20 30 20 30 20 30 20 30 20 30 20 31 6c 30 20 32 30 63 30 20 35 20 34 20 39 20 31 30 20 39 20 35 20 30 20 31 30 2d 34 20 31 30 2d 39 6c 30 2d 31 33 63 31 37 2d 34 20 33 30 2d 31 39 20 33 30 2d 33 38 20 30 2d 32 34 2d 31 38 2d 34 32 2d 34 30 2d 34 32 7a 20 6d 32 20 31 37 32 63 2d 35 39 20 30 2d 31 30 36 2d 34 38 2d 31 30 36 2d 31 30 36 20 30 2d 35 39 20 34 38 2d 31 30 36 20 31 30 36 2d 31 30 36 20 35 38 20 30 20 31 30 36 20 34 38 20 31 30 36 20 31 30 36 20 30 20 35 39 2d 34 37 20 31 30 36 2d 31 30 36 20 31 30 36 7a 20 6d 30 2d 32 34 30 63 2d 37 34 20 30 2d 31 33 34 20 36 30 2d 31 33 34 20 31 33 34 20 30 20 37 34 20 36 30 20 31 33 34 20 31 33 34 20 31 33 34 20 37 34 Data Ascii: 21 21-6 0-10 4-10 9 0 0 0 0 0 1 0 0 0 0 0 1l0 20c0 5 4 9 10 9 5 0 10-4 10-9l0-13c17-4 30-19 30-38 0-24-18-42-40-42z m2 172c-59 0-106-48-106-106 0-59 48-106 106-106 58 0 106 48 106 106 0 59-47 106-106 106z m0-240c-74 0-134 60-134 134 0 74 60 134 134 134 74
2024-10-06 23:05:42 UTC	1369	IN	Data Raw: 32 36 2d 31 2d 31 2d 31 2d 31 2d 33 2d 31 2d 33 30 2d 31 33 2d 35 35 2d 33 35 2d 37 31 2d 36 33 7a 20 6d 2d 31 31 2d 31 32 33 6c 34 35 20 30 63 2d 33 20 31 37 2d 35 20 33 33 2d 35 20 34 39 20 30 20 31 36 20 32 20 33 33 20 35 20 35 30 6c 2d 34 35 20 30 63 2d 31 31 2d 33 33 2d 31 31 2d 36 37 20 30 2d 39 39 7a 20 6d 38 31 2d 38 36 63 2d 35 20 35 2d 39 20 31 32 2d 31 33 20 31 39 2d 37 20 31 33 2d 31 33 20 32 38 2d 31 37 20 34 33 6c 2d 34 30 20 30 63 31 36 2d 32 38 20 34 30 2d 35 30 20 37 30 2d 36 32 7a 20 6d 31 38 36 20 36 32 6c 2d 33 31 20 30 63 2d 35 2d 31 35 2d 31 31 2d 33 30 2d 31 38 2d 34 33 2d 32 2d 35 2d 35 2d 39 2d 38 2d 31 34 20 32 33 20 31 33 20 34 33 20 33 33 20 35 37 20 35 37 7a 20 6d 2d 36 31 20 32 30 35 63 34 2d 36 20 38 2d 31 33 20 31 32 2d 32 Data Ascii: 26-1-1-1-1-3-1-30-13-55-35-71-63z m-11-123l45 0c-3 17-5 33-5 49 0 16 2 33 5 50l-45 0c-11-33-11-67 0-99z m81-86c-5 5-9 12-13 19-7 13-13 28-17 43l-40 0c16-28 40-50 70-62z m186 62l-31 0c-5-15-11-30-18-43-2-5-5-9-8-14 23 13 43 33 57 57z m-61 205c4-6 8-13 12-2
2024-10-06 23:05:42 UTC	1369	IN	Data Raw: 2d 39 7a 20 6d 30 2d 31 32 32 63 2d 31 36 20 30 2d 33 30 20 39 2d 33 38 20 32 32 2d 33 20 35 2d 31 20 31 30 20 34 20 31 34 20 35 20 32 20 31 31 20 31 20 31 34 2d 34 20 34 2d 37 20 31 31 2d 31 32 20 32 30 2d 31 32 20 31 33 20 30 20 32 33 20 31 30 20 32 33 20 32 34 20 30 20 31 33 2d 31 30 20 32 33 2d 32 33 20 32 33 2d 36 20 30 2d 31 31 20 35 2d 31 31 20 31 30 20 30 20 30 20 30 20 30 20 30 20 31 20 30 20 30 20 30 20 30 20 30 20 31 6c 30 20 32 31 63 30 20 36 20 35 20 31 30 20 31 31 20 31 30 20 35 20 30 20 31 30 2d 34 20 31 30 2d 31 30 6c 30 2d 31 33 63 31 39 2d 35 20 33 33 2d 32 32 20 33 33 2d 34 33 20 31 2d 32 35 2d 31 39 2d 34 34 2d 34 33 2d 34 34 7a 20 6d 32 20 31 39 31 63 2d 36 35 20 30 2d 31 31 38 2d 35 33 2d 31 31 38 2d 31 31 38 20 30 2d 36 35 20 35 33 Data Ascii: -9z m0-122c-16 0-30 9-38 22-3 5-1 10 4 14 5 2 11 1 14-4 4-7 11-12 20-12 13 0 23 10 23 24 0 13-10 23-23 23-6 0-11 5-11 10 0 0 0 0 0 1 0 0 0 0 0 1l0 21c0 6 5 10 11 10 5 0 10-4 10-10l0-13c19-5 33-22 33-43 1-25-19-44-43-44z m2 191c-65 0-118-53-118-118 0-65 53
2024-10-06 23:05:42 UTC	1369	IN	Data Raw: 39 7a 20 6d 32 39 20 39 32 63 30 20 35 2d 32 20 39 2d 35 20 31 32 2d 34 20 34 2d 38 20 35 2d 31 33 20 35 2d 35 20 30 2d 31 30 2d 31 2d 31 33 2d 35 2d 34 2d 33 2d 36 2d 37 2d 36 2d 31 32 20 30 2d 35 20 32 2d 39 20 36 2d 31 32 20 33 2d 33 20 38 2d 35 20 31 33 2d 35 20 35 20 30 20 39 20 32 20 31 33 20 35 20 33 20 33 20 35 20 37 20 35 20 31 32 7a 20 6d 2d 32 20 31 31 35 6c 2d 32 20 39 63 2d 36 20 32 2d 31 31 20 34 2d 31 35 20 35 2d 34 20 32 2d 38 20 32 2d 31 33 20 32 2d 38 20 30 2d 31 33 2d 32 2d 31 38 2d 35 2d 34 2d 34 2d 36 2d 38 2d 36 2d 31 34 20 30 2d 32 20 30 2d 35 20 30 2d 37 20 31 2d 32 20 31 2d 35 20 32 2d 38 6c 38 2d 32 38 63 31 2d 32 20 31 2d 35 20 32 2d 37 20 30 2d 32 20 30 2d 34 20 30 2d 37 20 30 2d 33 20 30 2d 36 2d 32 2d 37 2d 31 2d 31 2d 34 2d Data Ascii: 9z m29 92c0 5-2 9-5 12-4 4-8 5-13 5-5 0-10-1-13-5-4-3-6-7-6-12 0-5 2-9 6-12 3-3 8-5 13-5 5 0 9 2 13 5 3 3 5 7 5 12z m-2 115l-2 9c-6 2-11 4-15 5-4 2-8 2-13 2-8 0-13-2-18-5-4-4-6-8-6-14 0-2 0-5 0-7 1-2 1-5 2-8l8-28c1-2 1-5 2-7 0-2 0-4 0-7 0-3 0-6-2-7-1-1-4-
2024-10-06 23:05:42 UTC	1369	IN	Data Raw: 30 20 37 2d 32 20 31 30 2d 35 6c 32 31 2d 32 39 63 34 2d 36 20 31 32 2d 39 20 31 39 2d 39 20 33 20 30 20 35 20 30 20 37 20 31 6c 33 34 20 31 31 63 32 20 30 20 33 20 31 20 35 20 31 20 36 20 30 20 31 31 2d 35 20 31 31 2d 31 33 6c 30 2d 33 36 63 30 2d 39 20 37 2d 31 39 20 31 36 2d 32 32 6c 33 34 2d 31 31 63 39 2d 33 20 31 32 2d 31 31 20 37 2d 31 38 6c 2d 32 32 2d 32 39 63 2d 35 2d 38 2d 35 2d 32 30 20 30 2d 32 37 6c 32 31 2d 33 30 63 36 2d 37 20 33 2d 31 35 2d 36 2d 31 38 6c 2d 33 35 2d 31 31 63 2d 38 2d 33 2d 31 35 2d 31 33 2d 31 35 2d 32 32 6c 30 2d 33 37 63 30 2d 37 2d 35 2d 31 32 2d 31 31 2d 31 32 2d 32 20 30 2d 33 20 30 2d 35 20 31 6c 2d 33 35 20 31 31 63 2d 32 20 31 2d 34 20 31 2d 36 20 31 2d 37 20 30 2d 31 35 2d 34 2d 31 39 2d 39 6c 2d 32 31 2d 32 39 Data Ascii: 0 7-2 10-5l21-29c4-6 12-9 19-9 3 0 5 0 7 1l34 11c2 0 3 1 5 1 6 0 11-5 11-13l0-36c0-9 7-19 16-22l34-11c9-3 12-11 7-18l-22-29c-5-8-5-20 0-27l21-30c6-7 3-15-6-18l-35-11c-8-3-15-13-15-22l0-37c0-7-5-12-11-12-2 0-3 0-5 1l-35 11c-2 1-4 1-6 1-7 0-15-4-19-9l-21-29
2024-10-06 23:05:42 UTC	1369	IN	Data Raw: 74 2d 69 63 6f 6e 2d 74 72 61 6e 73 66 65 72 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 32 33 37 20 33 33 32 63 30 20 31 30 20 30 20 31 39 20 30 20 32 39 2d 32 35 2d 31 38 2d 34 39 2d 33 36 2d 37 34 2d 35 34 20 32 35 2d 31 38 20 34 39 2d 33 36 20 37 34 2d 35 34 20 30 20 31 30 20 30 20 32 30 20 30 20 33 30 20 31 20 30 20 33 20 30 20 34 20 30 20 32 35 20 30 20 35 31 20 30 20 37 37 20 30 20 31 33 20 30 20 32 34 20 31 31 20 32 34 20 32 34 20 30 20 31 34 2d 31 31 20 32 35 2d 32 35 20 32 35 2d 32 35 20 30 2d 35 31 20 30 2d 37 37 20 30 2d 31 20 30 2d 32 20 30 2d 33 20 30 7a 20 6d 33 31 2d 31 35 30 63 30 2d 31 30 20 30 2d 32 30 20 30 2d 33 30 20 32 35 20 31 38 20 35 30 20 33 36 Data Ascii: t-icon-transfer" viewBox="0 0 512 512"> <path d="m237 332c0 10 0 19 0 29-25-18-49-36-74-54 25-18 49-36 74-54 0 10 0 20 0 30 1 0 3 0 4 0 25 0 51 0 77 0 13 0 24 11 24 24 0 14-11 25-25 25-25 0-51 0-77 0-1 0-2 0-3 0z m31-150c0-10 0-20 0-30 25 18 50 36

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:42 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:43 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:42 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 173e0f62-801e-00a3-24fe-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230542Z-1657d5bbd48q6t9vvmrkd293mg00000002k000000000p0ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:43 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:42 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:42 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:42 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 6f1c5b1d-901e-0048-485a-17b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230542Z-1657d5bbd482krtfgrg72dfbtn00000002g0000000000hs8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:42 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.7	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:42 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:42 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:42 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230542Z-1657d5bbd48cpbzgkvtewk0wu000000002qg00000000kawe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:42 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:42 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:42 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:42 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6bee43b5-001e-00a2-2106-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230542Z-1657d5bbd4824mj9d6vp65b6n400000002w00000000097m7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:42 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:42 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:43 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:42 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: a9a45936-c01e-00a1-54f1-167e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230542Z-1657d5bbd48sqtlf1huhzuwq7000000002dg000000007u07 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:43 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.7	49850	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:43 UTC	718	OUT	GET /dist/css/typo3/main.css?1724922195 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:43 UTC	496	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:43 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 29 Aug 2024 09:03:15 GMT X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-dadca3948eb0181c9e1b737de0c0c0f7 ETag: W/"66d03953-24099" X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Server: cloudflare CF-RAY: 8ce94c3e98eb236a-EWR
2024-10-06 23:05:43 UTC	873	IN	Data Raw: 37 64 61 65 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 44 72 6f 69 64 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 44 72 6f 69 64 20 53 61 6e 73 22 29 2c 6c 6f 63 61 6c 28 22 44 72 6f 69 64 53 61 6e 73 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 73 2d 42 69 79 77 65 55 50 56 30 76 2d 79 52 62 2d 63 6a 63 69 41 7a 79 44 4d 58 68 64 44 38 73 41 6a 36 4f 41 4a 54 46 73 42 49 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 30 3f 3f 2c 75 2b 30 31 33 31 2c 75 2b 30 31 35 32 2d 30 31 35 33 2c 75 2b 30 32 63 36 2c 75 2b 30 32 64 61 2c 75 Data Ascii: 7dae@font-face{font-family:Droid Sans;font-style:normal;font-weight:400;src:local("Droid Sans"),local("DroidSans"),url(/dist/files/s-BiyweUPV0v-yRb-cjciAzyDMXhdD8sAj6OAJTFsBI.woff2) format("woff2");unicode-range:u+00??,u+0131,u+0152-0153,u+02c6,u+02da,u
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 34 30 30 2d 30 34 35 66 2c 75 2b 30 34 39 30 2d 30 34 39 31 2c 75 2b 30 34 62 30 2d 30 34 62 31 2c 75 2b 32 31 31 36 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 61 72 63 6b 20 53 63 72 69 70 74 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 4d 61 72 63 6b 20 53 63 72 69 70 74 22 29 2c 6c 6f 63 61 6c 28 22 4d 61 72 63 6b 53 63 72 69 70 74 2d 52 65 67 75 6c 61 72 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 4f 5f 44 31 4e 41 5a 56 4f 46 4f 6f 62 4c 62 56 74 57 33 62 63 6f 6a 6f 59 77 33 59 54 79 6b 74 43 43 65 72 5f 69 6c 4f 6c 68 45 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 Data Ascii: 400-045f,u+0490-0491,u+04b0-04b1,u+2116}@font-face{font-family:Marck Script;font-style:normal;font-weight:400;src:local("Marck Script"),local("MarckScript-Regular"),url(/dist/files/O_D1NAZVOFOobLbVtW3bcojoYw3YTyktCCer_ilOlhE.woff2) format("woff2");unicode
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 67 65 3a 75 2b 31 66 3f 3f 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 29 2c 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 2d 4c 69 67 68 74 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 49 33 53 31 77 73 67 53 67 39 59 43 75 72 56 36 50 55 6b 54 4f 59 58 30 68 56 67 7a 5a 51 55 66 52 44 75 5a 72 50 76 48 33 44 38 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 33 37 30 2d 30 33 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 Data Ascii: ge:u+1f??}@font-face{font-family:Roboto;font-style:normal;font-weight:300;src:local("Roboto Light"),local("Roboto-Light"),url(/dist/files/I3S1wsgSg9YCurV6PUkTOYX0hVgzZQUfRDuZrPvH3D8.woff2) format("woff2");unicode-range:u+0370-03ff}@font-face{font-family:R
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 22 29 2c 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 2d 52 65 67 75 6c 61 72 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 75 59 45 43 4d 4b 6f 48 63 4f 39 78 31 77 64 6d 62 79 48 49 6d 33 2d 5f 6b 66 36 42 79 59 4f 36 43 4c 59 64 42 34 48 51 45 2d 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 34 30 30 2d 30 34 35 66 2c 75 2b 30 34 39 30 2d 30 34 39 31 2c 75 2b 30 34 62 30 2d 30 34 62 31 2c 75 2b 32 31 31 36 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b Data Ascii: ht:400;src:local("Roboto"),local("Roboto-Regular"),url(/dist/files/uYECMKoHcO9x1wdmbyHIm3-_kf6ByYO6CLYdB4HQE-Y.woff2) format("woff2");unicode-range:u+0400-045f,u+0490-0491,u+04b0-04b1,u+2116}@font-face{font-family:Roboto;font-style:normal;font-weight:400;
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 32 64 61 2c 75 2b 30 32 64 63 2c 75 2b 32 30 30 30 2d 32 30 36 66 2c 75 2b 32 30 37 34 2c 75 2b 32 30 61 63 2c 75 2b 32 32 31 32 2c 75 2b 32 32 31 35 2c 75 2b 65 30 66 66 2c 75 2b 65 66 66 64 2c 75 2b 66 30 30 30 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 20 49 74 61 6c 69 63 22 29 2c 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 2d 4c 69 67 68 74 49 74 61 6c 69 63 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 37 6d 38 6c 37 54 6c 46 4f 2d 53 33 56 6b 68 48 75 52 30 61 74 5f 5a 72 61 52 32 54 67 38 77 32 6c 7a 6d 37 6b 4c 4e 4c 30 2d Data Ascii: 2da,u+02dc,u+2000-206f,u+2074,u+20ac,u+2212,u+2215,u+e0ff,u+effd,u+f000}@font-face{font-family:Roboto;font-style:italic;font-weight:300;src:local("Roboto Light Italic"),local("Roboto-LightItalic"),url(/dist/files/7m8l7TlFO-S3VkhHuR0at_ZraR2Tg8w2lzm7kLNL0-
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 20 49 74 61 6c 69 63 22 29 2c 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 2d 4c 69 67 68 74 49 74 61 6c 69 63 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 37 6d 38 6c 37 54 6c 46 4f 2d 53 33 56 6b 68 48 75 52 30 61 74 36 45 38 6b 4d 34 78 57 52 31 5f 31 62 59 55 52 52 6f 6a 52 47 63 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 31 30 30 2d 30 32 34 66 2c 75 2b 31 65 3f 3f 2c 75 2b 32 30 61 30 2d 32 30 61 62 2c 75 2b 32 30 61 64 2d 32 30 63 66 2c 75 2b 32 63 36 30 2d 32 63 37 66 2c 75 2b 61 37 32 30 2d 61 37 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 Data Ascii: t-weight:300;src:local("Roboto Light Italic"),local("Roboto-LightItalic"),url(/dist/files/7m8l7TlFO-S3VkhHuR0at6E8kM4xWR1_1bYURRojRGc.woff2) format("woff2");unicode-range:u+0100-024f,u+1e??,u+20a0-20ab,u+20ad-20cf,u+2c60-2c7f,u+a720-a7ff}@font-face{font-f
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 52 6f 62 6f 74 6f 20 49 74 61 6c 69 63 22 29 2c 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 2d 49 74 61 6c 69 63 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 63 44 4b 68 52 61 58 6e 51 54 4f 56 62 61 6f 78 77 64 4f 72 39 78 6b 41 7a 34 72 59 6e 34 37 5a 79 32 72 76 69 67 57 51 66 36 77 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 33 37 30 2d 30 33 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 20 49 74 61 6c 69 63 22 29 2c 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 2d 49 74 Data Ascii: Roboto Italic"),local("Roboto-Italic"),url(/dist/files/cDKhRaXnQTOVbaoxwdOr9xkAz4rYn47Zy2rvigWQf6w.woff2) format("woff2");unicode-range:u+0370-03ff}@font-face{font-family:Roboto;font-style:italic;font-weight:400;src:local("Roboto Italic"),local("Roboto-It
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 75 72 63 65 20 53 61 6e 73 20 50 72 6f 20 45 78 74 72 61 4c 69 67 68 74 22 29 2c 6c 6f 63 61 6c 28 22 53 6f 75 72 63 65 53 61 6e 73 50 72 6f 2d 45 78 74 72 61 4c 69 67 68 74 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 74 6f 61 64 4f 63 66 6d 6c 74 39 62 33 38 64 48 4a 78 4f 42 47 44 76 6c 47 52 5a 33 75 43 46 62 76 55 4a 53 4a 46 79 61 56 43 58 33 72 47 56 74 73 54 6b 50 73 62 44 61 6a 75 4f 35 75 65 51 77 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 31 30 30 2d 30 32 34 66 2c 75 2b 31 65 3f 3f 2c 75 2b 32 30 61 30 2d 32 30 61 62 2c 75 2b 32 30 61 64 2d 32 30 63 66 2c 75 2b 32 63 36 30 2d 32 63 37 66 2c 75 2b 61 37 32 30 2d 61 37 66 66 7d 40 66 6f 6e 74 2d 66 61 63 Data Ascii: urce Sans Pro ExtraLight"),local("SourceSansPro-ExtraLight"),url(/dist/files/toadOcfmlt9b38dHJxOBGDvlGRZ3uCFbvUJSJFyaVCX3rGVtsTkPsbDajuO5ueQw.woff2) format("woff2");unicode-range:u+0100-024f,u+1e??,u+20a0-20ab,u+20ad-20cf,u+2c60-2c7f,u+a720-a7ff}@font-fac
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 39 62 33 38 64 48 4a 78 4f 42 47 43 50 32 4c 45 6b 36 6c 4d 7a 59 73 52 71 72 33 64 48 46 49 6d 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 30 3f 3f 2c 75 2b 30 31 33 31 2c 75 2b 30 31 35 32 2d 30 31 35 33 2c 75 2b 30 32 63 36 2c 75 2b 30 32 64 61 2c 75 2b 30 32 64 63 2c 75 2b 32 30 30 30 2d 32 30 36 66 2c 75 2b 32 30 37 34 2c 75 2b 32 30 61 63 2c 75 2b 32 32 31 32 2c 75 2b 32 32 31 35 2c 75 2b 65 30 66 66 2c 75 2b 65 66 66 64 2c 75 2b 66 30 30 30 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 Data Ascii: 9b38dHJxOBGCP2LEk6lMzYsRqr3dHFImA.woff2) format("woff2");unicode-range:u+00??,u+0131,u+0152-0153,u+02c6,u+02da,u+02dc,u+2000-206f,u+2074,u+20ac,u+2212,u+2215,u+e0ff,u+effd,u+f000}@font-face{font-family:Source Sans Pro;font-style:normal;font-weight:400;src
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 20 53 65 6d 69 62 6f 6c 64 22 29 2c 6c 6f 63 61 6c 28 22 53 6f 75 72 63 65 53 61 6e 73 50 72 6f 2d 53 65 6d 69 62 6f 6c 64 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 74 6f 61 64 4f 63 66 6d 6c 74 39 62 33 38 64 48 4a 78 4f 42 47 4b 79 47 4a 68 41 68 2d 52 45 30 42 78 47 63 64 5f 69 7a 79 65 76 33 72 47 56 74 73 54 6b 50 73 62 44 61 6a 75 4f 35 75 65 51 77 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 Data Ascii: ont-face{font-family:Source Sans Pro;font-style:normal;font-weight:600;src:local("Source Sans Pro Semibold"),local("SourceSansPro-Semibold"),url(/dist/files/toadOcfmlt9b38dHJxOBGKyGJhAh-RE0BxGcd_izyev3rGVtsTkPsbDajuO5ueQw.woff2) format("woff2");unicode-ra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.7	49849	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:43 UTC	743	OUT	GET /fileadmin_git/resources/public/JavaScripts/jquery-3.7.1.min.js?1724921946 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:43 UTC	520	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:43 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 29 Aug 2024 08:59:06 GMT X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-f790b2e3dfd363f7e95a62dc424349da ETag: W/"66d0385a-155ec" X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 637 Server: cloudflare CF-RAY: 8ce94c3e994b7c69-EWR
2024-10-06 23:05:43 UTC	849	IN	Data Raw: 37 64 39 37 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7d97/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 7c 43 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 75 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6e 5b 69 2e 63 61 6c 6c 28 65 29 5d 7c 7c Data Ascii: \|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[i.call(e)]\|\|
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 73 2c 73 6f 72 74 3a 6f 65 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 6f 65 2e 73 70 6c 69 63 65 7d 2c 63 65 2e 65 78 74 65 6e 64 3d 63 65 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 76 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 Data Ascii: bject\|\|this.constructor()},push:s,sort:oe.sort,splice:oe.splice},ce.extend=ce.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|v(a)\|\|(a={}),s===u&
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 29 3a 73 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 73 65 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 69 73 58 4d 4c 44 6f 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 6c 2e 74 65 73 74 28 74 7c 7c 6e 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 48 54 4d 4c 22 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e Data Ascii: ):s.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:se.call(t,e,n)},isXMLDoc:function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|\|e).documentElement;return!l.test(t\|\|n&&n.nodeName\|\|"HTML")},merge:function(e,t){for(var n=+t.length,r=0,i=e.len
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 6b 3d 6d 65 2c 53 3d 63 65 2e 65 78 70 61 6e 64 6f 2c 45 3d 30 2c 6e 3d 30 2c 73 3d 57 28 29 2c 63 3d 57 28 29 2c 75 3d 57 28 29 2c 68 3d 57 28 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 26 26 28 61 3d 21 30 29 2c 30 7d 2c 66 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 74 3d 22 28 3f 3a 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 67 65 2b 22 3f 7c 5c 5c 5c 5c Data Ascii: k=me,S=ce.expando,E=0,n=0,s=W(),c=W(),u=W(),h=W(),l=function(e,t){return e===t&&(a=!0),0},f="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",t="(?:\\\\[\\da-fA-F]{1,6}"+ge+"?\|\\\\
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 56 28 29 7d 2c 52 3d 4a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 66 65 28 65 2c 22 66 69 65 6c 64 73 65 74 22 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 6b 2e 61 70 70 6c 79 28 6f 65 3d 61 65 2e 63 61 6c 6c 28 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 6f Data Ascii: return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},M=function(){V()},R=J(function(e){return!0===e.disabled&&fe(e,"fieldset")},{dir:"parentNode",next:"legend"});try{k.apply(oe=ae.call(ye.childNodes),ye.childNodes),o
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 76 61 72 20 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function F(e){return e[S]=!0,e}function $(e){var t=T.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function B(t){return
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 22 29 7d 29 2c 6c 65 2e 63 73 73 48 61 73 3d 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 3a 68 61 73 28 2a 2c 3a 6a 71 66 61 6b 65 29 22 29 2c 21 31 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 30 7d 7d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3f 28 62 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 4f 2c 50 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 74 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 Data Ascii: ")}),le.cssHas=$(function(){try{return T.querySelector(":has(*,:jqfake)"),!1}catch(e){return!0}}),le.getById?(b.filter.ID=function(e){var t=e.replace(O,P);return function(e){return e.getAttribute("id")===t}},b.find.ID=function(e,t){if("undefined"!=typeof
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 28 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 64 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 Data Ascii: erySelectorAll(":checked").length\|\|d.push(":checked"),(t=T.createElement("input")).setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),r.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&d.push(":enabled",":disable
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 7d 2c 49 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 64 20 65 78 70 72 65 73 73 69 6f 6e 3a 20 22 2b 65 29 7d 2c 63 65 2e 75 6e 69 71 75 65 53 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 5b 5d 2c 72 3d 30 2c 69 3d 30 3b 69 66 28 61 3d 21 6c 65 2e 73 6f 72 74 53 74 61 62 6c 65 2c 6f 3d 21 6c 65 2e 73 6f 72 74 53 74 61 62 6c 65 26 26 61 65 2e 63 61 6c 6c 28 65 2c 30 29 2c 64 65 2e 63 61 6c 6c 28 65 2c 6c 29 2c 61 29 7b 77 68 69 6c 65 28 74 3d 65 5b 69 2b 2b 5d 29 74 3d 3d 3d 65 5b 69 5d 26 26 Data Ascii: urn void 0!==r?r:e.getAttribute(t)},I.error=function(e){throw new Error("Syntax error, unrecognized expression: "+e)},ce.uniqueSort=function(e){var t,n=[],r=0,i=0;if(a=!le.sortStable,o=!le.sortStable&&ae.call(e,0),de.call(e,l),a){while(t=e[i++])t===e[i]&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.7	49851	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:43 UTC	773	OUT	GET /fileadmin/user_upload/park-domains_bild.png HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:43 UTC	478	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:43 GMT Content-Type: image/png Content-Length: 537573 Connection: close Last-Modified: Mon, 29 Apr 2024 12:21:40 GMT ETag: "662f90d4-833e5" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-9b84c395abcc4c73ae00dac8eb478e7c X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 5386 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ce94c3ecd5c0f67-EWR
2024-10-06 23:05:43 UTC	891	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 f0 00 00 01 f4 08 06 00 00 00 72 e4 0c 72 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 08 33 7a 49 44 41 54 78 01 ec fd 49 af 6d 4b 92 26 86 99 fb da a7 ef ee 7b 2f 22 23 b2 8a 59 44 55 b1 8a c9 6a 12 20 04 15 41 40 84 04 8e 05 70 20 fd 06 fd 13 cd f4 03 38 d1 0f 10 c0 a9 40 0d 34 12 20 80 92 08 65 15 ab 90 ca cc ca ca 2e e2 bd 77 fb e6 dc d3 9f bd 96 6b 59 6f ee 7b df c8 cb d9 1d d8 f7 e2 c6 39 67 ef d5 b8 9b 9b 77 9f 99 9b 95 7f f0 9f ff ef 1b 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 f8 96 d0 2a 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 f8 e6 90 04 7e 22 Data Ascii: PNGIHDRrrpHYssRGBgAMAa3zIDATxImK&{/"#YDUj A@p 8@4 e.wkYo{9gw$D"H$D"H$D"*$D"H$D"H$D"~"
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 3f 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 6f 10 49 e0 27 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 f1 0d 22 09 fc 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 be 41 24 81 9f 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 c4 37 88 24 f0 13 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 f8 06 91 04 7e 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 df 20 92 c0 4f 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 e2 1b 44 12 f8 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 7c 83 48 02 3f 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 6f 10 49 e0 27 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 f1 0d 22 09 fc 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 Data Ascii: ?H$D"H$D"H$oI'D"H$D"H$D""D"H$D"H$D"H$A$H$D"H$D"H$7$D"H$D"H$D"~"H$D"H$D"H$ O$D"H$D"H$DDD"H$D"H$D"H\|H?H$D"H$D"H$oI'D"H$D"H$D""D"H$D"H$D"H
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 5a 5b 4c 0e 5a 26 6b 8b c6 05 18 c7 e8 16 06 99 12 fe e6 f1 18 ba 49 b5 68 1f d6 37 d3 02 81 e7 37 c4 bc ea 5c 9d 64 ae 6f 3e 6e c5 36 fc d2 5c d5 a4 bf ab 6c 62 1d 54 66 fb c6 23 fb 9b d6 2f 45 aa c9 eb 11 d5 cd 5e 92 10 d6 51 a1 af 4b 81 f5 da 12 be 5f a8 3e 8d fa 56 53 bd 92 6b e7 f5 f3 cd fa f9 76 9d 8b 1e 1e 1f e1 fe f1 61 ed 7f cf 70 b0 d9 c0 c9 aa 2b c7 47 47 a4 73 51 d6 dc 5e 71 ec 2b f2 99 3e ba 9a ae 8c f3 7c 94 85 cb 30 ea 0e d8 fa 12 8b ca 55 5b 86 f1 11 cb c3 6d c4 b3 14 ca 6d b1 25 59 9d 0a 8d e9 74 3d 3e a3 ca d4 89 ed 24 e3 44 a1 7b b4 3c 33 a8 8e aa 1f 38 cb 4b db 8b eb 44 f3 02 3f 80 d7 c5 74 cf b4 ea cd 16 df ee ed 10 e4 8f df bb 0e 45 fd 69 dc c7 97 6d e8 7b 53 98 bb d6 af d6 36 79 7a 5a db 63 ed c3 a8 0b db ed 96 7e 16 7a 37 2b 30 5e Data Ascii: Z[LZ&kIh77\do>n6\lbTf#/E^QK_>VSkvap+GGsQ^q+>\|0U[mm%Yt=>$D{<38KD?tEim{S6yzZc~z7+0^
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 79 ef 1b 7d 3b 21 11 3c e0 f6 91 c3 91 8c e3 8d 58 ac c7 ae 87 a1 7b 46 17 fb 7d c7 20 20 65 d0 cd b0 d6 ad 23 44 a0 27 c3 87 aa ee 10 90 4b 5b e0 4b e0 cd 3a 18 31 af cf 8c e4 6f 7c e6 78 2f c9 a9 b4 fe be 20 fe f1 39 b1 8c f1 1e 25 9e 89 b0 2f 4a c8 33 35 c4 44 91 7b ea 29 19 40 9f 69 5b e2 7f 75 b7 8c d1 4b 53 09 30 7b 67 a8 6f 47 ae c6 f2 2a a1 1b 3d 1c ab d0 e6 45 36 ec 81 18 63 52 61 11 af 3c f1 9e eb 08 4a 21 8a 02 89 14 e5 c0 46 05 30 d2 68 a7 ad 58 28 5c 2e 21 2b fc da 62 9e 8f 9d 91 ad ec 39 31 d1 5c b6 f1 fd 5e 34 bd a7 f7 d4 ec 8d 0a 60 5e 8b a0 9e be 10 9c d0 f1 e3 d2 ec 39 4c 2e 80 8d 79 8a d1 b8 b3 63 24 b0 71 6b 8f 21 01 db 4e 84 d0 44 2e 4d 0c 03 4c 60 35 23 09 47 bd 1e 3f 8b 24 62 35 2f f2 de b8 68 de f7 41 3f 44 98 61 7c 15 ef 48 ab 53 Data Ascii: y};!<X{F} e#D'K[K:1o\|x/ 9%/J35D{)@i[uKS0{goG*=E6cRa<J!F0hX(\.!+b91\^4`^9L.yc$qk!ND.ML`5#G?$b5/hA?Da\|HS
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: d5 2c 43 f0 f9 cc 8c 76 c1 18 12 0c d4 ea 01 2c 25 02 3d 3d a8 64 24 cb 6d e9 d6 1f d3 14 bd 99 bd bd 6b 29 3b e1 6b e2 4f 26 30 1b f8 c8 c2 cf 46 c3 60 2d 1a ea 25 18 3f c1 c7 17 1d 8b 47 c3 41 2c 1f 04 0d 00 7d 46 18 cb b5 cd 62 f9 f6 3d a3 ca 82 6c 3c 41 34 55 3f c1 30 ce da ae e3 ae 0f aa 9f da 1e 6d 28 83 af 3b 42 39 9a 7b 65 ab ac 7d ec 52 dd 66 3d f6 f5 4a 08 3f 24 3a 58 b8 39 65 88 6d a0 64 bb 1a 05 d8 38 cc 9e ea dd 38 a5 f3 97 cc 7b 4a d4 eb 6c d9 64 2c 69 a6 2f 71 0d d1 80 4f c4 49 db ad ff 36 eb 1a 99 8d b0 b2 26 d5 f7 4c ae 2b fa 9e 2a 0e 1c 8b 18 7a 54 57 e8 24 d3 6a 10 dd a2 c7 3d 92 d9 aa b2 58 1f f0 75 db 66 2d d7 01 ae 27 6b e1 d3 47 e4 08 40 34 7f 37 c6 e8 f8 46 c6 11 e0 6b d1 90 86 c0 75 fd 22 c6 91 7e 5c f1 fa 92 61 a9 ec d7 f1 7e 7c Data Ascii: ,Cv,%==d$mk);kO&0F`-%?GA,}Fb=l<A4U?0m(;B9{e}Rf=J?$:X9emd88{Jld,i/qOI6&L+*zTW$j=Xuf-'kG@47Fku"~\a~\|
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 9b cc be 40 90 59 a1 87 67 33 4f 5d ba 67 8e 75 8e cf 19 89 93 91 70 19 7f 1f bf 8f 84 c8 2e 01 0c a6 0b 00 1e 26 22 9a 08 6a 47 4c e1 47 e2 c5 5a 9c a0 28 ac 44 64 b0 6a 31 ef c3 60 80 29 45 13 70 2a d9 d1 cb c6 33 05 47 72 57 14 b5 a3 a2 43 fd 84 2c 86 36 78 73 83 90 07 a3 bc 28 04 01 b6 21 ca 55 c9 09 7f 16 c8 a7 f8 51 2d 91 90 e8 8d 4c fb 88 4f 85 86 7b 8a ed b1 2c 91 bc d7 b6 58 4c 36 f1 a7 dd 63 61 a7 fa 3a ab 4c b9 6d 47 32 11 a4 ef 16 88 d2 a4 ef c5 6b 9b c9 89 66 7a c8 c9 b7 7b f4 64 51 b1 0e d8 87 f1 00 23 e1 e2 33 9b c4 44 6f fb ca 0d e0 3a 35 c8 54 43 c1 e8 e5 63 e8 0e 8c cd 0c ad 74 84 c9 3e 42 d9 08 b6 ea 2c 8a cb 1c 4c df b5 80 b5 f4 a1 40 f6 f5 11 95 2b ca b0 12 71 af b1 4b f8 f3 e7 a7 2d 7c bc be 81 db 4f 37 f0 ee dd 7b 78 f5 f3 cf f0 f2 Data Ascii: @Yg3O]gup.&"jGLGZ(Ddj1`)Ep*3GrWC,6xs(!UQ-LO{,XL6ca:LmG2kfz{dQ#3Do:5TCct>B,L@+qK-\|O7{x
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 06 33 1d f5 a3 97 76 ec df dd 89 31 e9 57 5a 36 90 67 2d 41 f6 1e c2 64 b1 d0 45 10 ca 36 12 f7 51 0f 4d f6 2e 51 88 a7 9f 54 b9 58 4e da 7f 79 0c e3 5c 01 52 b4 b6 98 87 be 87 b0 81 41 df b4 ad d8 70 c7 de da e2 f8 51 c0 42 12 ba 8c 8b e8 e1 04 dd da a4 ca fc 33 c9 89 4b 4d 8e 4c e5 a9 64 e4 13 91 b0 1e 36 10 03 89 9c 5a b4 6e 23 c9 e4 9b ce 79 ad 9f db 21 7a a9 17 1b 5f 77 e7 27 10 b2 1c 24 9f 13 3f 7b cc 51 03 81 7c 56 5d 42 4c 75 cc 1f a0 65 59 4d 69 2b 69 8f 09 6a 31 39 2d 9d 19 5a 38 49 ad 26 86 d6 02 a0 0c 0e 0f 78 bd 7d 50 ab 8d 79 8b 18 bc d0 d9 06 74 cc 07 2d af f7 03 57 09 ae b7 e5 72 22 39 bb 5e 8f fa 15 f5 1c a0 75 46 3d d5 27 0f 7b e4 06 94 89 4e c2 14 c9 29 13 e6 c7 f5 9f 26 fa dd 37 7e b9 2e 4f 49 e0 27 12 89 44 22 91 48 24 12 5f 83 ff f4 Data Ascii: 3v1WZ6g-AdE6QM.QTXNy\RApQB3KMLd6Zn#y!z_w'$?{Q\|V]BLueYMi+ij19-Z8I&x}Pyt-Wr"9^uF='{N)&7~.OI'D"H$_
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: cf 3d 89 a0 3f e3 46 7e 24 24 74 f3 a5 24 fe 48 78 8f c4 d5 3e 22 5d af df 31 8c 94 9e e8 8d d7 1a c1 59 60 87 34 1b 61 04 45 01 f3 78 d3 ba c5 67 ff 2e 8f 5a dd 98 ea df bd 3c 5b 47 74 f5 a4 55 ff 1c fa 09 ee 21 0e 42 d3 fa 95 be 61 37 82 77 61 86 5d 65 0c 42 1c 6a 38 0a 90 47 2d 5d 98 0e 25 ee 41 b8 5a 39 66 cf 81 93 57 bd ab 42 6e c9 e7 aa 8c fa 30 a9 a3 cb 1c 49 af c6 11 70 16 6d f7 22 fa e8 45 1f 4f 24 08 bb ab 34 2e 87 02 80 de eb 93 f4 44 05 5c 5c 1a a3 2e 2a 19 ba 4f a6 46 a8 06 99 17 d3 0d 7f f4 ef d2 13 97 35 0b d9 0d 4d 0d 4a 69 c3 fb 00 f6 19 75 74 c0 f0 d8 f7 ee 51 b8 70 00 6e bb ae 8c ef 6e bb 06 a5 f8 9d d4 12 4c d6 ad 75 c4 ce 6e bd 94 1c 25 49 0b 21 13 74 b9 ed 69 af 7d 32 31 f2 55 c3 e5 84 44 df 6d ec 7f 52 8f e6 49 2d 15 44 e4 88 6e fd Data Ascii: =?F~$$t$Hx>"]1Y`4aExg.Z<[GtU!Ba7wa]eBj8G-]%AZ9fWBn0Ipm"EO$4.D\\.*OF5MJiutQpnnLun%I!ti}21UDmRI-Dn
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: b5 99 d7 ba 1a be e6 b9 37 40 f7 73 54 38 f9 d3 d8 83 7c 5e 7a 8f fc da 95 d5 f3 1e f4 61 72 98 f8 d4 10 21 d3 a8 0b cd 4d 3a 71 9e 55 a2 3f d6 6f aa 4a cc 2e 56 0e ec cf d3 e4 b2 37 cd 09 7a 59 8b e7 cf 19 e7 e1 28 43 d7 d9 5d 23 91 b6 31 13 bc 4f 54 57 0a 57 65 84 7c 9f 1b 40 1b df c7 6d 4d 38 de bc fd c3 18 c7 75 9a 64 8d 25 f1 ed e7 7e 9d 32 2f 9e 34 9b 4e fd 28 89 0f 3e 0a 57 e9 a7 b5 1b ab 54 a6 b6 d4 eb ea df a4 90 be 56 19 8c 37 9d 3c 5d f6 d1 d0 a0 ba a5 c9 62 91 68 5f 9a 1b cd e8 dd b3 38 81 c8 b3 31 39 ed 76 5d 0f ce 5b 8e 71 4f 6d 59 78 86 a9 72 cc 0b c7 41 4c 04 7d 74 b0 8e 61 94 23 a9 9a 9e ab 91 47 cb 5e aa f7 65 3d 41 a5 63 8b 8e bf da 0f 26 31 00 e0 3a dd 8d 8b 0b 1b 7b 64 fc e2 2e 2a 27 6d e4 44 a0 9f 08 12 63 72 e8 07 18 7e cb e7 9b 4a Data Ascii: 7@sT8\|^zar!M:qU?oJ.V7zY(C]#1OTWWe\|@mM8ud%~2/4N(>WTV7<]bh_819v][qOmYxrAL}ta#G^e=Ac&1:{d.*'mDcr~J
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 21 b5 7b e7 97 da 76 dc d4 ef 12 28 11 d1 cb 4a bd ef 0a ec f1 3a 25 19 39 f7 37 12 60 b6 e9 83 dd 6b ec 7b db b4 97 bd 65 f6 7a f7 a4 a7 3e 78 3c 51 60 c4 be 92 11 e0 9b 74 61 c1 7b d2 23 24 00 d5 8d a7 79 c0 89 21 00 02 41 21 0f 84 51 e2 ca 8f 18 71 04 4a a0 82 91 75 fb 42 25 d0 73 17 97 91 f6 ac 28 b7 26 84 04 13 18 fe 85 93 84 51 5f b8 20 5a 17 eb c7 e2 19 59 7a 5a bf ab 47 24 7d f4 b9 2a ff e8 c1 19 f5 48 09 2c d3 7d e8 8d 0b f6 96 f2 77 1b 83 c6 36 d6 7f cb 40 be f7 84 5c 24 8f 96 ae 0d 8d ec b0 93 04 e1 3d ad 7f a7 1a e8 30 29 37 85 2a 59 42 8e 8d b2 6b 64 8a ba de 79 bd ba 12 78 dd 43 60 fb 9e 5c ed fb 8a 86 bc 31 cf 7d fe c2 3c 3a a3 17 ee a8 47 91 fc f7 f1 45 9f 0d a0 c9 25 61 0f b1 a9 61 5e d4 4b b2 05 85 57 ef 69 25 eb 0a 00 8c 84 31 8e eb 77 Data Ascii: !{v(J:%97`k{ez>x<Q`ta{#$y!A!QqJuB%s(&Q_ ZYzZG$}H,}w6@\$=0)7YBkdyxC`\1}<:GE%aa^KWi%1w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.7	49852	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:43 UTC	783	OUT	GET /fileadmin/user_upload/Park_Domains/Domain-Parking.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:43 UTC	492	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:43 GMT Content-Type: image/jpeg Content-Length: 42237 Connection: close Cf-Bgj: h2pri ETag: "6321aef7-a4fd" Last-Modified: Wed, 14 Sep 2022 10:37:43 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-3885ed6b65ff720ea15ff4d730a0ceaa CF-Cache-Status: HIT Age: 4332 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ce94c3edca18c8a-EWR
2024-10-06 23:05:43 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0b 1b 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 07 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 62 00 00 00 1b 01 05 00 01 00 00 00 6a 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 72 00 00 00 32 01 02 00 14 00 00 00 8e 00 00 00 69 87 04 00 01 00 00 00 a4 00 00 00 d0 00 00 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 00 32 30 31 36 3a 30 38 3a 31 30 20 31 32 3a 30 32 3a 30 32 00 00 00 03 00 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 8c 05 00 00 03 a0 04 00 01 00 00 00 3a 04 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 Data Ascii: JFIFHHExifII*bj(1r2i''Adobe Photoshop CS4 Windows2016:08:10 12:02:02:
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 12 49 25 7d ce 52 49 24 92 94 92 49 24 a5 24 99 24 94 ba 64 92 49 4a 49 25 63 1b 0d f7 c3 dd ec ab f7 bb 9f ea 7f e4 d2 24 01 65 20 12 68 06 ba 4a ce 76 35 54 6c 35 c8 df 20 b4 99 e3 f3 95 54 22 41 16 15 28 98 9a 2a 49 24 91 5a a4 93 24 92 94 92 49 24 a7 ff d0 ec 12 49 25 7d ce 52 49 26 49 4b a6 49 24 94 a4 92 49 25 29 20 09 20 00 49 3a 00 35 25 25 7b a6 7a 7b 5f 1f cf 03 a9 ef b0 fe ef f6 be 92 12 97 08 26 ad 30 8f 14 80 ba 5f 1b a7 86 c3 ef 1b 9d da be 40 fe bf ef a9 e5 67 b2 a2 59 5c 3e de 09 fc d6 fc 7f 7b fa aa c5 8d 6b 98 5a e7 16 83 cc 3b 69 f8 6e 55 ff 00 67 e1 bb 46 cf f6 5f 3f f9 25 00 90 26 e7 67 c3 a3 60 c4 81 50 a1 e2 77 73 5e f7 bd c5 ef 25 ce 3c 92 99 5e b3 a5 ff 00 a3 b3 5f 07 8f fb f3 7f f2 2a a5 d4 5b 49 8b 5b b4 1e 1d c8 3f 07 29 a3 38 Data Ascii: I%}RI$I$$$dIJI%c$e hJv5Tl5 T"A(I$Z$I$I%}RI&IKI$I%) I:5%%{z{_&0_@gY\>{kZ;inUgF_?%&g`Pws^%<^_[I[?)8
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 55 26 91 8f 94 c2 fa db f4 1c de 5a aa a4 81 00 ee 98 c8 8d 9b 7f 66 e9 ae d5 99 25 83 c1 c3 fb da d4 85 5d 2a af 73 ac 75 e7 f7 40 d3 f0 0d ff 00 ab 55 25 32 1c 27 f7 a4 bb 8c 7e ec 53 e4 e5 be f7 b4 81 e9 b2 bf e6 da 3b 79 ff 00 d1 46 76 46 16 58 07 2d a6 bb 62 0d 8c d4 1f fa af fa 4d 55 a8 f4 7d 66 8b e7 d2 3a 38 83 11 3f 44 9f e4 ab 59 bd 3c 56 df 52 80 76 b4 7b d9 24 98 fd f6 ff 00 df 90 3c 20 88 eb 1f dd 21 23 88 89 4b 49 7e f4 4b 0f b2 f4 ee d9 7a 78 40 fe e5 26 59 d3 71 4e fa 43 af b4 7d 12 74 00 f8 f0 df fa 95 49 32 3c 17 bc 89 47 1d 6d 18 86 76 d8 fb 6c 75 af 32 e7 99 31 c2 82 49 27 2c 52 49 26 49 4a 25 6b e1 b0 62 61 9b 6c 10 48 f5 5e 3f f3 db 15 5e 9f 86 6e 70 ba c1 fa 26 9f 68 3f 9e 47 fd f1 a9 fa a6 56 f7 7d 9d 86 5a c3 36 1f 17 0f cd fe c7 Data Ascii: U&Zf%]*su@U%2'~S;yFvFX-bMU}f:8?DY<VRv{$< !#KI~Kzx@&YqNC}tI2<Gmvlu21I',RI&IJ%kbalH^?^np&h?GV}Z6
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 69 63 65 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 07 67 72 6f 75 70 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 06 6f 72 69 67 69 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 04 3a 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 05 8c 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 Data Ascii: iceIDlonggroupIDlongoriginenumESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlong:RghtlongurlTEXTnullTEXTMsgeTEX
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 7f 7b fa aa c5 8d 6b 98 5a e7 16 83 cc 3b 69 f8 6e 55 ff 00 67 e1 bb 46 cf f6 5f 3f f9 25 00 90 26 e7 67 c3 a3 60 c4 81 50 a1 e2 77 73 5e f7 bd c5 ef 25 ce 3c 92 99 5e b3 a5 ff 00 a3 b3 5f 07 8f fb f3 7f f2 2a a5 d4 5b 49 8b 5b b4 1e 1d c8 3f 07 29 a3 38 9d 8f d1 82 50 90 dc 7d 51 a4 92 49 cb 14 92 64 92 52 92 49 32 4a 7f ff d1 ec 13 24 92 be e7 29 24 92 49 4a 49 24 c9 29 74 d2 9d ad 2e 70 6b 79 71 00 7c 4e 8b 56 ac 2c 7a 87 d1 0f 77 77 b8 4f dc df a2 d4 d9 cc 47 75 d0 81 96 ce 46 e1 e2 a7 55 ae a9 ed b2 b3 ee 6f dc 7c 5a 7f ac b6 a0 71 02 3e 01 0e dc 5c 7b 47 bd 80 1f de 6f b5 df 78 4c f7 81 d0 8d 19 3d 82 35 12 d5 67 36 9c dc 6f e4 bf 50 79 2d 70 ff 00 c8 ac 87 d4 6b 79 63 c0 0e 69 83 fe c5 6a 9b 0e 16 53 e9 79 9a 89 01 c7 e2 25 96 7f e4 d5 9c fc 5f 59 Data Ascii: {kZ;inUgF_?%&g`Pws^%<^_*[I[?)8P}QIdRI2J$)$IJI$)t.pkyq\|NV,zwwOGuFUo\|Zq>\{GoxL=5g6oPy-pkycijSy%_Y
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: f8 f0 df fa 95 49 32 3c 17 bc 89 47 1d 6d 18 86 76 d8 fb 6c 75 af 32 e7 99 31 c2 82 49 27 2c 52 49 26 49 4a 25 6b e1 b0 62 61 9b 6c 10 48 f5 5e 3f f3 db 15 5e 9f 86 6e 70 ba c1 fa 26 9f 68 3f 9e 47 fd f1 a9 fa a6 56 f7 7d 9d 86 5a c3 36 1f 17 0f cd fe c7 fd 5a 8e 7e a2 20 3f c2 65 80 e0 89 99 f2 8b 48 b9 ce 25 ce d5 ce 24 bb e2 75 4c 92 4a 46 25 24 92 64 94 ff 00 ff d5 eb 12 49 32 be e6 ae 99 24 92 52 92 49 24 94 a5 77 0b a8 7a 40 55 79 f6 0f a1 67 76 ff 00 25 df c8 54 52 42 51 12 14 57 46 46 26 c3 a9 93 d3 59 6f e9 31 c8 63 9d ae df cc 77 f2 9b 1f 43 fe a1 67 5b 4d b4 98 b5 85 9e 67 83 f0 77 d1 52 a3 2a fc 7f e6 dd ed ee c3 ab 7e ef cd fe ca bd 5f 56 a4 88 b5 8e 64 f3 b7 dc df bb e9 26 7a e3 fd 71 ff 00 39 7f ea e7 fd 43 ff 00 35 cc 9f 04 cb 58 d9 d2 6c Data Ascii: I2<Gmvlu21I',RI&IJ%kbalH^?^np&h?GV}Z6Z~ ?eH%$uLJF%$dI2$RI$wz@Uygv%TRBQWFF&Yo1cwCg[MgwR*~_Vd&zq9C5Xl
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 45 36 41 44 44 34 39 38 30 45 46 44 46 44 33 34 42 44 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 35 42 46 37 44 30 45 45 31 35 45 45 36 31 31 42 31 34 44 38 45 34 38 39 44 38 30 44 37 45 46 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 31 2b 30 32 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 30 32 2b 30 32 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 30 32 2b Data Ascii: E6ADD4980EFDFD34BD" xmpMM:InstanceID="xmp.iid:45BF7D0EE15EE611B14D8E489D80D7EF" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmp:CreateDate="2016-08-10T12:01+02:00" xmp:ModifyDate="2016-08-10T12:02:02+02:00" xmp:MetadataDate="2016-08-10T12:02:02+
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 30 32 2b 30 32 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Evt:when="2016-08-10T12:02:02+02:00" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-10-06 23:05:43 UTC	1369	IN	Data Raw: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 c1 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 26 03 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 12 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 30 00 07 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 48 44 90 00 00 03 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 12 89 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 13 00 Data Ascii: D0&&0@HD

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:43 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:43 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fcca05a5-501e-00a0-3202-179d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230543Z-1657d5bbd48xdq5dkwwugdpzr000000002xg00000000kv4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:43 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:43 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230543Z-1657d5bbd48dfrdj7px744zp8s000000029g00000000ukrw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:43 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:43 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:43 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 62f7f1ae-f01e-0096-4d0c-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230543Z-1657d5bbd48xdq5dkwwugdpzr000000002x000000000nc96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:43 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:43 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:43 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:43 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 4035d6e2-a01e-0002-4602-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230543Z-1657d5bbd48sdh4cyzadbb374800000002m0000000000sr1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:43 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:43 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:43 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:43 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 31868579-401e-008c-0af2-1686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230543Z-1657d5bbd48xdq5dkwwugdpzr00000000300000000008c44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:43 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.7	49859	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	556	OUT	GET /fileadmin/user_upload/Park_Domains/Domain-Parking.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:44 UTC	492	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: image/jpeg Content-Length: 42237 Connection: close Cf-Bgj: h2pri ETag: "6321aef7-a4fd" Last-Modified: Wed, 14 Sep 2022 10:37:43 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-3885ed6b65ff720ea15ff4d730a0ceaa CF-Cache-Status: HIT Age: 4333 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ce94c43696ec468-EWR
2024-10-06 23:05:44 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0b 1b 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 07 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 62 00 00 00 1b 01 05 00 01 00 00 00 6a 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 72 00 00 00 32 01 02 00 14 00 00 00 8e 00 00 00 69 87 04 00 01 00 00 00 a4 00 00 00 d0 00 00 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 00 32 30 31 36 3a 30 38 3a 31 30 20 31 32 3a 30 32 3a 30 32 00 00 00 03 00 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 8c 05 00 00 03 a0 04 00 01 00 00 00 3a 04 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 Data Ascii: JFIFHHExifII*bj(1r2i''Adobe Photoshop CS4 Windows2016:08:10 12:02:02:
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 12 49 25 7d ce 52 49 24 92 94 92 49 24 a5 24 99 24 94 ba 64 92 49 4a 49 25 63 1b 0d f7 c3 dd ec ab f7 bb 9f ea 7f e4 d2 24 01 65 20 12 68 06 ba 4a ce 76 35 54 6c 35 c8 df 20 b4 99 e3 f3 95 54 22 41 16 15 28 98 9a 2a 49 24 91 5a a4 93 24 92 94 92 49 24 a7 ff d0 ec 12 49 25 7d ce 52 49 26 49 4b a6 49 24 94 a4 92 49 25 29 20 09 20 00 49 3a 00 35 25 25 7b a6 7a 7b 5f 1f cf 03 a9 ef b0 fe ef f6 be 92 12 97 08 26 ad 30 8f 14 80 ba 5f 1b a7 86 c3 ef 1b 9d da be 40 fe bf ef a9 e5 67 b2 a2 59 5c 3e de 09 fc d6 fc 7f 7b fa aa c5 8d 6b 98 5a e7 16 83 cc 3b 69 f8 6e 55 ff 00 67 e1 bb 46 cf f6 5f 3f f9 25 00 90 26 e7 67 c3 a3 60 c4 81 50 a1 e2 77 73 5e f7 bd c5 ef 25 ce 3c 92 99 5e b3 a5 ff 00 a3 b3 5f 07 8f fb f3 7f f2 2a a5 d4 5b 49 8b 5b b4 1e 1d c8 3f 07 29 a3 38 Data Ascii: I%}RI$I$$$dIJI%c$e hJv5Tl5 T"A(I$Z$I$I%}RI&IKI$I%) I:5%%{z{_&0_@gY\>{kZ;inUgF_?%&g`Pws^%<^_[I[?)8
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 55 26 91 8f 94 c2 fa db f4 1c de 5a aa a4 81 00 ee 98 c8 8d 9b 7f 66 e9 ae d5 99 25 83 c1 c3 fb da d4 85 5d 2a af 73 ac 75 e7 f7 40 d3 f0 0d ff 00 ab 55 25 32 1c 27 f7 a4 bb 8c 7e ec 53 e4 e5 be f7 b4 81 e9 b2 bf e6 da 3b 79 ff 00 d1 46 76 46 16 58 07 2d a6 bb 62 0d 8c d4 1f fa af fa 4d 55 a8 f4 7d 66 8b e7 d2 3a 38 83 11 3f 44 9f e4 ab 59 bd 3c 56 df 52 80 76 b4 7b d9 24 98 fd f6 ff 00 df 90 3c 20 88 eb 1f dd 21 23 88 89 4b 49 7e f4 4b 0f b2 f4 ee d9 7a 78 40 fe e5 26 59 d3 71 4e fa 43 af b4 7d 12 74 00 f8 f0 df fa 95 49 32 3c 17 bc 89 47 1d 6d 18 86 76 d8 fb 6c 75 af 32 e7 99 31 c2 82 49 27 2c 52 49 26 49 4a 25 6b e1 b0 62 61 9b 6c 10 48 f5 5e 3f f3 db 15 5e 9f 86 6e 70 ba c1 fa 26 9f 68 3f 9e 47 fd f1 a9 fa a6 56 f7 7d 9d 86 5a c3 36 1f 17 0f cd fe c7 Data Ascii: U&Zf%]*su@U%2'~S;yFvFX-bMU}f:8?DY<VRv{$< !#KI~Kzx@&YqNC}tI2<Gmvlu21I',RI&IJ%kbalH^?^np&h?GV}Z6
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 69 63 65 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 07 67 72 6f 75 70 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 06 6f 72 69 67 69 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 04 3a 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 05 8c 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 Data Ascii: iceIDlonggroupIDlongoriginenumESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlong:RghtlongurlTEXTnullTEXTMsgeTEX
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 7f 7b fa aa c5 8d 6b 98 5a e7 16 83 cc 3b 69 f8 6e 55 ff 00 67 e1 bb 46 cf f6 5f 3f f9 25 00 90 26 e7 67 c3 a3 60 c4 81 50 a1 e2 77 73 5e f7 bd c5 ef 25 ce 3c 92 99 5e b3 a5 ff 00 a3 b3 5f 07 8f fb f3 7f f2 2a a5 d4 5b 49 8b 5b b4 1e 1d c8 3f 07 29 a3 38 9d 8f d1 82 50 90 dc 7d 51 a4 92 49 cb 14 92 64 92 52 92 49 32 4a 7f ff d1 ec 13 24 92 be e7 29 24 92 49 4a 49 24 c9 29 74 d2 9d ad 2e 70 6b 79 71 00 7c 4e 8b 56 ac 2c 7a 87 d1 0f 77 77 b8 4f dc df a2 d4 d9 cc 47 75 d0 81 96 ce 46 e1 e2 a7 55 ae a9 ed b2 b3 ee 6f dc 7c 5a 7f ac b6 a0 71 02 3e 01 0e dc 5c 7b 47 bd 80 1f de 6f b5 df 78 4c f7 81 d0 8d 19 3d 82 35 12 d5 67 36 9c dc 6f e4 bf 50 79 2d 70 ff 00 c8 ac 87 d4 6b 79 63 c0 0e 69 83 fe c5 6a 9b 0e 16 53 e9 79 9a 89 01 c7 e2 25 96 7f e4 d5 9c fc 5f 59 Data Ascii: {kZ;inUgF_?%&g`Pws^%<^_*[I[?)8P}QIdRI2J$)$IJI$)t.pkyq\|NV,zwwOGuFUo\|Zq>\{GoxL=5g6oPy-pkycijSy%_Y
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: f8 f0 df fa 95 49 32 3c 17 bc 89 47 1d 6d 18 86 76 d8 fb 6c 75 af 32 e7 99 31 c2 82 49 27 2c 52 49 26 49 4a 25 6b e1 b0 62 61 9b 6c 10 48 f5 5e 3f f3 db 15 5e 9f 86 6e 70 ba c1 fa 26 9f 68 3f 9e 47 fd f1 a9 fa a6 56 f7 7d 9d 86 5a c3 36 1f 17 0f cd fe c7 fd 5a 8e 7e a2 20 3f c2 65 80 e0 89 99 f2 8b 48 b9 ce 25 ce d5 ce 24 bb e2 75 4c 92 4a 46 25 24 92 64 94 ff 00 ff d5 eb 12 49 32 be e6 ae 99 24 92 52 92 49 24 94 a5 77 0b a8 7a 40 55 79 f6 0f a1 67 76 ff 00 25 df c8 54 52 42 51 12 14 57 46 46 26 c3 a9 93 d3 59 6f e9 31 c8 63 9d ae df cc 77 f2 9b 1f 43 fe a1 67 5b 4d b4 98 b5 85 9e 67 83 f0 77 d1 52 a3 2a fc 7f e6 dd ed ee c3 ab 7e ef cd fe ca bd 5f 56 a4 88 b5 8e 64 f3 b7 dc df bb e9 26 7a e3 fd 71 ff 00 39 7f ea e7 fd 43 ff 00 35 cc 9f 04 cb 58 d9 d2 6c Data Ascii: I2<Gmvlu21I',RI&IJ%kbalH^?^np&h?GV}Z6Z~ ?eH%$uLJF%$dI2$RI$wz@Uygv%TRBQWFF&Yo1cwCg[MgwR*~_Vd&zq9C5Xl
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 45 36 41 44 44 34 39 38 30 45 46 44 46 44 33 34 42 44 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 35 42 46 37 44 30 45 45 31 35 45 45 36 31 31 42 31 34 44 38 45 34 38 39 44 38 30 44 37 45 46 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 31 2b 30 32 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 30 32 2b 30 32 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 30 32 2b Data Ascii: E6ADD4980EFDFD34BD" xmpMM:InstanceID="xmp.iid:45BF7D0EE15EE611B14D8E489D80D7EF" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmp:CreateDate="2016-08-10T12:01+02:00" xmp:ModifyDate="2016-08-10T12:02:02+02:00" xmp:MetadataDate="2016-08-10T12:02:02+
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 30 32 2b 30 32 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Evt:when="2016-08-10T12:02:02+02:00" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 c1 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 26 03 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 12 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 30 00 07 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 48 44 90 00 00 03 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 12 89 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 13 00 Data Ascii: D0&&0@HD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.7	49858	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	823	OUT	GET /fileadmin/images/legacy/images/icons/icn-check-blue.svg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.sedo.com/dist/css/typo3/main.css?1724922195 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:44 UTC	487	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Wed, 14 Sep 2022 10:45:46 GMT ETag: W/"6321b0da-26c" X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-c2daad4a5afb5a10dcb788edf38f8d3a X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4956 Server: cloudflare CF-RAY: 8ce94c434b1c42f2-EWR
2024-10-06 23:05:44 UTC	627	IN	Data Raw: 32 36 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 Data Ascii: 26c<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"
2024-10-06 23:05:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.7	49860	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	576	OUT	GET /fileadmin_git/resources/public/JavaScripts/jquery-3.7.1.min.js?1724921946 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:44 UTC	520	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 29 Aug 2024 08:59:06 GMT X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-f790b2e3dfd363f7e95a62dc424349da ETag: W/"66d0385a-155ec" X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 638 Server: cloudflare CF-RAY: 8ce94c43ad361865-EWR
2024-10-06 23:05:44 UTC	849	IN	Data Raw: 37 64 39 36 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7d96/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 7c 43 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 75 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6e 5b 69 2e 63 61 6c 6c 28 65 29 5d 7c 7c Data Ascii: \|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[i.call(e)]\|\|
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 73 2c 73 6f 72 74 3a 6f 65 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 6f 65 2e 73 70 6c 69 63 65 7d 2c 63 65 2e 65 78 74 65 6e 64 3d 63 65 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 76 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 Data Ascii: bject\|\|this.constructor()},push:s,sort:oe.sort,splice:oe.splice},ce.extend=ce.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|v(a)\|\|(a={}),s===u&
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 29 3a 73 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 73 65 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 69 73 58 4d 4c 44 6f 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 6c 2e 74 65 73 74 28 74 7c 7c 6e 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 48 54 4d 4c 22 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e Data Ascii: ):s.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:se.call(t,e,n)},isXMLDoc:function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|\|e).documentElement;return!l.test(t\|\|n&&n.nodeName\|\|"HTML")},merge:function(e,t){for(var n=+t.length,r=0,i=e.len
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 6b 3d 6d 65 2c 53 3d 63 65 2e 65 78 70 61 6e 64 6f 2c 45 3d 30 2c 6e 3d 30 2c 73 3d 57 28 29 2c 63 3d 57 28 29 2c 75 3d 57 28 29 2c 68 3d 57 28 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 26 26 28 61 3d 21 30 29 2c 30 7d 2c 66 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 74 3d 22 28 3f 3a 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 67 65 2b 22 3f 7c 5c 5c 5c 5c Data Ascii: k=me,S=ce.expando,E=0,n=0,s=W(),c=W(),u=W(),h=W(),l=function(e,t){return e===t&&(a=!0),0},f="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",t="(?:\\\\[\\da-fA-F]{1,6}"+ge+"?\|\\\\
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 56 28 29 7d 2c 52 3d 4a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 66 65 28 65 2c 22 66 69 65 6c 64 73 65 74 22 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 6b 2e 61 70 70 6c 79 28 6f 65 3d 61 65 2e 63 61 6c 6c 28 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 6f Data Ascii: return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},M=function(){V()},R=J(function(e){return!0===e.disabled&&fe(e,"fieldset")},{dir:"parentNode",next:"legend"});try{k.apply(oe=ae.call(ye.childNodes),ye.childNodes),o
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 76 61 72 20 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function F(e){return e[S]=!0,e}function $(e){var t=T.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function B(t){return
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 22 29 7d 29 2c 6c 65 2e 63 73 73 48 61 73 3d 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 3a 68 61 73 28 2a 2c 3a 6a 71 66 61 6b 65 29 22 29 2c 21 31 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 30 7d 7d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3f 28 62 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 4f 2c 50 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 74 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 Data Ascii: ")}),le.cssHas=$(function(){try{return T.querySelector(":has(*,:jqfake)"),!1}catch(e){return!0}}),le.getById?(b.filter.ID=function(e){var t=e.replace(O,P);return function(e){return e.getAttribute("id")===t}},b.find.ID=function(e,t){if("undefined"!=typeof
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 28 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 64 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 Data Ascii: erySelectorAll(":checked").length\|\|d.push(":checked"),(t=T.createElement("input")).setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),r.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&d.push(":enabled",":disable
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 7d 2c 49 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 64 20 65 78 70 72 65 73 73 69 6f 6e 3a 20 22 2b 65 29 7d 2c 63 65 2e 75 6e 69 71 75 65 53 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 5b 5d 2c 72 3d 30 2c 69 3d 30 3b 69 66 28 61 3d 21 6c 65 2e 73 6f 72 74 53 74 61 62 6c 65 2c 6f 3d 21 6c 65 2e 73 6f 72 74 53 74 61 62 6c 65 26 26 61 65 2e 63 61 6c 6c 28 65 2c 30 29 2c 64 65 2e 63 61 6c 6c 28 65 2c 6c 29 2c 61 29 7b 77 68 69 6c 65 28 74 3d 65 5b 69 2b 2b 5d 29 74 3d 3d 3d 65 5b 69 5d 26 26 Data Ascii: urn void 0!==r?r:e.getAttribute(t)},I.error=function(e){throw new Error("Syntax error, unrecognized expression: "+e)},ce.uniqueSort=function(e){var t,n=[],r=0,i=0;if(a=!le.sortStable,o=!le.sortStable&&ae.call(e,0),de.call(e,l),a){while(t=e[i++])t===e[i]&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.7	49865	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	790	OUT	GET /fileadmin/user_upload/Park_Domains/Domain-Parking-Profis.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:44 UTC	492	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: image/jpeg Content-Length: 52602 Connection: close Cf-Bgj: h2pri ETag: "6321aef7-cd7a" Last-Modified: Wed, 14 Sep 2022 10:37:43 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-706f3b790b60e4c1f03f4346fe51a7d0 CF-Cache-Status: HIT Age: 3902 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ce94c448de943c2-EWR
2024-10-06 23:05:44 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0e 20 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 07 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 62 00 00 00 1b 01 05 00 01 00 00 00 6a 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 72 00 00 00 32 01 02 00 14 00 00 00 8e 00 00 00 69 87 04 00 01 00 00 00 a4 00 00 00 d0 00 00 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 00 32 30 31 36 3a 30 38 3a 31 30 20 31 32 3a 30 32 3a 35 39 00 00 00 03 00 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 8c 05 00 00 03 a0 04 00 01 00 00 00 3a 04 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 Data Ascii: JFIFHH ExifII*bj(1r2i''Adobe Photoshop CS4 Windows2016:08:10 12:02:59:
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 12 49 25 7d ce 52 49 24 92 94 92 49 24 a5 24 92 b5 4e 35 4c ab ed 19 5a 30 fd 06 77 3e 1f e7 7e ea 06 40 6e 98 c4 9d 9a 89 2b 9f 69 c1 76 8e c6 da df 11 13 ff 00 47 6a 5f 67 c2 b7 5a 6f d8 7f 75 ff 00 f9 9e c7 21 c7 5b 82 3f 1f fa 2b b8 2f 62 0f e1 ff 00 49 a6 92 b9 f6 4c 4a f5 bb 20 1f 26 c7 f0 f5 1c 9b ed 1d 3d 9a 57 8f bf f9 4e ff 00 cc f7 25 c7 7b 02 7f 97 f5 91 c1 5b 91 1f c7 fe 8b 51 25 71 d4 63 e4 d6 6c c4 1b 2c 6f d2 ab c7 fd 7f 35 52 44 48 1f a6 e1 12 89 1e 37 b1 0a 49 24 91 5a a4 93 24 92 94 92 49 24 a7 ff d0 ec 12 49 25 7d ce 52 49 26 49 4b a6 ef 1d cf 64 7c 5c 61 7b 9c e7 9d b5 57 ab cf f0 45 39 b4 d3 ed c5 a8 0f e5 bb 49 ff 00 bf ff 00 9c e4 d3 2d 68 0b 2b 84 74 b2 68 7e 2c 71 f0 c9 3e ae 40 d9 4b 35 21 da 4f f5 bf 75 88 79 59 07 22 cd dc 31 Data Ascii: I%}RI$I$$N5LZ0w>~@n+ivGj_gZou![?+/bILJ &=WN%{[Q%qcl,o5RDH7I$Z$I$I%}RI&IKd\|\a{WE9I-h+th~,q>@K5!OuyY"1
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 0c 92 d3 e0 63 7f fd 53 55 14 a1 7a 83 fa 3a 2a 60 69 21 a7 10 b5 24 92 49 cb 1f ff d3 eb 92 49 32 be e6 ae ad 60 dc c9 76 35 ba d7 76 83 c9 c7 4f fa 7f f5 6a a2 47 54 24 2c 52 63 2a 36 92 fa 5d 45 a6 b7 6b 1a b5 de 23 f7 95 86 7e 93 a5 3d bd ea 7c fc a4 3f fe a5 c9 f2 1c 6f e9 f5 de ed 6c ad db 4b bc 75 d8 ef fb e3 94 3a 75 ad 6d ce a5 ff 00 42 e1 b6 3c c7 fe 49 a9 84 93 1b eb 03 af f8 2c 80 01 3a fd 19 8d 3f c3 6d 74 e7 ee c5 0d ef 5b 8b 4f cf de df fa a5 69 66 62 bc e1 e5 ba 8b 0f b1 d0 d2 ee df f0 56 2d 35 16 41 52 be 92 d4 33 63 37 1a eb 1f 49 6a 75 32 d1 8c 01 00 b8 bc 06 93 c8 fc e7 16 ac b5 77 aa 3c 9b aa a8 6a 43 77 40 e4 97 18 d3 fc d4 f8 fd 31 c6 1f 91 ed 1f e8 c7 3f db 77 e6 a9 60 44 60 09 eb ab 0c c1 9c c8 03 6d 1a 2a ff 00 49 73 7f 4a d8 1b Data Ascii: cSUz:`i!$II2`v5vOjGT$,Rc6]Ek#~=\|?olKu:umB<I,:?mt[OifbV-5AR3c7Iju2w<jCw@1?w`D`m*IsJ
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 49 32 7f 14 c9 24 92 14 92 49 24 a5 24 92 49 29 49 24 92 4a 7f ff d9 ff ed 12 e8 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 07 1c 02 00 00 02 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 e8 f1 5c f3 2f c1 18 a1 a2 7b 67 ad c5 64 d5 ba 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 02 00 48 00 00 00 01 00 02 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 Data Ascii: I2$I$$I)I$JPhotoshop 3.08BIM8BIM%\/{gd8BIMHH8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 00 00 38 42 49 4d 04 11 00 00 00 00 00 01 01 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 00 00 01 38 42 49 4d 04 0c 00 00 00 00 0d 06 00 00 00 01 00 00 00 a0 00 00 00 7a 00 00 01 e0 00 00 e4 c0 00 00 0c ea 00 18 00 01 ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 48 00 48 00 00 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: 8BIM8BIM8BIMzJFIFHHAdobe_CMAdobed
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: f8 96 42 44 47 80 6c 44 28 d9 5d 76 b7 6d ad 0f 1e 7c 8f 83 be 93 55 4e 99 6e ea dd 49 3a d7 ee 6f f5 4f fe 45 ca ea 32 06 32 ae ca 89 12 8d f7 73 6f c5 b7 15 de be 3b 8e d6 f2 7f 39 a3 f9 5f bf 5a 9b 83 3a 85 45 ec 01 b9 55 8d 5b fb c3 ff 00 23 fb 9f b8 af ac bc 86 3b 0b 25 b7 54 3f 46 e9 2d 6f fe 7c ab ff 00 20 9f 19 19 7f 7c 7c a7 bf f5 4b 1c a2 23 fd c3 f3 0f dd fe b4 5a 9f eb 0a ee 37 bb a7 65 34 f0 dd 47 dc d7 7f df 54 7a 8d 6d de cc 9a ff 00 9b bc 4c ff 00 2a 26 7f b6 d5 2c 10 6c c5 ca a9 ba b9 c2 40 f8 82 3f ef aa 49 1b 80 3e 23 f3 63 8c 6a 66 3e 07 fe 8b 49 24 c0 c8 94 93 d8 d4 92 49 24 a7 ff d2 eb d2 49 32 be e7 2e 8d 89 8f f6 8b 76 9d 2b 6e af 3e 5f bb fd a4 05 71 84 b3 a5 bd cc e5 ef 87 9f 22 76 7f d4 a6 cc 90 34 dc 9e 1f b5 74 00 27 5d 80 e2 Data Ascii: BDGlD(]vm\|UNnI:oOE22so;9_Z:EU[#;%T?F-o\| \|\|K#Z7e4GTzmL*&,l@?I>#cjf>I$I$I2.v+n>_q"v4t']
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 04 f9 9d 41 94 83 5d 24 3a de 0b b9 6b 7f f2 4f 42 c6 a9 b8 75 9c cc 90 7d 43 fc dd 67 e9 49 f1 ff 00 84 7f fe 06 c4 e2 bc 3e 9f 0e b4 fa d9 03 e8 b0 70 df 97 e6 7f 5d ea 96 46 45 97 bf d4 b4 f1 a3 5a 38 68 f0 6a 7c 63 62 a3 f2 f5 97 ef 79 31 ca 54 6e 5f 30 f9 63 d2 1f de 63 65 8f b5 ee b1 e6 5c f3 25 5c c4 ff 00 93 b3 0f fa fd 15 5e 9c 3c ab a3 65 64 34 fe 7b bd ad fc 7f ef aa ce 51 af 13 13 ec 4c 76 fb 5e 66 d2 3b 77 fe cf d1 da d6 a7 48 83 51 1d c7 d0 05 b1 04 5c 8e d4 77 ea 64 d0 49 24 93 d8 d4 92 64 92 53 ff d5 eb 12 49 32 be e6 ae 99 24 92 52 91 aa cc c9 a6 03 1e 76 8e 1a ef 70 fc 50 52 48 80 77 d5 20 91 b1 a7 41 97 63 e7 fe 8a f6 0a ef 3f 42 c6 f7 3e 5f fa 4d ea 8d d5 3e ab 1d 55 83 dc de 7c 08 ec e1 fc 97 28 6b c8 d0 8d 41 1d 88 5a 23 67 52 a4 34 Data Ascii: A]$:kOBu}CgI>p]FEZ8hj\|cby1Tn_0cce\%\^<ed4{QLv^f;wHQ\wdI$dSI2$RvpPRHw Ac?B>_M>U\|(kAZ#gR4
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 66 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 69 66 66 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 65 32 36 38 30 64 33 38 2d 66 36 32 35 2d 34 39 36 62 2d 39 39 34 35 2d 30 39 64 35 66 63 30 62 64 65 34 39 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 43 38 41 42 37 32 38 31 38 43 38 31 31 45 36 41 44 44 34 39 38 30 45 46 44 46 44 33 34 42 44 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 39 42 46 37 44 30 45 45 31 35 45 45 36 31 31 42 31 34 Data Ascii: ff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmpMM:OriginalDocumentID="xmp.did:e2680d38-f625-496b-9945-09d5fc0bde49" xmpMM:DocumentID="xmp.did:6C8AB72818C811E6ADD4980EFDFD34BD" xmpMM:InstanceID="xmp.iid:49BF7D0EE15EE611B14
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 61 36 34 62 65 63 35 2d 36 30 65 66 2d 31 31 37 39 2d 38 63 66 34 2d 65 31 66 36 63 31 38 61 34 65 65 34 22 2f 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 39 42 46 37 44 30 45 45 31 35 45 45 36 31 31 42 31 34 44 38 45 34 38 39 44 38 30 44 37 45 46 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 35 39 2b 30 32 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 Data Ascii: f:documentID="adobe:docid:photoshop:ca64bec5-60ef-1179-8cf4-e1f6c18a4ee4"/> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:49BF7D0EE15EE611B14D8E489D80D7EF" stEvt:when="2016-08-10T12:02:59+02:00" stEvt:softwareAgent="Adob
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.7	49866	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	795	OUT	GET /fileadmin/user_upload/Park_Domains/Parking_50-50_1420x1082_EN.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:44 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: image/jpeg Content-Length: 192363 Connection: close Cf-Bgj: h2pri ETag: "6321aef7-2ef6b" Last-Modified: Wed, 14 Sep 2022 10:37:43 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-90e33b6e2998f08cc0321cd4ce411156 CF-Cache-Status: HIT Age: 7122 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ce94c44ac100f7d-EWR
2024-10-06 23:05:44 UTC	875	IN	Data Raw: ff d8 ff e1 10 b9 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 36 3a 30 35 3a 33 31 20 31 34 3a 32 32 3a 35 38 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 05 8c a0 03 00 04 00 00 00 01 00 00 04 3a 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2016:05:31 14:22:58:
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 89 74 4f f9 67 0b fe 37 fe fa e5 e8 78 86 e7 62 36 a6 b3 19 ec 0e 79 68 b8 fb a4 c7 a9 df f3 5b f4 14 f8 b1 46 71 32 24 e8 6b 43 4c 19 72 ca 13 11 00 6a 38 b5 17 d5 f3 cf d8 5d 67 fe e1 bf ef 67 fe 94 4b f6 17 59 ff 00 b8 6f fb d9 ff 00 a5 17 a4 6d bf 74 8a f0 4e e2 1a d7 10 06 ae 2c 77 d1 8f de 7f bb ff 00 49 a1 d4 cb 4d 0c 01 98 a4 86 ed 0e b2 37 fb 0b 9a 7f 93 ee db fc e2 93 ee f8 fb 9f b6 3f f7 ab 3e f1 93 b0 ff 00 16 5f f7 cf 9d fe c2 eb 5f f7 0e cf bd 9f fa 51 2f d8 5d 6b fe e1 d9 f7 b3 ff 00 4a 2f 42 bf 1a eb c6 f8 c7 ac d4 eb 18 f1 59 0d d5 a4 3d cf 8f cf 6f bb db b5 40 f4 dc 86 b8 31 cf a4 3a 48 8f 50 12 0b 77 ef 69 81 f9 be 93 d1 fb be 2e b2 23 eb 1f fb d5 a7 98 cb d2 20 fd 25 ff 00 7c f9 ce 56 0e 66 19 60 cb a5 d4 9b 01 2c dd 06 63 e9 46 c2 ef Data Ascii: tOg7xb6yh[Fq2$kCLrj8]ggKYomtN,wIM7?>__Q/]kJ/BY=o@1:HPwi.# %\|Vf`,cF
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: fe b1 f4 3d de ff 00 f4 2b 4b a4 7f c9 1d 43 ff 00 0c 62 ff 00 e7 ae a0 b2 a9 f4 79 b6 d7 d5 05 b1 b1 bb 89 1f 9e 67 7d 7b 5c cf cc ff 00 be 26 64 d8 ef f4 e2 ff 00 b8 f5 24 6c db 2c 79 3f f2 51 6e c9 de d1 eb 6b 23 6f 7f dc 77 bb d8 a0 7d 26 30 d8 ee 9c 43 01 da 5c eb 2d 00 3b f7 7f 93 f4 94 7f 57 88 fd a1 64 7f c5 d9 1a ff 00 d7 13 b8 62 58 77 db 9b 61 7b e4 bf 75 4e 71 24 4b 58 e9 df fb 9b 14 00 77 e3 af 01 cc da bf 97 56 1e be 28 24 8c 36 41 6c 41 b2 c3 07 f7 c3 b7 27 19 18 5c 1c 21 1a ea 2d b3 77 1a 6a e4 2b 99 4b 0b 7d 1b 7d 60 e1 24 ec 2c 2d 32 46 c7 35 db bf 37 de a0 a5 10 89 17 73 fa cf 2c 7f e9 49 2d 8c 7a ac 75 6d 23 08 e4 08 7c d8 05 9e e0 0d 7b e3 63 b6 7e 83 fe 0f fe e4 7e 93 fc 1a 2b 59 ec 73 87 4b 73 9a 1f a3 a6 e3 04 01 fa 17 7e f7 fa 45 Data Ascii: =+KCbyg}{\&d$l,y?Qnk#ow}&0C\-;WdbXwa{uNq$KXwV($6AlA'\!-wj+K}}`$,-2F57s,I-zum#\|{c~~+YsKs~E
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: c8 04 41 12 3c 0a 8f a7 5f ee b7 ee 09 52 6d ee bf e6 e5 3f f9 77 d3 3f ed e1 fd e9 7f cd ca 7f f2 ef a6 7f db c3 fb d7 0b e9 d7 fb ad fb 82 5e 9d 7f ba df b8 21 4a b7 ba ff 00 9b 94 ff 00 e5 df 4c ff 00 b7 87 f7 a5 ff 00 37 29 ff 00 cb be 99 ff 00 6f 0f ef 5c 2f a7 5f ee b7 ee 09 7a 75 fe eb 7e e0 95 2a de eb fe 6e 53 ff 00 97 7d 33 fe de 1f de 97 fc dc a7 ff 00 2e fa 67 fd bc 3f bd 70 be 9d 7f ba df b8 25 e9 d7 fb ad fb 82 54 ab 7b d1 d1 ab ae 97 e3 0e a7 83 63 72 08 27 21 96 03 55 7e 9c 3b 6e 43 e7 d8 eb a7 f4 2a 1f f3 72 9f fc bb e9 9f f6 f0 fe f5 cd f4 dc 5b 2f e8 7d 4e 9c 7a 4d b6 3e dc 78 ad 8d 92 76 bb 71 f6 ff 00 25 aa 7d 1f a0 3d d9 b1 d4 b0 1e dc 61 5b cf e9 1a 58 dd fe dd 9e e6 ed 52 fb 66 5e d8 03 f4 6a fa 7c f3 61 f7 23 0f 70 93 b4 ae bf 4b Data Ascii: A<_Rm?w?^!JL7)o\/_zu~nS}3.g?p%T{cr'!U~;nCr[/}NzM>xvq%}=a[XRf^j\|a#pK
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 40 52 00 00 00 00 00 00 00 00 00 0a 76 65 63 74 6f 72 44 61 74 61 62 6f 6f 6c 01 00 00 00 00 50 67 50 73 65 6e 75 6d 00 00 00 00 50 67 50 73 00 00 00 00 50 67 50 43 00 00 00 00 4c 65 66 74 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 54 6f 70 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 53 63 6c 20 55 6e 74 46 23 50 72 63 40 59 00 00 00 00 00 00 00 00 00 10 63 72 6f 70 57 68 65 6e 50 72 69 6e 74 69 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d Data Ascii: @RvectorDataboolPgPsenumPgPsPgPCLeftUntF#RltTop UntF#RltScl UntF#Prc@YcropWhenPrintingboolcropRectBottomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIM
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 48 6f 72 7a 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 09 76 65 72 74 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 56 65 72 74 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 0b 62 67 43 6f 6c 6f 72 54 79 70 65 65 6e 75 6d 00 00 00 11 45 53 6c 69 63 65 42 47 43 6f 6c 6f 72 54 79 70 65 00 00 00 00 4e 6f 6e 65 00 00 00 09 74 6f 70 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0a 6c 65 66 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0c 62 6f 74 74 6f 6d 4f 75 74 Data Ascii: agTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenumESliceVertAligndefaultbgColorTypeenumESliceBGColorTypeNonetopOutsetlongleftOutsetlongbottomOut
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 31 89 dc 03 e6 1e 9f ea af 4e ea ff 00 58 ae ca 69 ea b7 62 d5 88 d6 17 96 80 f7 b9 d6 9b 36 35 ad 76 c6 ed 6f a2 fd eb a2 ff 00 98 b9 dd fe b0 e5 ff 00 db 55 ff 00 e4 d7 37 f5 47 aa 59 d3 30 ba 9d d5 d4 cb fd 6b 71 29 73 2c 2e 02 0b 73 6d 9f d1 fb be 95 6b 74 7d 74 cf 26 46 05 04 97 17 f3 6f d2 3c bb 94 0e 49 fe f4 be d5 0c 70 fd c8 fd 81 b1 ff 00 31 33 ff 00 f2 ff 00 33 4e 3f 42 ce df db 4b fe 62 67 ff 00 e5 fe 66 bc fe 85 9f f9 35 1f fc 70 7a c7 fd c4 a3 ff 00 04 4d ff 00 8e 17 57 ff 00 b8 b8 ff 00 7b ff 00 bd 2f 72 7f bd 2f b5 5e de 3f dc 8f d8 c3 23 fc 5c 59 94 5a 72 7a ce 4d c5 80 86 6f a1 a6 01 fa 5b 7f 48 83 ff 00 8d 6d 1f f9 67 77 fe c3 b7 ff 00 4a 2b 3f f8 e1 75 7f fb 8b 8f f7 bf fb d2 ff 00 c7 0b ab ff 00 dc 5c 7f bd ff 00 de 9a 64 4e a4 da e0 Data Ascii: 1NXib65voU7GY0kq)s,.smkt}t&Fo<Ip133N?BKbgf5pzMW{/r/^?#\YZrzMo[HmgwJ+?u\dN
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 30 58 e6 bd a0 83 f4 a4 b9 ef 6a d2 c0 ff 00 90 ba 97 fe 13 77 fe dc e1 29 a0 49 16 7b fe ec a1 f8 4d 5d 1c 64 92 49 48 85 24 92 49 29 ff d3 e3 92 49 24 e5 aa 49 24 92 53 b1 d2 3f e4 8e a1 ff 00 86 31 7f f3 d7 50 59 d8 62 f2 7f 42 ca 9e 77 d7 fc e8 ac fb a7 f4 6d 1e b1 1e c7 ff 00 85 db ec ff 00 4a b4 7a 38 9e 93 d4 07 8e 4e 20 ff 00 c0 ba 82 cf fd 9b 97 dd 80 fc c2 64 c5 82 34 fa 8e 21 f6 24 6c db 2c ea 5b ab 9a 70 e7 dd b6 05 3b 4f b7 df ea 43 bd 3f a1 f4 37 ff 00 d6 d4 45 79 ad 71 af ec d8 4e 2d 02 c7 b2 2a d4 49 6f d2 f5 3f 3b 6f e6 2a df b3 32 7f d1 b7 ef 09 7e cc c9 e3 d3 6f de 14 5e c9 fe a7 f8 87 ff 00 56 2a 99 3b a6 e7 12 5c 29 02 77 3b 63 5e c3 00 4b dd 0c df bb 63 1a aa 0d 44 ab 3f b3 32 47 15 b4 7c c2 7f d9 d9 7f b8 3e f0 a4 88 90 f9 88 3e 43 Data Ascii: 0Xjw)I{M]dIH$I)I$I$S?1PYbBwmJz8N d4!$l,[p;OC?7EyqN-Io?;o2~o^V*;\)w;c^KcD?2G\|>>C
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 05 1f 51 11 fd 0e bf dd 93 ca a4 92 4a 06 77 ff d6 e3 92 49 24 e5 aa 49 24 92 52 92 49 24 94 a4 92 49 25 29 24 92 49 4a 49 24 92 52 4a f2 32 29 04 53 6d 95 07 41 70 63 dc d0 63 8d db 08 57 ba 57 57 b3 13 33 d6 cb b2 fb e9 d8 e6 ec de 5d a9 8d ae db 6b f6 76 59 a9 29 31 f1 f1 47 86 f7 d3 b3 1e 4e 0e 19 71 56 da fe f3 d8 b7 eb d6 1b 5a 1b f6 57 10 d8 89 aa b2 74 0c 67 fa 5f f8 3f fa 76 29 0f af 98 41 db be c7 24 19 13 4d 71 ce ef f4 ab 8c 49 4f fa df ea 30 7e ab fa ef 57 67 d6 fc 0b 1e 5e ea 6f 93 13 0d 64 68 03 07 f8 5f e4 aa 9d 4f eb 16 16 67 4f bb 16 aa ae 6d 96 86 80 5e 1a 1a 21 cd 79 9d af 73 bf 35 73 e9 23 2f bc 70 1b e1 e1 e1 3b 7e ea 23 f7 7e 31 5c 5c 5c 43 7f de b5 24 92 4a 9b 71 ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 55 00 00 00 01 01 00 00 00 Data Ascii: QJwI$I$RI$I%)$IJI$RJ2)SmApccWWW3]kvY)1GNqVZWtg_?v)A$MqIO0~Wg^odh_OgOm^!ys5s#/p;~#~1\\\C$Jq8BIM!U
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 31 34 37 39 30 33 38 32 33 32 37 45 36 31 31 39 34 31 38 43 42 37 44 36 31 35 43 43 34 32 45 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 36 2d 30 35 2d 33 31 54 31 34 3a 32 32 3a 34 32 2b 30 32 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 Data Ascii: hotoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:214790382327E6119418CB7D615CC42E" stEvt:when="2016-05-31T14:22:42+02:00" stEvt:softwareAgent="Adobe Photoshop CS6 (Windows)"/> <rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.7	49867	104.16.140.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	833	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/us/park-domains/?tracked=&partnerid=&language=us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw; campaignId=; session=e8de16dbea38ff0797b368d643674e0e
2024-10-06 23:05:44 UTC	469	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Tue, 01 Oct 2024 14:50:16 GMT ETag: "66fc0c28-4d7" Strict-Transport-Security: max-age=2592000 Server: cloudflare CF-RAY: 8ce94c44ae3742cf-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Tue, 08 Oct 2024 23:05:44 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-10-06 23:05:44 UTC	900	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-10-06 23:05:44 UTC	339	IN	Data Raw: 2c 6e 3d 30 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 72 79 7b 69 28 72 5b 6e 5d 2e 63 6f 6e 74 65 6e 74 29 7d 63 61 74 63 68 28 63 29 7b 65 28 63 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 72 79 7b 63 28 74 29 2c 6f 28 74 29 2c 61 28 74 29 7d 63 61 74 63 68 28 72 29 7b 65 28 72 29 7d 7d 76 61 72 20 6c 3d 22 2f 63 64 6e 2d 63 67 69 2f 6c 2f 65 6d 61 69 6c 2d 70 72 6f 74 65 63 74 69 6f 6e 23 22 2c 75 3d 22 2e 5f 5f 63 66 5f 65 6d 61 69 6c 5f 5f 22 2c 66 3d 22 64 61 74 61 2d 63 66 65 6d 61 69 6c 22 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 28 64 6f 63 75 6d 65 6e 74 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 Data Ascii: ,n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r)}}var l="/cdn-cgi/l/email-protection#",u=".__cf_email__",f="data-cfemail",d=document.createElement("div");i(document),function(){var e=document.currentScr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.7	49869	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	787	OUT	GET /fileadmin/user_upload/Park_Domains/Parking_einrichten.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:44 UTC	492	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: image/jpeg Content-Length: 47523 Connection: close Age: 2013 Cf-Bgj: h2pri ETag: "6321aef7-b9a3" Last-Modified: Wed, 14 Sep 2022 10:37:43 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-4487054963bf0b0976fa0262c9bfd021 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ce94c44af3fde92-EWR
2024-10-06 23:05:44 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0c 6a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 07 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 62 00 00 00 1b 01 05 00 01 00 00 00 6a 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 72 00 00 00 32 01 02 00 14 00 00 00 8e 00 00 00 69 87 04 00 01 00 00 00 a4 00 00 00 d0 00 00 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 00 32 30 31 36 3a 30 38 3a 31 30 20 31 32 3a 30 32 3a 32 32 00 00 00 03 00 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 8c 05 00 00 03 a0 04 00 01 00 00 00 3a 04 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 Data Ascii: JFIFHHjExifII*bj(1r2i''Adobe Photoshop CS4 Windows2016:08:10 12:02:22:
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: e8 d8 2f ac bf e8 6e 1b a7 8e 56 d9 99 d7 95 ca 65 f5 21 45 de 93 6b f5 0b 63 79 26 39 d7 6b 74 2b 46 8c fc 87 50 c3 55 8e 15 bd a0 b6 60 90 3c 24 ab 79 71 19 51 1a 79 b4 b0 e7 8c 78 a2 75 f2 65 9b 91 4d b9 af 65 60 87 56 36 bc 91 00 b9 a6 1d 08 29 40 dc 5d f9 ce fa 4e ee 7e 25 24 ec 71 31 8d 13 75 f9 23 24 a3 29 13 11 57 f9 a9 24 92 4e 58 a4 92 4c 92 94 92 49 24 a5 24 92 49 29 49 26 4b 94 94 83 3f 28 e2 e2 be e6 ea fd 1b 58 3c 6e 77 d1 ff 00 37 e9 ae 64 97 39 c5 cf 25 ce 71 97 38 ea 49 3d ca e9 f3 70 59 99 48 a9 ef 75 7b 5d bc 39 a0 1d 60 b7 dc d7 7f 59 73 d9 78 96 e1 de 69 b6 0e 81 cd 70 e1 cd 3f 9c d9 52 61 94 4d 80 75 59 96 13 14 48 d1 02 3e 1e 5b f0 ef 6d cd 9d bc 5a cf de 67 e7 0f eb 7e e2 02 67 46 d3 f0 53 55 b1 5d 3d 76 9d 8c 8e c7 c9 25 1a 9a e6 Data Ascii: /nVe!Ekcy&9kt+FPU`<$yqQyxueMe`V6)@]N~%$q1u#$)W$NXLI$$I)I&K?(X<nw7d9%q8I=pYHu{]9`Ysxip?RaMuYH>[mZg~gFSU]=v%
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: d1 d9 fe 6b 93 1a ed 11 2c 78 93 02 43 b5 3e 01 34 02 05 09 0f b3 ff 00 42 5c 48 26 cc 4f db ff 00 a0 b6 7f 65 66 7f 23 fc e3 ff 00 91 4b f6 56 67 f2 3f ce 3f f9 15 1a da da b1 1f 6d b4 07 bc 58 1a d1 60 70 d0 84 d9 74 9d f5 ba 9a 8b 5a fa 98 e2 18 1c 44 99 25 0b 95 d5 8f 3a ff 00 d0 93 51 ab e1 3e 57 ff 00 a0 ad 7e 06 4d 34 ba c7 86 ed 6f 3b 4c 9d 74 f0 56 3a 8e b8 b8 ee 1c 69 af c5 81 51 15 da e0 0b 58 f7 03 c1 0d 71 05 5e c4 7d 79 58 c7 0e d3 0f 6f d0 3d e0 7d 12 df e5 d7 fb a9 4a c5 48 9b e1 3a d7 62 a8 d1 b8 81 5c 43 4b ee 1c f4 91 ec c1 cb ac c7 a6 5e 3b 39 9a 83 ff 00 7e 6a 9e 26 3b 9b 78 fb 46 3b dd 59 04 6a d3 00 9e 1c ef e4 a7 f1 0a bb b5 82 12 ba 22 bc d1 e1 7f 4c a7 fa e3 f2 15 3e a5 fd 31 df d5 67 e4 4f 99 86 fc 57 8b 6a 27 d2 9d 08 e5 87 c0 Data Ascii: k,xC>4B\H&Oef#KVg??mX`ptZD%:Q>W~M4o;LtV:iQXq^}yXo=}JH:b\CK^;9~j&;xF;Yj"L>1gOWj'
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 10 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 1e 00 00 00 00 00 04 00 00 00 00 38 42 49 4d 04 1a 00 00 00 00 03 59 00 00 00 06 00 00 00 00 00 00 00 00 00 00 04 3a 00 00 05 8c 00 00 00 12 00 50 00 61 00 72 00 6b 00 69 00 6e 00 67 00 5f 00 65 00 69 00 6e 00 72 00 69 00 63 00 68 00 74 00 65 00 6e 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 05 8c 00 00 04 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 00 00 00 02 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 Data Ascii: @@8BIM8BIMY:Parking_einrichten:nullboundsObjcRct1Top longLef
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ec e8 d8 2f ac bf e8 6e 1b a7 8e 56 d9 99 d7 95 ca 65 f5 21 45 de 93 6b f5 0b 63 79 26 39 d7 6b 74 2b 46 8c fc 87 50 c3 55 8e 15 bd a0 b6 60 90 3c 24 ab 79 71 19 51 1a 79 b4 b0 e7 8c 78 a2 75 f2 65 9b 91 4d b9 af 65 60 87 56 36 bc 91 00 b9 a6 1d 08 Data Ascii: Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?/nVe!Ekcy&9kt+FPU`<$yqQyxueMe`V6
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: ba 12 f3 dd b5 95 81 65 0d f5 1a 7d 4a c6 a4 f0 40 f1 70 fd df e5 2a aa ef 4d c9 73 6d 18 ee d6 b7 ce d0 7b 18 98 fe ab d5 6c aa 85 39 0f a9 bf 44 19 6f c0 8d cd 4e 89 36 63 2d 4e e0 f7 0b 64 05 09 47 41 b1 1d 8a 34 93 24 9c b1 49 24 92 4a 7f ff d3 eb 92 49 32 be e6 ae 99 24 92 52 95 ea 58 fc 8c 2a d9 43 80 b6 87 ee 20 fc 5c 5a 7f e9 2a 20 12 60 09 27 80 35 2a 5e 8d df e8 df fe 6b bf b9 09 0b ad 6a b5 5d 13 57 a5 d8 a6 fe 46 37 50 c8 da 1e 2b 68 6e a0 34 9e 4f e7 6a 10 7f 65 e6 7f 23 fc e3 ff 00 91 55 bd 2b ff 00 d1 d9 fe 6b 93 1a ed 11 2c 78 93 02 43 b5 3e 01 34 02 05 09 0f b3 ff 00 42 5c 48 26 cc 4f db ff 00 a0 b6 7f 65 66 7f 23 fc e3 ff 00 91 4b f6 56 67 f2 3f ce 3f f9 15 1a da da b1 1f 6d b4 07 bc 58 1a d1 60 70 d0 84 d9 74 9d f5 ba 9a 8b 5a fa 98 e2 Data Ascii: e}J@pMsm{l9DoN6c-NdGA4$I$JI2$RXC \Z* `'5*^kj]WF7P+hn4Oje#U+k,xC>4B\H&Oef#KVg??mX`ptZ
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 34 2e 32 2e 32 2d 63 30 36 33 20 35 33 2e 33 35 32 36 32 34 2c 20 32 30 30 38 2f 30 37 2f 33 30 2d 31 38 3a 31 32 3a 31 38 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 Data Ascii: :xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 2c 33 37 31 32 31 2c 33 37 31 32 32 2c 34 30 39 36 32 2c 34 30 39 36 33 2c 33 37 35 31 30 2c 34 30 39 36 34 2c 33 36 38 36 37 2c 33 36 38 36 38 2c 33 33 34 33 34 2c 33 33 34 33 37 2c 33 34 38 35 30 2c 33 34 38 35 32 2c 33 34 38 35 35 2c 33 34 38 35 36 2c 33 37 33 37 37 2c 33 37 33 37 38 2c 33 37 33 37 39 2c 33 37 33 38 30 2c 33 37 33 38 31 2c 33 37 33 38 32 2c 33 37 33 38 33 2c 33 37 33 38 34 2c 33 37 33 38 35 2c 33 37 33 38 36 2c 33 37 33 39 36 2c 34 31 34 38 33 2c 34 31 34 38 34 2c 34 31 34 38 36 2c 34 31 34 38 37 2c 34 31 34 38 38 2c 34 31 34 39 32 2c 34 31 34 39 33 2c 34 31 34 39 35 2c 34 31 37 32 38 2c 34 31 37 32 39 2c 34 31 37 33 30 2c 34 31 39 38 35 2c 34 31 39 38 36 2c 34 31 39 38 37 2c 34 31 39 38 38 2c 34 31 39 38 39 2c 34 31 39 39 30 2c 34 31 Data Ascii: ,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.7	49868	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	705	OUT	GET /dist/js/typo3/app.min.js?1724922195 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:44 UTC	521	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 29 Aug 2024 09:03:15 GMT X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-4e30bc8413ca8e1d6162b53846b369fd ETag: W/"66d03953-1f646" X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 5251 Server: cloudflare CF-RAY: 8ce94c44aca542e9-EWR
2024-10-06 23:05:44 UTC	848	IN	Data Raw: 37 64 39 35 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: 7d95/! For license information please see app.min.js.LICENSE.txt /!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 6e 2e 64 28 74 2c 22 61 22 2c 74 29 2c 74 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 6e 2e 70 3d 22 2f 64 69 73 74 2f 22 2c 6e 28 6e 2e 73 3d 39 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 65 78 74 65 6e 64 3d 73 2c 74 2e 69 6e 64 65 78 4f 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 Data Ascii: ult}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/dist/",n(n.s=9)}([function(e,t,n){"use strict";t.__esModule=!0,t.extend=s,t.indexOf=function(e,t){for(var n=0,r=e.length;n<r;n++)if(
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 72 69 70 74 69 6f 6e 22 2c 22 66 69 6c 65 4e 61 6d 65 22 2c 22 6c 69 6e 65 4e 75 6d 62 65 72 22 2c 22 65 6e 64 4c 69 6e 65 4e 75 6d 62 65 72 22 2c 22 6d 65 73 73 61 67 65 22 2c 22 6e 61 6d 65 22 2c 22 6e 75 6d 62 65 72 22 2c 22 73 74 61 63 6b 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 6c 6f 63 2c 69 3d 76 6f 69 64 20 30 2c 61 3d 76 6f 69 64 20 30 2c 73 3d 76 6f 69 64 20 30 2c 75 3d 76 6f 69 64 20 30 3b 6e 26 26 28 69 3d 6e 2e 73 74 61 72 74 2e 6c 69 6e 65 2c 61 3d 6e 2e 65 6e 64 2e 6c 69 6e 65 2c 73 3d 6e 2e 73 74 61 72 74 2e 63 6f 6c 75 6d 6e 2c 75 3d 6e 2e 65 6e 64 2e 63 6f 6c 75 6d 6e 2c 65 2b 3d 22 20 2d 20 22 2b 69 2b 22 3a 22 2b 73 29 3b 66 6f 72 28 76 61 72 20 6c 3d 45 72 72 6f 72 2e 70 72 6f 74 6f 74 Data Ascii: ription","fileName","lineNumber","endLineNumber","message","name","number","stack"];function o(e,t){var n=t&&t.loc,i=void 0,a=void 0,s=void 0,u=void 0;n&&(i=n.start.line,a=n.end.line,s=n.start.column,u=n.end.column,e+=" - "+i+":"+s);for(var l=Error.protot
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 5f 43 48 41 4e 47 45 53 3d 7b 31 3a 22 3c 3d 20 31 2e 30 2e 72 63 2e 32 22 2c 32 3a 22 3d 3d 20 31 2e 30 2e 30 2d 72 63 2e 33 22 2c 33 3a 22 3d 3d 20 31 2e 30 2e 30 2d 72 63 2e 34 22 2c 34 3a 22 3d 3d 20 31 2e 78 2e 78 22 2c 35 3a 22 3d 3d 20 32 2e 30 2e 30 2d 61 6c 70 68 61 2e 78 22 2c 36 3a 22 3e 3d 20 32 2e 30 2e 30 2d 62 65 74 61 2e 31 22 2c 37 3a 22 3e 3d 20 34 2e 30 2e 30 20 3c 34 2e 33 2e 30 22 2c 38 3a 22 3e 3d 20 34 2e 33 2e 30 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 68 65 6c 70 65 72 73 3d 65 7c 7c 7b 7d 2c 74 68 69 73 2e 70 61 72 74 69 61 6c 73 3d 74 7c 7c 7b 7d 2c 74 68 69 73 2e 64 65 63 6f 72 61 74 6f 72 73 3d 6e 7c 7c 7b 7d 2c 61 2e 72 65 67 69 73 74 65 72 44 65 66 61 75 6c 74 48 65 6c 70 65 72 73 28 74 Data Ascii: _CHANGES={1:"<= 1.0.rc.2",2:"== 1.0.0-rc.3",3:"== 1.0.0-rc.4",4:"== 1.x.x",5:"== 2.0.0-alpha.x",6:">= 2.0.0-beta.1",7:">= 4.0.0 <4.3.0",8:">= 4.3.0"};function c(e,t,n){this.helpers=e\|\|{},this.partials=t\|\|{},this.decorators=n\|\|{},a.registerDefaultHelpers(t
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 65 3d 21 30 2c 74 2e 72 65 67 69 73 74 65 72 44 65 66 61 75 6c 74 48 65 6c 70 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 2e 64 65 66 61 75 6c 74 28 65 29 2c 69 2e 64 65 66 61 75 6c 74 28 65 29 2c 61 2e 64 65 66 61 75 6c 74 28 65 29 2c 73 2e 64 65 66 61 75 6c 74 28 65 29 2c 75 2e 64 65 66 61 75 6c 74 28 65 29 2c 6c 2e 64 65 66 61 75 6c 74 28 65 29 2c 63 2e 64 65 66 61 75 6c 74 28 65 29 7d 2c 74 2e 6d 6f 76 65 48 65 6c 70 65 72 54 6f 48 6f 6f 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 68 65 6c 70 65 72 73 5b 74 5d 26 26 28 65 2e 68 6f 6f 6b 73 5b 74 5d 3d 65 2e 68 65 6c 70 65 72 73 5b 74 5d 2c 6e 7c 7c 64 65 6c 65 74 65 20 65 2e 68 65 6c 70 65 72 73 5b 74 5d 29 7d 3b 76 61 72 20 6f 3d 72 28 6e 28 31 37 29 29 2c 69 3d 72 28 6e 28 Data Ascii: e=!0,t.registerDefaultHelpers=function(e){o.default(e),i.default(e),a.default(e),s.default(e),u.default(e),l.default(e),c.default(e)},t.moveHelperToHooks=function(e,t,n){e.helpers[t]&&(e.hooks[t]=e.helpers[t],n\|\|delete e.helpers[t])};var o=r(n(17)),i=r(n(
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 6f 66 20 65 3f 74 2e 6d 65 74 68 6f 64 73 3a 74 2e 70 72 6f 70 65 72 74 69 65 73 2c 6e 29 7d 2c 74 2e 72 65 73 65 74 4c 6f 67 67 65 64 50 72 6f 70 65 72 74 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 65 6c 65 74 65 20 73 5b 65 5d 7d 29 29 7d 3b 76 61 72 20 72 2c 6f 3d 6e 28 32 36 29 2c 69 3d 6e 28 37 29 2c 61 3d 28 72 3d 69 29 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 72 3a 7b 64 65 66 61 75 6c 74 3a 72 7d 2c 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 2e 77 68 69 74 65 6c 69 73 74 5b 74 5d 3f 21 30 3d 3d 3d 65 2e 77 68 69 Data Ascii: of e?t.methods:t.properties,n)},t.resetLoggedProperties=function(){Object.keys(s).forEach((function(e){delete s[e]}))};var r,o=n(26),i=n(7),a=(r=i)&&r.__esModule?r:{default:r},s=Object.create(null);function u(e,t){return void 0!==e.whitelist[t]?!0===e.whi
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 65 72 73 46 72 6f 6d 55 72 6c 28 74 68 69 73 2e 24 72 73 73 42 6f 78 44 6f 6d 45 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 64 61 74 61 2d 73 6f 75 72 63 65 22 29 29 3b 74 68 69 73 2e 72 61 6e 64 6f 6d 69 7a 65 3d 21 30 3d 3d 3d 74 2e 72 61 6e 64 6f 6d 69 7a 65 52 65 66 72 65 73 68 3b 76 61 72 20 75 3d 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 24 72 73 73 42 6f 78 44 6f 6d 45 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 64 61 74 61 2d 63 6f 75 6e 74 22 29 2c 31 30 29 3b 21 69 73 4e 61 4e 28 75 29 26 26 75 3e 30 26 26 28 74 68 69 73 2e 6d 61 78 49 74 65 6d 43 6f 75 6e 74 3d 75 29 3b 76 61 72 20 6c 3d 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 24 72 73 73 42 6f 78 44 6f 6d 45 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 64 61 74 61 2d 74 79 70 65 22 29 2c 31 30 29 3b 69 73 Data Ascii: ersFromUrl(this.$rssBoxDomElement.attr("data-source"));this.randomize=!0===t.randomizeRefresh;var u=parseInt(this.$rssBoxDomElement.attr("data-count"),10);!isNaN(u)&&u>0&&(this.maxItemCount=u);var l=parseInt(this.$rssBoxDomElement.attr("data-type"),10);is
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 3b 72 3d 5b 6e 2c 74 2c 6e 28 33 29 2c 6e 28 31 33 29 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6e 28 31 35 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 68 69 73 2e 24 72 73 73 42 6f 78 44 6f 6d 45 6c 65 6d 65 6e 74 3d 65 2c 74 68 69 73 2e 74 79 70 65 3d 74 2c 74 68 69 73 2e 6c 61 6e 67 75 61 67 65 3d 72 2e 63 6f 6e 76 65 72 74 4c 61 6e 67 75 61 67 65 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 6c 61 6e 67 5d 22 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 29 2c 74 Data Ascii: nction(e,t,n){var r,o;r=[n,t,n(3),n(13)],void 0===(o=function(e,t,r,o){"use strict";var i=n(15);return function(){function e(e,t){this.$rssBoxDomElement=e,this.type=t,this.language=r.convertLanguage(document.querySelector("[lang]").getAttribute("lang")),t
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 73 2e 6f 62 73 65 72 76 65 72 5b 65 5d 5b 74 5d 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 68 69 73 2e 6f 62 73 65 72 76 65 72 5b 65 5d 5b 74 5d 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 74 68 69 73 2e 6f 62 73 65 72 76 65 72 5b 65 5d 5b 74 5d 5b 72 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 41 70 70 6c 69 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6f 3b 74 68 69 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 73 5b 65 5d 26 26 74 68 69 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 73 5b 65 5d 5b 74 5d 26 26 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 68 69 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 73 5b 65 5d 5b 74 5d 29 3b 74 72 79 7b 6f 3d 4a 53 4f 4e 2e 70 61 Data Ascii: s.observer[e][t].length>0)for(var r=0;r<this.observer[e][t].length;r++)this.observer[e][t][r].call(this,n)},e.prototype.loadApplication=function(e,t,r){var o;this.applications[e]&&this.applications[e][t]&&r.call(this,this.applications[e][t]);try{o=JSON.pa
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 69 6f 6e 73 5b 65 5d 2e 72 65 70 6c 61 63 65 28 2f 23 28 2e 2a 3f 29 23 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 74 26 26 74 5b 72 5d 3f 74 5b 72 5d 3a 65 7d 29 29 3a 65 7d 2c 65 7d 28 29 7d 2e 61 70 70 6c 79 28 74 2c 5b 6e 2c 74 5d 29 29 7c 7c 28 65 2e 65 78 70 6f 72 74 73 3d 72 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 28 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 2e 64 65 66 61 75 6c 74 3a 65 29 7d 65 2e 65 78 70 6f 72 74 73 3d 28 72 2e 64 65 66 61 75 6c 74 7c 7c 72 29 2e 74 65 6d 70 6c 61 74 65 28 7b 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 69 2c 61 2c 73 2c 75 29 7b 76 Data Ascii: ranslations[e].replace(/#(.*?)#/g,(function(n,r){return t&&t[r]?t[r]:e})):e},e}()}.apply(t,[n,t]))\|\|(e.exports=r)},function(e,t,n){var r=n(4);function o(e){return e&&(e.__esModule?e.default:e)}e.exports=(r.default\|\|r).template({1:function(e,t,r,i,a,s,u){v

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b6fa471e-401e-0067-43e5-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230544Z-1657d5bbd487nf59mzf5b3gk8n000000025g00000000sw80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:44 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 77012b0e-b01e-0097-0bff-164f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230544Z-1657d5bbd48wd55zet5pcra0cg00000002kg00000000hk29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:44 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.7	49873	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	546	OUT	GET /fileadmin/user_upload/park-domains_bild.png HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:44 UTC	478	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: image/png Content-Length: 537573 Connection: close Last-Modified: Mon, 29 Apr 2024 12:21:40 GMT ETag: "662f90d4-833e5" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-9b84c395abcc4c73ae00dac8eb478e7c X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 5387 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ce94c46997c0ca2-EWR
2024-10-06 23:05:44 UTC	891	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 f0 00 00 01 f4 08 06 00 00 00 72 e4 0c 72 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 08 33 7a 49 44 41 54 78 01 ec fd 49 af 6d 4b 92 26 86 99 fb da a7 ef ee 7b 2f 22 23 b2 8a 59 44 55 b1 8a c9 6a 12 20 04 15 41 40 84 04 8e 05 70 20 fd 06 fd 13 cd f4 03 38 d1 0f 10 c0 a9 40 0d 34 12 20 80 92 08 65 15 ab 90 ca cc ca ca 2e e2 bd 77 fb e6 dc d3 9f bd 96 6b 59 6f ee 7b df c8 cb d9 1d d8 f7 e2 c6 39 67 ef d5 b8 9b 9b 77 9f 99 9b 95 7f f0 9f ff ef 1b 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 f8 96 d0 2a 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 f8 e6 90 04 7e 22 Data Ascii: PNGIHDRrrpHYssRGBgAMAa3zIDATxImK&{/"#YDUj A@p 8@4 e.wkYo{9gw$D"H$D"H$D"*$D"H$D"H$D"~"
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 3f 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 6f 10 49 e0 27 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 f1 0d 22 09 fc 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 be 41 24 81 9f 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 c4 37 88 24 f0 13 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 f8 06 91 04 7e 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 df 20 92 c0 4f 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 e2 1b 44 12 f8 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 7c 83 48 02 3f 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 6f 10 49 e0 27 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 f1 0d 22 09 fc 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 Data Ascii: ?H$D"H$D"H$oI'D"H$D"H$D""D"H$D"H$D"H$A$H$D"H$D"H$7$D"H$D"H$D"~"H$D"H$D"H$ O$D"H$D"H$DDD"H$D"H$D"H\|H?H$D"H$D"H$oI'D"H$D"H$D""D"H$D"H$D"H
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 5a 5b 4c 0e 5a 26 6b 8b c6 05 18 c7 e8 16 06 99 12 fe e6 f1 18 ba 49 b5 68 1f d6 37 d3 02 81 e7 37 c4 bc ea 5c 9d 64 ae 6f 3e 6e c5 36 fc d2 5c d5 a4 bf ab 6c 62 1d 54 66 fb c6 23 fb 9b d6 2f 45 aa c9 eb 11 d5 cd 5e 92 10 d6 51 a1 af 4b 81 f5 da 12 be 5f a8 3e 8d fa 56 53 bd 92 6b e7 f5 f3 cd fa f9 76 9d 8b 1e 1e 1f e1 fe f1 61 ed 7f cf 70 b0 d9 c0 c9 aa 2b c7 47 47 a4 73 51 d6 dc 5e 71 ec 2b f2 99 3e ba 9a ae 8c f3 7c 94 85 cb 30 ea 0e d8 fa 12 8b ca 55 5b 86 f1 11 cb c3 6d c4 b3 14 ca 6d b1 25 59 9d 0a 8d e9 74 3d 3e a3 ca d4 89 ed 24 e3 44 a1 7b b4 3c 33 a8 8e aa 1f 38 cb 4b db 8b eb 44 f3 02 3f 80 d7 c5 74 cf b4 ea cd 16 df ee ed 10 e4 8f df bb 0e 45 fd 69 dc c7 97 6d e8 7b 53 98 bb d6 af d6 36 79 7a 5a db 63 ed c3 a8 0b db ed 96 7e 16 7a 37 2b 30 5e Data Ascii: Z[LZ&kIh77\do>n6\lbTf#/E^QK_>VSkvap+GGsQ^q+>\|0U[mm%Yt=>$D{<38KD?tEim{S6yzZc~z7+0^
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 79 ef 1b 7d 3b 21 11 3c e0 f6 91 c3 91 8c e3 8d 58 ac c7 ae 87 a1 7b 46 17 fb 7d c7 20 20 65 d0 cd b0 d6 ad 23 44 a0 27 c3 87 aa ee 10 90 4b 5b e0 4b e0 cd 3a 18 31 af cf 8c e4 6f 7c e6 78 2f c9 a9 b4 fe be 20 fe f1 39 b1 8c f1 1e 25 9e 89 b0 2f 4a c8 33 35 c4 44 91 7b ea 29 19 40 9f 69 5b e2 7f 75 b7 8c d1 4b 53 09 30 7b 67 a8 6f 47 ae c6 f2 2a a1 1b 3d 1c ab d0 e6 45 36 ec 81 18 63 52 61 11 af 3c f1 9e eb 08 4a 21 8a 02 89 14 e5 c0 46 05 30 d2 68 a7 ad 58 28 5c 2e 21 2b fc da 62 9e 8f 9d 91 ad ec 39 31 d1 5c b6 f1 fd 5e 34 bd a7 f7 d4 ec 8d 0a 60 5e 8b a0 9e be 10 9c d0 f1 e3 d2 ec 39 4c 2e 80 8d 79 8a d1 b8 b3 63 24 b0 71 6b 8f 21 01 db 4e 84 d0 44 2e 4d 0c 03 4c 60 35 23 09 47 bd 1e 3f 8b 24 62 35 2f f2 de b8 68 de f7 41 3f 44 98 61 7c 15 ef 48 ab 53 Data Ascii: y};!<X{F} e#D'K[K:1o\|x/ 9%/J35D{)@i[uKS0{goG*=E6cRa<J!F0hX(\.!+b91\^4`^9L.yc$qk!ND.ML`5#G?$b5/hA?Da\|HS
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: d5 2c 43 f0 f9 cc 8c 76 c1 18 12 0c d4 ea 01 2c 25 02 3d 3d a8 64 24 cb 6d e9 d6 1f d3 14 bd 99 bd bd 6b 29 3b e1 6b e2 4f 26 30 1b f8 c8 c2 cf 46 c3 60 2d 1a ea 25 18 3f c1 c7 17 1d 8b 47 c3 41 2c 1f 04 0d 00 7d 46 18 cb b5 cd 62 f9 f6 3d a3 ca 82 6c 3c 41 34 55 3f c1 30 ce da ae e3 ae 0f aa 9f da 1e 6d 28 83 af 3b 42 39 9a 7b 65 ab ac 7d ec 52 dd 66 3d f6 f5 4a 08 3f 24 3a 58 b8 39 65 88 6d a0 64 bb 1a 05 d8 38 cc 9e ea dd 38 a5 f3 97 cc 7b 4a d4 eb 6c d9 64 2c 69 a6 2f 71 0d d1 80 4f c4 49 db ad ff 36 eb 1a 99 8d b0 b2 26 d5 f7 4c ae 2b fa 9e 2a 0e 1c 8b 18 7a 54 57 e8 24 d3 6a 10 dd a2 c7 3d 92 d9 aa b2 58 1f f0 75 db 66 2d d7 01 ae 27 6b e1 d3 47 e4 08 40 34 7f 37 c6 e8 f8 46 c6 11 e0 6b d1 90 86 c0 75 fd 22 c6 91 7e 5c f1 fa 92 61 a9 ec d7 f1 7e 7c Data Ascii: ,Cv,%==d$mk);kO&0F`-%?GA,}Fb=l<A4U?0m(;B9{e}Rf=J?$:X9emd88{Jld,i/qOI6&L+*zTW$j=Xuf-'kG@47Fku"~\a~\|
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 9b cc be 40 90 59 a1 87 67 33 4f 5d ba 67 8e 75 8e cf 19 89 93 91 70 19 7f 1f bf 8f 84 c8 2e 01 0c a6 0b 00 1e 26 22 9a 08 6a 47 4c e1 47 e2 c5 5a 9c a0 28 ac 44 64 b0 6a 31 ef c3 60 80 29 45 13 70 2a d9 d1 cb c6 33 05 47 72 57 14 b5 a3 a2 43 fd 84 2c 86 36 78 73 83 90 07 a3 bc 28 04 01 b6 21 ca 55 c9 09 7f 16 c8 a7 f8 51 2d 91 90 e8 8d 4c fb 88 4f 85 86 7b 8a ed b1 2c 91 bc d7 b6 58 4c 36 f1 a7 dd 63 61 a7 fa 3a ab 4c b9 6d 47 32 11 a4 ef 16 88 d2 a4 ef c5 6b 9b c9 89 66 7a c8 c9 b7 7b f4 64 51 b1 0e d8 87 f1 00 23 e1 e2 33 9b c4 44 6f fb ca 0d e0 3a 35 c8 54 43 c1 e8 e5 63 e8 0e 8c cd 0c ad 74 84 c9 3e 42 d9 08 b6 ea 2c 8a cb 1c 4c df b5 80 b5 f4 a1 40 f6 f5 11 95 2b ca b0 12 71 af b1 4b f8 f3 e7 a7 2d 7c bc be 81 db 4f 37 f0 ee dd 7b 78 f5 f3 cf f0 f2 Data Ascii: @Yg3O]gup.&"jGLGZ(Ddj1`)Ep*3GrWC,6xs(!UQ-LO{,XL6ca:LmG2kfz{dQ#3Do:5TCct>B,L@+qK-\|O7{x
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 06 33 1d f5 a3 97 76 ec df dd 89 31 e9 57 5a 36 90 67 2d 41 f6 1e c2 64 b1 d0 45 10 ca 36 12 f7 51 0f 4d f6 2e 51 88 a7 9f 54 b9 58 4e da 7f 79 0c e3 5c 01 52 b4 b6 98 87 be 87 b0 81 41 df b4 ad d8 70 c7 de da e2 f8 51 c0 42 12 ba 8c 8b e8 e1 04 dd da a4 ca fc 33 c9 89 4b 4d 8e 4c e5 a9 64 e4 13 91 b0 1e 36 10 03 89 9c 5a b4 6e 23 c9 e4 9b ce 79 ad 9f db 21 7a a9 17 1b 5f 77 e7 27 10 b2 1c 24 9f 13 3f 7b cc 51 03 81 7c 56 5d 42 4c 75 cc 1f a0 65 59 4d 69 2b 69 8f 09 6a 31 39 2d 9d 19 5a 38 49 ad 26 86 d6 02 a0 0c 0e 0f 78 bd 7d 50 ab 8d 79 8b 18 bc d0 d9 06 74 cc 07 2d af f7 03 57 09 ae b7 e5 72 22 39 bb 5e 8f fa 15 f5 1c a0 75 46 3d d5 27 0f 7b e4 06 94 89 4e c2 14 c9 29 13 e6 c7 f5 9f 26 fa dd 37 7e b9 2e 4f 49 e0 27 12 89 44 22 91 48 24 12 5f 83 ff f4 Data Ascii: 3v1WZ6g-AdE6QM.QTXNy\RApQB3KMLd6Zn#y!z_w'$?{Q\|V]BLueYMi+ij19-Z8I&x}Pyt-Wr"9^uF='{N)&7~.OI'D"H$_
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: cf 3d 89 a0 3f e3 46 7e 24 24 74 f3 a5 24 fe 48 78 8f c4 d5 3e 22 5d af df 31 8c 94 9e e8 8d d7 1a c1 59 60 87 34 1b 61 04 45 01 f3 78 d3 ba c5 67 ff 2e 8f 5a dd 98 ea df bd 3c 5b 47 74 f5 a4 55 ff 1c fa 09 ee 21 0e 42 d3 fa 95 be 61 37 82 77 61 86 5d 65 0c 42 1c 6a 38 0a 90 47 2d 5d 98 0e 25 ee 41 b8 5a 39 66 cf 81 93 57 bd ab 42 6e c9 e7 aa 8c fa 30 a9 a3 cb 1c 49 af c6 11 70 16 6d f7 22 fa e8 45 1f 4f 24 08 bb ab 34 2e 87 02 80 de eb 93 f4 44 05 5c 5c 1a a3 2e 2a 19 ba 4f a6 46 a8 06 99 17 d3 0d 7f f4 ef d2 13 97 35 0b d9 0d 4d 0d 4a 69 c3 fb 00 f6 19 75 74 c0 f0 d8 f7 ee 51 b8 70 00 6e bb ae 8c ef 6e bb 06 a5 f8 9d d4 12 4c d6 ad 75 c4 ce 6e bd 94 1c 25 49 0b 21 13 74 b9 ed 69 af 7d 32 31 f2 55 c3 e5 84 44 df 6d ec 7f 52 8f e6 49 2d 15 44 e4 88 6e fd Data Ascii: =?F~$$t$Hx>"]1Y`4aExg.Z<[GtU!Ba7wa]eBj8G-]%AZ9fWBn0Ipm"EO$4.D\\.*OF5MJiutQpnnLun%I!ti}21UDmRI-Dn
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: b5 99 d7 ba 1a be e6 b9 37 40 f7 73 54 38 f9 d3 d8 83 7c 5e 7a 8f fc da 95 d5 f3 1e f4 61 72 98 f8 d4 10 21 d3 a8 0b cd 4d 3a 71 9e 55 a2 3f d6 6f aa 4a cc 2e 56 0e ec cf d3 e4 b2 37 cd 09 7a 59 8b e7 cf 19 e7 e1 28 43 d7 d9 5d 23 91 b6 31 13 bc 4f 54 57 0a 57 65 84 7c 9f 1b 40 1b df c7 6d 4d 38 de bc fd c3 18 c7 75 9a 64 8d 25 f1 ed e7 7e 9d 32 2f 9e 34 9b 4e fd 28 89 0f 3e 0a 57 e9 a7 b5 1b ab 54 a6 b6 d4 eb ea df a4 90 be 56 19 8c 37 9d 3c 5d f6 d1 d0 a0 ba a5 c9 62 91 68 5f 9a 1b cd e8 dd b3 38 81 c8 b3 31 39 ed 76 5d 0f ce 5b 8e 71 4f 6d 59 78 86 a9 72 cc 0b c7 41 4c 04 7d 74 b0 8e 61 94 23 a9 9a 9e ab 91 47 cb 5e aa f7 65 3d 41 a5 63 8b 8e bf da 0f 26 31 00 e0 3a dd 8d 8b 0b 1b 7b 64 fc e2 2e 2a 27 6d e4 44 a0 9f 08 12 63 72 e8 07 18 7e cb e7 9b 4a Data Ascii: 7@sT8\|^zar!M:qU?oJ.V7zY(C]#1OTWWe\|@mM8ud%~2/4N(>WTV7<]bh_819v][qOmYxrAL}ta#G^e=Ac&1:{d.*'mDcr~J
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 21 b5 7b e7 97 da 76 dc d4 ef 12 28 11 d1 cb 4a bd ef 0a ec f1 3a 25 19 39 f7 37 12 60 b6 e9 83 dd 6b ec 7b db b4 97 bd 65 f6 7a f7 a4 a7 3e 78 3c 51 60 c4 be 92 11 e0 9b 74 61 c1 7b d2 23 24 00 d5 8d a7 79 c0 89 21 00 02 41 21 0f 84 51 e2 ca 8f 18 71 04 4a a0 82 91 75 fb 42 25 d0 73 17 97 91 f6 ac 28 b7 26 84 04 13 18 fe 85 93 84 51 5f b8 20 5a 17 eb c7 e2 19 59 7a 5a bf ab 47 24 7d f4 b9 2a ff e8 c1 19 f5 48 09 2c d3 7d e8 8d 0b f6 96 f2 77 1b 83 c6 36 d6 7f cb 40 be f7 84 5c 24 8f 96 ae 0d 8d ec b0 93 04 e1 3d ad 7f a7 1a e8 30 29 37 85 2a 59 42 8e 8d b2 6b 64 8a ba de 79 bd ba 12 78 dd 43 60 fb 9e 5c ed fb 8a 86 bc 31 cf 7d fe c2 3c 3a a3 17 ee a8 47 91 fc f7 f1 45 9f 0d a0 c9 25 61 0f b1 a9 61 5e d4 4b b2 05 85 57 ef 69 25 eb 0a 00 8c 84 31 8e eb 77 Data Ascii: !{v(J:%97`k{ez>x<Q`ta{#$y!A!QqJuB%s(&Q_ ZYzZG$}H,}w6@\$=0)7YBkdyxC`\1}<:GE%aa^KWi%1w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.7	49872	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	735	OUT	GET /c7r/assets/static/dist/js/deprecated/typescript/static/app.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:44 UTC	521	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 01 Oct 2024 12:16:12 GMT ETag: W/"66fbe80c-345f7" X-Sedo-Request-Id: ID-774c87d589-wpq6c-7386f36280c7a7a6829b22f52d671205 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1820 Server: cloudflare CF-RAY: 8ce94c46996e183d-EWR
2024-10-06 23:05:44 UTC	848	IN	Data Raw: 37 64 39 36 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 31 34 32 34 3a 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 76 61 6c 28 22 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 72 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 29 3b 5c 6e 2f 2a 20 68 61 72 6d 6f 6e 79 20 65 78 70 6f 72 74 20 2a 2f 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 20 7b 5c 6e 2f 2a 20 68 61 72 6d 6f 6e 79 20 65 78 70 Data Ascii: 7d96(()=>{var __webpack_modules__={1424:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{"use strict";eval("__webpack_require__.r(__webpack_exports__);\n/* harmony export / __webpack_require__.d(__webpack_exports__, {\n/ harmony exp
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 72 73 5f 56 69 65 77 50 6f 72 74 48 65 6c 70 65 72 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 31 5f 5f 29 3b 5c 6e 2f 2a 20 68 61 72 6d 6f 6e 79 20 69 6d 70 6f 72 74 20 2a 2f 20 76 61 72 20 5f 68 65 6c 70 65 72 73 5f 44 65 62 6f 75 6e 63 65 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 32 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 36 36 35 32 29 3b 5c 6e 2f 2a 20 68 61 72 6d 6f 6e 79 20 69 6d 70 6f 72 74 20 2a 2f 20 76 61 72 20 5f 68 65 6c 70 65 72 73 5f 44 65 62 6f 75 6e 63 65 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 32 5f 5f 5f 64 65 66 61 75 6c 74 20 3d 20 2f 2a 23 5f 5f 50 55 52 45 5f 5f 2a 2f 5f 5f 77 65 62 70 61 63 Data Ascii: rs_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1__);\n/* harmony import / var _helpers_Debounce__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(6652);\n/ harmony import / var _helpers_Debounce__WEBPACK_IMPORTED_MODULE_2___default = /#__PURE__*/__webpac
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 7a 65 73 20 47 54 4d 2d 54 72 61 63 6b 69 6e 67 5c 6e 20 20 20 2a 2f 5c 6e 20 20 69 6e 69 74 28 29 20 7b 5c 6e 20 20 20 20 63 6f 6e 73 74 20 24 64 61 74 61 47 54 4d 4f 6e 4c 6f 61 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 67 74 6d 2d 6f 6e 6c 6f 61 64 5d 27 29 3b 5c 6e 5c 6e 20 20 20 20 2f 2a 2a 5c 6e 20 20 20 20 20 2a 20 61 64 64 69 74 69 6f 6e 61 6c 20 70 75 73 68 65 73 20 62 61 73 65 64 20 6f 6e 20 70 61 67 65 54 79 70 65 5c 6e 20 20 20 20 20 2a 2f 5c 6e 20 20 20 20 69 66 20 28 74 68 69 73 2e 70 75 73 68 45 76 65 6e 74 50 61 67 65 54 79 70 65 28 29 29 20 7b 5c 6e 20 20 20 20 20 20 73 77 69 74 63 68 20 28 74 68 69 73 2e 70 61 67 65 54 79 70 65 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 63 Data Ascii: zes GTM-Tracking\n /\n init() {\n const $dataGTMOnLoad = document.querySelectorAll('[data-gtm-onload]');\n\n /\n additional pushes based on pageType\n */\n if (this.pushEventPageType()) {\n switch (this.pageType) {\n c
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 50 61 67 65 29 20 7b 5c 6e 20 20 20 20 20 20 74 68 69 73 2e 70 75 73 68 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 44 61 74 61 4c 61 79 65 72 28 29 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2f 2a 2a 5c 6e 20 20 20 20 20 2a 20 54 68 69 73 20 69 73 20 61 6e 20 65 78 70 6c 69 63 69 74 20 63 61 6c 6c 20 66 6f 72 20 74 68 65 20 68 6f 6d 65 20 70 61 67 65 2e 5c 6e 20 20 20 20 20 2a 20 69 74 20 77 61 73 20 6e 6f 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 61 64 64 20 6d 75 6c 74 69 70 6c 65 20 64 61 74 61 2d 61 74 74 72 69 62 75 74 65 73 20 61 6e 64 20 70 61 73 73 20 6f 62 6a 65 63 74 2d 6c 69 6b 65 20 73 74 72 69 6e 67 73 20 61 73 20 76 61 6c 75 65 2e 5c 6e 20 20 20 20 20 2a 20 40 73 65 65 20 63 6f 6e 74 65 6e 74 2d 74 65 61 73 65 72 2d 6d 75 6c 74 69 67 72 69 64 Data Ascii: Page) {\n this.pushConfirmationDataLayer();\n }\n\n /*\n This is an explicit call for the home page.\n * it was not possible to add multiple data-attributes and pass object-like strings as value.\n * @see content-teaser-multigrid
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 20 20 69 64 3a 20 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 69 74 6d 5f 63 61 6d 70 61 69 67 6e 27 29 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 3a 20 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 69 74 6d 5f 63 6f 6e 74 65 6e 74 27 29 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 72 65 61 74 69 76 65 3a 20 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 69 74 6d 5f 73 6f 75 72 63 65 27 29 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 74 61 72 67 65 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 67 74 6d 2d 70 72 6f 6d 6f 74 69 6f 6e 27 29 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 Data Ascii: id: searchParams.get('itm_campaign'),\n name: searchParams.get('itm_content'),\n creative: searchParams.get('itm_source'),\n position: target.getAttribute('data-gtm-promotion'),\n }],\n
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 20 6f 62 6a 65 63 74 20 66 6f 72 20 70 72 6f 64 75 63 74 73 20 74 72 61 63 6b 65 64 20 69 66 20 74 68 65 79 20 77 68 65 72 65 20 69 6e 20 76 69 65 77 70 6f 72 74 5c 6e 20 20 20 2a 20 6f 6e 20 73 65 61 72 63 68 20 72 65 73 75 6c 74 20 70 61 67 65 2e 5c 6e 20 20 20 2a 2f 5c 6e 20 20 70 75 73 68 53 65 61 72 63 68 52 65 73 75 6c 74 56 69 65 77 50 6f 72 74 45 76 65 6e 74 73 28 29 20 7b 5c 6e 20 20 20 20 63 6f 6e 73 74 20 24 69 6e 56 69 65 77 50 6f 72 74 45 6c 65 6d 65 6e 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 67 74 6d 2d 69 6e 2d 76 69 65 77 70 6f 72 74 5d 3a 6e 6f 74 28 2e 67 74 6d 2d 76 69 73 69 74 65 64 29 27 29 3b 5c 6e 20 20 20 20 63 6f 6e 73 74 20 69 6d 70 72 65 73 73 69 6f 6e 73 Data Ascii: object for products tracked if they where in viewport\n * on search result page.\n */\n pushSearchResultViewPortEvents() {\n const $inViewPortElements = document.querySelectorAll('[data-gtm-in-viewport]:not(.gtm-visited)');\n const impressions
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 74 68 65 72 20 69 6e 70 75 74 20 66 69 65 6c 64 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 68 69 64 64 65 6e 20 69 6e 70 75 74 2d 65 6c 65 6d 65 6e 74 29 5c 6e 20 20 20 2a 20 54 68 69 73 20 6d 65 74 68 6f 64 20 73 65 61 72 63 68 65 73 20 66 6f 72 20 6f 62 6a 65 63 74 2d 70 72 6f 70 65 72 74 79 20 77 69 74 68 20 76 61 6c 75 65 3d 5c 22 67 74 6d 52 65 70 6c 61 63 65 7b 3c 73 65 6c 65 63 74 6f 72 3e 7d 5c 22 5c 6e 20 20 20 2a 20 61 6e 64 20 72 65 70 6c 61 63 65 73 20 69 74 20 77 69 74 68 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 3c 73 65 6c 65 63 74 6f 72 3e 5c 6e 20 20 20 2a 5c 6e 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 64 61 74 61 20 2d 20 69 6e 70 75 74 20 64 61 74 61 2d 6f 62 6a 65 63 74 5c 6e 20 20 20 2a 20 40 72 65 74 Data Ascii: ther input field (for example hidden input-element)\n * This method searches for object-property with value=\"gtmReplace{<selector>}\"\n * and replaces it with the value of the <selector>\n \n @param {Object} data - input data-object\n * @ret
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 74 5d 20 66 6f 72 6d 5c 6e 20 20 20 2a 20 40 6c 69 73 74 65 6e 73 20 74 6f 20 63 75 73 74 6f 6d 20 65 76 65 6e 74 20 5c 22 63 75 73 74 6f 6d 47 54 4d 53 75 62 6d 69 74 5c 22 5c 6e 20 20 20 2a 20 40 6c 69 73 74 65 6e 73 20 74 6f 20 68 61 73 68 63 68 61 6e 67 65 5c 6e 20 20 20 2a 20 7b 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 64 65 2f 64 6f 63 73 2f 57 65 62 2f 41 50 49 2f 57 69 6e 64 6f 77 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 2f 6f 6e 68 61 73 68 63 68 61 6e 67 65 20 7c 20 6f 6e 68 61 73 68 63 68 61 6e 67 65 7d 5c 6e 20 20 20 2a 2f 5c 6e 20 20 62 69 6e 64 45 76 65 6e 74 73 28 29 20 7b 5c 6e 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 Data Ascii: t] form\n * @listens to custom event \"customGTMSubmit\"\n * @listens to hashchange\n * {@link https://developer.mozilla.org/de/docs/Web/API/WindowEventHandlers/onhashchange \| onhashchange}\n */\n bindEvents() {\n document.body.addEventListene
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 28 2e 67 74 6d 2d 76 69 73 69 74 65 64 29 27 29 3b 5c 6e 20 20 20 20 20 20 20 20 69 66 20 28 67 74 6d 50 72 6f 6d 6f 74 69 6f 6e 65 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 70 75 73 68 50 72 6f 6d 6f 74 69 6f 6e 45 76 65 6e 74 73 28 65 76 65 6e 74 29 3b 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 7d 29 3b 5c 6e 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 5c 6e 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 67 74 6d 50 72 6f 6d 6f 74 69 6f 6e 65 6c 65 6d 65 6e 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 67 74 6d Data Ascii: (.gtm-visited)');\n if (gtmPromotionelements.length) {\n this.pushPromotionEvents(event);\n }\n });\n window.addEventListener('click', (event) => {\n const gtmPromotionelements = document.querySelectorAll('[data-gtm
2024-10-06 23:05:44 UTC	1369	IN	Data Raw: 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 73 63 72 6f 6c 6c 27 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 5c 6e 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 67 74 6d 56 69 65 77 50 6f 72 74 65 6c 65 6d 65 6e 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 67 74 6d 2d 70 72 6f 6d 6f 74 69 6f 6e 5d 3a 6e 6f 74 28 2e 67 74 6d 2d 76 69 73 69 74 65 64 29 27 29 3b 5c 6e 20 20 20 20 20 20 20 20 69 66 20 28 67 74 6d 56 69 65 77 50 6f 72 74 65 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 70 75 73 68 50 72 6f 6d 6f 74 69 6f 6e 45 76 65 6e 74 73 28 65 76 65 6e 74 29 3b 5c 6e 20 20 20 20 20 20 20 20 7d 5c Data Ascii: window.addEventListener('scroll', (event) => {\n const gtmViewPortelements = document.querySelectorAll('[data-gtm-promotion]:not(.gtm-visited)');\n if (gtmViewPortelements.length) {\n this.pushPromotionEvents(event);\n }\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.7	49870	108.156.60.21	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	552	OUT	GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 23:05:44 UTC	664	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 7514 Connection: close Date: Sun, 06 Oct 2024 23:05:45 GMT Last-Modified: Mon, 16 Sep 2024 09:19:53 GMT ETag: "149f8b397fe711244ef204823190cb86" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d46464e02ca4f5540906664a2cfbcce2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P2 X-Amz-Cf-Id: bEo0w70g1BXnR1ZFT1yVR8yqnBqyFVCmT2dHA3l3AvqQusy9ywx_9w== X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-10-06 23:05:44 UTC	7514	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 3c 4d 6f e3 48 76 f7 fd 15 32 17 d1 90 71 89 96 fc 6d aa 09 6f b7 db b3 e3 5d bb dd b0 bb 67 76 d7 31 1a 94 58 b2 ab 9b 22 b5 64 d1 6e 8f ac c3 62 6f b9 24 40 2e 01 72 0b 10 2c 02 04 7b 09 b2 97 04 c9 61 7e ca 24 b9 e6 2f e4 bd fa 62 51 a2 6c f7 cc 2c 90 04 69 18 2d b2 3e 5f bd 7a df f5 8a ff f5 cf ff b6 32 2a d3 21 67 59 da 4a dd 82 64 24 f7 a6 a6 24 72 39 a1 de 94 8d dc 95 ec 82 5f ca a7 42 3c dd 44 79 8b 85 8e 6e ea 84 21 bf 9b d0 6c d4 ca e9 af 4b 96 d3 76 5b 3d f4 b1 0f bc 32 2f a7 bc cc d3 16 83 41 57 ba 1e 96 27 ba 2c 51 65 fc 3a cf 6e 5d 1a a6 f4 b6 75 98 e7 59 ee 3a 07 51 9a 66 bc 35 62 69 dc 1a 67 71 99 d0 d6 67 ce 2a 5f 75 3e 73 3c cf 1f 66 31 0d 9d 93 d3 97 6f 8f 0f df bd 3a 7d f3 ee f3 d3 b7 af 5e 3a 84 ce 58 Data Ascii: <MoHv2qmo]gv1X"dnbo$@.r,{a~$/bQl,i->_z2!gYJd$$r9_B<Dyn!lKv[=2/AW',Qe:n]uY:Qf5bigqg_u>s<f1o:}^:X

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: f076ebb2-f01e-001f-3766-175dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230544Z-1657d5bbd48tnj6wmberkg2xy800000002r000000000efqs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:44 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08bf7a15-f01e-0020-7706-17956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230544Z-1657d5bbd48gqrfwecymhhbfm800000001dg00000000k0w1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:44 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 23:05:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d21ea5d-701e-0098-0502-17395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T230544Z-1657d5bbd487nf59mzf5b3gk8n000000026000000000qrf9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 23:05:44 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.7	49874	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:44 UTC	558	OUT	GET /fileadmin/images/legacy/images/icons/icn-check-blue.svg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:44 UTC	487	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:44 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Wed, 14 Sep 2022 10:45:46 GMT ETag: W/"6321b0da-26c" X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-c2daad4a5afb5a10dcb788edf38f8d3a X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4956 Server: cloudflare CF-RAY: 8ce94c474c858c06-EWR
2024-10-06 23:05:44 UTC	627	IN	Data Raw: 32 36 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 Data Ascii: 26c<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"
2024-10-06 23:05:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.7	49881	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:45 UTC	712	OUT	GET /components/p9HJ4M2Uz7U4/full.header.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:45 UTC	521	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:45 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2024 11:04:16 GMT ETag: W/"66e2cab0-6c285" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-9e7271b3cba826828d1ff854a606be44 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 5743 Server: cloudflare CF-RAY: 8ce94c4a8e9a5e76-EWR
2024-10-06 23:05:45 UTC	848	IN	Data Raw: 37 64 39 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 22 2e 2f 73 72 63 2f 46 75 6c 6c 48 65 61 64 65 72 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 46 75 6c 6c 48 65 61 64 65 72 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 6e 29 3b 76 61 72 20 74 3d 72 28 2f 2a 21 20 2e 2f 75 74 69 6c 73 2f 4c 6f 67 69 6e 53 65 72 76 69 63 65 20 2a 2f 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 4c 6f 67 69 6e 53 65 72 76 69 63 65 2e 6a 73 22 29 2c 6f 3d 72 28 2f 2a 21 20 Data Ascii: 7d95!function(){var e={"./src/FullHeader.js":/!*************************!\ !* ./src/FullHeader.js ! \*************************/function(e,n,r){"use strict";r.r(n);var t=r(/! ./utils/LoginService /"./src/utils/LoginService.js"),o=r(/!
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 6f 67 67 65 64 22 29 2c 74 68 69 73 2e 24 77 61 74 63 68 6c 69 73 74 53 74 61 74 75 73 4c 6f 67 67 65 64 4f 66 66 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 77 61 74 63 68 6c 69 73 74 2d 73 74 61 74 75 73 2d 6c 6f 67 67 65 64 2d 6f 66 66 22 29 2c 74 68 69 73 2e 24 77 61 74 63 68 6c 69 73 74 53 74 61 74 75 73 4c 6f 67 67 65 64 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 77 61 74 63 68 6c 69 73 74 2d 73 74 61 74 75 73 2d 6c 6f 67 67 65 64 22 29 2c 74 68 69 73 2e 24 72 65 73 70 6f 6e 73 69 76 65 4c 6f 67 69 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 72 65 73 70 6f 6e 73 69 76 65 2d 6c 6f 67 69 6e 22 29 2c 74 68 69 73 2e 24 73 65 61 72 63 68 62 61 72 3d Data Ascii: ogged"),this.$watchlistStatusLoggedOff=document.querySelector("#watchlist-status-logged-off"),this.$watchlistStatusLogged=document.querySelector("#watchlist-status-logged"),this.$responsiveLogin=document.querySelector("#responsive-login"),this.$searchbar=
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 69 74 65 6d 2e 61 63 74 69 76 65 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 65 63 6f 6e 64 6e 61 76 2d 69 74 65 6d 2e 61 63 74 69 76 65 22 29 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 65 63 6f 6e 64 6e 61 76 2d 69 74 65 6d 2e 61 63 74 69 76 65 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 29 2c 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 22 61 63 74 69 76 65 22 29 7d 29 29 7d 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 73 65 63 6f 6e 64 6e 61 76 2d 69 Data Ascii: item.active").classList.remove("active"),document.querySelector(".secondnav-item.active")&&document.querySelector(".secondnav-item.active").classList.remove("active"),e.currentTarget.classList.toggle("active")}))})),document.querySelectorAll(".secondnav-i
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 6f 67 67 65 64 4f 66 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 69 64 64 65 6e 22 29 2c 74 68 69 73 2e 24 77 61 74 63 68 6c 69 73 74 53 74 61 74 75 73 4c 6f 67 67 65 64 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 68 69 64 64 65 6e 22 29 2c 74 68 69 73 2e 24 6c 6f 67 69 6e 53 74 61 74 75 73 4c 6f 67 67 65 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 69 6e 70 75 74 22 29 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 6e 2e 66 69 72 73 74 6e 61 6d 65 2c 74 68 69 73 2e 24 72 65 73 70 6f 6e 73 69 76 65 4c 6f 67 69 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 6c 6f 67 67 65 64 2d 6f 66 66 22 29 2c 74 68 69 73 2e 24 72 65 73 70 6f 6e 73 69 76 65 4c 6f 67 69 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6c 6f 67 67 65 Data Ascii: oggedOff.classList.add("hidden"),this.$watchlistStatusLogged.classList.remove("hidden"),this.$loginStatusLogged.querySelector(".input").textContent=n.firstname,this.$responsiveLogin.classList.remove("logged-off"),this.$responsiveLogin.classList.add("logge
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 6e 29 3b 76 61 72 20 74 3d 72 28 2f 2a 21 20 2e 2f 75 74 69 6c 73 2f 54 65 6d 70 6c 61 74 65 20 2a 2f 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 54 65 6d 70 6c 61 74 65 2e 6a 73 22 29 2c 6f 3d 72 28 2f 2a 21 20 2e 2f 75 74 69 6c 73 2f 4c 61 6e 67 75 61 67 65 73 20 2a 2f 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 4c 61 6e 67 75 61 67 65 73 2e 6a 73 22 29 3b 6e 2e 64 65 66 61 75 6c 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 6e 29 7b 74 68 69 73 2e 76 61 72 69 61 6e 74 3d 65 2c 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 3d 6e 65 77 20 74 2e 64 65 66 61 75 6c 74 2c 74 68 69 73 2e 68 65 61 64 65 72 3d 74 68 69 73 2e 74 65 6d 70 6c Data Ascii: *****/function(e,n,r){"use strict";r.r(n);var t=r(/! ./utils/Template /"./src/utils/Template.js"),o=r(/! ./utils/Languages */"./src/utils/Languages.js");n.default=class{constructor(e,n){this.variant=e,this.template=new t.default,this.header=this.templ
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 6f 67 69 6e 26 66 3d 67 65 74 5f 73 74 61 74 75 73 26 6c 61 6e 67 75 61 67 65 3d 24 7b 74 68 69 73 2e 6c 61 6e 67 7d 60 3b 6c 65 74 20 74 3d 7b 6c 6f 67 69 6e 3a 30 2c 75 73 65 72 49 64 3a 31 2c 73 65 64 6f 70 72 6f 3a 21 31 2c 66 69 72 73 74 6e 61 6d 65 3a 22 22 2c 70 61 72 74 6e 65 72 69 64 3a 22 22 2c 69 6f 6e 6f 73 5f 73 75 72 76 65 79 3a 7b 74 6f 6b 65 6e 3a 6e 75 6c 6c 2c 74 65 6e 61 6e 74 3a 6e 75 6c 6c 2c 6c 6f 63 61 6c 65 3a 6e 75 6c 6c 7d 7d 3b 74 68 69 73 2e 78 6d 6c 68 74 74 70 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 22 2f 73 65 72 76 69 63 65 2f 63 6f 6d 6d 6f 6e 2e 70 68 70 22 2c 21 30 29 2c 74 68 69 73 2e 78 6d 6c 68 74 74 70 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 28 29 3d 3e 7b 69 66 28 34 3d 3d 3d 74 68 69 73 2e 78 6d Data Ascii: ogin&f=get_status&language=${this.lang}`;let t={login:0,userId:1,sedopro:!1,firstname:"",partnerid:"",ionos_survey:{token:null,tenant:null,locale:null}};this.xmlhttp.open("POST","/service/common.php",!0),this.xmlhttp.onreadystatechange=()=>{if(4===this.xm
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 6f 6e 73 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 66 69 72 73 74 43 68 69 6c 64 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 68 69 73 2e 68 65 61 64 65 72 2c 6e 29 2c 74 68 69 73 2e 61 64 64 65 64 54 6f 42 6f 64 79 3d 21 30 2c 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 74 65 6d 70 6c 61 74 65 41 64 64 65 64 22 29 29 7d 7d 7d 2c 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 68 65 6c 70 65 72 2f 67 65 74 50 61 67 65 4c 61 6e 67 75 61 67 65 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f Data Ascii: onst n=document.body.firstChild;n.parentNode.insertBefore(this.header,n),this.addedToBody=!0,document.dispatchEvent(new CustomEvent("templateAdded"))}}},"./src/utils/helper/getPageLanguage.js":/!*******************************************!\ !*** ./
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 75 65 2e 74 72 69 6d 28 29 3b 69 66 28 21 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 22 73 65 61 72 63 68 22 29 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 22 64 65 74 61 69 6c 73 22 29 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 22 2e 70 68 70 22 29 29 7b 69 66 28 6e 29 7b 6c 65 74 20 65 3d 22 22 3b 65 2b 3d 74 3f 60 6b 65 79 77 6f 72 64 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 60 3a 22 22 2c 65 2b 3d 65 3f 22 26 22 3a 22 22 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 65 2b 3d 6e 3e 30 3f 22 26 Data Ascii: ue.trim();if(!window.location.pathname.includes("search")\|\|window.location.pathname.includes("details")\|\|window.location.pathname.includes(".php")){if(n){let e="";e+=t?`keyword=${encodeURIComponent(t)}`:"",e+=e?"&":"";for(let n=0;n<r.length;n+=1)e+=n>0?"&
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 6e 73 2f 76 36 2f 73 2d 42 69 79 77 65 55 50 56 30 76 2d 79 52 62 2d 63 6a 63 69 41 7a 79 44 4d 58 68 64 44 38 73 41 6a 36 4f 41 4a 54 46 73 42 49 2e 77 6f 66 66 32 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 64 72 6f 69 64 73 61 6e 73 2f 76 36 2f 73 2d 42 69 79 77 65 55 50 56 30 76 2d 79 52 62 2d 63 6a 63 69 41 7a 79 44 4d 58 68 64 44 38 73 41 6a 36 4f 41 4a 54 46 73 42 49 2e 77 6f 66 66 32 22 29 2c 72 2e 62 29 2c 70 3d 6e 65 77 20 55 52 4c 28 72 28 2f 2a 21 20 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 Data Ascii: ns/v6/s-BiyweUPV0v-yRb-cjciAzyDMXhdD8sAj6OAJTFsBI.woff2 /"./node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/droidsans/v6/s-BiyweUPV0v-yRb-cjciAzyDMXhdD8sAj6OAJTFsBI.woff2"),r.b),p=new URL(r(/! ../../node_modules/@sedo/legacy-shared-asse
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2f 76 31 35 2f 37 6d 38 6c 37 54 6c 46 4f 2d 53 33 56 6b 68 48 75 52 30 61 74 34 67 70 39 51 38 67 62 59 72 68 71 47 6c 52 61 76 5f 49 58 66 6b 2e 77 6f 66 66 32 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2f 76 31 35 2f 37 6d 38 6c 37 54 6c 46 4f 2d 53 33 56 6b 68 48 75 52 30 61 74 34 67 70 39 51 38 67 62 59 72 68 71 47 6c 52 61 76 5f 49 58 66 6b Data Ascii: ./../node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/roboto/v15/7m8l7TlFO-S3VkhHuR0at4gp9Q8gbYrhqGlRav_IXfk.woff2 */"./node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/roboto/v15/7m8l7TlFO-S3VkhHuR0at4gp9Q8gbYrhqGlRav_IXfk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.7	49883	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:45 UTC	712	OUT	GET /components/zkLxDsbw1hz2/full.footer.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:45 UTC	521	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:45 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2024 08:56:06 GMT ETag: W/"66e2aca6-6250f" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-843af75abefdfd4b21a2950177b13608 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 6103 Server: cloudflare CF-RAY: 8ce94c4a8f721849-EWR
2024-10-06 23:05:45 UTC	848	IN	Data Raw: 37 64 39 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 22 2e 2f 73 72 63 2f 46 6f 6f 74 65 72 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 46 6f 6f 74 65 72 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 6e 29 3b 76 61 72 20 74 3d 6f 28 2f 2a 21 20 40 73 65 64 6f 2f 76 75 65 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 6c 69 62 72 61 72 79 2f 75 74 69 6c 73 2f 73 65 64 6f 43 6f 6f 6b 69 65 4d 61 6e 61 67 65 72 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 76 75 Data Ascii: 7d95!function(){var e={"./src/Footer.js":/!*********************!\ !* ./src/Footer.js ! \*********************/function(e,n,o){"use strict";o.r(n);var t=o(/! @sedo/vue-component-library/utils/sedoCookieManager */"./node_modules/@sedo/vu
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 2e 64 65 66 61 75 6c 74 29 28 6e 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 6d 70 6c 61 74 65 41 64 64 65 64 46 6f 6f 74 65 72 22 2c 28 28 29 3d 3e 7b 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 49 6e 69 74 28 6e 29 7d 29 29 2c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 2e 61 64 64 54 65 6d 70 6c 61 74 65 54 6f 42 6f 64 79 28 29 3a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 28 28 29 3d 3e 7b 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 2e 61 64 64 54 65 6d 70 6c 61 74 65 54 6f 42 6f 64 79 28 29 7d 29 29 7d 74 65 6d 70 6c 61 74 65 49 Data Ascii: .default)(n)),document.addEventListener("templateAddedFooter",(()=>{this.templateInit(n)})),"loading"!==document.readyState?this.template.addTemplateToBody():document.addEventListener("DOMContentLoaded",(()=>{this.template.addTemplateToBody()}))}templateI
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 28 22 23 66 6f 6f 74 65 72 2d 6e 65 77 73 6c 65 74 74 65 72 2d 73 69 67 6e 75 70 2d 63 68 65 63 6b 62 6f 78 2d 77 72 61 70 70 65 72 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 65 72 72 6f 72 22 29 3b 63 6f 6e 73 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 22 29 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 2e 67 65 74 41 74 Data Ascii: ("#footer-newsletter-signup-checkbox-wrapper").classList.remove("error");const n=document.querySelector("[data-footer-host]")&&document.querySelector("[data-footer-host]").getAttribute("data-footer-host")?document.querySelector("[data-footer-host]").getAt
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 26 26 28 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 6d 61 69 6e 6e 61 76 2e 70 75 73 68 28 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 73 65 63 6f 6e 64 6e 61 76 5b 65 5d 29 2c 64 65 6c 65 74 65 20 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 73 65 63 6f 6e 64 6e 61 76 5b 65 5d 29 3b 69 66 28 6e 2e 63 75 72 72 65 6e 74 59 65 61 72 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 6e 2e 64 61 74 61 46 6f 6f 74 65 72 48 6f 73 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 Data Ascii: &&(n.navigation.mainnav.push(n.navigation.secondnav[e]),delete n.navigation.secondnav[e]);if(n.currentYear=(new Date).getFullYear(),n.dataFooterHost=document.querySelector("[data-footer-host]")&&document.querySelector("[data-footer-host]").getAttribute("d
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 4e 65 77 73 6c 65 74 74 65 72 53 65 72 76 69 63 65 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 6e 29 2c 6e 2e 64 65 66 61 75 6c 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 78 6d 6c 68 74 74 70 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 6d 61 6b 65 52 65 71 75 65 73 74 28 65 2c 6e 2c 6f 29 7b 63 6f Data Ascii: /!**************************************!\ !* ./src/utils/NewsletterService.js ! \***************************************/function(e,n,o){"use strict";o.r(n),n.default=class{constructor(){this.xmlhttp=new XMLHttpRequest}makeRequest(e,n,o){co
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 6e 29 3b 76 61 72 20 74 3d 6f 28 2f 2a 21 20 2e 2e 2f 74 65 6d 70 6c 61 74 65 73 2f 66 75 6c 6c 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 20 2a 2f 22 2e 2f 73 72 63 2f 74 65 6d 70 6c 61 74 65 73 2f 66 75 6c 6c 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 22 29 2c 72 3d 6f 2e 6e 28 74 29 2c 69 3d 6f 28 2f 2a 21 20 2e 2e 2f 74 65 6d 70 6c 61 74 65 73 2f 72 65 64 75 63 65 64 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 20 2a 2f 22 2e 2f 73 72 63 2f 74 65 6d 70 6c 61 74 65 73 2f 72 65 64 75 63 65 64 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 22 29 2c 73 3d 6f 2e 6e 28 69 29 2c 61 3d 6f 28 2f 2a 21 20 2e 2e 2f 74 65 6d 70 6c 61 74 65 73 2f 6d 69 6e 69 6d 61 6c 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 20 2a 2f 22 2e 2f 73 72 63 2f 74 65 6d 70 6c Data Ascii: n,o){"use strict";o.r(n);var t=o(/! ../templates/full-footer.njk /"./src/templates/full-footer.njk"),r=o.n(t),i=o(/! ../templates/reduced-footer.njk /"./src/templates/reduced-footer.njk"),s=o.n(i),a=o(/! ../templates/minimal-footer.njk /"./src/templ
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 67 65 74 50 61 67 65 4c 61 6e 67 75 61 67 65 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 6e 29 2c 6f 2e 64 28 6e 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 74 3d 6f 28 2f 2a 21 20 40 73 65 64 6f 2f 76 75 65 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 6c 69 62 72 61 72 79 2f 75 74 69 6c 73 2f 73 65 64 6f 43 6f 6f 6b 69 65 4d 61 6e 61 67 65 72 20 2a 2f 22 2e 2f Data Ascii: **********************!\ !* ./src/utils/getPageLanguage.js ! \************************************/function(e,n,o){"use strict";o.r(n),o.d(n,{default:function(){return i}});var t=o(/! @sedo/vue-component-library/utils/sedoCookieManager */"./
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 73 73 2d 6c 6f 61 64 65 72 2f 64 69 73 74 2f 72 75 6e 74 69 6d 65 2f 67 65 74 55 72 6c 2e 6a 73 22 29 2c 6c 3d 6f 2e 6e 28 61 29 2c 63 3d 6e 65 77 20 55 52 4c 28 6f 28 2f 2a 21 20 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 64 72 6f 69 64 73 61 6e 73 2f 76 36 2f 73 2d 42 69 79 77 65 55 50 56 30 76 2d 79 52 62 2d 63 6a 63 69 41 7a 79 44 4d 58 68 64 44 38 73 41 6a 36 4f 41 4a 54 46 73 42 49 2e 77 6f 66 66 32 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 Data Ascii: /node_modules/css-loader/dist/runtime/getUrl.js"),l=o.n(a),c=new URL(o(/! ../../node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/droidsans/v6/s-BiyweUPV0v-yRb-cjciAzyDMXhdD8sAj6OAJTFsBI.woff2 /"./node_modules/@sedo/legacy-shared-assets-b
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2f 76 31 35 2f 6f 4d 4d 67 66 5a 4d 51 74 68 4f 72 79 51 6f 39 6e 32 32 64 63 75 76 76 44 69 6e 31 70 4b 38 61 4b 74 65 4c 70 65 5a 35 63 30 41 2e 77 6f 66 66 32 22 29 2c 6f 2e 62 29 2c 66 3d 6e 65 77 20 55 52 4c 28 6f 28 2f 2a 21 20 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2f 76 31 35 2f 37 6d 38 6c 37 54 6c 46 4f 2d 53 33 56 6b 68 48 75 52 30 61 74 Data Ascii: "./node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/roboto/v15/oMMgfZMQthOryQo9n22dcuvvDin1pK8aKteLpeZ5c0A.woff2"),o.b),f=new URL(o(/*! ../../node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/roboto/v15/7m8l7TlFO-S3VkhHuR0at
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 73 6f 75 72 63 65 73 61 6e 73 70 72 6f 2f 76 39 2f 4f 44 65 6c 49 31 61 48 42 59 44 42 71 67 65 49 41 48 32 7a 6c 4a 62 50 46 64 75 49 59 74 6f 4c 7a 77 53 54 36 38 75 68 7a 5f 59 2e 77 6f 66 66 32 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 73 6f 75 72 63 65 73 61 6e 73 70 72 6f 2f 76 39 2f 4f 44 65 6c 49 31 61 48 42 59 44 42 71 67 65 49 41 48 32 7a 6c 4a 62 50 46 64 75 49 59 74 6f 4c 7a 77 53 54 36 38 75 68 7a 5f 59 2e 77 6f 66 66 32 22 29 2c 6f 2e 62 29 2c 45 3d 6e 65 77 20 55 52 4c 28 6f 28 2f 2a 21 20 2e 2e 2f 2e 2e 2f Data Ascii: dle/fonts/googlefonts/sourcesanspro/v9/ODelI1aHBYDBqgeIAH2zlJbPFduIYtoLzwST68uhz_Y.woff2 /"./node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/sourcesanspro/v9/ODelI1aHBYDBqgeIAH2zlJbPFduIYtoLzwST68uhz_Y.woff2"),o.b),E=new URL(o(/! ../../

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.7	49878	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:45 UTC	714	OUT	GET /components/TfcP3WYRyZ9A/cookie-banner.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:45 UTC	520	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:45 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 20 Aug 2024 14:15:00 GMT ETag: W/"66c4a4e4-1d83" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-c9e9a4a405dfe9c9e2f60f5af5cd2436 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 6103 Server: cloudflare CF-RAY: 8ce94c4a8f5c15c3-EWR
2024-10-06 23:05:45 UTC	849	IN	Data Raw: 31 64 38 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 22 2e 2f 73 72 63 2f 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 3b 76 61 72 20 61 3d 6e 28 2f 2a 21 20 2e 2f 75 74 69 6c 73 2f 43 6f 6f 6b 69 65 48 61 6e 64 6c 65 72 20 2a 2f 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 43 6f 6f 6b 69 65 48 61 6e 64 6c 65 72 2e 6a 73 22 Data Ascii: 1d83!function(){"use strict";var e={"./src/CookieBanner.js":/!***************************!\ !* ./src/CookieBanner.js ! \***************************/function(e,t,n){n.r(t);var a=n(/! ./utils/CookieHandler */"./src/utils/CookieHandler.js"
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 3d 27 64 61 74 61 4c 61 79 65 72 27 3f 27 26 6c 3d 27 2b 6c 3a 27 27 3b 6a 2e 61 73 79 6e 63 3d 74 72 75 65 3b 6a 2e 73 72 63 3d 5c 6e 20 20 20 20 20 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 6d 2e 6a 73 3f 69 64 3d 27 2b 69 2b 64 6c 3b 66 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6a 2c 66 29 3b 5c 6e 20 20 20 20 20 20 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 64 61 74 61 4c 61 79 65 72 27 2c 27 24 7b 74 68 69 73 2e 67 74 6d 49 64 7d 27 29 3b 60 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 63 53 65 74 74 69 Data Ascii: .createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=\n 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);\n })(window,document,'script','dataLayer','${this.gtmId}');`;window.addEventListener("ucSetti
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 62 2c 20 73 29 3b 7d 29 28 29 3b 22 7d 2c 7b 64 65 74 61 69 6c 73 4e 61 6d 65 3a 22 48 6f 74 6a 61 72 22 2c 69 64 4e 61 6d 65 3a 22 68 6f 74 6a 61 72 53 6e 69 70 70 65 74 22 2c 69 6e 6e 65 72 48 74 6d 6c 3a 22 28 66 75 6e 63 74 69 6f 6e 20 28 68 2c 20 6f 2c 20 74 2c 20 6a 2c 20 61 2c 20 72 29 20 7b 5c 6e 20 20 20 20 20 20 68 2e 68 6a 20 3d 20 68 2e 68 6a 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 28 68 2e 68 6a 2e 71 20 3d 20 68 2e 68 6a 2e 71 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 5c 6e 20 20 20 20 20 20 7d 3b 5c 6e 20 20 20 20 20 20 68 2e 5f 68 6a 53 65 74 74 69 6e 67 73 20 3d 20 7b 5c 6e 20 20 20 20 20 20 20 20 Data Ascii: .parentNode.insertBefore(b, s);})();"},{detailsName:"Hotjar",idName:"hotjarSnippet",innerHtml:"(function (h, o, t, j, a, r) {\n h.hj = h.hj \|\| function () {\n (h.hj.q = h.hj.q \|\| []).push(arguments)\n };\n h._hjSettings = {\n
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 74 2e 61 73 79 6e 63 3d 21 30 2c 74 2e 69 64 3d 65 2e 69 64 4e 61 6d 65 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 2e 69 6e 6e 65 72 48 74 6d 6c 2c 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 22 21 3d 3d 65 2e 64 65 74 61 69 6c 73 4e 61 6d 65 7c 7c 61 29 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 28 74 29 7d 7d 65 6c 73 65 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 23 24 7b 65 2e 69 64 4e 61 6d 65 7d 60 29 3b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 23 24 7b 65 2e 69 64 4e 61 6d 65 7d 60 29 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 72 65 6d Data Ascii: document.createElement("script");t.async=!0,t.id=e.idName,t.innerHTML=e.innerHtml,("Facebook Pixel"!==e.detailsName\|\|a)&&document.body.append(t)}}else{const t=document.querySelector(`#${e.idName}`);document.querySelector(`#${e.idName}`)&&document.body.rem
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 74 2e 64 65 66 61 75 6c 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 3d 65 7d 77 72 69 74 65 28 65 2c 74 2c 6e 3d 7b 7d 29 7b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 60 24 7b 65 7d 3d 24 7b 74 7d 3b 24 7b 74 68 69 73 2e 6d 61 6e 67 6c 65 4f 70 74 69 6f 6e 73 28 6e 29 7d 60 7d 72 65 61 64 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 60 28 5e 7c 20 29 24 7b 65 7d 3d 28 5b 5e 3b 5d 2b 29 60 29 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 6c 65 6e 67 74 68 3e 31 3f 74 5b 32 5d 3a 6e 75 6c 6c 7d 65 78 69 73 74 73 Data Ascii: nction(e,t,n){n.r(t),t.default=class{constructor(e){this.document=e}write(e,t,n={}){this.document.cookie=`${e}=${t};${this.mangleOptions(n)}`}read(e){const t=this.document.cookie.match(new RegExp(`(^\| )${e}=([^;]+)`));return t&&t.length>1?t[2]:null}exists
2024-10-06 23:05:45 UTC	1238	IN	Data Raw: 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 65 78 70 69 72 65 44 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 67 65 74 48 6f 73 74 6e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 7d 2c 22 2e 2f 73 72 63 2f 69 31 38 6e 2f 6c 61 6e 67 75 61 67 65 4d 61 70 70 69 6e 67 2e 6a 73 6f 6e 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 69 31 38 6e 2f 6c 61 6e 67 75 61 67 65 4d 61 70 70 69 6e 67 2e 6a 73 6f 6e 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f Data Ascii: r(t),n.d(t,{expireDate:function(){return a},getHostname:function(){return i}})},"./src/i18n/languageMapping.json":/!*************************************!\ !* ./src/i18n/languageMapping.json ! \**************************************/functio
2024-10-06 23:05:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.7	49880	104.16.141.114	443	3300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 23:05:45 UTC	718	OUT	GET /c7r/assets/static/libs/external/jquery-ui.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ofKGNy7bwzyTITYsdjpWHAEogeXNEBIYiGCFpUIGOIU-1728255938-1.0.1.1-X9fJ4NHsqyuegvKTjfXrFQLV9slmAjXAV.8L5D5j1rgzi82LQcF0zPHsyuIw03moGUvVcQzSgP4ifez9ZtoNuw
2024-10-06 23:05:45 UTC	521	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 23:05:45 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 01 Oct 2024 12:11:30 GMT ETag: W/"66fbe6f2-3e3f1" X-Sedo-Request-Id: ID-774c87d589-6mgfb-f3b09e191e8d4a874650f430e5c5e641 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4061 Server: cloudflare CF-RAY: 8ce94c4a9dfe4251-EWR
2024-10-06 23:05:45 UTC	848	IN	Data Raw: 37 64 39 35 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 33 20 2d 20 32 30 32 34 2d 30 36 2d 31 31 0a 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6a 71 75 65 72 79 2d 70 61 74 63 68 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 Data Ascii: 7d95/! jQuery UI - v1.13.3 - 2024-06-11 https://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, wi
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 2f 65 66 66 65 63 74 2d 66 6f 6c 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 68 69 67 68 6c 69 67 68 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 70 75 66 66 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 70 75 6c 73 61 74 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 63 61 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 68 61 6b 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 69 7a 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 6c 69 64 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 74 72 61 6e 73 66 65 72 2e 6a 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e Data Ascii: /effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js* Copyright OpenJS Foundation an
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 65 72 2c 69 3d 74 68 69 73 2e 5f 73 75 70 65 72 41 70 70 6c 79 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 75 70 65 72 3d 6e 2c 74 68 69 73 2e 5f 73 75 70 65 72 41 70 70 6c 79 3d 6f 2c 74 3d 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 5f 73 75 70 65 72 3d 65 2c 74 68 69 73 2e 5f 73 75 70 65 72 41 70 70 6c 79 3d 69 2c 74 7d 7d 29 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 6f 2c 7b 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 73 26 26 6f 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 7c 7c 74 7d 2c 61 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 6e 61 6d 65 73 70 61 63 65 3a 72 2c 77 69 64 67 65 74 4e 61 6d 65 3a 74 2c 77 69 64 67 65 74 46 75 6c 6c 4e Data Ascii: er,i=this._superApply;return this._super=n,this._superApply=o,t=s.apply(this,arguments),this._super=e,this._superApply=i,t}}),n.prototype=V.widget.extend(o,{widgetEventPrefix:s&&o.widgetEventPrefix\|\|t},a,{constructor:n,namespace:r,widgetName:t,widgetFullN
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 6f 6e 28 69 7c 7c 7b 7d 29 2c 74 2e 5f 69 6e 69 74 26 26 74 2e 5f 69 6e 69 74 28 29 29 3a 56 2e 64 61 74 61 28 74 68 69 73 2c 61 2c 6e 65 77 20 65 28 69 2c 74 68 69 73 29 29 7d 29 29 2c 6e 7d 7d 2c 56 2e 57 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 56 2e 57 69 64 67 65 74 2e 5f 63 68 69 6c 64 43 6f 6e 73 74 72 75 63 74 6f 72 73 3d 5b 5d 2c 56 2e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 77 69 64 67 65 74 4e 61 6d 65 3a 22 77 69 64 67 65 74 22 2c 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 22 22 2c 64 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 3a 22 3c 64 69 76 3e 22 2c 6f 70 74 69 6f 6e 73 3a 7b 63 6c 61 73 73 65 73 3a 7b 7d 2c 64 69 73 61 62 6c 65 64 3a 21 31 2c 63 72 65 61 74 65 3a 6e 75 6c 6c 7d 2c 5f 63 72 65 61 74 65 Data Ascii: on(i\|\|{}),t._init&&t._init()):V.data(this,a,new e(i,this))})),n}},V.Widget=function(){},V.Widget._childConstructors=[],V.Widget.prototype={widgetName:"widget",widgetEventPrefix:"",defaultElement:"<div>",options:{classes:{},disabled:!1,create:null},_create
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 7d 2c 6f 70 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 73 2c 6e 2c 6f 3d 74 3b 69 66 28 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 69 66 28 6f 3d 7b 7d 2c 74 3d 28 69 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 29 2e 73 68 69 66 74 28 29 2c 69 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 73 3d 6f 5b 74 5d 3d 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 74 5d 29 2c 6e 3d 30 3b 6e 3c 69 2e Data Ascii: t:function(){return this.element},option:function(t,e){var i,s,n,o=t;if(0===arguments.length)return V.widget.extend({},this.options);if("string"==typeof t)if(o={},t=(i=t.split(".")).shift(),i.length){for(s=o[t]=V.widget.extend({},this.options[t]),n=0;n<i.
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 5b 74 5b 73 5d 5d 7c 7c 56 28 29 2c 69 3d 6e 2e 61 64 64 3f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 5b 5d 3b 6e 2e 65 6c 65 6d 65 6e 74 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 56 2e 6d 61 70 28 61 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 29 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 73 28 65 29 7d 29 7c 7c 69 2e 70 75 73 68 28 65 29 7d 29 2c 61 2e 5f 6f 6e 28 56 28 69 29 2c 7b 72 65 6d 6f 76 65 3a 22 5f 75 6e 74 72 61 63 6b 43 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 22 7d 29 7d 28 29 2c 56 28 56 2e 75 6e 69 71 75 65 53 6f 72 74 28 69 2e 67 65 74 28 29 2e 63 Data Ascii: ElementLookup[t[s]]\|\|V(),i=n.add?(function(){var i=[];n.element.each(function(t,e){V.map(a.classesElementLookup,function(t){return t}).some(function(t){return t.is(e)})\|\|i.push(e)}),a._on(V(i),{remove:"_untrackClassesElement"})}(),V(V.uniqueSort(i.get().c
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 6f 66 20 65 3f 72 5b 65 5d 3a 65 29 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 28 69 2e 67 75 69 64 3d 65 2e 67 75 69 64 3d 65 2e 67 75 69 64 7c 7c 69 2e 67 75 69 64 7c 7c 56 2e 67 75 69 64 2b 2b 29 3b 76 61 72 20 74 3d 74 2e 6d 61 74 63 68 28 2f 5e 28 5b 5c 77 3a 2d 5d 2a 29 5c 73 2a 28 2e 2a 29 24 2f 29 2c 73 3d 74 5b 31 5d 2b 72 2e 65 76 65 6e 74 4e 61 6d 65 73 70 61 63 65 2c 74 3d 74 5b 32 5d 3b 74 3f 61 2e 6f 6e 28 73 2c 74 2c 69 29 3a 6f 2e 6f 6e 28 73 2c 69 29 7d 29 7d 2c 5f 6f 66 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 65 3d 28 65 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2e 6a 6f 69 6e 28 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 73 70 61 63 65 2b 22 20 22 Data Ascii: of e?r[e]:e).apply(r,arguments)}"string"!=typeof e&&(i.guid=e.guid=e.guid\|\|i.guid\|\|V.guid++);var t=t.match(/^([\w:-])\s(.*)$/),s=t[1]+r.eventNamespace,t=t[2];t?a.on(s,t,i):o.on(s,i)})},_off:function(t,e){e=(e\|\|"").split(" ").join(this.eventNamespace+" "
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 29 29 7d 7d 2c 56 2e 65 61 63 68 28 7b 73 68 6f 77 3a 22 66 61 64 65 49 6e 22 2c 68 69 64 65 3a 22 66 61 64 65 4f 75 74 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 56 2e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 5b 22 5f 22 2b 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 73 2c 6e 3d 28 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 7b 65 66 66 65 63 74 3a 74 7d 3a 74 29 3f 21 30 21 3d 3d 74 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 65 66 66 65 63 74 7c 7c 61 3a 6f 3b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 74 3d 74 7c 7c 7b 7d 29 3f 74 3d 7b 64 75 72 61 74 69 6f 6e 3a 74 7d 3a 21 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 73 3d 21 56 2e 69 73 45 6d 70 74 79 4f 62 Data Ascii: ))}},V.each({show:"fadeIn",hide:"fadeOut"},function(o,a){V.Widget.prototype["_"+o]=function(e,t,i){var s,n=(t="string"==typeof t?{effect:t}:t)?!0!==t&&"number"!=typeof t&&t.effect\|\|a:o;"number"==typeof(t=t\|\|{})?t={duration:t}:!0===t&&(t={}),s=!V.isEmptyOb
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 74 6f 22 3d 3d 3d 69 26 26 74 2e 68 65 69 67 68 74 3c 74 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3f 56 2e 70 6f 73 69 74 69 6f 6e 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 28 29 3a 30 2c 68 65 69 67 68 74 3a 65 3f 56 2e 70 6f 73 69 74 69 6f 6e 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 28 29 3a 30 7d 7d 2c 67 65 74 57 69 74 68 69 6e 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 56 28 74 7c 7c 77 69 6e 64 6f 77 29 2c 69 3d 49 28 65 5b 30 5d 29 2c 73 3d 21 21 65 5b 30 5d 26 26 39 3d 3d 3d 65 5b 30 5d 2e 6e 6f 64 65 54 79 70 65 3b 72 65 74 75 72 6e 7b 65 6c 65 6d 65 6e 74 3a 65 2c 69 73 57 69 6e 64 6f 77 3a 69 2c 69 73 44 6f 63 75 6d 65 6e 74 3a 73 2c 6f 66 66 73 65 74 3a 21 69 26 26 21 73 3f 56 28 Data Ascii: to"===i&&t.height<t.element[0].scrollHeight?V.position.scrollbarWidth():0,height:e?V.position.scrollbarWidth():0}},getWithinInfo:function(t){var e=V(t\|\|window),i=I(e[0]),s=!!e[0]&&9===e[0].nodeType;return{element:e,isWindow:i,isDocument:s,offset:!i&&!s?V(
2024-10-06 23:05:45 UTC	1369	IN	Data Raw: 26 26 28 79 5b 31 5d 3d 79 5b 30 5d 29 2c 22 72 69 67 68 74 22 3d 3d 3d 75 2e 61 74 5b 30 5d 3f 6d 2e 6c 65 66 74 2b 3d 70 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 75 2e 61 74 5b 30 5d 26 26 28 6d 2e 6c 65 66 74 2b 3d 70 2f 32 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 75 2e 61 74 5b 31 5d 3f 6d 2e 74 6f 70 2b 3d 66 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 75 2e 61 74 5b 31 5d 26 26 28 6d 2e 74 6f 70 2b 3d 66 2f 32 29 2c 64 3d 43 28 77 2e 61 74 2c 70 2c 66 29 2c 6d 2e 6c 65 66 74 2b 3d 64 5b 30 5d 2c 6d 2e 74 6f 70 2b 3d 64 5b 31 5d 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 74 2c 61 3d 56 28 74 68 69 73 29 2c 72 3d 61 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 6c 3d 61 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 65 3d 44 28 74 Data Ascii: &&(y[1]=y[0]),"right"===u.at[0]?m.left+=p:"center"===u.at[0]&&(m.left+=p/2),"bottom"===u.at[1]?m.top+=f:"center"===u.at[1]&&(m.top+=f/2),d=C(w.at,p,f),m.left+=d[0],m.top+=d[1],this.each(function(){var i,t,a=V(this),r=a.outerWidth(),l=a.outerHeight(),e=D(t

Target ID:	0
Start time:	19:05:15
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:05:20
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1692,i,8583954906543678060,8366272167246359389,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	19:05:23
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://coritta.com/"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: http://www.coritta.com/	HTTP Parser: No favicon
Source: http://www.coritta.com/	HTTP Parser: No favicon
Source: http://www.coritta.com/	HTTP Parser: No favicon
Source: http://www.coritta.com/	HTTP Parser: No favicon
Source: http://www.coritta.com/	HTTP Parser: No favicon
Source: http://www.coritta.com/	HTTP Parser: No favicon
Source: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Best+Home+Warranty+for+Hvac&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEmwBlLqpj1YJdz7AzpZcgeGyRhp5zMxp8n1DEmNsr7hGBcgg34MnxBeRt-c9OxWGMfyh27HvGtg4vi3Woi_41qZIfViSTrEkCjKcSnu5_x2fLueh1V508qjLQKWCgp2wXmyKbwgvH5qd2vVtgD8&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Cost+of+a+New+Ac+and+Furnace&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj3wtYOe7rzx_1g0wON-N8H__C4RQ1CeooGzFWtQkJCJwnMJ1w-u4cuLbMWU_7XM46bcpZ97UYjuhVirX9hk929rs6qaClYRSjBdJEFMkHJUbEGAnwvyWdh41fmZ1VUQ8tfWlxX7SZjj5&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://www.coritta.com/	HTTP Parser: No favicon
Source: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Replace+Hvac+System+Cost&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj5ulDShI8Bb7iRptDBkDmxnWF4qf353j65aQvFz-IKHccRTuxxIucZ2b63EhAJbftDkzbBDaWuuRYuJLti9NXeWNbTMnmVHkdDlPUOz-6PAxKFfYM9qN9Qyxx-ANIn2stcqlhWRn5irL&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Replace+Hvac+System+Cost&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEm0BlLqpj5ulDShI8Bb7iRptDBkDmxnWF4qf353j65aQvFz-IKHccRTuxxIucZ2b63EhAJbftDkzbBDaWuuRYuJLti9NXeWNbTMnmVHkdDlPUOz-6PAxKFfYM9qN9Qyxx-ANIn2stcqlhWRn5irL&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://www.coritta.com/caf/?ses=Y3JlPTE3MjgyNTU5MjUmdGNpZD13d3cuY29yaXR0YS5jb202NzAzMTdiNWFmYWI5Mi4xMDc4MDMyNCZ0YXNrPXNlYXJjaCZkb21haW49Y29yaXR0YS5jb20mYV9pZD0zJnNlc3Npb249VnB5ci12NkhQWGlpTUx5amRfci0%3D&query=Best+Home+Warranty+for+Hvac&afdToken=ChMI-fffhe_6iAMV4IH9Bx0b0DkAEmwBlLqpj1YJdz7AzpZcgeGyRhp5zMxp8n1DEmNsr7hGBcgg34MnxBeRt-c9OxWGMfyh27HvGtg4vi3Woi_41qZIfViSTrEkCjKcSnu5_x2fLueh1V508qjLQKWCgp2wXmyKbwgvH5qd2vVtgD8&pcsa=false&nb=0&nm=3	HTTP Parser: No favicon

Source: global traffic	DNS traffic detected: DNS query: coritta.com
Source: global traffic	DNS traffic detected: DNS query: www.coritta.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: img.sedoparking.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: www.sedo.com
Source: global traffic	DNS traffic detected: DNS query: sedo.com
Source: global traffic	DNS traffic detected: DNS query: cdn.sedo.com
Source: global traffic	DNS traffic detected: DNS query: widget.trustpilot.com
Source: global traffic	DNS traffic detected: DNS query: app.usercentrics.eu
Source: global traffic	DNS traffic detected: DNS query: api.usercentrics.eu
Source: global traffic	DNS traffic detected: DNS query: consent-api.service.consent.usercentrics.eu
Source: global traffic	DNS traffic detected: DNS query: uct.service.usercentrics.eu

Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Source: chromecache_196.3.dr	String found in binary or memory: \************************************/function(e){"use strict";e.exports=JSON.parse('{"en-US":{"logolinkurl":"/us/","logolinktext":"Sedo.com","company":"Sedo.com, LLC","newsletterHeadline":"Subscribe to newsletter","newslettertermsUrl":"/us/about-us/policies/protecting-your-privacy/","newslettertermsLabel":"Privacy Policy","newsletterCheckboxLabel":"Yes, I would like to receive regular email updates on Sedo product news, discounts, promotions and domain news. I can unsubscribe at any time using the unsubscribe link in the respective newsletter.","newsletterEmailLabel":"Email","newsletterRegisterButton":"Subscribe","newsletterRegisterPlaceholder":"Your email address","paypalUrl":"https://www.paypal.com/us/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Company Info","dataSecurityPoliciesLabel":"Protecting your Privacy","cookieSettingsLabel":"Cookie Settings","policiesLabel":"Policies","socialHeader":"Find us on","impressumLink":"/us/about-us/imprint/","dataSecurityPoliciesLink":"/us/about-us/policies/protecting-your-privacy/","policiesLink":"/us/about-us/policies/","accessibilityLabel":"Accessibility Statement","accessibilityLink":"/us/about-us/policies/accessibility-statement/"},"en-GB":{"logolinkurl":"/uk/","logolinktext":"Sedo.com","company":"Sedo GmbH","newsletterHeadline":"Subscribe to newsletter","newslettertermsUrl":"/uk/about-us/policies/protecting-your-privacy/","newslettertermsLabel":"Privacy Policy","newsletterCheckboxLabel":"Yes, I would like to receive regular email updates on Sedo product news, discounts, promotions and domain news. I can unsubscribe at any time using the unsubscribe link in the respective newsletter.","newsletterEmailLabel":"Email","newsletterRegisterButton":"Subscribe","newsletterRegisterPlaceholder":"Your email address","paypalUrl":"https://www.paypal.com/us/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Company Info","dataSecurityPoliciesLabel":"Protecting your Privacy","cookieSettingsLabel":"Cookie Settings","policiesLabel":"Policies","socialHeader":"Find us on","impressumLink":"/uk/about-us/imprint/","dataSecurityPoliciesLink":"/uk/about-us/policies/protecting-your-privacy/","policiesLink":"/uk/about-us/policies/","accessibilityLabel":"Accessibility Statement","accessibilityLink":"/us/about-us/policies/accessibility-statement/"},"de-DE":{"logolinkurl":"/de/","logolinktext":"Sedo.com","company":"Sedo GmbH","newsletterHeadline":"Newsletter abonnieren","newslettertermsUrl":"/de/ueber-uns/policies-gmbh/datenschutzrichtlinien-der-sedo-gmbh/",
Source: chromecache_196.3.dr	String found in binary or memory: \************************************/function(e){"use strict";e.exports=JSON.parse('{"en-US":{"logolinkurl":"/us/","logolinktext":"Sedo.com","company":"Sedo.com, LLC","newsletterHeadline":"Subscribe to newsletter","newslettertermsUrl":"/us/about-us/policies/protecting-your-privacy/","newslettertermsLabel":"Privacy Policy","newsletterCheckboxLabel":"Yes, I would like to receive regular email updates on Sedo product news, discounts, promotions and domain news. I can unsubscribe at any time using the unsubscribe link in the respective newsletter.","newsletterEmailLabel":"Email","newsletterRegisterButton":"Subscribe","newsletterRegisterPlaceholder":"Your email address","paypalUrl":"https://www.paypal.com/us/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Company Info","dataSecurityPoliciesLabel":"Protecting your Privacy","cookieSettingsLabel":"Cookie Settings","policiesLabel":"Policies","socialHeader":"Find us on","impressumLink":"/us/about-us/imprint/","dataSecurityPoliciesLink":"/us/about-us/policies/protecting-your-privacy/","policiesLink":"/us/about-us/policies/","accessibilityLabel":"Accessibility Statement","accessibilityLink":"/us/about-us/policies/accessibility-statement/"},"en-GB":{"logolinkurl":"/uk/","logolinktext":"Sedo.com","company":"Sedo GmbH","newsletterHeadline":"Subscribe to newsletter","newslettertermsUrl":"/uk/about-us/policies/protecting-your-privacy/","newslettertermsLabel":"Privacy Policy","newsletterCheckboxLabel":"Yes, I would like to receive regular email updates on Sedo product news, discounts, promotions and domain news. I can unsubscribe at any time using the unsubscribe link in the respective newsletter.","newsletterEmailLabel":"Email","newsletterRegisterButton":"Subscribe","newsletterRegisterPlaceholder":"Your email address","paypalUrl":"https://www.paypal.com/us/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Company Info","dataSecurityPoliciesLabel":"Protecting your Privacy","cookieSettingsLabel":"Cookie Settings","policiesLabel":"Policies","socialHeader":"Find us on","impressumLink":"/uk/about-us/imprint/","dataSecurityPoliciesLink":"/uk/about-us/policies/protecting-your-privacy/","policiesLink":"/uk/about-us/policies/","accessibilityLabel":"Accessibility Statement","accessibilityLink":"/us/about-us/policies/accessibility-statement/"},"de-DE":{"logolinkurl":"/de/","logolinktext":"Sedo.com","company":"Sedo GmbH","newsletterHeadline":"Newsletter abonnieren","newslettertermsUrl":"/de/ueber-uns/policies-gmbh/datenschutzrichtlinien-der-sedo-gmbh/",
Source: chromecache_196.3.dr	String found in binary or memory: \************************************/function(e){"use strict";e.exports=JSON.parse('{"en-US":{"logolinkurl":"/us/","logolinktext":"Sedo.com","company":"Sedo.com, LLC","newsletterHeadline":"Subscribe to newsletter","newslettertermsUrl":"/us/about-us/policies/protecting-your-privacy/","newslettertermsLabel":"Privacy Policy","newsletterCheckboxLabel":"Yes, I would like to receive regular email updates on Sedo product news, discounts, promotions and domain news. I can unsubscribe at any time using the unsubscribe link in the respective newsletter.","newsletterEmailLabel":"Email","newsletterRegisterButton":"Subscribe","newsletterRegisterPlaceholder":"Your email address","paypalUrl":"https://www.paypal.com/us/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Company Info","dataSecurityPoliciesLabel":"Protecting your Privacy","cookieSettingsLabel":"Cookie Settings","policiesLabel":"Policies","socialHeader":"Find us on","impressumLink":"/us/about-us/imprint/","dataSecurityPoliciesLink":"/us/about-us/policies/protecting-your-privacy/","policiesLink":"/us/about-us/policies/","accessibilityLabel":"Accessibility Statement","accessibilityLink":"/us/about-us/policies/accessibility-statement/"},"en-GB":{"logolinkurl":"/uk/","logolinktext":"Sedo.com","company":"Sedo GmbH","newsletterHeadline":"Subscribe to newsletter","newslettertermsUrl":"/uk/about-us/policies/protecting-your-privacy/","newslettertermsLabel":"Privacy Policy","newsletterCheckboxLabel":"Yes, I would like to receive regular email updates on Sedo product news, discounts, promotions and domain news. I can unsubscribe at any time using the unsubscribe link in the respective newsletter.","newsletterEmailLabel":"Email","newsletterRegisterButton":"Subscribe","newsletterRegisterPlaceholder":"Your email address","paypalUrl":"https://www.paypal.com/us/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Company Info","dataSecurityPoliciesLabel":"Protecting your Privacy","cookieSettingsLabel":"Cookie Settings","policiesLabel":"Policies","socialHeader":"Find us on","impressumLink":"/uk/about-us/imprint/","dataSecurityPoliciesLink":"/uk/about-us/policies/protecting-your-privacy/","policiesLink":"/uk/about-us/policies/","accessibilityLabel":"Accessibility Statement","accessibilityLink":"/us/about-us/policies/accessibility-statement/"},"de-DE":{"logolinkurl":"/de/","logolinktext":"Sedo.com","company":"Sedo GmbH","newsletterHeadline":"Newsletter abonnieren","newslettertermsUrl":"/de/ueber-uns/policies-gmbh/datenschutzrichtlinien-der-sedo-gmbh/",
Source: chromecache_270.3.dr, chromecache_260.3.dr	String found in binary or memory: \****************************/function(e,t,n){n.r(t);var a=n(/! ./utils/CookieHandler /"./src/utils/CookieHandler.js"),i=n(/! ./utils/helpers /"./src/utils/helpers.js"),r=n(/! ./utils/Template */"./src/utils/Template.js");t.default=class{constructor(e,t){this.gtmId=e,this.lang=t,this.cookieHandler=new a.default(window.document),this.template=new r.default(this.lang),this.banner=this.template.createBanner(),this.template.addTemplateToBody(),this.externalScriptsHandler()}externalScriptsHandler(){const e=`window.dataLayer = window.dataLayer \|\| [];\n (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':\n new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],\n j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=\n 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);\n })(window,document,'script','dataLayer','${this.gtmId}');`;window.addEventListener("ucSettingChanged",(t=>{const n=[{detailsName:"Taboola",idName:"taboolaPixelSnippet",innerHtml:"window._tfa = window._tfa \|\| [];\n window._tfa.push({notify: 'event', name: 'page_view', id: 1313783});\n !function (t, f, a, x) {\n if (!document.getElementById(x)) {\n t.async = 1;t.src = a;t.id=x;f.parentNode.insertBefore(t, f);\n }\n }(document.createElement('script'),\n document.getElementsByTagName('script')[0],\n '//cdn.taboola.com/libtrc/unip/1313783/tfa.js',\n 'tb_tfa_script');"},{detailsName:"Google Tag Manager",idName:"gtm-layer",innerHtml:e},{detailsName:"LinkedIn Insight Tag",idName:"linkedinPixelSnippet",innerHtml:"_linkedin_partner_id = '1239514';\n window._linkedin_data_partner_ids = window._linkedin_data_partner_ids \|\| [];\n window._linkedin_data_partner_ids.push(_linkedin_partner_id);\n (function(){var s = document.getElementsByTagName('script')[0];\n var b = document.createElement('script');\n b.type = 'text/javascript';b.async = true;\n b.src = 'https://snap.licdn.com/li.lms-analytics/insight.min.js';\n s.parentNode.insertBefore(b, s);})();"},{detailsName:"Hotjar",idName:"hotjarSnippet",innerHtml:"(function (h, o, t, j, a, r) {\n h.hj = h.hj \|\| function () {\n (h.hj.q = h.hj.q \|\| []).push(arguments)\n };\n h._hjSettings = {\n hjid: 1601031,\n hjsv: 6\n };\n a = o.getElementsByTagName('head')[0];\n r = o.createElement('script');\n r.async = 1;\n r.src = t + h._hjSettings.hjid + j + h._hjSettings.hjsv;\n a.appendChild(r);\n })(window, document, 'https://static.hotjar.com/c/hotjar-', '.js?sv=');"},{detailsName:"Facebook Pixel",idName:"facebookSnippet",innerHtml:"!function(f,b,e,v,n,t,s)\n {if(f.fbq)return;n=f.fbq=function()\n\n {n.callMethod? n.callMethod.apply(n,arguments):n.queue.push(arguments)}\n ;\n if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';\n n.queue=[];t=b.createElement(e);t.async=!0;\n t.src=v;s=b
Source: chromecache_239.3.dr	String found in binary or memory: Visit Website</span></a></div></div></div></div><div id="e2" class="i_ div clicktrackedAd_js si101" style="-ms-flex-direction:column; -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si32" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;"><a class="p_ si27 a" href="https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwinw5eV7_qIAxV6rYMHHV6JGrwYABABGgJlZg&co=1&ase=2&gclid=EAIaIQobChMIp8OXle_6iAMVeq2DBx1eiRq8EAAYAyAAEgLtZ_D_BwE&ohost&cid=CAASAuRo&sig=AOD64_0ds_bx7AAHKL2gQSBFICE2K3jxaw&q&nis=6&adurl=https://tinytrk.com/index.php?rgid%3D664499%26sub%3Dgclid%26zbulk%3DHvac%2520Services" attributionsrc="" data-set-target="1" target="_top">Find <span style='display:inline;text-transform:inherit;' class="si130 span">HVAC</span> Services - Explore <span style='display:inline;text-transform:inherit;' class="si130 span">HVAC</span> Services - <span style='display:inline;text-transform:inherit;' class="si130 span">HVAC</span> Services</a></div><div class="i_ div si34" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;"><div class="i_ div adbadgeContainer w_" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><span class="p_ si25 span">Ad</span></div><a class="m_ n_ si28 a" data-lines="1" data-truncate="0" href="https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwinw5eV7_qIAxV6rYMHHV6JGrwYABABGgJlZg&co=1&ase=2&gclid=EAIaIQobChMIp8OXle_6iAMVeq2DBx1eiRq8EAAYAyAAEgLtZ_D_BwE&ohost&cid=CAASAuRo&sig=AOD64_0ds_bx7AAHKL2gQSBFICE2K3jxaw&q&nis=6&adurl=https://tinytrk.com/index.php?rgid%3D664499%26sub%3Dgclid%26zbulk%3DHvac%2520Services" attributionsrc="" data-set-target="1" target="_top">https://search.yahoo.com/search/results</a><div class="i_ div si67 w_" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div id="e5" class="i_ div y_" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a class="m_ o_ wtaBubbleText a" data-lines="1" data-truncate="0" data-pingback-type="wtac" href="https://adssettings.google.com/whyt
Source: chromecache_221.3.dr	String found in binary or memory: Visit Website</span></a></div></div></div></div><div id="e2" class="i_ div clicktrackedAd_js si101" style="-ms-flex-direction:column; -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si32" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;"><a class="p_ si27 a" href="https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwju9rGY7_qIAxW6oIMHHVE9K2UYABABGgJlZg&co=1&ase=2&gclid=EAIaIQobChMI7vaxmO_6iAMVuqCDBx1RPStlEAAYAyAAEgLygfD_BwE&ohost&cid=CAASAuRo&sig=AOD64_2p3aorBThLJZcyML1iy_n2a9ni8g&q&nis=6&adurl=https://tinytrk.com/index.php?rgid%3D664195%26sub%3Dgclid%26zbulk%3DHeat%2520And%2520Air%2520Systems" attributionsrc="" data-set-target="1" target="_top">Find <span style='display:inline;text-transform:inherit;' class="si130 span">Heat</span> And Air Systems - Explore <span style='display:inline;text-transform:inherit;' class="si130 span">Heat</span> And Air Systems - <span style='display:inline;text-transform:inherit;' class="si130 span">Heat</span> And Air Systems</a></div><div class="i_ div si34" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;"><div class="i_ div adbadgeContainer w_" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><span class="p_ si25 span">Ad</span></div><a class="m_ n_ si28 a" data-lines="1" data-truncate="0" href="https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwju9rGY7_qIAxW6oIMHHVE9K2UYABABGgJlZg&co=1&ase=2&gclid=EAIaIQobChMI7vaxmO_6iAMVuqCDBx1RPStlEAAYAyAAEgLygfD_BwE&ohost&cid=CAASAuRo&sig=AOD64_2p3aorBThLJZcyML1iy_n2a9ni8g&q&nis=6&adurl=https://tinytrk.com/index.php?rgid%3D664195%26sub%3Dgclid%26zbulk%3DHeat%2520And%2520Air%2520Systems" attributionsrc="" data-set-target="1" target="_top">https://search.yahoo.com/search/results</a><div class="i_ div si67 w_" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div id="e6" class="i_ div y_" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a class="m_ o_ wtaBubbleText a" data-lines="1" data-truncate="0" data-pingback-ty
Source: chromecache_282.3.dr	String found in binary or memory: Visit Website</span></a></div></div></div></div><div id="e3" class="i_ div clicktrackedAd_js si101" style="-ms-flex-direction:column; -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si32" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;"><a class="p_ si27 a" href="https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwivqt2i7_qIAxVJlYMHHZ-wN3sYABAAGgJlZg&co=1&ase=2&gclid=EAIaIQobChMIr6rdou_6iAMVSZWDBx2fsDd7EAAYAiAAEgLjL_D_BwE&ohost&cid=CAASAuRo&sig=AOD64_3C9vhrV3quCKwKGsumhAJrdYgcmw&q&nis=6&adurl=https://tinytrk.com/index.php?rgid%3D532569%26sub%3Dgclid%26zbulk%3DIn%2520Home%2520Warranty" attributionsrc="" data-set-target="1" target="_top">Find In <span style='display:inline;text-transform:inherit;' class="si130 span">Home Warranty</span> - Explore In <span style='display:inline;text-transform:inherit;' class="si130 span">Home Warranty</span> - In <span style='display:inline;text-transform:inherit;' class="si130 span">Home Warranty</span></a></div><div class="i_ div si34" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;"><div class="i_ div adbadgeContainer w_" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><span class="p_ si25 span">Ad</span></div><a class="m_ n_ si28 a" data-lines="1" data-truncate="0" href="https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwivqt2i7_qIAxVJlYMHHZ-wN3sYABAAGgJlZg&co=1&ase=2&gclid=EAIaIQobChMIr6rdou_6iAMVSZWDBx2fsDd7EAAYAiAAEgLjL_D_BwE&ohost&cid=CAASAuRo&sig=AOD64_3C9vhrV3quCKwKGsumhAJrdYgcmw&q&nis=6&adurl=https://tinytrk.com/index.php?rgid%3D532569%26sub%3Dgclid%26zbulk%3DIn%2520Home%2520Warranty" attributionsrc="" data-set-target="1" target="_top">https://search.yahoo.com/search/results</a><div class="i_ div si67 w_" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div id="e6" class="i_ div y_" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a class="m_ o_ wtaBubbleText a" data-lines="1" data-truncate="0" data-pingback-type="wtac" href="https://adss
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: ","paypalUrl":"https://www.paypal.com/cn/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedoDE","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoGmbH","impressumLabel":" equals www.facebook.com (Facebook)
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: ","paypalUrl":"https://www.paypal.com/cn/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedoDE","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoGmbH","impressumLabel":" equals www.twitter.com (Twitter)
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: ","paypalUrl":"https://www.paypal.com/cn/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedoDE","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoGmbH","impressumLabel":" equals www.youtube.com (Youtube)
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: ber den Abmeldelink im jeweiligen Newsletter.","newsletterEmailLabel":"Email","newsletterRegisterButton":"Abonnieren","newsletterRegisterPlaceholder":"Ihre E-Mail Adresse","paypalUrl":"https://www.paypal.com/de/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/","twitterUrl":"https://twitter.com/sedoDE","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoGmbH","impressumLabel":"Impressum","dataSecurityPoliciesLabel":"Datenschutzrichtlinien der Sedo GmbH","cookieSettingsLabel":"Cookie Einstellungen","policiesLabel":"AGB & Policies","socialHeader":"Finden Sie uns auf","impressumLink":"/de/ueber-uns/impressum/","dataSecurityPoliciesLink":"/de/ueber-uns/policies-gmbh/datenschutzrichtlinien-der-sedo-gmbh/","policiesLink":"/de/ueber-uns/policies-gmbh/"},"fr-FR":{"logolinkurl":"/fr/","logolinktext":"Sedo.com","company":"Sedo GmbH","newsletterHeadline":"S\'abonner equals www.facebook.com (Facebook)
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: ber den Abmeldelink im jeweiligen Newsletter.","newsletterEmailLabel":"Email","newsletterRegisterButton":"Abonnieren","newsletterRegisterPlaceholder":"Ihre E-Mail Adresse","paypalUrl":"https://www.paypal.com/de/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/","twitterUrl":"https://twitter.com/sedoDE","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoGmbH","impressumLabel":"Impressum","dataSecurityPoliciesLabel":"Datenschutzrichtlinien der Sedo GmbH","cookieSettingsLabel":"Cookie Einstellungen","policiesLabel":"AGB & Policies","socialHeader":"Finden Sie uns auf","impressumLink":"/de/ueber-uns/impressum/","dataSecurityPoliciesLink":"/de/ueber-uns/policies-gmbh/datenschutzrichtlinien-der-sedo-gmbh/","policiesLink":"/de/ueber-uns/policies-gmbh/"},"fr-FR":{"logolinkurl":"/fr/","logolinktext":"Sedo.com","company":"Sedo GmbH","newsletterHeadline":"S\'abonner equals www.twitter.com (Twitter)
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: ber den Abmeldelink im jeweiligen Newsletter.","newsletterEmailLabel":"Email","newsletterRegisterButton":"Abonnieren","newsletterRegisterPlaceholder":"Ihre E-Mail Adresse","paypalUrl":"https://www.paypal.com/de/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/","twitterUrl":"https://twitter.com/sedoDE","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoGmbH","impressumLabel":"Impressum","dataSecurityPoliciesLabel":"Datenschutzrichtlinien der Sedo GmbH","cookieSettingsLabel":"Cookie Einstellungen","policiesLabel":"AGB & Policies","socialHeader":"Finden Sie uns auf","impressumLink":"/de/ueber-uns/impressum/","dataSecurityPoliciesLink":"/de/ueber-uns/policies-gmbh/datenschutzrichtlinien-der-sedo-gmbh/","policiesLink":"/de/ueber-uns/policies-gmbh/"},"fr-FR":{"logolinkurl":"/fr/","logolinktext":"Sedo.com","company":"Sedo GmbH","newsletterHeadline":"S\'abonner equals www.youtube.com (Youtube)
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: nico","paypalUrl":"https://www.paypal.com/es/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Informaci equals www.facebook.com (Facebook)
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: nico","paypalUrl":"https://www.paypal.com/es/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Informaci equals www.twitter.com (Twitter)
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: nico","paypalUrl":"https://www.paypal.com/es/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Informaci equals www.youtube.com (Youtube)
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: o de e-mail","paypalUrl":"https://www.paypal.com/pt/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Rela equals www.facebook.com (Facebook)
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: o de e-mail","paypalUrl":"https://www.paypal.com/pt/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Rela equals www.twitter.com (Twitter)
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: o de e-mail","paypalUrl":"https://www.paypal.com/pt/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Rela equals www.youtube.com (Youtube)
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: sinscription dans la newsletter correspondante.","newsletterEmailLabel":"Email","newsletterRegisterButton":"S\'abonner","newsletterRegisterPlaceholder":"Votre adresse e-mail","paypalUrl":"https://www.paypal.com/es/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Mentions l equals www.facebook.com (Facebook)
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: sinscription dans la newsletter correspondante.","newsletterEmailLabel":"Email","newsletterRegisterButton":"S\'abonner","newsletterRegisterPlaceholder":"Votre adresse e-mail","paypalUrl":"https://www.paypal.com/es/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Mentions l equals www.twitter.com (Twitter)
Source: chromecache_225.3.dr, chromecache_196.3.dr	String found in binary or memory: sinscription dans la newsletter correspondante.","newsletterEmailLabel":"Email","newsletterRegisterButton":"S\'abonner","newsletterRegisterPlaceholder":"Votre adresse e-mail","paypalUrl":"https://www.paypal.com/es/selfhelp/home","unitedinternetUrl":"https://www.united-internet.de/en.html","twitterUrl":"https://twitter.com/sedo","facebookUrl":"https://www.facebook.com/sedo","instagramUrl":"https://www.instagram.com/sedodomains/","youtubeUrl":"https://www.youtube.com/user/SedoLLC","impressumLabel":"Mentions l equals www.youtube.com (Youtube)

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://coritta.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Windows Analysis Report
http://coritta.com/