Edit tour

Linux Analysis Report
https://generali.werbeartikel-online-shop.com

Overview

General Information

Sample URL:	https://generali.werbeartikel-online-shop.com
Analysis ID:	1528210
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false

Signatures

Creates hidden files and/or directories

Creates hidden files without content (potentially used as a mutex)

Queries the installed Ubuntu/CentOS release

Reads the 'hosts' file potentially containing internal network hosts

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528210
Start date and time:	2024-10-07 16:47:52 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://generali.werbeartikel-online-shop.com
Analysis system description:	Ubuntu Linux 16.04 x64 (Kernel 4.4.0-116, Firefox 88.0, Document Viewer 3.18.2, LibreOffice 5.1.6.2, OpenJDK 1.8.0_171)
Analysis Mode:	default
Detection:	CLEAN
Classification:	clean2.lin@0/74@20/0

Warnings

Excluded IPs from analysis (whitelisted): 2.18.121.73, 2.18.121.79
Excluded domains from analysis (whitelisted): a19.dscg10.akamai.net, ciscobinary.openh264.org, a17.rackcdn.com.mdc.edgesuite.net, aus5.mozilla.org, snippets.cdn.mozilla.net
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://generali.werbeartikel-online-shop.com

Process Tree

system is lnxubuntu1

exo-open (PID: 4782, Parent: 4722, MD5: 39c5fa78f1cb3d950b9944f784018d3a) Arguments: exo-open https://generali.werbeartikel-online-shop.com

exo-open New Fork (PID: 4789, Parent: 4782)

exo-open New Fork (PID: 4790, Parent: 4789)

exo-helper-1 (PID: 4790, Parent: 4789, MD5: c27a648e34ba5ce625d064af015be147) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 --launch WebBrowser https://generali.werbeartikel-online-shop.com

exo-helper-1 New Fork (PID: 4797, Parent: 4790)

sensible-browser (PID: 4797, Parent: 4790, MD5: a5909f49ad9c97574d2b4c49cc24905d) Arguments: /bin/sh /usr/bin/sensible-browser https://generali.werbeartikel-online-shop.com

x-www-browser (PID: 4797, Parent: 4790, MD5: unknown) Arguments: /bin/sh /usr/bin/x-www-browser https://generali.werbeartikel-online-shop.com

x-www-browser New Fork (PID: 4798, Parent: 4797)

which (PID: 4798, Parent: 4797, MD5: unknown) Arguments: /bin/sh /usr/bin/which /usr/bin/x-www-browser

firefox (PID: 4797, Parent: 4790, MD5: 9a5584c0c2c9ac6b1ba6296513075910) Arguments: /usr/lib/firefox/firefox https://generali.werbeartikel-online-shop.com

firefox New Fork (PID: 4799, Parent: 4797)

firefox New Fork (PID: 4825, Parent: 4797)

firefox New Fork (PID: 4839, Parent: 4797)

lsb_release (PID: 4839, Parent: 4797, MD5: 18cba7de7bfedd0d9f027bd1c54cc2b2) Arguments: /usr/bin/python3 -Es /usr/bin/lsb_release -idrc

firefox New Fork (PID: 4859, Parent: 4797)

dbus-launch (PID: 4859, Parent: 4797, MD5: e4a469f27d130d783c21ce9c1c4456c3) Arguments: dbus-launch --autolaunch=11ced2f07072c6ae389b731c5cc84014 --binary-syntax --close-stderr

firefox New Fork (PID: 4923, Parent: 4797)

firefox New Fork (PID: 4924, Parent: 4923)

firefox (PID: 4923, Parent: 4797, MD5: 9a5584c0c2c9ac6b1ba6296513075910) Arguments: /usr/lib/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 172334 -parentBuildID 20190410113011 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appdir /usr/lib/firefox/browser 4797 true tab

firefox New Fork (PID: 4968, Parent: 4797)

firefox New Fork (PID: 4969, Parent: 4968)

firefox (PID: 4968, Parent: 4797, MD5: 9a5584c0c2c9ac6b1ba6296513075910) Arguments: /usr/lib/firefox/firefox -contentproc -childID 2 -isForBrowser -prefsLen 6115 -prefMapSize 172334 -parentBuildID 20190410113011 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appdir /usr/lib/firefox/browser 4797 true tab

firefox New Fork (PID: 5009, Parent: 4797)

firefox New Fork (PID: 5011, Parent: 5009)

firefox (PID: 5009, Parent: 4797, MD5: 9a5584c0c2c9ac6b1ba6296513075910) Arguments: /usr/lib/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 6934 -prefMapSize 172334 -parentBuildID 20190410113011 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appdir /usr/lib/firefox/browser 4797 true tab

cleanup

HTTP traffic detected: POST /cgi-bin/cosmoshop/lshop.cgi HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: application/json, text/javascript, */*; q=0.01Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Content-Type: application/x-www-form-urlencoded; charset=UTF-8X-Requested-With: XMLHttpRequestContent-Length: 78Connection: keep-alive

Source: cert9.db-journal.34.dr, cert9.db.34.dr	String found in binary or memory: http://crl.pki.goog/gsr2/gsr2.crl0?
Source: cert9.db-journal.34.dr, cert9.db.34.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: cert9.db-journal.34.dr, cert9.db.34.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl0=
Source: cert9.db-journal.34.dr, cert9.db.34.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: cert9.db-journal.34.dr, cert9.db.34.dr	String found in binary or memory: http://ocsp.pki.goog/gsr202
Source: places.sqlite-wal.34.dr	String found in binary or memory: http://wiki.ubuntu.com
Source: places.sqlite-wal.34.dr	String found in binary or memory: http://wiki.ubuntu.com/moc.utnubu.ikiw.
Source: places.sqlite-wal.34.dr	String found in binary or memory: http://www.debian.org
Source: places.sqlite-wal.34.dr	String found in binary or memory: http://www.debian.org/gro.naibed.www.
Source: places.sqlite-wal.34.dr	String found in binary or memory: http://www.ubuntu.com
Source: places.sqlite-wal.34.dr	String found in binary or memory: http://www.ubuntu.com/moc.utnubu.www.
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://answers.launchpad.net
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://answers.launchpad.net/ubuntu/
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com
Source: recovery.jsonlz4.tmp.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/GENERALI
Source: AD059B96D97FE240161540F36D46C5F70734D6F2.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/default/css/shop/content/layout/bramble.min.
Source: 255180BBFC392A33F03051F3DC10335C080DDA20.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/default/css/shop/frame/layout/bramble.min.2.
Source: E39A30365062FED6A062C3B828869E960E9E1641.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/default/template/css/bramble_customDesign.cs
Source: 9E876DD8AD3949F308300382320CBAFF2C684314.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/default/template/css/bramble_customResponsiv
Source: 40ABD0A962B8FE31514026AD426D53FC2AD624FE.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/css/shop/content/style/de/bramble.min
Source: 1B22BDA5BA68A1448FCB56906398FE61B0AEE710.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/css/shop/frame/style/de/bramble.min.2
Source: 17BCC6A55E85E8F6A4C660529BB763D3464877E1.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Fontello/fontello-animation.css
Source: C451CAD6E876978E63FFFC9865A83D89CFBE951D.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Fontello/fontello.css
Source: E8D2EF960BE529ACF6A67B8DF1D64710B0CD15D1.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/NormalizeCss/normalize.css
Source: 66B7941C45385F0CD6B46B392D0BEF2CBD64288D.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQuery/jquery-migrate.min.js
Source: 1ACD9749AAE3D02FEE084B8576784A1535E5546C.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQuery/jquery.min.js
Source: C7093830EE04AD47A1F61AE4D939134F0A4244BF.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/template/css/bramble_responsive.css
Source: 919AD4B6B4DF5BEE81EE8EC9665A5FC662F12E3B.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/template/css/bramble_rootStyles.css
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.com/moc.pohs-enilno-lekitraebrew.ilareneg.d
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://generali.werbeartikel-online-shop.comd
Source: cert9.db-journal.34.dr, cert9.db.34.dr	String found in binary or memory: https://pki.goog/repository/0
Source: C389DE279BF5275924497D5B33D1F1900116E591.34.dr	String found in binary or memory: https://snippets.cdn.mozilla.net/us-west/bundles-pregen/Firefox/en-us/default.json
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://support.mozilla.org
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://support.mozilla.org/en-US/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=fire
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://support.mozilla.org/en-US/products/firefoxgro.allizom.troppus.
Source: cert9.db-journal.34.dr, cert9.db.34.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://www.mozilla.org
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://www.mozilla.org/en-US/about/gro.allizom.www.
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://www.mozilla.org/en-US/contribute/gro.allizom.www.
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/central/gro.allizom.www.
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43760
Source: unknown	Network traffic detected: HTTP traffic on port 43732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43758
Source: unknown	Network traffic detected: HTTP traffic on port 43726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43754
Source: unknown	Network traffic detected: HTTP traffic on port 59210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43756
Source: unknown	Network traffic detected: HTTP traffic on port 43764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43752
Source: unknown	Network traffic detected: HTTP traffic on port 58630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58630
Source: unknown	Network traffic detected: HTTP traffic on port 43770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43746
Source: unknown	Network traffic detected: HTTP traffic on port 43784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43742
Source: unknown	Network traffic detected: HTTP traffic on port 43782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59208
Source: unknown	Network traffic detected: HTTP traffic on port 43720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43738
Source: unknown	Network traffic detected: HTTP traffic on port 43714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43732
Source: unknown	Network traffic detected: HTTP traffic on port 43762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43730
Source: unknown	Network traffic detected: HTTP traffic on port 43800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43728
Source: unknown	Network traffic detected: HTTP traffic on port 43740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43720
Source: unknown	Network traffic detected: HTTP traffic on port 43780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43718
Source: unknown	Network traffic detected: HTTP traffic on port 43768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43716
Source: unknown	Network traffic detected: HTTP traffic on port 43716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59194
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43794
Source: unknown	Network traffic detected: HTTP traffic on port 43802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43790
Source: unknown	Network traffic detected: HTTP traffic on port 43710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43792
Source: unknown	Network traffic detected: HTTP traffic on port 43760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43786
Source: unknown	Network traffic detected: HTTP traffic on port 43788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43782
Source: unknown	Network traffic detected: HTTP traffic on port 43730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43776
Source: unknown	Network traffic detected: HTTP traffic on port 43894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43778
Source: unknown	Network traffic detected: HTTP traffic on port 43766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43890
Source: unknown	Network traffic detected: HTTP traffic on port 43758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43770
Source: unknown	Network traffic detected: HTTP traffic on port 43888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43806
Source: unknown	Network traffic detected: HTTP traffic on port 43772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43764
Source: unknown	Network traffic detected: HTTP traffic on port 43786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43884

Source: unknown

HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.20:58630 version: TLS 1.2

Source: classification engine

Classification label: clean2.lin@0/74@20/0

Source: /usr/bin/exo-open (PID: 4782)	Directory: /home/james/.Xauthority	Jump to behavior
Source: /usr/bin/exo-open (PID: 4782)	Directory: /home/james/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 (PID: 4790)	Directory: /home/james/.Xauthority	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 (PID: 4790)	Directory: /home/james/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 (PID: 4790)	Directory: /home/james/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 (PID: 4790)	Directory: /home/james/.config	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797)	Directory: /home/james/.Xauthority	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797)	File: /tmp/firefox_james/.parentlock	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797)	Directory: /home/james/.Xauthority	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797)	File: /home/james/.mozilla/firefox/5zxot757.default/.parentlock	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797)	File: /home/james/.cache/mozilla/firefox/5zxot757.default/.startup-incomplete	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797)	Directory: /home/james/.Xdefaults-ubuntu	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797)	Directory: /home/james/.mime.types	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797)	Directory: /home/james/.mozilla/firefox/5zxot757.default/storage/permanent/chrome/.metadata-v2	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797)	Directory: /home/james/.mailcap	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797)	Directory: /home/james/.cache	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4825)	Directory: /home/james/.Xauthority	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4825)	Directory: /home/james/.drirc	Jump to behavior
Source: /usr/bin/dbus-launch (PID: 4859)	Directory: /home/james/.Xauthority	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4923)	Directory: /home/james/.Xauthority	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4968)	Directory: /home/james/.Xauthority	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 5009)	Directory: /home/james/.Xauthority	Jump to behavior

Source: /usr/lib/firefox/firefox (PID: 4797)	Empty hidden file: /tmp/firefox_james/.parentlock	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797)	Empty hidden file: /home/james/.cache/mozilla/firefox/5zxot757.default/.startup-incomplete	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797)	Empty hidden file: /home/james/.mozilla/firefox/5zxot757.default/.parentlock	Jump to behavior

Source: /usr/bin/exo-open (PID: 4782)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 (PID: 4790)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4825)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/dbus-launch (PID: 4859)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4923)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4968)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 5009)	Queries kernel information via 'uname':	Jump to behavior

Source: /usr/lib/firefox/firefox (PID: 4839)

Arguments: /usr/bin/lsb_release -> /usr/bin/python3 -Es /usr/bin/lsb_release -idrc

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Hide Artifacts	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	1 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://support.mozilla.org	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
push.services.mozilla.com	34.107.243.93	true	false	unknown
generali.werbeartikel-online-shop.com	95.142.78.35	true	false	unknown
d228z91au11ukj.cloudfront.net	13.32.121.112	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/style.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/default/template/css/bramble_customDesign.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/shop/Core.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/lazyClasses.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/NormalizeCss/normalize.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQuerySlickCarousel/js/slick.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQuerySlickCarousel/css/slick.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQuerySlickCarousel/css/slick-theme.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/css/shop/frame/style/de/bramble.min.2.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/Cosmoshop.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/external/jQuery/Loading.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/Helper.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQueryUI/jquery-ui.min.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/pix/template_vorlage/bramble/shop_header/de/apple-touch-icon.png	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQuery/jquery-migrate.min.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/external/Ejs_3_1_6_min.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Fontello/font/cs.woff?29759507	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/default/lib/de_categories_61fc104855eb3a96fccf5f576c8595fd.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Fontello/fontello-animation.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/template/css/bramble_responsive.css	false	unknown
https://generali.werbeartikel-online-shop.com/	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQueryUI/jquery-ui.min.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQueryUI/jquery-ui.theme.min.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/default/template/css/bramble_customResponsive.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/FormLib/shop_formlib.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/template/js/bramble_shopFunctions.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQueryCookie/jquery.cookie.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQuery/jquery.min.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/external/jQuery/modal.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/css/shop/content/style/de/bramble.min.2.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/default/css/shop/content/layout/bramble.min.2.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/Validators.js	false	unknown
https://generali.werbeartikel-online-shop.com/cgi-bin/cosmoshop/lshop.cgi	false	unknown
https://push.services.mozilla.com/	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/template/css/bramble_rootStyles.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/external/jQuery/Modal.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/pix/template_vorlage/bramble/shop_header/de/Logo.png	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/overrides.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/EventHandler.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/default/css/shop/frame/layout/bramble.min.2.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Fontello/fontello.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/Cache.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/LiveSearch/jQueryLiveSearch.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/pix/template_vorlage/bramble/suchleiste/de/logo.png	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQueryUI/jquery-ui.structure.min.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/external/jQuery/loading.css	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/Ajax.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/modernizr/modernizr.js	false	unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/default/pix/s/favicon/icon.ico	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/css/shop/frame/style/de/bramble.min.2	1B22BDA5BA68A1448FCB56906398FE61B0AEE710.34.dr	false		unknown
http://www.debian.org/gro.naibed.www.	places.sqlite-wal.34.dr	false		unknown
http://www.ubuntu.com	places.sqlite-wal.34.dr	false		unknown
http://www.ubuntu.com/moc.utnubu.www.	places.sqlite-wal.34.dr	false		unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/default/template/css/bramble_customDesign.cs	E39A30365062FED6A062C3B828869E960E9E1641.34.dr	false		unknown
https://support.mozilla.org/en-US/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=fire	places.sqlite-wal.34.dr	false		unknown
https://generali.werbeartikel-online-shop.com/moc.pohs-enilno-lekitraebrew.ilareneg.d	places.sqlite-wal.34.dr	false		unknown
http://www.debian.org	places.sqlite-wal.34.dr	false		unknown
https://support.mozilla.org/en-US/products/firefoxgro.allizom.troppus.	places.sqlite-wal.34.dr	false		unknown
http://wiki.ubuntu.com/moc.utnubu.ikiw.	places.sqlite-wal.34.dr	false		unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/default/css/shop/content/layout/bramble.min.	AD059B96D97FE240161540F36D46C5F70734D6F2.34.dr	false		unknown
https://pki.goog/repository/0	cert9.db-journal.34.dr, cert9.db.34.dr	false		unknown
https://answers.launchpad.net/ubuntu/	places.sqlite-wal.34.dr	false		unknown
https://generali.werbeartikel-online-shop.com	places.sqlite-wal.34.dr	false		unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/default/css/shop/frame/layout/bramble.min.2.	255180BBFC392A33F03051F3DC10335C080DDA20.34.dr	false		unknown
https://answers.launchpad.net	places.sqlite-wal.34.dr	false		unknown
https://generali.werbeartikel-online-shop.comd	places.sqlite-wal.34.dr	false		unknown
http://wiki.ubuntu.com	places.sqlite-wal.34.dr	false		unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/css/shop/content/style/de/bramble.min	40ABD0A962B8FE31514026AD426D53FC2AD624FE.34.dr	false		unknown
https://generali.werbeartikel-online-shop.com/GENERALI	places.sqlite-wal.34.dr	false		unknown
https://support.mozilla.org	places.sqlite-wal.34.dr	false	URL Reputation: safe	unknown
http://crl.pki.goog/gsr2/gsr2.crl0?	cert9.db-journal.34.dr, cert9.db.34.dr	false		unknown
https://generali.werbeartikel-online-shop.com/cosmoshop/default/template/css/bramble_customResponsiv	9E876DD8AD3949F308300382320CBAFF2C684314.34.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.32.121.112	d228z91au11ukj.cloudfront.net	United States	16509	AMAZON-02US	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
95.142.78.35	generali.werbeartikel-online-shop.com	Germany	51483	SASGCecinastr70DE	false
34.107.243.93	push.services.mozilla.com	United States	15169	GOOGLEUS	false

Process:	/usr/lib/firefox/firefox
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	93B885ADFE0DA089CDF634904FD59F71
SHA1:	5BA93C9DB0CFF93F52B521D7420E43F6EDA2784F
SHA-256:	6E340B9CFFB37A989CA544E6BB780A2C78901D3FB33738768511A30617AFA01D
SHA-512:	B8244D028981D693AF7B456AF8EFA4CAD63D282E19FF14942C246E50D9351D22704A802A71C3580B6370DE4CEB293C324A8423342557D4E5C38438F0E36910EE
Malicious:	false
Reputation:	low
Preview:	.

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/17BCC6A55E85E8F6A4C660529BB763D3464877E1

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	9339
Entropy (8bit):	6.082000811886294
Encrypted:	false
SSDEEP:	192:Tc+89M89r89u89w89rmNZVyAyGcrm4B48NZVyAyGcrm4B4PfbaI8j3qcd4+ydn+L:7mNZ4AyGsm4B7NZ4AyGsm4BCTaIds4+Z
MD5:	B38243F58A962EDE284CAEE3FA6F295C
SHA1:	9D10723982FED876AA9E9A70ABD6BA56DD8CEF46
SHA-256:	A7F9AC562B7CCA22742C65C55BEAC2BE9F8569BE4B6E1FCFF1B04F244E125EDD
SHA-512:	4E8075A76FC7E0F6B1298B99186F8BE5BA8BFD3D34627270ED2C2AA42F2FCD4C4524D76D193364DA8ED45AB5E1039B9A44E3105A7815109E6675C21418022D79
Malicious:	false
Reputation:	low
Preview:	/. Animation example, for spinners./..animate-spin {. -moz-animation: spin 2s infinite linear;. -o-animation: spin 2s infinite linear;. -webkit-animation: spin 2s infinite linear;. animation: spin 2s infinite linear;. display: inline-block;.}.@-moz-keyframes spin {. 0% {. -moz-transform: rotate(0deg);. -o-transform: rotate(0deg);. -webkit-transform: rotate(0deg);. transform: rotate(0deg);. }.. 100% {. -moz-transform: rotate(359deg);. -o-transform: rotate(359deg);. -webkit-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@-webkit-keyframes spin {. 0% {. -moz-transform: rotate(0deg);. -o-transform: rotate(0deg);. -webkit-transform: rotate(0deg);. transform: rotate(0deg);. }.. 100% {. -moz-transform: rotate(359deg);. -o-transform: rotate(359deg);. -webkit-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@-o-keyframes spin {. 0% {. -moz-transform: rotate(0deg);. -o-transform: rotate(0deg);. -we

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/1ACD9749AAE3D02FEE084B8576784A1535E5546C

Download File

Process:	/usr/lib/firefox/firefox
File Type:	ASCII text, with very long lines (32033)
Category:	dropped
Size (bytes):	94101
Entropy (8bit):	5.575887565655156
Encrypted:	false
SSDEEP:	1536:+NhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4cAj2ll/ckaXEy6n15HZ+FhFcQDv:Axc2yjxAj2QA/kcQDU8CuGpupt86
MD5:	13C7AE2E39B8E38D480D6F2A36DE779F
SHA1:	2B12B8231763F1F02632FC942976ED1981C30CF7
SHA-256:	40515BBF2335C3440CBF17F44B8FB7C2007FD0E9D4AA75119A56C6F153F4724C
SHA-512:	06E3A5D7DCD49ACA5A6E726FB636CBC37499678777DDA78E6410E7C64CCD1F66DD9D3EFD1F8E67DB8F43ADABAB12837979458623765FD48610E02AEB2BD5D52B
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.2.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.0",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/1B22BDA5BA68A1448FCB56906398FE61B0AEE710

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	8742
Entropy (8bit):	6.100826927611956
Encrypted:	false
SSDEEP:	192:+hjjvfLh8zxsK+1NZVyAyGcrm4B48NZVyAyGcrm4B4PfbaI8j3qcdGecydxec8:+hjjvfLh8Vs11NZ4AyGsm4B7NZ4AyGsI
MD5:	19026ABB0FD3923DA47D06B3604A440B
SHA1:	42CE096BE02CC88AE7693C99EFA3DF1397BE81C7
SHA-256:	33BA8C7FA199045AF567ED9049EBAAFC5B47E4875605C430D98C412C1F0A6170
SHA-512:	FD7544F8457076796A4B111749E152EFAA8AAC2224D73E7700321832B514E697102E684CF77C58A3AC09AD0A933432E6E8F6E234EDFCD58E2F2E2FD85BD08349
Malicious:	false
Reputation:	low
Preview:	@charset "utf-8";..bg-pattern-1{background: url('../../../../../../shared/pix/template_vorlage/bramble/shop_header/de/bg-pattern-1.png'); }.bg-pattern-2{background: url('../../../../../../shared/pix/template_vorlage/bramble/shop_header/de/bg-pattern-2.png');}.bg-pattern-3{background: url('../../../../../../shared/pix/template_vorlage/bramble/shop_header/de/bg-pattern-3.png');}.bg-pattern-4{background: url('../../../../../../shared/pix/template_vorlage/bramble/shop_header/de/bg-pattern-4.png');}.bg-pattern-5{background: url('../../../../../../shared/pix/template_vorlage/bramble/shop_header/de/bg-pattern-5.png');}.bg-pattern-6{background: url('../../../../../../shared/pix/template_vorlage/bramble/shop_header/de/bg-pattern-6.png');}.bg-pattern-7{background: url('../../../../../../shared/pix/template_vorlage/bramble/shop_header/de/bg-pattern-7.png');}#liveSearchResult{background-color: #FFFFFF; border-color: #dadadd;}ul.livesearch, ul.livesearch .livesearch-label, div.no-hits{color: #33333

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/255180BBFC392A33F03051F3DC10335C080DDA20

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	22679
Entropy (8bit):	5.7353912770535755
Encrypted:	false
SSDEEP:	384:z2Hip1+HzMoFg+NZ4AyGsm4B7NZ4AyGsm4BCTaIdsy7OH7i:zEdf4XGsmk74XGsmk2a8L
MD5:	1DBF7856C8A3A7219705DA9CF83064FB
SHA1:	55654C818D14B34AE20C30FEE517706098CAA198
SHA-256:	9BDEE64EF619FBCE93DA804C98E9C2AD9C5E29234A2CD9C5153C772AEAFC98BB
SHA-512:	05865509D411FBF84F65CF9013EC3D32FFE1E61053543621CF43BD7C9EB9E247E07402444F28A9A7E37AFA011B6580CBDB454B49697AF358E82DDD36EA1C61F5
Malicious:	false
Reputation:	low
Preview:	@charset "utf-8";.#wrapper, footer{margin: 0 auto;max-width: 1200px;width:100%;padding: 0 5px;}#header{clear: both;width: 100%;position: relative;}#mainnav{width: 100%;}#infoblock{width: 100%;clear: both;}#infoblock > #logo{margin-bottom: 3px;margin-left: 8px;margin-top: 3px;}#infoblock #logo img{max-width: 296px;width: 100%;}#infoblock .zusatz-container{border-color: #dadadd; border-style: solid; border-width: 1px 1px 0px 1px;}#logo a{overflow: hidden;}.navBg{height: 48px; position:absolute; width: 100%;}#ColorSwitcher{position: fixed; top: 206px;box-sizing: content-box;display:none;z-index:2000000;}#ColorSwitcher select, #ColorSwitcher input{padding: 0px;margin: 0; border-radius: none;}#ColorSwitcher #gradientPlace, #ColorSwitcher #cssStylesWrap{display: none;}.colorSettings{display: none;}.scrollup{width: 40px;height: 40px;position: fixed;bottom: 50px;right: 100px;display: none;padding: 7px;z-index: 20002;}.scrollup i{font-size: 19px;}#cookieAlertWrapper{background-color: #fbcf79;pa

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/40ABD0A962B8FE31514026AD426D53FC2AD624FE

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	8357
Entropy (8bit):	6.098843386785073
Encrypted:	false
SSDEEP:	192:fk5kGyYlNZVyAyGcrm4B48NZVyAyGcrm4B4PfbaI8j3qcdg7yd17i:fkqslNZ4AyGsm4B7NZ4AyGsm4BCTaIdf
MD5:	DBC02366223A60EF30888AA2CB57E281
SHA1:	B748C45FF44F48370E83349E76D13B1F55A98519
SHA-256:	637ACE80F98F4A44F4031F15DDEF17AA78B758A1A032741FE334F120D5F229A9
SHA-512:	304F8176BE4EE72209609ABE8B58033FB1CBD9CCFD4EB9F535E9D4A99A0E6C90E2A12DC90156030E9344FD49CD72707878437C194AE9C86C4002A5A40D4F8732
Malicious:	false
Reputation:	low
Preview:	@charset "utf-8";..change_mail .leftcol{font-weight: bold;}.landscape{background-image: url("../../../../../../shared/pix/template_vorlage/bramble/under_construction/de/bg.png");}.image_container{display: none;}.image_container.active{display: block;}.cloudzoom-lens{border:5px solid #888; width:100px; height:100px; box-shadow: -0px -0px 10px rgba(0,0,0,0.40); cursor:crosshair; z-index: 10;}.cloudzoom-zoom{border:1px solid #888; width:500px; height:200px; box-shadow: -0px -0px 10px rgba(0,0,0,0.40); z-index:9999;}.cloudzoom-zoom-inside{border:none; box-shadow:none; z-index:9999;}.kostenstelleOverviewBudget{font-weight:bold;}.kostenstelleOverviewTitle{font-size:1.2em;}.liveshoppingOldPrice{text-decoration: line-through;opacity: 0.8;}.basketCrossSellingRow a{outline: none;}input.nachweisPflichtEntryInput.successfullySaved{background-color:palegreen !important;}d.q&..........g...g...Gg..g.F@...k....:https://generali.werbeartikel-online-shop.com/cosmoshop/shared/css/shop/content/style/de/br

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/66B7941C45385F0CD6B46B392D0BEF2CBD64288D

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	14487
Entropy (8bit):	6.088517940709034
Encrypted:	false
SSDEEP:	384:VrBek79NDUHpl3NZ4AyGsm4B7NZ4AyGsm4BCTaIdsY+Ol+V:ZAkEH74XGsmk74XGsmk2a8u
MD5:	52E001E2999CDA6D31C88452314BC1BA
SHA1:	737D763D3433171804BF9FB31EAE7E08BF4E1720
SHA-256:	179C241713C796DFCC0AD48178AA43144BA27940A07A2D7A4A0955C60D964EAB
SHA-512:	756A488F05D1D320BFB4D79BE49AF4C88DD07FEC851CDFBDACF4239A0B687A9491EDC845AE4A670788F32C352C1C0A4884151248E2F22369020CBA22789D47FC
Malicious:	false
Reputation:	low
Preview:	/! jQuery Migrate v3.0.0 \| (c) jQuery Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(a,b){"use strict";function c(c){var d=b.console;e[c]\|\|(e[c]=!0,a.migrateWarnings.push(c),d&&d.warn&&!a.migrateMute&&(d.warn("JQMIGRATE: "+c),a.migrateTrace&&d.trace&&d.trace()))}function d(a,b,d,e){Object.defineProperty(a,b,{configurable:!0,enumerable:!0,get:function(){return c(e),d}})}a.migrateVersion="3.0.0",function(){var c=b.console&&b.console.log&&function(){b.console.log.apply(b.console,arguments)},d=/^[12]\./;c&&(a&&!d.test(a.fn.jquery)\|\|c("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),a.migrateWarnings&&c("JQMIGRATE: Migrate plugin loaded multiple times"),c())}();var e={};a.migrateWarnings=[],void 0===a.migrateTrace&&(a.migrateTrace=!0),a.migrateReset=function(){e={},a.migrateWarnings.length=0},"BackCompat"===document.compatMode&&c("jQuery is not compatible with Quirks Mode");var f=a.fn.init,g=a.isNumeric,h=a.find,i=/\[(

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/919AD4B6B4DF5BEE81EE8EC9665A5FC662F12E3B

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	41679
Entropy (8bit):	5.445583926422441
Encrypted:	false
SSDEEP:	768:TJDlAkvNgMlrfHlNuZ22UxEcI4XGsmk74XGsmk2a8u:TrAkvfHlNuZ22UxEczpupt8u
MD5:	59DAEFF7B3C4C9212102F45F95E8692E
SHA1:	A2E79D355AF1D90AC978CFD636CE01E1377CC095
SHA-256:	B1E30BC149D7AE6BC12BBB6C6E269A3A75EE6D4913B2518C662508AFC2E414DD
SHA-512:	323B6A72902B458BF956CE60DB4B22D7B876538626377EA85BA3550D77FAD3639E42F4BD0BB7660C3D892715AA2432C6BA81C2BD6DBD1A75FD962CFD7C0C6AAD
Malicious:	false
Reputation:	low
Preview:	@charset "utf-8";./* CSS Document /../ --------- FONTS -----------------------------------------------------------------------------*/.@font-face {. font-family: 'Open Sans Condensed';. font-style: normal;. font-weight: 300;. src: local('Open Sans Cond Light'), local('OpenSans-CondensedLight'), url(woff/gk5FxslNkTTHtojXrkp-xBEur64QvLD-0IbiAdTUNXE.woff2) format('woff2'), url(woff/gk5FxslNkTTHtojXrkp-xF1YPouZEKgzpqZW9wN-3Ek.woff) format('woff');.}.@font-face {. font-family: 'Open Sans Condensed';. font-style: normal;. font-weight: 700;. src: local('Open Sans Condensed Bold'), local('OpenSans-CondensedBold'), url(woff/gk5FxslNkTTHtojXrkp-xIF8zhZCJ7x9Pr62cRgaVUA.woff2) format('woff2'), url(woff/gk5FxslNkTTHtojXrkp-xONSK5BxN3NFS4EJkViHIqo.woff) format('woff');.}.@font-face {. font-family: 'Open Sans Condensed';. font-style: italic;. font-weight: 300;. src: local('Open Sans Cond Light Italic'), local('OpenSans-CondensedLightItalic'), url(woff/jIXlqT1WKafUSwj6s9AzVyqWG1TIildrkra

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/9E876DD8AD3949F308300382320CBAFF2C684314

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	25514
Entropy (8bit):	5.795227891048592
Encrypted:	false
SSDEEP:	768:MISEpQF090ZdtoSXjfP4XGsmk74XGsmk2a8W:MIUtoiGpupt8W
MD5:	D2C61E2FADE6EAF32DA310282B102D15
SHA1:	0D2B726B1CD8FB011F55D70B4A812A7E8BAACC4B
SHA-256:	24193CB560C2D3729D9056854A2FEEF019A169D51535BC44CD18C332D2AA7FB8
SHA-512:	0056708CF4A5839127C8C8C5FA70F620037F68BEA6BC026DB09E879808579B1B1D659432299BD024CEC4F6D892F88526E2B7EB24D4C2A4122109D5984033973E
Malicious:	false
Reputation:	low
Preview:	body {.. font-size: 16px;.. color: #333333;.. /* line-height: 23px; /..}..input[type="text"], input[type="email"], input[type="password"], input[type="number"], input[type="radio"], input[type="date"], select, textarea {.. border: 1px solid #cdcdcd;.. / background: #fff; */.. font-size: 14px;.. -webkit-box-shadow: none;.. -moz-box-shadow: none;.. box-shadow: none;..}...detailsidebox .orderBlockBasketBtn {.. padding-top: 10px;.. padding-bottom: 10px;.. font-size: 13px;.. font-weight: 700;..}.......articleDetail #tabs > .tabs > span {.. font-size: 14px;.. line-height: 16px;.. padding: 15px;.. text-transform: none;.. font-weight: normal;..}...articleDetail #tabs > .tabs.activeTab span {.. font-weight: bold;..}...articleDetail #tabs > .tabs.activeTab {.. background-color: #dddddd;.. color: rgb(194,27,23);..}....#searchBar #search .searchentry {margin: 0;width: 80%;}...generali--btn-search {width: auto;padding: 0;background: n

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/AD059B96D97FE240161540F36D46C5F70734D6F2

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	31820
Entropy (8bit):	5.583990836578751
Encrypted:	false
SSDEEP:	768:tiFFc4QFn5IzklPSpSycU1dGj4XGsmk74XGsmk2a8E:tAFbQYzklPDWpupt8E
MD5:	C3EE352D08CBD2FC00151A5DD4DCA702
SHA1:	680A45712F8A4EE23F765E1A94D491B324CDC194
SHA-256:	0FB581D58DC2C6FB2D05577286176DB9149AE24755574207E558572ABD6E84BD
SHA-512:	33002C272394B98C878222BE3A1629D8476C1182E3F2368140C3C5B7B3E666C9235752092C5CC17CCC72AAD5C69E261BF064FD4175C841E1DF3550010659A6A7
Malicious:	false
Reputation:	low
Preview:	@charset "utf-8";..bb_error, #bb_bestaetigung{display: none;}.requestBtn{float: right;margin-top: 5px;width: 100%;}.fromBottom, .bb_success, .bb_error{margin-bottom: 8px;}.requestInput{width: 100%;}.change_mail .leftcol{width: 120px;} .change_mail .eingabe{width: 214px; margin: 2px 0 1px 0; padding: 2px;}.change_mail .success{color: #249206;}body.underConstructionBody{margin: 0;overflow: hidden;width: 100%;height: 100%;background: black;background: linear-gradient(to bottom, #000000 0%, #5788fe 100%);min-height: 100vh;}.filter{width: 100%;height: 100%;position: absolute;top: 0;left: 0;background: #fe5757;animation: colorChange 30s ease-in-out infinite;animation-fill-mode: both;mix-blend-mode: overlay;}.landscape{position: absolute;bottom: 0px;left: 0;width: 100%;height: 100%;background-size: 1000px 250px;background-repeat: repeat-x;background-position: center bottom;}.dg.main.a{display: none;}.ucTextBox{position: absolute;top: 200px;left: 50%;width: 500px;}.ucTextBox .ucTextBoxInner{po

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/C389DE279BF5275924497D5B33D1F1900116E591

Download File

Process:	/usr/lib/firefox/firefox
File Type:	JSON data
Category:	dropped
Size (bytes):	7591
Entropy (8bit):	6.074709909082582
Encrypted:	false
SSDEEP:	192:HFCCrxjarXbILCCrxjarXbIFfbaI8j3qKsZ:HFCCrxerXOCCrxerXOTaIdKsZ
MD5:	99D86B06CB321AA74A54DAEB0991B97C
SHA1:	998A6954A66F983B4A7669B735092AB8891D1E7A
SHA-256:	4CDB00B89703A26AA22AF7C22CDDD2E1CDC8BE24B25315BDF214D6A036CB3DC6
SHA-512:	2149953690634C14A9078DECFE1B3EBEFAE2C5EA0E976FEE99A9A60C57F3E29D75E4ED0CBE80B3C9AB04F2BAA5CBD5512943CFAF2DD70946EFCD4B38A315CC44
Malicious:	false
Reputation:	low
Preview:	{}.yF..?6........g...g...Gg..g......S....:https://snippets.cdn.mozilla.net/us-west/bundles-pregen/Firefox/en-us/default.json.necko:classified.1.strongly-framed.1.security-info.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

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/C451CAD6E876978E63FFFC9865A83D89CFBE951D

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	72633
Entropy (8bit):	4.9308377451246335
Encrypted:	false
SSDEEP:	768:MEHRT9XBDz7D5gGL4orlWY6ViP4i+V3HdE2eM4XGsmk74XGsmk2a81:tdHKGNxQUPjCe5vpupt81
MD5:	42DB6E6C5F3A409C76FBB554ABDEF875
SHA1:	39C200C6F3D823CBC1E49BD9D0B5007D5F097172
SHA-256:	0463576D2AD9C5C50DE837F669886584958AFFD77104279EE9BAB8CAF3C31946
SHA-512:	AB7B73921C6081D543B740E38334D74578ED5682DD56784C988C33F9EF254D5181375C50250B2A1B7AD933F78E7EFCACFBD50377D5586AFE76E4EC1950196D46
Malicious:	false
Reputation:	low
Preview:	@font-face{font-family:cs;src:url(font/cs.eot?29759507);src:url(font/cs.eot?29759507#iefix) format('embedded-opentype'),url(font/cs.woff?29759507) format('woff'),url(font/cs.ttf?29759507) format('truetype'),url(font/cs.svg?29759507#cs) format('svg');font-weight:400;font-style:normal}[class*=" icon-"]:before,[class^=icon-]:before{font-family:cs;font-style:normal;font-weight:400;speak:none;display:inline-block;text-decoration:inherit;width:auto;margin-right:.2em;text-align:center;font-variant:normal;text-transform:none;line-height:1em;margin-left:.2em}.icon-emo-happy:before{content:'\e800'}.icon-emo-wink:before{content:'\e801'}.icon-emo-wink2:before{content:'\e802'}.icon-emo-unhappy:before{content:'\e803'}.icon-emo-sleep:before{content:'\e804'}.icon-emo-thumbsup:before{content:'\e805'}.icon-emo-devil:before{content:'\e806'}.icon-emo-surprised:before{content:'\e807'}.icon-emo-tongue:before{content:'\e808'}.icon-emo-coffee:before{content:'\e809'}.icon-emo-sunglasses:before{content:'\e80a'}

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/C7093830EE04AD47A1F61AE4D939134F0A4244BF

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	68605
Entropy (8bit):	5.056095853181717
Encrypted:	false
SSDEEP:	768:7bvWHFSxRaUfD3q8lyMCVl8eAa8/vZE+5BXVj+J6i4XGsmk74XGsmk2a86:5E+5BXVj+J6xpupt86
MD5:	DB9E3D272953CF0F6DB5280337487912
SHA1:	F0E58E5877DC117881B801D6CE17907693B39D23
SHA-256:	76EC7C791DA31BFED2B7FA9AA61CBB837A94BB3AAE7ADD33BC4F668786993953
SHA-512:	0A93DE08AE51A37D341F4B3407B39390F04E6038FFD4242332FE384433F7BD547603643714E3EC8A89C9029BF17AD6BE2C166CF316EFEC4C10106273AB223376
Malicious:	false
Reputation:	low
Preview:	@charset "utf-8";../------------------------------------------------------------------------------------------------------/./* Cosmoshop GmbH - v1.0 - 06.10.2015 /./------------------------------------------------------------------------------------------------------/../ ---------------------- Desktops and laptops ---------------------------------------------------- /.@media only screen and (min-width : 1280px) {. /------------ CONTENT LAYOUT ------------------------------------------------------------------/. .content {float: right;width: 78%;}. .left {float: left;width: 20%;}. / ---------------------------------------------------------------------------------------------------/. . /------------ SONSTIGES ------------------------------------------------------------------------*/. .defaultMenuStatus {display: none;}. #categoriesTop > ul > li.area-vertical {display: none;}. .videoListing.columns-1 .videolistingItem {flex: 0 0 100%;}. .videoListing.columns-2 .videol

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/E39A30365062FED6A062C3B828869E960E9E1641

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	7450
Entropy (8bit):	6.054023282195163
Encrypted:	false
SSDEEP:	192:5TlNZVyAyGcrm4B48NZVyAyGcrm4B4PfbaI8j3qXdIQydlQd:plNZ4AyGsm4B7NZ4AyGsm4BCTaIdNIQj
MD5:	8E4ECCF072C667B9CC49C123AFC2CDB0
SHA1:	0D6109C54E5DB876DCD604D88E40FCEFC0A06B94
SHA-256:	834CFA0768F0D37AD9AB4FCEA606FBD9124BDF8FAC143CD95D80B122BBBC545E
SHA-512:	B9D3016D09A17A832F27FBBFC0FFD14336829B8B1F10C2CB1CE5DE76B5A96A1FC7BBDB0713C9C3FCDCF508E6DE3255E067316E4513E07EFD4EC083C4BED27EB7
Malicious:	false
Reputation:	low
Preview:	.cs-checkout #logo img {max-width: 93px;margin-bottom: 1em;}../..R........g...g...Gg..g.F@...f....:https://generali.werbeartikel-online-shop.com/cosmoshop/default/template/css/bramble_customDesign.css.necko:classified.1.strongly-framed.1.security-info.FnhllAKWRHGAlo+ESXykKAAAAAAAAAAAwAAAAAAAAEaphjojH6pBabDSgSnsfLHeAAAAAgAAAAAAAAAAAAAAAAAAAAEAMQFmCjImkVxP+7sgiYWmMt8FvcOXmlQiTNWFiWlrbpbqgwAAAAAAAAXXMIIF0zCCA7ugAwIBAgISA+sj1ZKnOzR2QhOCSdIw/m85MA0GCSqGSIb3DQEBCwUAMIGSMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEqMCgGA1UECgwhVGhlIFVuaXZlcnNlIFNlY3VyaXR5IENvbXBhbnkgTHRkMSowKAYDVQQDDCFUaGUgVW5pdmVyc2UgU2VjdXJpdHkgQ29tcGFueSBMdGQwHhcNMjQxMDA2MTQ0ODMyWhcNMjUxMDA2MTQ0ODMyWjAwMS4wLAYDVQQDEyVnZW5lcmFsaS53ZXJiZWFydGlrZWwtb25saW5lLXNob3AuY29tMIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsCDWiJVEFU3sYePLALNxNwzcDeuS/T0TEXphaS3BomuqqKz4AsJKuGPtWPriMiNufnQp9x1gW7D4jD+xMBcivWPU/c3dnUUu32Msnz3QiZYdhqQ+JXaw+9KI8ACa6jci9UboIW6cUGF1Z3yLfHmGGQrjqXRAEXmr6WB6GaRUuihZaFMbhm6t7raT

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/E8D2EF960BE529ACF6A67B8DF1D64710B0CD15D1

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	9162
Entropy (8bit):	6.096844654841896
Encrypted:	false
SSDEEP:	192:F+5xXaXNZVyAyGcrm4B48NZVyAyGcrm4B4PfbaI8j3qcdYcydZcz:FoXaXNZ4AyGsm4B7NZ4AyGsm4BCTaIdi
MD5:	F81A719FD2A2C1EE1A4AA73BBA3B43AF
SHA1:	0102F82356B109401654292B7B57AB92E89A09B4
SHA-256:	8D08858C4CD5A6CE3C5470DE52FFA1A5812F607961EDDEC6FEB4167A72A190D2
SHA-512:	34F8F1491CB1D4A7BFF4C732174BC3F9EBC87F7E21853186ABC25D7F51207B5B3AE07614C1C46FD3A187B197593CA60601FA67B010C79680EC9BF44A19549536
Malicious:	false
Reputation:	low
Preview:	/! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /button,hr,input{overflow:visible}progress,sub,sup{vertical-align:baseline}[type=checkbox],[type=radio],legend{box-sizing:border-box;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}details,main{display:block}h1{font-size:2em;margin:.67em 0}hr{box-sizing:content-box;height:0}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}a{background-color:transparent}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submi

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/allow-flashallow-digest256.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	0.3372900666170139
Encrypted:	false
SSDEEP:	3:kl:s
MD5:	076933FF9904D1110D896E2C525E39E5
SHA1:	4188442577FA77F25820D9B2D01CC446E30684AC
SHA-256:	4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0
SHA-512:	6FCEE9A7B7A7B821D241C03C82377928BC6882E7A08C78A4221199BFA220CDC55212273018EE613317C8293BB8D1CE08D1E017508E94E06AB85A734C99C7CC34
Malicious:	false
Reputation:	low
Preview:	................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/allow-flashallow-digest256.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.59524688231097
Encrypted:	false
SSDEEP:	3:VUystlMl3YLLLLLLLLLLLZ69kHrRbXq6Eeqy8A5ljGR9:ek3klm7eQA5Nq
MD5:	D886A47C89D9C49C795DA345BC236990
SHA1:	59E863E0D2B4E428D8C738D48FA0F6F7BAC36849
SHA-256:	A03C5E2656D2F292BF5794C8EEB8D223CD6BA4F4BFB2ED1F325460E879D0BCF7
SHA-512:	8B5A117BC33463F181458F0A99C14657B365CE2A7695DB346D2D086109176AD019DBD5A5F34F09DC3438E6C89CA93D83875DAA6D463EB06D995A2523FE51A5ED
Malicious:	false
Reputation:	low
Preview:	;.1..............................C.X....x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x.......5...8........G...r.E...&Y...Z.;O.C.X....Y9.H...]..

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/base-track-digest256.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	0.3372900666170139
Encrypted:	false
SSDEEP:	3:kl:s
MD5:	076933FF9904D1110D896E2C525E39E5
SHA1:	4188442577FA77F25820D9B2D01CC446E30684AC
SHA-256:	4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0
SHA-512:	6FCEE9A7B7A7B821D241C03C82377928BC6882E7A08C78A4221199BFA220CDC55212273018EE613317C8293BB8D1CE08D1E017508E94E06AB85A734C99C7CC34
Malicious:	false
Reputation:	low
Preview:	................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/base-track-digest256.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	71044
Entropy (8bit):	7.773438541966354
Encrypted:	false
SSDEEP:	1536:y2skugLebjn9aAt7UGSrqAv4IqISIPP9xubG:ycLAj9aAtY4AwIaIdxF
MD5:	60985C9439E7E254CA4EAD41AD1EFF32
SHA1:	184C8B3263D678D854F7B05FC41FDD3267A46FD6
SHA-256:	5DA0A3FFC814575410D0F58D9647944AF4EB0809BE9E3475CD96B94DC2B14B56
SHA-512:	6894ABAAD1B68CC8844D088832EEC9B5048E68190D8B330A8564D04330022F19A0ACFCFE7B15A0E4F90B8C84538DBF2FF4DA00DA80B5046F6F739A3C0A35B73D
Malicious:	false
Reputation:	low
Preview:	;.1..............................-.\....x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x.........0...6....#....O......Rg.m../.-.\...z+...m....S..5..6..H.e..B...-.\.7n....~<.g94...f....\.~..s[.s..-.\.Yo..V..}B1.1k.........oS...y%..-.\.q#..QD.:..",=(.....l.......7.O..-.\....q.......A-@..R.,.m.....4.-.\......AS..F...b.. .V....o.Rs.3.-.\...ua...`...-.#,..{....D..RI....-.\..'.Y.....<~..H.(.).}...7...#w..-.\.+...g..K.A6...a....$.'....45.-.\.N...P......o.}4.<......'.@py....-.\.U.......V.yb...n......E.>.....-.\.Y..(.xZ..}...aFfuj.x.......@..-.\.h}...W@hC..6.B\|xoU/VY.p.....4..-.\...#...g.T..<BwH.t...4..#.jN:...-.\..Z7.15.J@h...Q..x....k.?.{..B.-.\...KJ..M....\._..mx'.........-.\..p..i...W.H..JQ.y\\|3vD.~.).f..-.\..w...MEL.{..I.>Bm..O.....E._A..-.\...U....X..3.}..,.>..c."9o.<.-.\...C.....8u..H.....a..j..Xb..n..-.\..mR......D..qD#...w....f.O.?...-.\.Sx..W......v.>7v...>..g.{..

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/block-flash-digest256.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	0.3372900666170139
Encrypted:	false
SSDEEP:	3:kl:s
MD5:	076933FF9904D1110D896E2C525E39E5
SHA1:	4188442577FA77F25820D9B2D01CC446E30684AC
SHA-256:	4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0
SHA-512:	6FCEE9A7B7A7B821D241C03C82377928BC6882E7A08C78A4221199BFA220CDC55212273018EE613317C8293BB8D1CE08D1E017508E94E06AB85A734C99C7CC34
Malicious:	false
Reputation:	low
Preview:	................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/block-flash-digest256.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	7648
Entropy (8bit):	7.734433994790214
Encrypted:	false
SSDEEP:	192:9R3/tArlx3czyJ7ALpZ8X7WIisGQchKjmD9ls6ZqOgC:Lvarn3czxLDuliuyD9lLZ7F
MD5:	0E8FE60CCD7E9B4C32589A5743A95302
SHA1:	190F3BC536C9489C707AE31DA32BF86947EA5D78
SHA-256:	2B124D4026850A3CFFD28DBACB58AEC28F7DCD4D40BC14E52BBE96D60CE4E749
SHA-512:	0AF17BD91464F26072F42BACFBB6BA72E68FA07B9D5801A92B14624CC51EBD00AB127272CECD8DF6FE650FE07BF170FD6422D70C2E8CD8F9AD94BC11548446BD
Malicious:	false
Reputation:	low
Preview:	;.1.............................f/Y....x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x........T..]..h...........t.V..@..'.f/Y.hy..../..s:....@R$.Q...w..V...f/Y..Y..1...c./!>O.3!..2...f L.x.6f/Y..&F.}......ez.N.R..j....3.;.if/Y....t.J....b.n...5aL...../...f/Y.dm....5.S.k...y+.....T.....Q>f/Y..-..nj.p..z....g...^T......f/Y...`.t9..(...@..'..u.8v%.d..^.f/Y...Z>Z_.b.[).B!/..U.W.y!.G.u..f/Y..@..WG...PAG.I=tsO.......`.N.f/Y.f?..G....;.c.`X....z....j...K\|f/Y.j....A-'v...].]-.....Q..L.4.Jf/Y.{a...!.-#...7.b..\h.4.~..=.ff/Y..{B.7...Bx.K..@.v...76."..hf/Y..;..Q.......!.<...Bd9I.....Mf/Y.B..mFYTJ..5..yj".T.........f/Y. ..'.',1...D......".L/......e.Yf/Y.!W..C..W$........8h.A..Nr;}mf/Y.[..6n.ZkJ.....2........xn..f/Y..,..8n..-E.....s.\|.N..2..Z..f/Y....C.EI....21w.l...Q.p ....f..f/Y.K....J..+.C:...v1...jo.7......f/Y.C."..c.].,@.....u.}.....~

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/block-flashsubdoc-digest256.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	0.3372900666170139
Encrypted:	false
SSDEEP:	3:kl:s
MD5:	076933FF9904D1110D896E2C525E39E5
SHA1:	4188442577FA77F25820D9B2D01CC446E30684AC
SHA-256:	4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0
SHA-512:	6FCEE9A7B7A7B821D241C03C82377928BC6882E7A08C78A4221199BFA220CDC55212273018EE613317C8293BB8D1CE08D1E017508E94E06AB85A734C99C7CC34
Malicious:	false
Reputation:	low
Preview:	................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/block-flashsubdoc-digest256.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	82744
Entropy (8bit):	7.772258239877141
Encrypted:	false
SSDEEP:	1536:RXoNNS+GqTr4HlEGVibr7rF5HlwU67HJxPU659kHvfrk++:RYfSAr4FRibr7rhojLPb5sU
MD5:	04824A1F92353F43EBB9E7F74B7476FD
SHA1:	C2636E8FFA8A5256D7D1F21E147101356E783114
SHA-256:	B48E58EBAB82E4C376F16150A3FFF850C1111FF1F5985D68819CFD6F0DB159D2
SHA-512:	92914B56FB2BDCDDCC1BEE2BF4DC98420CF0B923D380BB889C8A6EBC333D74EA4DDCA915218BEA0E729782C4904983424F1DE15BE7087C5A5338AED7319A03E5
Malicious:	false
Reputation:	low
Preview:	;.1.............................a.!Z....x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x.........0...6....#....O......Rg.m../a.!Z....Nt.HO5..... ..UM..7<....a.!Z...R..Cl.&/ZM....L...n..9.k.7<.a.!Z...z+...m....S..5..6..H.e..B..a.!Z.Yo..V..}B1.1k.........oS...y%.a.!Z.a{.{..>...M.3....[.THR..>...a.!Z.b.K#.... ..!D.n...}...#k..N..a.!Z.q#..QD.:..",=(.....l.......7.O.a.!Z....q.......A-@..R.,.m.....4a.!Z...Z....]..v..M.&.t...C.D.PA.h..a.!Z......AS..F...b.. .V....o.Rs.3a.!Z...ua...`...-.#,..{....D..RI...a.!Z..'.Y.....<~..H.(.).}...7...#w.a.!Z.N...P......o.}4.<......'.@py...a.!Z.U.......V.yb...n......E.>....a.!Z.V..<.>>....r..In+....v. :L.~..a.!Z.Y..(.xZ..}...aFfuj.x.......@.a.!Z.h}...W@hC..6.B\|xoU/VY.p.....4.a.!Z...#...g.T..<BwH.t...4..#.jN:..a.!Z..Z7.15.J@h...Q..x....k.?.{..Ba.!Z..p..i...W.H..JQ.y\\|3vD.~.).f..a.!Z..)Z.ns.@......O..F...c.9[x.pa.!Z...U....X..3.}..,.>..c."

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flash-digest256.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	0.3372900666170139
Encrypted:	false
SSDEEP:	3:kl:s
MD5:	076933FF9904D1110D896E2C525E39E5
SHA1:	4188442577FA77F25820D9B2D01CC446E30684AC
SHA-256:	4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0
SHA-512:	6FCEE9A7B7A7B821D241C03C82377928BC6882E7A08C78A4221199BFA220CDC55212273018EE613317C8293BB8D1CE08D1E017508E94E06AB85A734C99C7CC34
Malicious:	false
Reputation:	low
Preview:	................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flash-digest256.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	268
Entropy (8bit):	4.291717925117119
Encrypted:	false
SSDEEP:	3:VUystlnlftwLLLLLLLLLLLg2qaXlY0WsLhxrbxq4Y0g42Vv:eziqaXlYfaNbg42Vv
MD5:	C921D8E98FA01B4F303481E112202E92
SHA1:	9D23B452AD0D06C355477CF70E3AA5D0ADFE6278
SHA-256:	4EF1038730EC8BC7206713C29A936768831B922C5E6C83355FD62D7401D8C1DC
SHA-512:	D06422752562AFD1F8B94FF09FC9460BE58E07A84FC537FB6B56B1551C37DB7E56CB7932CC2D27D2FFE2CBAB6EC85BDDA6778F2E812E69E5193FCD6BC77066F2
Malicious:	false
Reputation:	low
Preview:	;.1.............................Q..Y....x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x.......C..8.r..M.'j....-...~.B........Q..Y_.P..........X+.s.........cWn..Q..Y........g.,.}t.!

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flashallow-digest256.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	0.3372900666170139
Encrypted:	false
SSDEEP:	3:kl:s
MD5:	076933FF9904D1110D896E2C525E39E5
SHA1:	4188442577FA77F25820D9B2D01CC446E30684AC
SHA-256:	4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0
SHA-512:	6FCEE9A7B7A7B821D241C03C82377928BC6882E7A08C78A4221199BFA220CDC55212273018EE613317C8293BB8D1CE08D1E017508E94E06AB85A734C99C7CC34
Malicious:	false
Reputation:	low
Preview:	................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flashallow-digest256.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.6124882616213143
Encrypted:	false
SSDEEP:	3:VUystlMl3YLLLLLLLLLLLpRy5Ae28XzWvhSSz17Sn:ekeU5AezzWvhSSZ7S
MD5:	6F85BC4B2ECB49E26B0BD83A821065D0
SHA1:	4DF430B4D63605E41855DBCB3837A189D4CC7604
SHA-256:	C0B3BC9B3DC507AB654CAF72D13C3AEFA58C9B13B1E4D14DD8816712D80A7E54
SHA-512:	AE7688D501A1F59D4C247ED57BA0547F6376748AF57F554BA1B6DE0EF358ED5868721886BAF94813979B3A9968EC330CE11C41767E4AF42DB413EFC9556C2E22
Malicious:	false
Reputation:	low
Preview:	;.1..............................C.X....x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x.......U...f.....aJ.-.....b..rE..{....C.X...U.K..yP.SQS.

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flashsubdoc-digest256.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	0.3372900666170139
Encrypted:	false
SSDEEP:	3:kl:s
MD5:	076933FF9904D1110D896E2C525E39E5
SHA1:	4188442577FA77F25820D9B2D01CC446E30684AC
SHA-256:	4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0
SHA-512:	6FCEE9A7B7A7B821D241C03C82377928BC6882E7A08C78A4221199BFA220CDC55212273018EE613317C8293BB8D1CE08D1E017508E94E06AB85A734C99C7CC34
Malicious:	false
Reputation:	low
Preview:	................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flashsubdoc-digest256.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	304
Entropy (8bit):	4.70325744277424
Encrypted:	false
SSDEEP:	3:VUystlCwLLLLLLLLLLLPaueiydb1Vf/cMLkBR53B2mZ6C6duKZ/PfuSv+/rI4:e9MHk5xaCQuWGjI4
MD5:	BA0009932844173BC8F9AF264229DF24
SHA1:	C8F6956FA86F4E9CF71599B735E28860245AE4B5
SHA-256:	66D1C00C04D86E313E9A02775CDF906B1BE8D4CD6BEF423A1B9E21CC4E9F50C1
SHA-512:	582D7F28F41E6A7A5F882D15EC1F48D0BE57DC63E1A0D6E6A8BBD442A3AC27E38E0C3FDB3E1C30F416C41649391AFDE61F8079844B61A4995E0AB34D6CC8E745
Malicious:	false
Reputation:	low
Preview:	;.1...............................yZ....x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x.......#...).=..HZE.E.........9N..u3.....yZ..?\.I.u...Mk..<.......Ly......yZ.J...t...{.6w..y.m......Xj..yZ.w....m .U-.mCL.

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/mozplugin-block-digest256.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	0.3372900666170139
Encrypted:	false
SSDEEP:	3:kl:s
MD5:	076933FF9904D1110D896E2C525E39E5
SHA1:	4188442577FA77F25820D9B2D01CC446E30684AC
SHA-256:	4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0
SHA-512:	6FCEE9A7B7A7B821D241C03C82377928BC6882E7A08C78A4221199BFA220CDC55212273018EE613317C8293BB8D1CE08D1E017508E94E06AB85A734C99C7CC34
Malicious:	false
Reputation:	low
Preview:	................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/mozplugin-block-digest256.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	3580
Entropy (8bit):	7.671891447828382
Encrypted:	false
SSDEEP:	96:kvmXn/rUKZuGD5fR3TNQCTBl0VyCt9wrEZRg5n:kunoKpD553BQ3t9OEzun
MD5:	D6ACF2573E12AFDD7939568804D3FCC1
SHA1:	5C54AD3FF47C6B925E7AC17D361FE0FA60B9181E
SHA-256:	5525CBF8F8DC41D19AC632ED324E55293A510AE0EEBA16D0E3F33C707AA58A0C
SHA-512:	1F72C01AA332A6E3FC5F966ED2B12534653BCACF2DC242850877961CC4C16AC3BD1846939D56EA6E230A71F336F4B37F67E0070DDDB66D57BB51526DE52819CA
Malicious:	false
Reputation:	low
Preview:	;.1.....................^..........W....x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x.............p.....a.....J.B..gZ.........W....+.O..!l$...K...aP....C.5......W..;..t7p.'..qR..,....x..lP..Z...W.1.[.8..^...x.T)..}.Uj2.t..._.B...W.......1.f\|....;.m..i...........W.Q....";...'N..o>....UD..........W.Um..Uz"K...H`."e..\|...'...L...v...W.B...`..r{@...J.^....@r...B....W.}..A.......@..A.G.q...@.5.....W Iod}..zVD../xY..p..h.Z.`i&......W$HWYI.;.~..m.~..5....`.$.J.....W)w.\...t.'[!....#...G~]..CS>.@{...W$.u..%.H4....p\\|..v..)...........W4.8....g.iQE...t.....z.X....N.....W5Feb).<@3Z._..f...e.y.....u.....W6;.')..K.0.b9G.2.n........eP.d.....W6]Y1_A]xZM.L./ozM1S^.a.s....P.H...W77......Oc......g.R....d9F.9.sY...W8.....[.-..............@.?.......W9.R,.j<.G..{.<.,.8..hW.V"../....W<...#5../......@ij...8%0.gX..6...W?.......V..Z\.)..P...w.f...-...W@....c.m.I...G.q.H.R.E.. .

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/mozstd-trackwhite-digest256.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	0.3372900666170139
Encrypted:	false
SSDEEP:	3:kl:s
MD5:	076933FF9904D1110D896E2C525E39E5
SHA1:	4188442577FA77F25820D9B2D01CC446E30684AC
SHA-256:	4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0
SHA-512:	6FCEE9A7B7A7B821D241C03C82377928BC6882E7A08C78A4221199BFA220CDC55212273018EE613317C8293BB8D1CE08D1E017508E94E06AB85A734C99C7CC34
Malicious:	false
Reputation:	low
Preview:	................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/mozstd-trackwhite-digest256.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	333988
Entropy (8bit):	7.7734168827853685
Encrypted:	false
SSDEEP:	6144:Cl/mBoixkKBn/Hd+os1p8vuG3SI7AT6/GIUegPF+8wkyyXDvo7TYwTS:4/FiHBn/9+o9GG3SID+IUey+ryXDOTYr
MD5:	845BEDB718B8941F643BB988F640E141
SHA1:	DB9BC33A9C9FF6E6D3651710DC1AC8D387759D24
SHA-256:	5083D014CC7E8CFB15D4803429A9AB5FA397E1010CE66D0C8B8215C7FC3C6FDE
SHA-512:	96B64D39DC9B4E137D5BB93FD7EF18ABAB3D956C2819C1E569B5E9971AEC465B4EA084058F7F7C1B9012F52AC61189C6D3CF07AD47D2015D372754096FA03349
Malicious:	false
Reputation:	low
Preview:	;.1.....................8$.......-.\....x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x.............TV8.1..h@)..N.5.J..._.:BcT.-.\..a...'&.k.$..#.Y... -..W..(.-.\.".`....T..../[..A3..FI.rN<%N.".-.\.#<.k.+^5Q..k..jMY>.tj+.e....J.-.\.,.3b.E9ZC.j..N..l&3.XS.~b...B.-.\.-.s.vf^..9)#x<{.Y...<....z....-.\.?Yj...br4...........J.Z!......-.\.M...+.UJ.)..r..{.t.....f..B.-.\.R2."..'..k..9/z..`7d..#BmeN.j.-.\.T.........}i.<............y.-.\.U.6..."P'/.....J.....>j.E....O.-.\.b.&.-1.....7..[.UOS.W....=..R.-.\.m.#..,..D.&._^.jy.i...p.....hO.-.\.p...RrKJR.U..c"bG7.y.5..YU......-.\.t.L3..e...\.^.;2.......E...fB..-.\....a.):.;rk...U..P.....^..?.KV..-.\....'..>.$.B...3}...T.....E+.....-.\..H.K(.!.A.....(.....H...D..-.\...&q......Y.m4.D.'..S~..w.......-.\..(......7......h.5..P........4.-.\..=#.u@.9.-21.*.x....Gs....^.Ep.-.\..L..m.'..%.;..[.......z.DVn:.-.\.....8?.....h....q....!.j.

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-block-simple-1.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.367009024331335
Encrypted:	false
SSDEEP:	3:VUystlMlklllCLLLLLLLLLLLVtFKAuB079M3Xs/phm:eksMFKy9M3XIQ
MD5:	E2CF527CA7550B7E7BDF7311E483A2C3
SHA1:	C354190BB2B8A00A6051EF2FB86E189AB053FE93
SHA-256:	F1E07B1D717433F47073DC54A7D98E3E87B3D0FA88E53466F93EA544AF885D11
SHA-512:	7A585735ABFB1292B9FC4709B797F09C6BE4DC90A133FBEDB14428AAE79C6DE5FAAE0B151758A75BF90566C98E5BD2A8201E738F321688180BC5B5814A97BB69
Malicious:	false
Reputation:	low
Preview:	;.1.....................................x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x.........`E.eK.zQ.....H..`T1l..............`.j..G1I...r..

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-block-simple.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	28
Entropy (8bit):	0.37123232664087563
Encrypted:	false
SSDEEP:	3:klMl:sk
MD5:	E2CECF06A89B4A6D968486F17F30DA5D
SHA1:	46757A7F71DCFBEB5511665F123810148727324E
SHA-256:	E6B10FF8681FB7461557E6227D036617C7ECFC6E31A35412F8A5F72C217F318B
SHA-512:	5CFFECE9AF2B403AE150E8D2E755E7E3A71BDDED474293D846CD1A6231C1403261F4B5E6069A0A933738D5CC33F7EA8CC043C721594679E17FC5E8225F3F33C6
Malicious:	false
Reputation:	low
Preview:	............................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-block-simple.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.367009024331335
Encrypted:	false
SSDEEP:	3:VUystlMlklllCLLLLLLLLLLLVtFKAuB079M3Xs/phm:eksMFKy9M3XIQ
MD5:	E2CF527CA7550B7E7BDF7311E483A2C3
SHA1:	C354190BB2B8A00A6051EF2FB86E189AB053FE93
SHA-256:	F1E07B1D717433F47073DC54A7D98E3E87B3D0FA88E53466F93EA544AF885D11
SHA-512:	7A585735ABFB1292B9FC4709B797F09C6BE4DC90A133FBEDB14428AAE79C6DE5FAAE0B151758A75BF90566C98E5BD2A8201E738F321688180BC5B5814A97BB69
Malicious:	false
Reputation:	low
Preview:	;.1.....................................x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x.........`E.eK.zQ.....H..`T1l..............`.j..G1I...r..

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-harmful-simple-1.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.3293711760593867
Encrypted:	false
SSDEEP:	3:VUystlMlklllCLLLLLLLLLLLaJPKcZrl3LcC5rY+HVl7sAVZwn:eksbQa3Lz5JPgAVen
MD5:	051FB32DECE757BA112AC36DC72E3A91
SHA1:	A30D26CEE0F69FA67BF9E60BA692F4831373CC07
SHA-256:	0806D98FB3DE55F75D7C0B17E26146567E08C483031526659A4A35D09B97EF19
SHA-512:	ADD2D3C503616070F056EA4E3A64FB54A2D8E75AF8FD5D9F1F8EE6B72A1D548FD4AB7D4A3256E4A6F4E1422631439DB62B251EE3F9D07B38A612AFF5E58936D5
Malicious:	false
Reputation:	low
Preview:	;.1.....................................x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........1.....}/9<...?.nyg....N}........<<.@....{..]{:p

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-harmful-simple.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	28
Entropy (8bit):	0.37123232664087563
Encrypted:	false
SSDEEP:	3:klMl:sk
MD5:	E2CECF06A89B4A6D968486F17F30DA5D
SHA1:	46757A7F71DCFBEB5511665F123810148727324E
SHA-256:	E6B10FF8681FB7461557E6227D036617C7ECFC6E31A35412F8A5F72C217F318B
SHA-512:	5CFFECE9AF2B403AE150E8D2E755E7E3A71BDDED474293D846CD1A6231C1403261F4B5E6069A0A933738D5CC33F7EA8CC043C721594679E17FC5E8225F3F33C6
Malicious:	false
Reputation:	low
Preview:	............................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-harmful-simple.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.3293711760593867
Encrypted:	false
SSDEEP:	3:VUystlMlklllCLLLLLLLLLLLaJPKcZrl3LcC5rY+HVl7sAVZwn:eksbQa3Lz5JPgAVen
MD5:	051FB32DECE757BA112AC36DC72E3A91
SHA1:	A30D26CEE0F69FA67BF9E60BA692F4831373CC07
SHA-256:	0806D98FB3DE55F75D7C0B17E26146567E08C483031526659A4A35D09B97EF19
SHA-512:	ADD2D3C503616070F056EA4E3A64FB54A2D8E75AF8FD5D9F1F8EE6B72A1D548FD4AB7D4A3256E4A6F4E1422631439DB62B251EE3F9D07B38A612AFF5E58936D5
Malicious:	false
Reputation:	low
Preview:	;.1.....................................x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........1.....}/9<...?.nyg....N}........<<.@....{..]{:p

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-malware-simple-1.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.3683561037768297
Encrypted:	false
SSDEEP:	3:VUystlMlklllCLLLLLLLLLLLJnawdSW+vmhnki/0Bn:eksSajWQji0
MD5:	3675254E341DF799D4307C1F59109185
SHA1:	8711844A41A4ACE77BA0A01A4D3AF2B2E59E6A75
SHA-256:	23D108134BED6099793F7DD6B8B6E62081EC3B945EFDBC7C5E0E779FD9B82F98
SHA-512:	9344CA1456E1E74A4DAC833E0AF55DB9730F8AB2954A855B4A775A938B2055C86EFF367F25BAE80F2FFEA45ACEBADE10A8347ADD18222E715620DD864F2D8E4F
Malicious:	false
Reputation:	low
Preview:	;.1.....................................x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x........B.WG..a..E.+`D8.....a. ...D...q......w...X.Z.Z...~.

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-malware-simple.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	28
Entropy (8bit):	0.37123232664087563
Encrypted:	false
SSDEEP:	3:klMl:sk
MD5:	E2CECF06A89B4A6D968486F17F30DA5D
SHA1:	46757A7F71DCFBEB5511665F123810148727324E
SHA-256:	E6B10FF8681FB7461557E6227D036617C7ECFC6E31A35412F8A5F72C217F318B
SHA-512:	5CFFECE9AF2B403AE150E8D2E755E7E3A71BDDED474293D846CD1A6231C1403261F4B5E6069A0A933738D5CC33F7EA8CC043C721594679E17FC5E8225F3F33C6
Malicious:	false
Reputation:	low
Preview:	............................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-malware-simple.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.3683561037768297
Encrypted:	false
SSDEEP:	3:VUystlMlklllCLLLLLLLLLLLJnawdSW+vmhnki/0Bn:eksSajWQji0
MD5:	3675254E341DF799D4307C1F59109185
SHA1:	8711844A41A4ACE77BA0A01A4D3AF2B2E59E6A75
SHA-256:	23D108134BED6099793F7DD6B8B6E62081EC3B945EFDBC7C5E0E779FD9B82F98
SHA-512:	9344CA1456E1E74A4DAC833E0AF55DB9730F8AB2954A855B4A775A938B2055C86EFF367F25BAE80F2FFEA45ACEBADE10A8347ADD18222E715620DD864F2D8E4F
Malicious:	false
Reputation:	low
Preview:	;.1.....................................x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x........B.WG..a..E.+`D8.....a. ...D...q......w...X.Z.Z...~.

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-phish-simple-1.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.302539208701039
Encrypted:	false
SSDEEP:	3:VUystlMlklllCLLLLLLLLLLLOW4xUO0f0iI8hE1R73sBKD:eks3pf+8RABy
MD5:	3D1CE5E50208F0CB3B979186043A548F
SHA1:	10C66032C5ACAC22D70670B9302437141E6371EF
SHA-256:	1E13D05D482C3D533DC6035AF2B2D6E84749412A5748D1435B70CEC8B312340B
SHA-512:	AE2F35C0549C26251053689C90CE831F0C5742D6F7C1DC13482560B02FB4A6029F107E472FCB26BF41B4E89E47559490F5DA049D5B51864A3C4C2C2AE3F588C2
Malicious:	false
Reputation:	low
Preview:	;.1.....................................x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x........Y.......j..}`A=F......c..5.......T...8\|..d.\|..{

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-phish-simple.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	28
Entropy (8bit):	0.37123232664087563
Encrypted:	false
SSDEEP:	3:klMl:sk
MD5:	E2CECF06A89B4A6D968486F17F30DA5D
SHA1:	46757A7F71DCFBEB5511665F123810148727324E
SHA-256:	E6B10FF8681FB7461557E6227D036617C7ECFC6E31A35412F8A5F72C217F318B
SHA-512:	5CFFECE9AF2B403AE150E8D2E755E7E3A71BDDED474293D846CD1A6231C1403261F4B5E6069A0A933738D5CC33F7EA8CC043C721594679E17FC5E8225F3F33C6
Malicious:	false
Reputation:	low
Preview:	............................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-phish-simple.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.302539208701039
Encrypted:	false
SSDEEP:	3:VUystlMlklllCLLLLLLLLLLLOW4xUO0f0iI8hE1R73sBKD:eks3pf+8RABy
MD5:	3D1CE5E50208F0CB3B979186043A548F
SHA1:	10C66032C5ACAC22D70670B9302437141E6371EF
SHA-256:	1E13D05D482C3D533DC6035AF2B2D6E84749412A5748D1435B70CEC8B312340B
SHA-512:	AE2F35C0549C26251053689C90CE831F0C5742D6F7C1DC13482560B02FB4A6029F107E472FCB26BF41B4E89E47559490F5DA049D5B51864A3C4C2C2AE3F588C2
Malicious:	false
Reputation:	low
Preview:	;.1.....................................x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x........Y.......j..}`A=F......c..5.......T...8\|..d.\|..{

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-track-simple-1.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	272
Entropy (8bit):	3.9834161156862735
Encrypted:	false
SSDEEP:	3:VUylllvl2lll1lCLLLLLLLLLLLQ0ZIn39lAN6r3Zzk9uYs/wPMuiC:rUiU3gNAigr/wMC
MD5:	95F28EDE25C301301F25FBBD9A3C56EC
SHA1:	80F7D95AFC0DE8C608F672A6837C664EF847BCD5
SHA-256:	87763DF78772F7D750B0FA5A31EEC23E931FD3BD1CBB33BEDDFC61889DA36478
SHA-512:	C6E09C76840DDEA559E243E5C13881CFBCDCC7B0C2163461FDCCE1F3F5110E2B0BB553DE447A4E1E0D5EDF516EEEE2FAD5EFC15C398E101EF3C81501E55320AF
Malicious:	false
Reputation:	low
Preview:	;.1.........................................x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x.......Ik...Xf2.h.J.^..P>.A.:..I%8]........=(K_..W..{...L.w...:7.&.PH..26....U.]..)..{6....(.

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-track-simple.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	28
Entropy (8bit):	0.37123232664087563
Encrypted:	false
SSDEEP:	3:klMl:sk
MD5:	E2CECF06A89B4A6D968486F17F30DA5D
SHA1:	46757A7F71DCFBEB5511665F123810148727324E
SHA-256:	E6B10FF8681FB7461557E6227D036617C7ECFC6E31A35412F8A5F72C217F318B
SHA-512:	5CFFECE9AF2B403AE150E8D2E755E7E3A71BDDED474293D846CD1A6231C1403261F4B5E6069A0A933738D5CC33F7EA8CC043C721594679E17FC5E8225F3F33C6
Malicious:	false
Reputation:	low
Preview:	............................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-track-simple.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	272
Entropy (8bit):	3.9834161156862735
Encrypted:	false
SSDEEP:	3:VUylllvl2lll1lCLLLLLLLLLLLQ0ZIn39lAN6r3Zzk9uYs/wPMuiC:rUiU3gNAigr/wMC
MD5:	95F28EDE25C301301F25FBBD9A3C56EC
SHA1:	80F7D95AFC0DE8C608F672A6837C664EF847BCD5
SHA-256:	87763DF78772F7D750B0FA5A31EEC23E931FD3BD1CBB33BEDDFC61889DA36478
SHA-512:	C6E09C76840DDEA559E243E5C13881CFBCDCC7B0C2163461FDCCE1F3F5110E2B0BB553DE447A4E1E0D5EDF516EEEE2FAD5EFC15C398E101EF3C81501E55320AF
Malicious:	false
Reputation:	low
Preview:	;.1.........................................x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x.......Ik...Xf2.h.J.^..P>.A.:..I%8]........=(K_..W..{...L.w...:7.&.PH..26....U.]..)..{6....(.

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-trackwhite-simple-1.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.4079994338327437
Encrypted:	false
SSDEEP:	3:VUystlMlklllCLLLLLLLLLLLYdIVDdSxcEtY4NL/n:eksdWdSxc3wn
MD5:	65E942614EEE70680464AC4BE75019FC
SHA1:	7CA1B5994684A7FE37A61BC350A1FA8A89BF91DA
SHA-256:	34395085DA32C8B4EFE9959E3B0D756B43FFED17694D66F39B966CD331BD9A94
SHA-512:	55B09573C235876D0CB4E6C20070CD1954CF1EB94F513A94985896237A350E48FCD47C88D5EC9632AB9D0AED4A59C250E69F59A59ED88F2A0AEB6734302744A9
Malicious:	false
Reputation:	low
Preview:	;.1.....................................x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x........=Q.IU`.G...>...u..X...7...k6.b....k:u.z*N._)8.EhnZ

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-trackwhite-simple.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	28
Entropy (8bit):	0.37123232664087563
Encrypted:	false
SSDEEP:	3:klMl:sk
MD5:	E2CECF06A89B4A6D968486F17F30DA5D
SHA1:	46757A7F71DCFBEB5511665F123810148727324E
SHA-256:	E6B10FF8681FB7461557E6227D036617C7ECFC6E31A35412F8A5F72C217F318B
SHA-512:	5CFFECE9AF2B403AE150E8D2E755E7E3A71BDDED474293D846CD1A6231C1403261F4B5E6069A0A933738D5CC33F7EA8CC043C721594679E17FC5E8225F3F33C6
Malicious:	false
Reputation:	low
Preview:	............................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-trackwhite-simple.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.4079994338327437
Encrypted:	false
SSDEEP:	3:VUystlMlklllCLLLLLLLLLLLYdIVDdSxcEtY4NL/n:eksdWdSxc3wn
MD5:	65E942614EEE70680464AC4BE75019FC
SHA1:	7CA1B5994684A7FE37A61BC350A1FA8A89BF91DA
SHA-256:	34395085DA32C8B4EFE9959E3B0D756B43FFED17694D66F39B966CD331BD9A94
SHA-512:	55B09573C235876D0CB4E6C20070CD1954CF1EB94F513A94985896237A350E48FCD47C88D5EC9632AB9D0AED4A59C250E69F59A59ED88F2A0AEB6734302744A9
Malicious:	false
Reputation:	low
Preview:	;.1.....................................x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x........=Q.IU`.G...>...u..X...7...k6.b....k:u.z*N._)8.EhnZ

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-unwanted-simple-1.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.367107760120435
Encrypted:	false
SSDEEP:	3:VUystlMlklllCLLLLLLLLLLLge3nZsRusljWFgm:eks5EsRRQB
MD5:	A5695CC64D77967232B0C1344C6E72B3
SHA1:	B0F151A5292D4B796668B242BF896FDBB5A24B67
SHA-256:	042A22B8681D754671D2018BA109B31A53EE3728D48C6379043F8E3394E7FBAD
SHA-512:	C09F56E91B41D01375C458A6CCC3FC0CEDC18696AEC5D7A2520C51905F4D9BC660F3AD28E69D64B3814AEB3279AFC686794C986F0FA6212463F3AAC850D40019
Malicious:	false
Reputation:	low
Preview:	;.1.....................................x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x.......^......R..U:N......LgY.u.l..H.Z....N?^c.d...].1. b

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-unwanted-simple.pset

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	28
Entropy (8bit):	0.37123232664087563
Encrypted:	false
SSDEEP:	3:klMl:sk
MD5:	E2CECF06A89B4A6D968486F17F30DA5D
SHA1:	46757A7F71DCFBEB5511665F123810148727324E
SHA-256:	E6B10FF8681FB7461557E6227D036617C7ECFC6E31A35412F8A5F72C217F318B
SHA-512:	5CFFECE9AF2B403AE150E8D2E755E7E3A71BDDED474293D846CD1A6231C1403261F4B5E6069A0A933738D5CC33F7EA8CC043C721594679E17FC5E8225F3F33C6
Malicious:	false
Reputation:	low
Preview:	............................

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/test-unwanted-simple.sbstore

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.367107760120435
Encrypted:	false
SSDEEP:	3:VUystlMlklllCLLLLLLLLLLLge3nZsRusljWFgm:eks5EsRRQB
MD5:	A5695CC64D77967232B0C1344C6E72B3
SHA1:	B0F151A5292D4B796668B242BF896FDBB5A24B67
SHA-256:	042A22B8681D754671D2018BA109B31A53EE3728D48C6379043F8E3394E7FBAD
SHA-512:	C09F56E91B41D01375C458A6CCC3FC0CEDC18696AEC5D7A2520C51905F4D9BC660F3AD28E69D64B3814AEB3279AFC686794C986F0FA6212463F3AAC850D40019
Malicious:	false
Reputation:	low
Preview:	;.1.....................................x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x...........x.......^......R..U:N......LgY.u.l..H.Z....N?^c.d...].1. b

/home/james/.mozilla/firefox/5zxot757.default/addonStartup.json.lz4.tmp

Download File

Process:	/usr/lib/firefox/firefox
File Type:	Mozilla lz4 compressed data, originally 1426 bytes
Category:	dropped
Size (bytes):	638
Entropy (8bit):	6.058376992808135
Encrypted:	false
SSDEEP:	12:vkIb3bQPnkKNuN7Xnwutjp/Ai8AXyIF9nfvER9lyNinNii1ABHM6+ztbuEv2Ge:v5r4mNrnwunjR9filyNIii2sdVL7e
MD5:	C03070F8A39B68E1DF90C197530147B8
SHA1:	CA5D078F9FE04FA46AF10505F930F1F67DEA4314
SHA-256:	FB1ABAC28102E4FD1F7CD97C8B4135681C9BD4BA0EF1517895B278DB52BF5256
SHA-512:	26F8A7162835574D22C0AF33AD8F1EE1F1C24F473FD54C835D8DD512C0F26B4F30EBC9F0AE2DE6C8CA3EA92D0402867271B3CA29197B6ED141527EC4FA8200B6
Malicious:	false
Reputation:	low
Preview:	mozLz40.......{"app-system-defaults":{"addon....formautofill@mozilla.org&..Gdependencies":[],"enabled":true,"lastModifiedTime":1554899853000,"loader":null,"path":s.....xpi","runInSafeModej..telemetryKeyC.7%40....:1.0","version":"...},"screenshots..T.r.......B....K35.0......startupData...p..astentL..!er..Arunt....{"onMessage":[[]]}}}},"webcompat-reporter7..Ofals..&.z...?...I..F. 1....-..............)....p....!...Y3.0.2......'...webRequest..BeforeSendHe......[{"tabId..0typ0....0url$.U"://...-....-testcases.schub.io/"],"windowQ..},["blocking........?]],......directvnow.comn.!....P.0tag..%{}..../usr/lib/firefox/browser/features"}}

/home/james/.mozilla/firefox/5zxot757.default/cert9.db

Download File

Process:	/usr/lib/firefox/firefox
File Type:	SQLite 3.x database, last written using SQLite version 3026000, page size 32768, file counter 4, database pages 7, cookie 0x5, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	458752
Entropy (8bit):	0.42743812213465326
Encrypted:	false
SSDEEP:	384:9ozkVmvQhyn+ZoouwJtKZYcMM0cTozkVmvQhyn+Zoo5wJtKZYcMM0jyw:9wwJtgYcMGrwJtgYcMn
MD5:	ABD2C50FF4EEDD2F6442D3504189B717
SHA1:	D73ADB9FBDC9B6F0E2DF605557C7C7910118A4B1
SHA-256:	171B0A27000291D9B4256E55531F219D0AE75460DF16D7DB10DDD56F07C243DD
SHA-512:	A2C710B0549424CC2CA9EBFE529961485E8A571BE0D69A22E7993953E3C1845C96F3B6688FC4033C7AFF4B783363B887271A9FFE6B7AFE229190B2E88C3EDD26
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................,P.....z..\|...{.{.{@z.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/home/james/.mozilla/firefox/5zxot757.default/cert9.db-journal

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	459912
Entropy (8bit):	0.35339100156992304
Encrypted:	false
SSDEEP:	384:aZYcMM0GSozkVmvQhyn+ZoorswJtKZYcMM0zCozkVmvQhyn+Zoou:wYcM5qwJtgYcMag
MD5:	CD2F7B67E05C8961E78C424A4070F0E4
SHA1:	220866F436AD2D807652CE13A9BFC626A45ABB78
SHA-256:	311281E2A2ED5AEB765B9A6EE315D6AD534D4A25B5ED967D8784903A18C22ADE
SHA-512:	2819FF07E36F5F275319DEE3BC10F5A6EE7477CC85791D4D43DB8C090C584BE1395207E6965723CEAF600E67DA37C41358676FCCC3FF531D10FE9E436FB78648
Malicious:	false
Reputation:	low
Preview:	............`..T........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/home/james/.mozilla/firefox/5zxot757.default/key4.db

Download File

Process:	/usr/lib/firefox/firefox
File Type:	SQLite 3.x database, last written using SQLite version 3026000, page size 32768, file counter 3, database pages 9, cookie 0x6, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.39457432988488045
Encrypted:	false
SSDEEP:	192:mJLvKXzkVmvQhyn+ZoQfqlQbGhMHPaVAL23v8fEP3ul+:mJLozkVmvQhyn+ZoofEW+
MD5:	CA9E8C0956917824A400A8BBB4FEDF7F
SHA1:	7D9A172496EDAC164EEC4D7D2E6A012B6F26DBE5
SHA-256:	0987B4B8C8875C280924BD70CE301E883A42DD450DEED1E4ADD1109023B8E21D
SHA-512:	2F73647FA56C53CCF138F18A307AA39CE799C2719083F1E33CA6D6DDAA405540654D341A8C0770278CCEFE8F867E7DC30364270EE7E338CC8BC29AB0AA180090
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................,P.....zR.\|...{.{w{5z.zRz.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/home/james/.mozilla/firefox/5zxot757.default/key4.db-journal

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	98852
Entropy (8bit):	0.21425408110823105
Encrypted:	false
SSDEEP:	192:3I55JLvKXzkVmvQhyn+ZoQfqlQbGhMHPaVAL23v8i:455JLozkVmvQhyn+Zooi
MD5:	E877D6A262525843E31A13F07F487E90
SHA1:	4CC2001AEB3C3B445F6DF29DE5B7540CD1399C22
SHA-256:	F45DA8290B7112DB856482D10543E24A31DF27616C3AAD84C7546EB09AA2BBAA
SHA-512:	A6D3B780BDD78508BD2106DB08F3CE9B8495A17261251CF4F4A071891ADFEEFB611577D2206E2884546BB304F7D26A2872D527D891A334B1B6E3E5560BB44396
Malicious:	false
Reputation:	low
Preview:	.............O.W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/home/james/.mozilla/firefox/5zxot757.default/permissions.sqlite

Download File

Process:	/usr/lib/firefox/firefox
File Type:	SQLite 3.x database, user version 9, last written using SQLite version 3026000, page size 32768, file counter 5, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.09611120034147747
Encrypted:	false
SSDEEP:	12:DBl/Wlb9gPxRymgObsCVR49wcYR4fmnsCVR4aR:DLwZah76wd4+X
MD5:	3EC564DFFB31A761D90CC78B79A12619
SHA1:	179B48158BB8B9FAB1422D40C9B0618307AC0C5B
SHA-256:	18A9301EDE2C87FC24D9CE4EB1DC710DE2CD13C9DC57C46B0D88F08F8EC0CB91
SHA-512:	5081DA75330182C57DE2D4CDE5FFB484E0049ECE32810889127A4900D3A3D0BB289A59EEBE1D43022F19AC7307C7146D94D7AF4B97288BBA38500A32957980DC
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................,P.....~e..F~e........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/home/james/.mozilla/firefox/5zxot757.default/permissions.sqlite-journal

Download File

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	66076
Entropy (8bit):	0.11250536488368507
Encrypted:	false
SSDEEP:	12:VP8bPGjZf6Bl/AYlk9gPxRymgObsCVR49wcYR4fmnsCVR4Jnt9:VkjGj16L9lMah76wd4+Wt9
MD5:	EB8F9978979688517646A4A7F24124CF
SHA1:	51DD2198A81A8592F518B980F4B87F591FF8BCE8
SHA-256:	127CDCED860D4F663368DFD8C9BE87DA3304650863A294AF69FA7A6F7776D6D9
SHA-512:	5E5137A5814676FDA22D1F2F31F961E45629716AB173423B7D7FBD08FADAE06F4FD33006720B9EC409C7412C467759C07C62E282206C6BAF2AA1F5E209202224
Malicious:	false
Reputation:	low
Preview:	.............9..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/home/james/.mozilla/firefox/5zxot757.default/places.sqlite-wal

Download File

Process:	/usr/lib/firefox/firefox
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	557496
Entropy (8bit):	0.16692192504181802
Encrypted:	false
SSDEEP:	192:EH8AgHusGuAld5L2fEFmDFQ84vs7CtqEF19uK9ODv:3tOsGJ5LcGKEF19j9Or
MD5:	B21043C51B2397C51B950F7FE4E79EF5
SHA1:	1F0AD213EDA64E1E6EFC77C7445EEC39FDB9FF83
SHA-256:	4683964D419452EF76B2457393FD61EE97BF1CA34041A99EBAFCD9EB281DB326
SHA-512:	C1B613B7059FA4294D631A6C2D4A91A39DD800BD537843AA20CF2602C1449A4FE1C09D55FD2E99018E1ABA393493C9C1F3386E0C0625820915C556F57BCB9637
Malicious:	false
Reputation:	low
Preview:	7....-...........`w^.}..4>c............`w^.}..$..X..H...(..~...X.8.....\|..~...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/home/james/.mozilla/firefox/5zxot757.default/prefs-1.js

Download File

Process:	/usr/lib/firefox/firefox
File Type:	ASCII text, with very long lines (663)
Category:	dropped
Size (bytes):	26563
Entropy (8bit):	5.173393155249076
Encrypted:	false
SSDEEP:	384:BDG51pz2DzqNDGA1pz2DzqNDGA1pz2JzqNDGA1pz2wzq1:MltlVLVe1
MD5:	FB1F75DF95CEB4010AB5DF9A054B7099
SHA1:	AA20CD2A850561F7D15D420C2EC48FE67531A86A
SHA-256:	2D2EC5009D05EE117B8A0FB7F6B124597FF74F263170FDF856B6967FBA66859F
SHA-512:	439227B97C510EA67D7A34E9757EB3BB9243D2F62BDDD3A9C4C217440F26CCC44809C62BA00101B613EC8F144BFD1A52F1E1EED9E8B03E3DEED3A93FE85407EE
Malicious:	false
Reputation:	low
Preview:	// Mozilla User Preferences..// DO NOT EDIT THIS FILE..//.// If you make changes to this file while the application is running,.// the changes will be overwritten when the application exits..//.// To change a preference value, you can either:.// - modify it via the UI (e.g. via about:config in the browser); or.// - set it within a user.js file in your profile...user_pref("app.normandy.first_run", false);.user_pref("app.normandy.startupExperimentPrefs.dom.push.alwaysConnect", false);.user_pref("app.normandy.startupRolloutPrefs.media.autoplay.default", 1);.user_pref("app.normandy.user_id", "deb21830-19ac-4c3a-a05f-f7f80e818647");.user_pref("app.update.lastUpdateTime.addon-background-update-timer", 0);.user_pref("app.update.lastUpdateTime.blocklist-background-update-timer", 0);.user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1556631169);.user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 0);.user_pref("app.update.lastUpdateTime.search-engine-update-timer", 0)

/home/james/.mozilla/firefox/5zxot757.default/sessionCheckpoints.json.tmp

Download File

Process:	/usr/lib/firefox/firefox
File Type:	JSON data
Category:	dropped
Size (bytes):	143
Entropy (8bit):	4.223691028533093
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+ABaQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+kOy6Lb1BA+m2L69Yr
MD5:	C0E4C22C50DD21142F57714EF49B8713
SHA1:	06B77307DCA5C889EA279243E74730CBC10801BE
SHA-256:	6FE46B65B76B3DF32D8392853740B35ED75B6E23F4FBD6F45F3EFA1D496E6717
SHA-512:	A4516B4F15EDB429F7B8CE3EA709D3777BFCC590838B1E113147E6BFB4DF0F34F0F2B24F6185D4E4277A77F75711BB470461B86AA507921AF037A6D22DF9278E
Malicious:	false
Reputation:	low
Preview:	{"profile-after-change":true,"final-ui-startup":true}{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

/home/james/.mozilla/firefox/5zxot757.default/sessionstore-backups/recovery.jsonlz4.tmp

Download File

Process:	/usr/lib/firefox/firefox
File Type:	Mozilla lz4 compressed data, originally 26998 bytes
Category:	dropped
Size (bytes):	3728
Entropy (8bit):	6.732575498737404
Encrypted:	false
SSDEEP:	96:/UFDcajRCay9YiCPl18dE0Kyyltk4XjoXRk:/m1jQGPlCdE0mpwk
MD5:	6DE64290495C91B1EE07CF79892B91C7
SHA1:	217E964B1640FBC1383FFC34DFC1747975AA2E3F
SHA-256:	6D0411619F2B578F67C32DEA6986DA7D0740AECE77BF45EBED3AC710AB7C0E31
SHA-512:	FCA1DAF77C4BD91FC9F083A004F045801158FB52437A7E42913C8790E8377A0BB48F82A94CDDB29F3DAFF36FFB61085F3A63EA9B53905F8882DB0F3822F733FF
Malicious:	false
Reputation:	low
Preview:	mozLz40.vi....{"version":["ses....restore",1],"windows":[{"tab..bentrie....url":"https://generali.werbeartikel-online-shop.com/","title":"GENERALI Deutschland Werbemittel-Shop","cacheKey":0,"ID":0,"docshellUUID":"{1b9c098f-da1f-413f-b275-034879a0df50}","originalURI..!.resultPrincipF.tnull,"p....ToInherit_base64":"vQZuXxRvRHKDMXv9BbHtkA...w.. EY...=4bW96LW51bGxwcmluY2lwYWw6ezRiNzI2YmYwLWZhZWYtNGU3YS05MjhlLTJjOGI2Njg4Mzk2NH0P..At..riggering.......SmIS26zLEdO3ZQBgsLbOy.....!="\|..Identifier...Kpersist":true}],"lastAccessed":1728312515318,"hidden":false,"attributes":{},"userContextId_...index":1,"images..g.aselectc..,"_closedT..u],"busyf...width":921,"height":668,"screenX":4...Y..`izemod...maximized","zI......W*...........'.....].1":{..mUpdate...startTim..@0260v..centCrashz..0},"global1.Bcook...z..S..!Stg....=..www.mozilla.org/en-US/privacy/firefox...F.." P#.. Notice . MH.......9338d488-264a-4aaf-995b-482822c46064..................@......loadReplace......2...2.S. gyOTFlNmZkLTU2MGUtNDVlNi0

/proc/4923/gid_map

Download File

Process:	/usr/lib/firefox/firefox
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	1.4353713907745331
Encrypted:	false
SSDEEP:	3:MVUGn:MCG
MD5:	54258652109C33FE06188083A3EC23F4
SHA1:	013EC30A95D66C56642C193613A829B746982601
SHA-256:	C459EBB6CF3917EFB05A2E72EF25E223BE9B78780B1CE0CAACCE49C773DF199E
SHA-512:	AAE8A67B91BDEC9C21ACD88711C262EA3ACD3EE086AEB27645531C47DD618708C7FF284759A68000414579B77C0D8A3449F95480D039A9901F7352121B7D78F0
Malicious:	false
Reputation:	low
Preview:	1000 1000 1

/proc/4923/setgroups

Download File

Process:	/usr/lib/firefox/firefox
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	2.0
Encrypted:	false
SSDEEP:	3:9n:9n
MD5:	05AFB6CE69B9CEF1BD6ECE7E4745F96C
SHA1:	1D16DC2DCC6851208C1B981E2EC377250A4A0CC5
SHA-256:	3026A0CA485E5831657BA0120FA8DD66B3425427BFB0A2BE0DB743E2305CC7C5
SHA-512:	A37A7790CCB2FA5A3C3F2740480CF4035F2870502060F398A1882A44B675DE736E33D8ECD9B834BB3D19D807B46875E30AA835EDD847C5FE8F1F2942A870BAD5
Malicious:	false
Reputation:	low
Preview:	deny

/proc/4923/uid_map

Download File

Process:	/usr/lib/firefox/firefox
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	1.4353713907745331
Encrypted:	false
SSDEEP:	3:MVUGn:MCG
MD5:	54258652109C33FE06188083A3EC23F4
SHA1:	013EC30A95D66C56642C193613A829B746982601
SHA-256:	C459EBB6CF3917EFB05A2E72EF25E223BE9B78780B1CE0CAACCE49C773DF199E
SHA-512:	AAE8A67B91BDEC9C21ACD88711C262EA3ACD3EE086AEB27645531C47DD618708C7FF284759A68000414579B77C0D8A3449F95480D039A9901F7352121B7D78F0
Malicious:	false
Reputation:	low
Preview:	1000 1000 1

/proc/4968/gid_map

Download File

Process:	/usr/lib/firefox/firefox
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	1.4353713907745331
Encrypted:	false
SSDEEP:	3:MVUGn:MCG
MD5:	54258652109C33FE06188083A3EC23F4
SHA1:	013EC30A95D66C56642C193613A829B746982601
SHA-256:	C459EBB6CF3917EFB05A2E72EF25E223BE9B78780B1CE0CAACCE49C773DF199E
SHA-512:	AAE8A67B91BDEC9C21ACD88711C262EA3ACD3EE086AEB27645531C47DD618708C7FF284759A68000414579B77C0D8A3449F95480D039A9901F7352121B7D78F0
Malicious:	false
Reputation:	low
Preview:	1000 1000 1

/proc/4968/setgroups

Download File

Process:	/usr/lib/firefox/firefox
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	2.0
Encrypted:	false
SSDEEP:	3:9n:9n
MD5:	05AFB6CE69B9CEF1BD6ECE7E4745F96C
SHA1:	1D16DC2DCC6851208C1B981E2EC377250A4A0CC5
SHA-256:	3026A0CA485E5831657BA0120FA8DD66B3425427BFB0A2BE0DB743E2305CC7C5
SHA-512:	A37A7790CCB2FA5A3C3F2740480CF4035F2870502060F398A1882A44B675DE736E33D8ECD9B834BB3D19D807B46875E30AA835EDD847C5FE8F1F2942A870BAD5
Malicious:	false
Reputation:	low
Preview:	deny

/proc/4968/uid_map

Download File

Process:	/usr/lib/firefox/firefox
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	1.4353713907745331
Encrypted:	false
SSDEEP:	3:MVUGn:MCG
MD5:	54258652109C33FE06188083A3EC23F4
SHA1:	013EC30A95D66C56642C193613A829B746982601
SHA-256:	C459EBB6CF3917EFB05A2E72EF25E223BE9B78780B1CE0CAACCE49C773DF199E
SHA-512:	AAE8A67B91BDEC9C21ACD88711C262EA3ACD3EE086AEB27645531C47DD618708C7FF284759A68000414579B77C0D8A3449F95480D039A9901F7352121B7D78F0
Malicious:	false
Reputation:	low
Preview:	1000 1000 1

/proc/5009/gid_map

Download File

Process:	/usr/lib/firefox/firefox
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	1.4353713907745331
Encrypted:	false
SSDEEP:	3:MVUGn:MCG
MD5:	54258652109C33FE06188083A3EC23F4
SHA1:	013EC30A95D66C56642C193613A829B746982601
SHA-256:	C459EBB6CF3917EFB05A2E72EF25E223BE9B78780B1CE0CAACCE49C773DF199E
SHA-512:	AAE8A67B91BDEC9C21ACD88711C262EA3ACD3EE086AEB27645531C47DD618708C7FF284759A68000414579B77C0D8A3449F95480D039A9901F7352121B7D78F0
Malicious:	false
Reputation:	low
Preview:	1000 1000 1

/proc/5009/setgroups

Download File

Process:	/usr/lib/firefox/firefox
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	2.0
Encrypted:	false
SSDEEP:	3:9n:9n
MD5:	05AFB6CE69B9CEF1BD6ECE7E4745F96C
SHA1:	1D16DC2DCC6851208C1B981E2EC377250A4A0CC5
SHA-256:	3026A0CA485E5831657BA0120FA8DD66B3425427BFB0A2BE0DB743E2305CC7C5
SHA-512:	A37A7790CCB2FA5A3C3F2740480CF4035F2870502060F398A1882A44B675DE736E33D8ECD9B834BB3D19D807B46875E30AA835EDD847C5FE8F1F2942A870BAD5
Malicious:	false
Reputation:	low
Preview:	deny

/proc/5009/uid_map

Download File

Process:	/usr/lib/firefox/firefox
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	1.4353713907745331
Encrypted:	false
SSDEEP:	3:MVUGn:MCG
MD5:	54258652109C33FE06188083A3EC23F4
SHA1:	013EC30A95D66C56642C193613A829B746982601
SHA-256:	C459EBB6CF3917EFB05A2E72EF25E223BE9B78780B1CE0CAACCE49C773DF199E
SHA-512:	AAE8A67B91BDEC9C21ACD88711C262EA3ACD3EE086AEB27645531C47DD618708C7FF284759A68000414579B77C0D8A3449F95480D039A9901F7352121B7D78F0
Malicious:	false
Reputation:	low
Preview:	1000 1000 1

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 16:48:31.321146965 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:31.321180105 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:31.321371078 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:31.322173119 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:31.322185993 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:31.998506069 CEST	43706	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:31.998536110 CEST	443	43706	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:31.998603106 CEST	43706	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:31.999461889 CEST	43706	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:31.999479055 CEST	443	43706	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.130415916 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.130548000 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.146337986 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.146351099 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.146646976 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.146878958 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.146886110 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.183716059 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.398291111 CEST	59194	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:32.398327112 CEST	443	59194	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:32.398380995 CEST	59194	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:32.399166107 CEST	59194	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:32.399183035 CEST	443	59194	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:32.731775999 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.731894970 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.731906891 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.731933117 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.731945992 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.731951952 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.731971025 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.731985092 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.731996059 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.732004881 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.732018948 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.732242107 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.734663963 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.734710932 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.734728098 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.734736919 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.734750986 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.734772921 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.734812021 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.734853029 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.734859943 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.734894037 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.734993935 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.735002995 CEST	43704	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.735008955 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.735018015 CEST	443	43704	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.934170008 CEST	443	43706	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.934284925 CEST	43706	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.937186003 CEST	43706	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.937201977 CEST	443	43706	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.937278032 CEST	443	43706	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.975816011 CEST	43706	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:32.975828886 CEST	443	43706	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:32.976016998 CEST	43706	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.006019115 CEST	43706	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.007071018 CEST	43710	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.007097960 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.007402897 CEST	43710	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.008130074 CEST	43710	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.008156061 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.008402109 CEST	43712	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.008433104 CEST	443	43712	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.008469105 CEST	43712	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.009188890 CEST	43712	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.009202003 CEST	443	43712	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.010288954 CEST	43714	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.010317087 CEST	443	43714	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.010598898 CEST	43714	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.011710882 CEST	43714	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.011732101 CEST	443	43714	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.012088060 CEST	43716	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.012118101 CEST	443	43716	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.012187958 CEST	43716	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.013091087 CEST	43716	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.013103962 CEST	443	43716	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.013931036 CEST	43718	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.013952017 CEST	443	43718	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.014019012 CEST	43718	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.014627934 CEST	43718	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.014657974 CEST	443	43718	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.030937910 CEST	443	59194	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.031039000 CEST	59194	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.035399914 CEST	59194	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.035404921 CEST	443	59194	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.035481930 CEST	59194	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.035485983 CEST	443	59194	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.035583019 CEST	443	59194	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.047441959 CEST	443	43706	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.075681925 CEST	59194	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.075691938 CEST	443	59194	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.075864077 CEST	59194	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.208714008 CEST	443	43706	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.208731890 CEST	443	43706	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.208781004 CEST	443	43706	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.209099054 CEST	43706	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.209156036 CEST	43706	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.209168911 CEST	443	43706	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.209182024 CEST	43706	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.209187984 CEST	443	43706	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.209327936 CEST	43720	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.209359884 CEST	443	43720	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.209528923 CEST	43720	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.210203886 CEST	43720	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.210216045 CEST	443	43720	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.281327963 CEST	443	59194	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.281373024 CEST	59194	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.281389952 CEST	443	59194	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.281421900 CEST	443	59194	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.281553030 CEST	59194	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.281572104 CEST	443	59194	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.281583071 CEST	59194	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.281588078 CEST	443	59194	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.282835007 CEST	59208	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.282872915 CEST	443	59208	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.282912970 CEST	59208	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.283857107 CEST	59208	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.283869982 CEST	443	59208	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.284271002 CEST	59208	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.285012007 CEST	59210	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.285048962 CEST	443	59210	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.285104036 CEST	59210	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.285798073 CEST	59210	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.285813093 CEST	443	59210	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.331403017 CEST	443	59208	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.807429075 CEST	443	43714	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.807502985 CEST	43714	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.808751106 CEST	43714	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.808763027 CEST	443	43714	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.808841944 CEST	443	43714	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.812405109 CEST	43714	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.816006899 CEST	443	43716	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.816205978 CEST	43716	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.817256927 CEST	43716	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.817261934 CEST	443	43716	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.817502975 CEST	443	43716	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.817962885 CEST	43716	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.820077896 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.820136070 CEST	43710	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.824490070 CEST	43710	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.824497938 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.824635983 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.826967001 CEST	443	43718	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.827023983 CEST	43718	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.829619884 CEST	43710	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.830713987 CEST	43718	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.830718994 CEST	443	43718	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.830816984 CEST	443	43718	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.831350088 CEST	43718	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.834059954 CEST	443	43712	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.834151030 CEST	43712	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.835527897 CEST	43712	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.835537910 CEST	443	43712	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.835623980 CEST	443	43712	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.838057041 CEST	43712	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:33.859400988 CEST	443	43714	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.859425068 CEST	443	43716	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.871411085 CEST	443	43718	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.871421099 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.879395962 CEST	443	43712	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:33.888317108 CEST	443	59210	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.888503075 CEST	59210	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.889501095 CEST	59210	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.889509916 CEST	443	59210	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.889627934 CEST	443	59210	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.890703917 CEST	59210	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.900971889 CEST	443	59208	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:33.901232958 CEST	59208	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:33.935399055 CEST	443	59210	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:34.032000065 CEST	443	43720	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.032104015 CEST	43720	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.035231113 CEST	43720	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.035238028 CEST	443	43720	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.035312891 CEST	443	43720	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.044910908 CEST	43720	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.077260971 CEST	443	43714	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.077447891 CEST	443	43714	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.077727079 CEST	43714	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.087404013 CEST	443	43720	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.096132994 CEST	43714	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.096164942 CEST	443	43714	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.096180916 CEST	43714	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.096190929 CEST	443	43714	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.098176956 CEST	443	43718	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.098367929 CEST	443	43718	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.098418951 CEST	43718	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.100491047 CEST	43726	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.100543022 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.100701094 CEST	43726	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.108617067 CEST	443	43712	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.108648062 CEST	443	43712	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.108669043 CEST	443	43712	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.108705997 CEST	43712	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.108722925 CEST	443	43712	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.108746052 CEST	443	43712	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.108900070 CEST	43712	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.112265110 CEST	43718	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.112279892 CEST	443	43718	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.112291098 CEST	43718	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.112298012 CEST	443	43718	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.128484011 CEST	43712	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.128484011 CEST	43712	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.128510952 CEST	443	43712	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.131545067 CEST	43726	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.131563902 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.136590004 CEST	43728	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.136610985 CEST	443	43728	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.136708021 CEST	43728	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.141680002 CEST	43728	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.141705036 CEST	443	43728	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.149059057 CEST	43730	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.149080992 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.149123907 CEST	43730	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.153152943 CEST	43730	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.153165102 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.176034927 CEST	443	43716	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.176105022 CEST	443	43716	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.176151037 CEST	443	43716	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.176232100 CEST	43716	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.176243067 CEST	443	43716	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.176269054 CEST	443	43716	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.176299095 CEST	43716	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.176317930 CEST	443	43716	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.176419973 CEST	443	43716	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.176425934 CEST	43716	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.183017969 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.183044910 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.183059931 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.183202982 CEST	43710	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.183212996 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.183254957 CEST	43710	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.184875011 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.184905052 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.184946060 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.185024977 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.185142994 CEST	43710	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.191418886 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.191483021 CEST	43710	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.196629047 CEST	43716	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.196629047 CEST	43716	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.196650982 CEST	443	43716	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.218427896 CEST	43710	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.218427896 CEST	43710	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.218437910 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.218445063 CEST	443	43710	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.221668959 CEST	43732	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.221713066 CEST	443	43732	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.221911907 CEST	43732	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.225852013 CEST	43732	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.225869894 CEST	443	43732	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.232026100 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.232059956 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.232132912 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.235764980 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.235780954 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.305705070 CEST	443	43720	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.305783987 CEST	443	43720	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.315404892 CEST	443	43720	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.315622091 CEST	43720	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.319804907 CEST	43720	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.319804907 CEST	43720	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.319818974 CEST	443	43720	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.319829941 CEST	443	43720	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.324755907 CEST	43736	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.324805975 CEST	443	43736	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.324862957 CEST	43736	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.329890966 CEST	43736	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.329909086 CEST	443	43736	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.731306076 CEST	443	59210	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:34.732136011 CEST	443	59210	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:34.732218027 CEST	59210	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:34.747941971 CEST	59210	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:34.747953892 CEST	443	59210	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:34.747972965 CEST	59210	443	192.168.2.20	13.32.121.112
Oct 7, 2024 16:48:34.747977972 CEST	443	59210	13.32.121.112	192.168.2.20
Oct 7, 2024 16:48:34.981281042 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.981777906 CEST	43730	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.982713938 CEST	43730	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.982722044 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.982767105 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.982822895 CEST	43726	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.983139992 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.984311104 CEST	43726	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.984323978 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.984421968 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.987920046 CEST	43730	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.991193056 CEST	43726	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.991461039 CEST	443	43728	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.991687059 CEST	43728	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.998447895 CEST	43728	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:34.998461008 CEST	443	43728	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.998583078 CEST	443	43728	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:34.999418974 CEST	43728	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.035393000 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.035410881 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.043411970 CEST	443	43728	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.061252117 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.061350107 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.062362909 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.062371016 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.062459946 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.064888000 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.111407995 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.462652922 CEST	443	43736	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.462773085 CEST	43736	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.463166952 CEST	443	43732	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.463239908 CEST	43732	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.466160059 CEST	43736	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.466171026 CEST	443	43736	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.466372013 CEST	443	43736	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.474946976 CEST	43736	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.475343943 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.475373030 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.475416899 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.475416899 CEST	43730	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.475439072 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.475692034 CEST	43730	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.475779057 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.475842953 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.475889921 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.475903988 CEST	43726	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.475922108 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.476030111 CEST	443	43728	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.476063013 CEST	443	43728	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.476085901 CEST	443	43728	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.476134062 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.476162910 CEST	43726	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.476169109 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.476175070 CEST	43728	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.476190090 CEST	443	43728	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.476253986 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.476308107 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.476403952 CEST	43728	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.476408005 CEST	43726	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.476416111 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.476440907 CEST	43730	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.476448059 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.477205992 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.477271080 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.477313042 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.477406025 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.477416039 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.477622986 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.477901936 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.477948904 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.477991104 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.477998972 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.481018066 CEST	43732	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.481034040 CEST	443	43732	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.481275082 CEST	443	43732	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.482280016 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.482307911 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.482541084 CEST	43730	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.482549906 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.482763052 CEST	43730	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.482817888 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.482861042 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.483021021 CEST	43726	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.483032942 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.483063936 CEST	43726	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.484493017 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.484548092 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.484664917 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.484859943 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.484882116 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.488084078 CEST	43726	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.490539074 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.503412962 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.503474951 CEST	43730	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.515409946 CEST	443	43736	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.515683889 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.519680023 CEST	43732	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.541475058 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.541526079 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.541543007 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.541551113 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.541565895 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.541580915 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.542970896 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.543019056 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.543021917 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.543054104 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.543072939 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.543088913 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.547607899 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.547651052 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.547684908 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.547693014 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.547702074 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.547727108 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.547751904 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.547913074 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.547967911 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.581429005 CEST	43732	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.583497047 CEST	43730	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.583497047 CEST	43730	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.583513975 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.583524942 CEST	443	43730	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.583583117 CEST	43728	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.583583117 CEST	43728	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.583612919 CEST	443	43728	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.583623886 CEST	443	43728	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.583693027 CEST	43726	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.583693027 CEST	43726	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.583718061 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.583731890 CEST	443	43726	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.587688923 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.622668982 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.622688055 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.622699976 CEST	43734	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.622705936 CEST	443	43734	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.623406887 CEST	443	43732	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.629477024 CEST	43738	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.629519939 CEST	443	43738	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.629739046 CEST	43738	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.635627985 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.635664940 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.635863066 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.638192892 CEST	43738	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.638210058 CEST	443	43738	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.642121077 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.642138958 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.649554014 CEST	43742	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.649569988 CEST	443	43742	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.649616957 CEST	43742	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.653729916 CEST	43742	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.653747082 CEST	443	43742	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.658674955 CEST	43744	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.658713102 CEST	443	43744	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.658787012 CEST	43744	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.663805008 CEST	43744	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.663835049 CEST	443	43744	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.733778000 CEST	443	43736	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.733810902 CEST	443	43736	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.733880997 CEST	43736	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.733905077 CEST	443	43736	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.733921051 CEST	443	43736	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.743405104 CEST	443	43736	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.743547916 CEST	43736	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.750960112 CEST	43736	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.750989914 CEST	443	43736	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.751003981 CEST	43736	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.751012087 CEST	443	43736	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.769336939 CEST	43746	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.769381046 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.769469023 CEST	43746	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.772830009 CEST	443	43732	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.772896051 CEST	43732	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.772897959 CEST	443	43732	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.772928953 CEST	443	43732	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.772939920 CEST	43732	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.772968054 CEST	43732	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.772979021 CEST	443	43732	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.773020029 CEST	43732	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.773116112 CEST	443	43732	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.773510933 CEST	43746	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.773535967 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.801167965 CEST	43732	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.801192045 CEST	443	43732	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.801206112 CEST	43732	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.801213026 CEST	443	43732	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.806269884 CEST	43748	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.806301117 CEST	443	43748	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:35.806389093 CEST	43748	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.811125994 CEST	43748	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:35.811151981 CEST	443	43748	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.475879908 CEST	443	43738	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.476011038 CEST	43738	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.480216026 CEST	443	43744	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.480387926 CEST	43744	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.480516911 CEST	43738	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.480523109 CEST	443	43738	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.480973005 CEST	443	43738	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.486278057 CEST	43744	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.486294985 CEST	443	43744	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.486411095 CEST	443	43744	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.488090038 CEST	43738	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.488291979 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.488410950 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.490186930 CEST	43744	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.492412090 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.492417097 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.492568970 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.496001005 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.531431913 CEST	443	43738	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.535404921 CEST	443	43744	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.543399096 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.591250896 CEST	443	43742	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.591346979 CEST	43742	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.592391014 CEST	43742	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.592398882 CEST	443	43742	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.592520952 CEST	443	43742	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.592931986 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.592978954 CEST	43746	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.594230890 CEST	43746	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.594237089 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.594326019 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.595962048 CEST	43742	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.597877026 CEST	43746	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.639405012 CEST	443	43742	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.643410921 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.651998997 CEST	443	43748	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.652097940 CEST	43748	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.653081894 CEST	43748	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.653090000 CEST	443	43748	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.653162003 CEST	443	43748	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.655508041 CEST	43748	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.699404001 CEST	443	43748	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.787705898 CEST	443	43744	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.787770987 CEST	443	43744	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.787815094 CEST	443	43744	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.787956953 CEST	443	43744	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.787966967 CEST	43744	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.795423985 CEST	443	43744	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.795562983 CEST	43744	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.797045946 CEST	43744	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.797045946 CEST	43744	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.797064066 CEST	443	43744	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.797068119 CEST	443	43744	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.799994946 CEST	43750	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.800028086 CEST	443	43750	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.800127029 CEST	43750	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.803175926 CEST	43750	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.803193092 CEST	443	43750	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.838520050 CEST	443	43738	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.838572979 CEST	443	43738	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.838617086 CEST	443	43738	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.838692904 CEST	43738	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.838715076 CEST	443	43738	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.838870049 CEST	43738	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.840213060 CEST	443	43738	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.840281010 CEST	443	43738	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.840348005 CEST	443	43738	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.840385914 CEST	43738	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.859118938 CEST	43738	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.859118938 CEST	43738	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.859142065 CEST	443	43738	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.862531900 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.862557888 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.862574100 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.862684011 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.862694025 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.862782955 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.864782095 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.864803076 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.864969015 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.864974976 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.869837999 CEST	43752	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.869878054 CEST	443	43752	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.869924068 CEST	43752	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.872761011 CEST	43752	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.872777939 CEST	443	43752	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.873780012 CEST	443	43742	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.873826981 CEST	443	43742	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.873857021 CEST	443	43742	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.873893976 CEST	43742	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.873904943 CEST	443	43742	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.873924017 CEST	443	43742	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.873940945 CEST	43742	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.883377075 CEST	43742	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.883377075 CEST	43742	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.883393049 CEST	443	43742	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.886392117 CEST	43754	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.886452913 CEST	443	43754	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.886517048 CEST	43754	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.889153004 CEST	43754	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.889166117 CEST	443	43754	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.904417992 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.928693056 CEST	443	43748	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.928708076 CEST	443	43748	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.928811073 CEST	43748	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.928828955 CEST	443	43748	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.928889036 CEST	443	43748	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.935421944 CEST	443	43748	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.935528994 CEST	43748	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.939654112 CEST	43748	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.939662933 CEST	443	43748	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.939681053 CEST	43748	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.939687014 CEST	443	43748	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.942714930 CEST	43756	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.942727089 CEST	443	43756	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.942979097 CEST	43756	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.946324110 CEST	43756	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.946337938 CEST	443	43756	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.953222036 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.953249931 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.953344107 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.953344107 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.953351974 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.953391075 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.958081961 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.958108902 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.958203077 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.958203077 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.958209991 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.958307028 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.959661007 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.959680080 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.959700108 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.959739923 CEST	43746	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.959759951 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.959971905 CEST	43746	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.960278034 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.960300922 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.960330963 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.960330963 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.960336924 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.960442066 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.962044001 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.962060928 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.962124109 CEST	43746	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.962131023 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.992173910 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.992237091 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.992306948 CEST	43746	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.992942095 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.992968082 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.994452000 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.994452000 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.994460106 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.994864941 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.998692989 CEST	43746	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.998706102 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:36.998744965 CEST	43746	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:36.998755932 CEST	443	43746	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.002845049 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.002871037 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.002963066 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.005836964 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.005862951 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.043231010 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.043265104 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.043396950 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.043396950 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.043406963 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.043534040 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.044342995 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.044370890 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.044431925 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.044431925 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.044440031 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.044506073 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.048557997 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.048584938 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.048657894 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.048657894 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.048662901 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.048739910 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.049382925 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.049401045 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.049717903 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.049717903 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.049722910 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.050193071 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.050205946 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.050221920 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.050594091 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.050599098 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.050620079 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.050820112 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.078818083 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.078841925 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.079041004 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.079041004 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.079046965 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.079183102 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.082822084 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.082849026 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.083014965 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.083014965 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.083020926 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.083066940 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.133729935 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.133759975 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.133894920 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.133910894 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.133910894 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.133919001 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.133934975 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.133999109 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.134051085 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.134125948 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.134373903 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.140623093 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.140638113 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.140675068 CEST	43740	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.140681028 CEST	443	43740	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.142709017 CEST	43760	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.142745972 CEST	443	43760	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.142995119 CEST	43760	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.145553112 CEST	43760	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.145569086 CEST	443	43760	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.621913910 CEST	443	43750	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.622311115 CEST	43750	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.624614000 CEST	43750	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.624636889 CEST	443	43750	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.624825001 CEST	443	43750	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.639812946 CEST	43750	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.683403015 CEST	443	43750	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.691214085 CEST	443	43754	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.691272974 CEST	43754	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.692145109 CEST	43754	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.692150116 CEST	443	43754	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.692255974 CEST	443	43754	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.697099924 CEST	43754	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.739406109 CEST	443	43754	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.772146940 CEST	443	43752	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.772253036 CEST	43752	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.775010109 CEST	443	43756	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.775111914 CEST	43756	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.778222084 CEST	43752	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.778228998 CEST	443	43752	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.778337002 CEST	443	43752	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.783145905 CEST	43756	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.783152103 CEST	443	43756	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.783230066 CEST	443	43756	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.784503937 CEST	43752	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.785598040 CEST	43756	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.826416969 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.826569080 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.827404022 CEST	443	43752	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.831406116 CEST	443	43756	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.833942890 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.833950996 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.834057093 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.835486889 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.883413076 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.891855955 CEST	443	43750	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.891887903 CEST	443	43750	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.892010927 CEST	43750	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.892024040 CEST	443	43750	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.892296076 CEST	443	43750	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.902040958 CEST	43750	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.902118921 CEST	43750	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.902136087 CEST	443	43750	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.902167082 CEST	43750	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.902173042 CEST	443	43750	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.903879881 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.903897047 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.904118061 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.906007051 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.906018972 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.966809988 CEST	443	43754	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.966836929 CEST	443	43754	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.966907978 CEST	443	43754	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.966938972 CEST	43754	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.970536947 CEST	43754	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.970547915 CEST	443	43754	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.970602989 CEST	43754	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.970608950 CEST	443	43754	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.971043110 CEST	43764	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.971081018 CEST	443	43764	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.971146107 CEST	43764	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.973397970 CEST	443	43760	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.973588943 CEST	43760	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.982719898 CEST	43760	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.982737064 CEST	443	43760	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.982825041 CEST	443	43760	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.986927032 CEST	43764	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:37.986967087 CEST	443	43764	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:37.987664938 CEST	43760	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.031423092 CEST	443	43760	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.044656992 CEST	443	43752	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.044725895 CEST	443	43752	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.044779062 CEST	443	43752	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.044888020 CEST	43752	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.044900894 CEST	443	43752	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.044919014 CEST	443	43752	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.045424938 CEST	43752	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.045517921 CEST	43752	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.045525074 CEST	443	43752	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.045965910 CEST	43766	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.045994997 CEST	443	43766	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.046108007 CEST	43766	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.048408985 CEST	443	43756	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.048430920 CEST	443	43756	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.048547029 CEST	443	43756	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.049012899 CEST	43756	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.058311939 CEST	43766	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.058326006 CEST	443	43766	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.059962988 CEST	43756	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.059978962 CEST	443	43756	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.059992075 CEST	43756	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.059999943 CEST	443	43756	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.060142994 CEST	43768	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.060174942 CEST	443	43768	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.060215950 CEST	43768	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.062815905 CEST	43768	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.062828064 CEST	443	43768	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.190376997 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.190397024 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.190413952 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.190464973 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.190495014 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.190543890 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.192898989 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.192918062 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.193113089 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.193134069 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.231715918 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.248075008 CEST	443	43760	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.248102903 CEST	443	43760	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.248182058 CEST	443	43760	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.248347044 CEST	43760	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.248819113 CEST	43760	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.248842955 CEST	443	43760	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.248879910 CEST	43760	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.248888016 CEST	443	43760	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.249295950 CEST	43770	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.249317884 CEST	443	43770	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.249375105 CEST	43770	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.263961077 CEST	43770	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.263983011 CEST	443	43770	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.280699015 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.280723095 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.280786037 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.280786037 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.280810118 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.280853987 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.281950951 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.281972885 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.282033920 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.282033920 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.282047987 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.282067060 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.282089949 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.282319069 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.282351017 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.282371998 CEST	43758	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.282387972 CEST	443	43758	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.282576084 CEST	43772	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.282592058 CEST	443	43772	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.282634974 CEST	43772	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.285739899 CEST	43772	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.285753012 CEST	443	43772	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.733505011 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.733562946 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.734515905 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.734520912 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.734608889 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.735733986 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.783402920 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.829418898 CEST	443	43764	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.829510927 CEST	43764	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.830369949 CEST	43764	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.830375910 CEST	443	43764	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.830466986 CEST	443	43764	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.831023932 CEST	43764	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.872581005 CEST	443	43766	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.872776031 CEST	43766	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.875406027 CEST	443	43764	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.876266003 CEST	43766	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.876271009 CEST	443	43766	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.876415968 CEST	443	43766	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.878307104 CEST	43766	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.890897989 CEST	443	43768	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.891407013 CEST	43768	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.894646883 CEST	43768	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.894654989 CEST	443	43768	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.894856930 CEST	443	43768	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.898498058 CEST	43768	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:38.923398972 CEST	443	43766	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:38.943411112 CEST	443	43768	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.098134041 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.098187923 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.098232031 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.098351002 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.098360062 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.098409891 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.100295067 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.100341082 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.101093054 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.101099014 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.104204893 CEST	443	43770	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.106117010 CEST	43770	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.106563091 CEST	443	43764	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.106600046 CEST	443	43764	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.106658936 CEST	43764	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.106673002 CEST	443	43764	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.107189894 CEST	443	43764	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.109317064 CEST	43770	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.109339952 CEST	443	43770	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.109709978 CEST	443	43770	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.110534906 CEST	43770	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.110655069 CEST	43764	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.110724926 CEST	43764	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.110732079 CEST	443	43764	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.110743999 CEST	43764	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.110749006 CEST	443	43764	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.110946894 CEST	43774	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.110975981 CEST	443	43774	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.111078024 CEST	43774	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.112513065 CEST	43774	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.112534046 CEST	443	43774	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.139683008 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.142324924 CEST	443	43766	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.142484903 CEST	443	43766	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.142555952 CEST	43766	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.142790079 CEST	43766	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.142790079 CEST	43766	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.142797947 CEST	443	43766	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.142806053 CEST	443	43766	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.143228054 CEST	43776	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.143253088 CEST	443	43776	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.143405914 CEST	43776	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.144407988 CEST	43776	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.144428015 CEST	443	43776	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.155409098 CEST	443	43770	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.161606073 CEST	443	43768	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.161673069 CEST	443	43768	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.161741972 CEST	43768	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.161756039 CEST	443	43768	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.161860943 CEST	443	43768	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.161931038 CEST	43768	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.161931038 CEST	43768	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.161951065 CEST	443	43768	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.162152052 CEST	43778	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.162177086 CEST	443	43778	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.162389994 CEST	43778	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.163167953 CEST	43778	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.163182974 CEST	443	43778	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.170171976 CEST	443	43772	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.170248985 CEST	43772	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.171192884 CEST	43772	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.171197891 CEST	443	43772	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.171273947 CEST	443	43772	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.171921015 CEST	43772	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.188076973 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.188128948 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.188179970 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.188179970 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.188189983 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.188226938 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.189263105 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.189308882 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.189352989 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.189352989 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.189358950 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.189398050 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.189944983 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.190041065 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.190046072 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.190083027 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.190107107 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.190181017 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.190187931 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.190203905 CEST	43762	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.190207958 CEST	443	43762	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.190368891 CEST	43780	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.190402031 CEST	443	43780	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.190608025 CEST	43780	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.191746950 CEST	43780	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.191766977 CEST	443	43780	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.219412088 CEST	443	43772	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.381149054 CEST	443	43770	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.381206036 CEST	443	43770	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.381340027 CEST	43770	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.381874084 CEST	43770	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.381874084 CEST	43770	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.381889105 CEST	443	43770	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.381896019 CEST	443	43770	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.382306099 CEST	43782	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.382340908 CEST	443	43782	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.382441044 CEST	43782	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.385206938 CEST	43782	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.385219097 CEST	443	43782	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.441370010 CEST	443	43772	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.441406012 CEST	443	43772	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.441430092 CEST	443	43772	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.441492081 CEST	443	43772	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.441507101 CEST	43772	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.441984892 CEST	43772	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.442173958 CEST	43772	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.442183018 CEST	443	43772	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.442625999 CEST	43784	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.442653894 CEST	443	43784	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.442717075 CEST	43784	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.447293997 CEST	43784	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.447304010 CEST	443	43784	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.915095091 CEST	443	43774	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.915208101 CEST	43774	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.916244030 CEST	43774	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.916251898 CEST	443	43774	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.916385889 CEST	443	43774	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.916992903 CEST	43774	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.959410906 CEST	443	43774	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.976105928 CEST	443	43776	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.976259947 CEST	43776	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.979707003 CEST	43776	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.979712963 CEST	443	43776	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.979957104 CEST	443	43776	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.982831955 CEST	43776	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.995460033 CEST	443	43778	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.995542049 CEST	43778	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.997575045 CEST	43778	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:39.997582912 CEST	443	43778	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.997653961 CEST	443	43778	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:39.998871088 CEST	43778	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.010149956 CEST	443	43780	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.010353088 CEST	43780	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.011532068 CEST	43780	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.011559010 CEST	443	43780	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.011837959 CEST	443	43780	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.012392998 CEST	43780	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.027394056 CEST	443	43776	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.043397903 CEST	443	43778	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.055424929 CEST	443	43780	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.184259892 CEST	443	43774	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.184284925 CEST	443	43774	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.184355021 CEST	443	43774	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.184398890 CEST	43774	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.184967041 CEST	43774	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.185015917 CEST	443	43774	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.185034990 CEST	43774	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.185045004 CEST	443	43774	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.185486078 CEST	43786	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.185513973 CEST	443	43786	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.185590982 CEST	43786	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.188373089 CEST	43786	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.188390970 CEST	443	43786	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.200898886 CEST	443	43782	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.200973988 CEST	43782	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.201823950 CEST	43782	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.201828003 CEST	443	43782	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.201898098 CEST	443	43782	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.202419996 CEST	43782	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.243396044 CEST	443	43782	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.244256973 CEST	443	43784	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.244360924 CEST	43784	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.247931957 CEST	43784	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.247939110 CEST	443	43784	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.248018026 CEST	443	43784	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.250085115 CEST	43784	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.271678925 CEST	443	43778	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.271749020 CEST	443	43778	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.271789074 CEST	443	43778	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.271862030 CEST	43778	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.271879911 CEST	443	43778	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.271934032 CEST	443	43778	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.272408009 CEST	43778	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.272593021 CEST	43778	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.272608042 CEST	443	43778	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.272658110 CEST	43778	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.272664070 CEST	443	43778	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.273219109 CEST	43788	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.273256063 CEST	443	43788	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.273319960 CEST	43788	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.276055098 CEST	43788	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.276074886 CEST	443	43788	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.295398951 CEST	443	43784	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.340125084 CEST	443	43776	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.340162992 CEST	443	43776	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.340183020 CEST	443	43776	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.340238094 CEST	43776	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.340256929 CEST	443	43776	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.340411901 CEST	43776	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.341104031 CEST	443	43776	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.341198921 CEST	443	43776	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.341254950 CEST	43776	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.341634035 CEST	43776	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.341664076 CEST	443	43776	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.341814995 CEST	43776	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.341824055 CEST	443	43776	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.342142105 CEST	43790	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.342179060 CEST	443	43790	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.342240095 CEST	43790	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.345541954 CEST	43790	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.345556974 CEST	443	43790	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.370667934 CEST	443	43780	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.370703936 CEST	443	43780	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.370728016 CEST	443	43780	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.370754004 CEST	43780	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.370770931 CEST	443	43780	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.370807886 CEST	43780	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.371046066 CEST	443	43780	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.371129036 CEST	443	43780	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.372208118 CEST	43780	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.372343063 CEST	43780	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.372351885 CEST	443	43780	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.390772104 CEST	43792	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.390813112 CEST	443	43792	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.390954971 CEST	43792	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.391604900 CEST	43792	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.391618013 CEST	443	43792	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.603792906 CEST	443	43784	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.603818893 CEST	443	43784	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.603841066 CEST	443	43784	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.603904963 CEST	43784	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.603915930 CEST	443	43784	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.603976011 CEST	43784	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.604007959 CEST	443	43784	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.604640007 CEST	43784	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.604654074 CEST	443	43784	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.604707956 CEST	43784	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.604715109 CEST	443	43784	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.630501986 CEST	443	43782	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.630572081 CEST	443	43782	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.630640030 CEST	43782	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.630918026 CEST	43782	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.630930901 CEST	443	43782	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.630944967 CEST	43782	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.630949974 CEST	443	43782	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.989713907 CEST	443	43786	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.989782095 CEST	43786	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.995096922 CEST	43786	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:40.995115042 CEST	443	43786	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.995189905 CEST	443	43786	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:40.997426987 CEST	43786	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.039403915 CEST	443	43786	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.115982056 CEST	443	43788	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.116405010 CEST	43788	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.119455099 CEST	43788	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.119465113 CEST	443	43788	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.119575977 CEST	443	43788	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.122196913 CEST	43788	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.151263952 CEST	443	43790	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.151380062 CEST	43790	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.154726028 CEST	43790	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.154733896 CEST	443	43790	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.154978991 CEST	443	43790	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.163404942 CEST	443	43788	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.163559914 CEST	43790	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.202625036 CEST	443	43792	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.202739954 CEST	43792	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.206387043 CEST	43792	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.206399918 CEST	443	43792	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.206490040 CEST	443	43792	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.209414959 CEST	43792	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.211399078 CEST	443	43790	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.214633942 CEST	43794	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.214670897 CEST	443	43794	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.214716911 CEST	43794	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.218056917 CEST	43794	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.218076944 CEST	443	43794	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.255403042 CEST	443	43792	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.260582924 CEST	443	43786	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.260607004 CEST	443	43786	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.260644913 CEST	443	43786	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.260682106 CEST	443	43786	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.260715008 CEST	43786	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.267414093 CEST	443	43786	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.267538071 CEST	43786	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.279077053 CEST	43786	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.279077053 CEST	43786	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.279095888 CEST	443	43786	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.279104948 CEST	443	43786	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.392066002 CEST	443	43788	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.392138004 CEST	443	43788	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.392178059 CEST	443	43788	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.392319918 CEST	443	43788	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.392364979 CEST	43788	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.392462969 CEST	43788	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.392496109 CEST	43788	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.392496109 CEST	43788	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.392509937 CEST	443	43788	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.392518044 CEST	443	43788	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.518815994 CEST	443	43790	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.518884897 CEST	443	43790	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.518929958 CEST	443	43790	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.518954039 CEST	43790	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.518968105 CEST	443	43790	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.519005060 CEST	43790	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.519041061 CEST	443	43790	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.519201994 CEST	443	43790	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.519244909 CEST	43790	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.519264936 CEST	443	43790	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.519275904 CEST	43790	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.562546015 CEST	443	43792	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.562596083 CEST	443	43792	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.562645912 CEST	443	43792	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.562657118 CEST	43792	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.562678099 CEST	443	43792	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.562721968 CEST	43792	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.562788010 CEST	443	43792	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.562941074 CEST	43792	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.562942028 CEST	443	43792	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.562949896 CEST	43792	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.562978983 CEST	443	43792	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.562988997 CEST	43792	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.584306002 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.584338903 CEST	443	43796	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:41.584408998 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.585194111 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:41.585208893 CEST	443	43796	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.030904055 CEST	443	43794	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.031006098 CEST	43794	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.033103943 CEST	43794	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.033112049 CEST	443	43794	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.033205986 CEST	443	43794	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.035275936 CEST	43794	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.075429916 CEST	443	43794	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.301995039 CEST	443	43794	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.302032948 CEST	443	43794	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.302057028 CEST	443	43794	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.302130938 CEST	443	43794	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.302180052 CEST	43794	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.302208900 CEST	43794	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.302634001 CEST	43794	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.302651882 CEST	443	43794	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.302661896 CEST	43794	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.302666903 CEST	443	43794	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.314412117 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.314454079 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.314507008 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.315407038 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.315423012 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.318061113 CEST	43800	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.318087101 CEST	443	43800	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.318129063 CEST	43800	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.318873882 CEST	43800	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.318888903 CEST	443	43800	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.321357965 CEST	43802	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.321383953 CEST	443	43802	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.321472883 CEST	43802	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.322181940 CEST	43802	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.322194099 CEST	443	43802	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.387877941 CEST	443	43796	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.388058901 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.389600992 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.389606953 CEST	443	43796	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.389972925 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.389977932 CEST	443	43796	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.390031099 CEST	443	43796	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.428107023 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.745498896 CEST	443	43796	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.745569944 CEST	443	43796	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.745608091 CEST	443	43796	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.745625973 CEST	443	43796	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.745731115 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.745731115 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.745731115 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.745731115 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.745757103 CEST	443	43796	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.745770931 CEST	443	43796	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.745868921 CEST	443	43796	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:42.745901108 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.745901108 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.746078014 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.746078014 CEST	43796	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:42.746098995 CEST	443	43796	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.120740891 CEST	443	43802	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.120867968 CEST	43802	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.121946096 CEST	43802	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.121956110 CEST	443	43802	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.122028112 CEST	443	43802	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.124233961 CEST	43802	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.132724047 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.133651972 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.134181023 CEST	443	43800	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.134237051 CEST	43800	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.134855986 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.134860992 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.135090113 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.136398077 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.137923002 CEST	43800	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.137947083 CEST	443	43800	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.138021946 CEST	443	43800	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.139208078 CEST	43800	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.167411089 CEST	443	43802	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.179406881 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.183408022 CEST	443	43800	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.391324043 CEST	443	43802	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.391346931 CEST	443	43802	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.391427994 CEST	443	43802	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.391498089 CEST	43802	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.391876936 CEST	43802	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.391876936 CEST	43802	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.391897917 CEST	443	43802	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.406469107 CEST	43804	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.406498909 CEST	443	43804	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.406788111 CEST	43804	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.407396078 CEST	43804	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.407408953 CEST	443	43804	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.409619093 CEST	443	43800	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.409667015 CEST	443	43800	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.409781933 CEST	43800	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.409811020 CEST	443	43800	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.409872055 CEST	443	43800	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.409946918 CEST	43800	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.409974098 CEST	443	43800	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.409986973 CEST	43800	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.409992933 CEST	443	43800	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.415572882 CEST	43806	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.415637970 CEST	443	43806	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.415693045 CEST	43806	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.416300058 CEST	43806	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.416330099 CEST	443	43806	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.491910934 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.491981030 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.492022991 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.492079973 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.492094994 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.492182970 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.493210077 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.493262053 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.493334055 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.493349075 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.531702995 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.585294962 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.585345984 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.585417986 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.585417986 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.585433960 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.585469007 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.586671114 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.586715937 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.586726904 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.586745024 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.586766005 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.586785078 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.587728024 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.587755919 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.587790012 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.587799072 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.587810993 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.587888956 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.628038883 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.628087997 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.628240108 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.628240108 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.628249884 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.628289938 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.671922922 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.671968937 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.672010899 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.672010899 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.672019958 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.672061920 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.673034906 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.673079014 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.673374891 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.673382998 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.673397064 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.673438072 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.673495054 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.673537970 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.673557997 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.673564911 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.673580885 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.673593998 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.710830927 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.710879087 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.710969925 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.710983992 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.711009979 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.711033106 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.711689949 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.711733103 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.711807013 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.711816072 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.711842060 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.711848974 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.757692099 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.757740021 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.757805109 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.757821083 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.757834911 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.757863998 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.758280039 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.758325100 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.758454084 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.758454084 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.758466005 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.758497000 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.762136936 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.762180090 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.762202024 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.762209892 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.762221098 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.762243032 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.762715101 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.762757063 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.762865067 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.762872934 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.763000965 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.763694048 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.763752937 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.763812065 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.763819933 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.763892889 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.764592886 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.764636040 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.764679909 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.764688015 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.764756918 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.764770031 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.764834881 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.764853001 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:43.764863968 CEST	43798	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:43.764868975 CEST	443	43798	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.219907999 CEST	443	43804	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.219981909 CEST	43804	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:44.220428944 CEST	443	43806	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.220525026 CEST	43806	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:44.222856998 CEST	43804	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:44.222872019 CEST	443	43804	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.222939968 CEST	443	43804	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.228699923 CEST	43806	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:44.228713036 CEST	443	43806	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.228820086 CEST	443	43806	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.230787039 CEST	43804	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:44.230922937 CEST	43806	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:44.271405935 CEST	443	43806	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.275403023 CEST	443	43804	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.490727901 CEST	443	43806	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.490762949 CEST	443	43806	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.490843058 CEST	443	43806	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.490930080 CEST	43806	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:44.491463900 CEST	43806	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:44.491488934 CEST	443	43806	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.491513014 CEST	43806	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:44.491522074 CEST	443	43806	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.497035980 CEST	443	43804	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.497131109 CEST	443	43804	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.497292042 CEST	43804	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:44.497303009 CEST	443	43804	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.497802973 CEST	43804	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:44.497834921 CEST	443	43804	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:44.497879982 CEST	43804	443	192.168.2.20	95.142.78.35
Oct 7, 2024 16:48:44.497886896 CEST	443	43804	95.142.78.35	192.168.2.20
Oct 7, 2024 16:48:52.129977942 CEST	58630	443	192.168.2.20	35.244.181.201
Oct 7, 2024 16:48:52.130008936 CEST	443	58630	35.244.181.201	192.168.2.20
Oct 7, 2024 16:48:52.130065918 CEST	58630	443	192.168.2.20	35.244.181.201
Oct 7, 2024 16:48:52.130196095 CEST	58630	443	192.168.2.20	35.244.181.201
Oct 7, 2024 16:48:52.130208969 CEST	443	58630	35.244.181.201	192.168.2.20
Oct 7, 2024 16:48:52.138812065 CEST	43884	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:52.138823986 CEST	443	43884	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:52.138874054 CEST	43884	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:52.140286922 CEST	43884	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:52.140297890 CEST	443	43884	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:52.596647024 CEST	443	58630	35.244.181.201	192.168.2.20
Oct 7, 2024 16:48:52.596771002 CEST	58630	443	192.168.2.20	35.244.181.201
Oct 7, 2024 16:48:52.600704908 CEST	58630	443	192.168.2.20	35.244.181.201
Oct 7, 2024 16:48:52.600711107 CEST	443	58630	35.244.181.201	192.168.2.20
Oct 7, 2024 16:48:52.601017952 CEST	443	58630	35.244.181.201	192.168.2.20
Oct 7, 2024 16:48:52.602036953 CEST	58630	443	192.168.2.20	35.244.181.201
Oct 7, 2024 16:48:52.608515978 CEST	443	43884	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:52.608588934 CEST	43884	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:52.611040115 CEST	43884	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:52.611046076 CEST	443	43884	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:52.611283064 CEST	43884	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:52.611289024 CEST	443	43884	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:52.611323118 CEST	443	43884	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:52.647402048 CEST	443	58630	35.244.181.201	192.168.2.20
Oct 7, 2024 16:48:52.647696018 CEST	43884	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:52.647706985 CEST	443	43884	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:52.647767067 CEST	43884	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:52.766410112 CEST	443	43884	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:52.766680956 CEST	43884	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:52.766697884 CEST	443	43884	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:52.766782045 CEST	443	43884	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:52.770988941 CEST	43884	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:52.771017075 CEST	443	43884	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:52.771051884 CEST	43884	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:52.771061897 CEST	443	43884	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:52.843585968 CEST	443	58630	35.244.181.201	192.168.2.20
Oct 7, 2024 16:48:52.844670057 CEST	443	58630	35.244.181.201	192.168.2.20
Oct 7, 2024 16:48:52.850100040 CEST	58630	443	192.168.2.20	35.244.181.201
Oct 7, 2024 16:48:52.850358963 CEST	58630	443	192.168.2.20	35.244.181.201
Oct 7, 2024 16:48:52.850378036 CEST	443	58630	35.244.181.201	192.168.2.20
Oct 7, 2024 16:48:52.850390911 CEST	58630	443	192.168.2.20	35.244.181.201
Oct 7, 2024 16:48:52.850397110 CEST	443	58630	35.244.181.201	192.168.2.20
Oct 7, 2024 16:48:57.981441021 CEST	43888	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:57.981477976 CEST	443	43888	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:57.981694937 CEST	43888	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:57.982330084 CEST	43888	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:57.982346058 CEST	443	43888	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:58.448591948 CEST	443	43888	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:58.448687077 CEST	43888	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:58.452239037 CEST	43888	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:58.452248096 CEST	443	43888	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:58.452393055 CEST	443	43888	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:58.455337048 CEST	43888	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:58.499403954 CEST	443	43888	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:58.613023043 CEST	443	43888	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:58.613928080 CEST	443	43888	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:58.616435051 CEST	43888	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:58.616591930 CEST	43888	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:58.616607904 CEST	443	43888	34.107.243.93	192.168.2.20
Oct 7, 2024 16:48:58.616662025 CEST	43888	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:48:58.616667032 CEST	443	43888	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:08.624456882 CEST	43890	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:08.624490976 CEST	443	43890	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:08.624552965 CEST	43890	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:08.627146959 CEST	43890	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:08.627157927 CEST	443	43890	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:09.071465015 CEST	443	43890	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:09.071603060 CEST	43890	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:09.072647095 CEST	43890	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:09.072654963 CEST	443	43890	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:09.072850943 CEST	443	43890	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:09.073549986 CEST	43890	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:09.119410038 CEST	443	43890	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:09.240056992 CEST	443	43890	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:09.240318060 CEST	443	43890	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:09.242887974 CEST	43890	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:09.243038893 CEST	43890	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:09.243061066 CEST	443	43890	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:09.243088007 CEST	43890	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:09.243093967 CEST	443	43890	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:29.254328966 CEST	43892	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:29.254379034 CEST	443	43892	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:29.254757881 CEST	43892	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:29.257229090 CEST	43892	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:29.257240057 CEST	443	43892	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:29.692651987 CEST	443	43892	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:29.692914963 CEST	43892	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:29.696193933 CEST	43892	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:29.696207047 CEST	443	43892	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:29.696284056 CEST	443	43892	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:29.698693991 CEST	43892	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:29.739398956 CEST	443	43892	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:29.866378069 CEST	443	43892	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:29.867336035 CEST	443	43892	34.107.243.93	192.168.2.20
Oct 7, 2024 16:49:29.869724035 CEST	43892	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:29.869724035 CEST	43892	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:29.869724035 CEST	43892	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:29.883678913 CEST	43892	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:49:29.883701086 CEST	443	43892	34.107.243.93	192.168.2.20
Oct 7, 2024 16:50:09.881660938 CEST	43894	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:50:09.881736040 CEST	443	43894	34.107.243.93	192.168.2.20
Oct 7, 2024 16:50:09.881831884 CEST	43894	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:50:09.884865999 CEST	43894	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:50:09.884913921 CEST	443	43894	34.107.243.93	192.168.2.20
Oct 7, 2024 16:50:10.341908932 CEST	443	43894	34.107.243.93	192.168.2.20
Oct 7, 2024 16:50:10.342117071 CEST	43894	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:50:10.345848083 CEST	43894	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:50:10.345855951 CEST	443	43894	34.107.243.93	192.168.2.20
Oct 7, 2024 16:50:10.345973969 CEST	443	43894	34.107.243.93	192.168.2.20
Oct 7, 2024 16:50:10.349267960 CEST	43894	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:50:10.395423889 CEST	443	43894	34.107.243.93	192.168.2.20
Oct 7, 2024 16:50:10.505137920 CEST	443	43894	34.107.243.93	192.168.2.20
Oct 7, 2024 16:50:10.505506992 CEST	443	43894	34.107.243.93	192.168.2.20
Oct 7, 2024 16:50:10.509427071 CEST	43894	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:50:10.509558916 CEST	43894	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:50:10.509613991 CEST	443	43894	34.107.243.93	192.168.2.20
Oct 7, 2024 16:50:10.509643078 CEST	43894	443	192.168.2.20	34.107.243.93
Oct 7, 2024 16:50:10.509659052 CEST	443	43894	34.107.243.93	192.168.2.20

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 16:48:31.287739038 CEST	36785	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:48:31.294944048 CEST	53	36785	8.8.8.8	192.168.2.20
Oct 7, 2024 16:48:31.296006918 CEST	36785	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:48:31.319622040 CEST	53	36785	8.8.8.8	192.168.2.20
Oct 7, 2024 16:48:37.199139118 CEST	50494	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:48:37.199139118 CEST	50494	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:48:37.220477104 CEST	53	50494	8.8.8.8	192.168.2.20
Oct 7, 2024 16:48:37.220973015 CEST	53	50494	8.8.8.8	192.168.2.20
Oct 7, 2024 16:48:51.659969091 CEST	37941	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:48:51.659969091 CEST	37941	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:48:52.128248930 CEST	53	37941	8.8.8.8	192.168.2.20
Oct 7, 2024 16:48:52.128266096 CEST	53	37941	8.8.8.8	192.168.2.20
Oct 7, 2024 16:48:52.130558968 CEST	38490	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:48:52.130558968 CEST	38490	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:48:52.138305902 CEST	53	38490	8.8.8.8	192.168.2.20
Oct 7, 2024 16:48:52.138534069 CEST	53	38490	8.8.8.8	192.168.2.20
Oct 7, 2024 16:48:57.772478104 CEST	58053	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:48:57.772478104 CEST	58053	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:48:57.773161888 CEST	35110	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:48:57.980906963 CEST	53	58053	8.8.8.8	192.168.2.20
Oct 7, 2024 16:48:57.980950117 CEST	53	58053	8.8.8.8	192.168.2.20
Oct 7, 2024 16:48:57.980966091 CEST	53	35110	8.8.8.8	192.168.2.20
Oct 7, 2024 16:49:08.617454052 CEST	37777	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:49:08.617454052 CEST	37777	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:49:08.617665052 CEST	35242	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:49:08.623869896 CEST	53	37777	8.8.8.8	192.168.2.20
Oct 7, 2024 16:49:08.623955965 CEST	53	37777	8.8.8.8	192.168.2.20
Oct 7, 2024 16:49:08.624018908 CEST	53	35242	8.8.8.8	192.168.2.20
Oct 7, 2024 16:49:29.244472980 CEST	49278	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:49:29.244472980 CEST	49278	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:49:29.247081041 CEST	53608	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:49:29.251061916 CEST	53	49278	8.8.8.8	192.168.2.20
Oct 7, 2024 16:49:29.251079082 CEST	53	49278	8.8.8.8	192.168.2.20
Oct 7, 2024 16:49:29.253454924 CEST	53	53608	8.8.8.8	192.168.2.20
Oct 7, 2024 16:50:09.872644901 CEST	52516	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:50:09.872644901 CEST	52516	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:50:09.874391079 CEST	46606	53	192.168.2.20	8.8.8.8
Oct 7, 2024 16:50:09.879740000 CEST	53	52516	8.8.8.8	192.168.2.20
Oct 7, 2024 16:50:09.879762888 CEST	53	52516	8.8.8.8	192.168.2.20
Oct 7, 2024 16:50:09.881066084 CEST	53	46606	8.8.8.8	192.168.2.20

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 16:48:31.287739038 CEST	192.168.2.20	8.8.8.8	0x741f	Standard query (0)	generali.werbeartikel-online-shop.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:31.296006918 CEST	192.168.2.20	8.8.8.8	0x4a74	Standard query (0)	generali.werbeartikel-online-shop.com	28	IN (0x0001)	false
Oct 7, 2024 16:48:37.199139118 CEST	192.168.2.20	8.8.8.8	0xb023	Standard query (0)	generali.werbeartikel-online-shop.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:37.199139118 CEST	192.168.2.20	8.8.8.8	0x5681	Standard query (0)	generali.werbeartikel-online-shop.com	28	IN (0x0001)	false
Oct 7, 2024 16:48:51.659969091 CEST	192.168.2.20	8.8.8.8	0x30ff	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:51.659969091 CEST	192.168.2.20	8.8.8.8	0x75f6	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 7, 2024 16:48:52.130558968 CEST	192.168.2.20	8.8.8.8	0xc644	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:52.130558968 CEST	192.168.2.20	8.8.8.8	0x699f	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 7, 2024 16:48:57.772478104 CEST	192.168.2.20	8.8.8.8	0xa414	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:57.772478104 CEST	192.168.2.20	8.8.8.8	0x1b23	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 7, 2024 16:48:57.773161888 CEST	192.168.2.20	8.8.8.8	0xd218	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:49:08.617454052 CEST	192.168.2.20	8.8.8.8	0x301f	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:49:08.617454052 CEST	192.168.2.20	8.8.8.8	0x1c	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 7, 2024 16:49:08.617665052 CEST	192.168.2.20	8.8.8.8	0xa59f	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:49:29.244472980 CEST	192.168.2.20	8.8.8.8	0x8357	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:49:29.244472980 CEST	192.168.2.20	8.8.8.8	0x42b2	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 7, 2024 16:49:29.247081041 CEST	192.168.2.20	8.8.8.8	0xb9e	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:09.872644901 CEST	192.168.2.20	8.8.8.8	0xbc8	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:09.872644901 CEST	192.168.2.20	8.8.8.8	0x690c	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 7, 2024 16:50:09.874391079 CEST	192.168.2.20	8.8.8.8	0x6003	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 16:48:31.294944048 CEST	8.8.8.8	192.168.2.20	0x741f	No error (0)	generali.werbeartikel-online-shop.com		95.142.78.35	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:32.396327972 CEST	8.8.8.8	192.168.2.20	0xcd9e	No error (0)	d228z91au11ukj.cloudfront.net		13.32.121.112	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:32.396327972 CEST	8.8.8.8	192.168.2.20	0xcd9e	No error (0)	d228z91au11ukj.cloudfront.net		13.32.121.15	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:32.396327972 CEST	8.8.8.8	192.168.2.20	0xcd9e	No error (0)	d228z91au11ukj.cloudfront.net		13.32.121.49	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:32.396327972 CEST	8.8.8.8	192.168.2.20	0xcd9e	No error (0)	d228z91au11ukj.cloudfront.net		13.32.121.85	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:37.220973015 CEST	8.8.8.8	192.168.2.20	0xb023	No error (0)	generali.werbeartikel-online-shop.com		95.142.78.35	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:52.128248930 CEST	8.8.8.8	192.168.2.20	0x30ff	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:52.129475117 CEST	8.8.8.8	192.168.2.20	0x6c85	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:48:52.129488945 CEST	8.8.8.8	192.168.2.20	0xd17d	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:48:52.129488945 CEST	8.8.8.8	192.168.2.20	0xd17d	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:52.138534069 CEST	8.8.8.8	192.168.2.20	0xc644	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:52.955466986 CEST	8.8.8.8	192.168.2.20	0xba54	No error (0)	a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com	a17.rackcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:48:52.955466986 CEST	8.8.8.8	192.168.2.20	0xba54	No error (0)	a17.rackcdn.com	a17.rackcdn.com.mdc.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:48:52.957000017 CEST	8.8.8.8	192.168.2.20	0xb831	No error (0)	a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com	a17.rackcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:48:52.957000017 CEST	8.8.8.8	192.168.2.20	0xb831	No error (0)	a17.rackcdn.com	a17.rackcdn.com.mdc.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:48:57.980906963 CEST	8.8.8.8	192.168.2.20	0xa414	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:57.980966091 CEST	8.8.8.8	192.168.2.20	0xd218	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:49:08.623955965 CEST	8.8.8.8	192.168.2.20	0x301f	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:49:08.624018908 CEST	8.8.8.8	192.168.2.20	0xa59f	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:49:29.251061916 CEST	8.8.8.8	192.168.2.20	0x8357	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:49:29.253454924 CEST	8.8.8.8	192.168.2.20	0xb9e	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:09.879740000 CEST	8.8.8.8	192.168.2.20	0xbc8	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:09.881066084 CEST	8.8.8.8	192.168.2.20	0x6003	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

generali.werbeartikel-online-shop.com

https:

snippets.cdn.mozilla.net

aus5.mozilla.org

push.services.mozilla.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.20	43704	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:32 UTC	349	OUT	GET / HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1
2024-10-07 14:48:32 UTC	469	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:32 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-control-allow-credentials: true Access-control-allow-origin: https://generali.werbeartikel-online-shop.com Cache-control: no-cache, no-store, must-revalidate Cache-Control: max-age=1 Expires: Mon, 07 Oct 2024 14:48:33 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:32 UTC	15915	IN	Data Raw: 33 64 39 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 64 65 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 47 45 4e 45 52 41 4c 49 20 44 65 75 74 73 63 68 6c 61 6e 64 20 57 65 72 62 65 6d 69 74 74 65 6c 2d 53 68 6f 70 3c 2f 74 69 74 6c 65 3e 0a 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 65 6e 65 72 61 6c 69 2e 77 65 72 62 65 61 72 74 69 6b 65 6c 2d 6f 6e 6c 69 6e 65 2d 73 68 6f 70 2e 63 6f 6d 2f 63 6f 73 6d 6f 73 68 Data Ascii: 3d9e<!doctype html><html class="no-js" lang="de"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>GENERALI Deutschland Werbemittel-Shop</title><base href="https://generali.werbeartikel-online-shop.com/cosmosh
2024-10-07 14:48:32 UTC	16384	IN	Data Raw: 6d 6f 2d 63 6f 6c 2d 74 62 2d 70 6f 2d 31 32 20 63 6f 73 6d 6f 2d 63 6f 6c 2d 73 70 2d 31 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 69 73 74 61 6e 63 65 48 6f 6c 64 65 72 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 63 68 65 63 6b 44 73 43 68 65 63 6b 62 6f 78 22 20 76 61 6c 75 65 3d 22 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 73 6d 6f 2d 63 6f 6c 2d 6c 67 2d 31 32 20 63 6f 73 6d 6f 2d 63 6f 6c 2d 74 62 2d 6c 61 2d 31 32 20 63 6f 73 6d 6f 2d 63 6f 6c Data Ascii: mo-col-tb-po-12 cosmo-col-sp-12"> </div> </div> <div class="distanceHolder"></div> <input type="hidden" name="checkDsCheckbox" value="1"> <div class="cosmo-col-lg-12 cosmo-col-tb-la-12 cosmo-col
2024-10-07 14:48:32 UTC	4745	IN	Data Raw: 6a 70 67 22 20 64 61 74 61 2d 63 61 74 65 67 6f 72 79 2d 69 6e 66 6f 74 65 78 74 3d 22 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 65 6e 65 72 61 6c 69 2e 77 65 72 62 65 61 72 74 69 6b 65 6c 2d 6f 6e 6c 69 6e 65 2d 73 68 6f 70 2e 63 6f 6d 2f 47 69 76 65 2d 41 77 61 79 73 2f 53 70 6f 72 74 2d 46 72 65 69 7a 65 69 74 2f 22 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 32 20 63 6f 6c 6f 72 2d 33 22 20 74 69 74 6c 65 3d 22 53 70 6f 72 74 20 26 20 46 72 65 69 7a 65 69 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 61 74 65 67 6f 72 69 65 4e 61 6d 65 22 3e 53 70 6f 72 74 20 26 20 46 72 65 69 7a 65 69 74 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: jpg" data-category-infotext=""> <a href="https://generali.werbeartikel-online-shop.com/Give-Aways/Sport-Freizeit/" class="font-2 color-3" title="Sport & Freizeit"><span class="categorieName">Sport & Freizeit</span></a> </li>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.20	43706	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:33 UTC	379	OUT	GET /cosmoshop/shared/libs/NormalizeCss/normalize.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:33 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:33 GMT Content-Type: text/css Content-Length: 1687 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "697-5feccda8b366c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:33 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:33 UTC	1687	IN	Data Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 62 75 74 74 6f 6e 2c 68 72 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 70 72 6f 67 72 65 73 73 2c 73 75 62 2c 73 75 70 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2c 6c 65 67 65 6e 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 Data Ascii: /! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /button,hr,input{overflow:visible}progress,sub,sup{vertical-align:baseline}[type=checkbox],[type=radio],legend{box-sizing:border-box;padding:0}html{line-height:1.15;-webkit-text-si

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.20	59194	13.32.121.112	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:33 UTC	397	OUT	GET /6/Firefox/66.0.3/20190410113011/Linux_x86_64-gcc3/en-US/release-cck-ubuntu/Linux%204.4.0-116-generic%20(GTK%203.18.9%2Clibpulse%208.0.0)/canonical/1.0/ HTTP/1.1 Host: snippets.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive
2024-10-07 14:48:33 UTC	576	IN	HTTP/1.1 303 See Other Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Cache-Control: public, max-age=86400 Date: Mon, 07 Oct 2024 06:24:07 GMT Location: https://snippets.cdn.mozilla.net/us-west/bundles-pregen/Firefox/en-us/default.json Server: meinheld/1.0.2 X-Backend-Server: oregon/snippets-prod/snippets-prod-6db6b58f67-76fd7 X-Cache: Hit from cloudfront Via: 1.1 06a27d66e25d02ebcfb014b9d194016a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: J6TTsPKWTDrmpEHlOBKz4sI2KRyBzDXK99L-PEZaadrZ9nkkxJzK0g== Age: 30266

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.20	43714	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:33 UTC	389	OUT	GET /cosmoshop/shared/css/shop/frame/style/de/bramble.min.2.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:34 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:33 GMT Content-Type: text/css Content-Length: 1255 Connection: close Last-Modified: Fri, 10 Nov 2023 13:12:58 GMT ETag: "4e7-609cc1446f928" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:33 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:34 UTC	1255	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 2e 62 67 2d 70 61 74 74 65 72 6e 2d 31 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 73 68 61 72 65 64 2f 70 69 78 2f 74 65 6d 70 6c 61 74 65 5f 76 6f 72 6c 61 67 65 2f 62 72 61 6d 62 6c 65 2f 73 68 6f 70 5f 68 65 61 64 65 72 2f 64 65 2f 62 67 2d 70 61 74 74 65 72 6e 2d 31 2e 70 6e 67 27 29 3b 20 7d 2e 62 67 2d 70 61 74 74 65 72 6e 2d 32 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 73 68 61 72 65 64 2f 70 69 78 2f 74 65 6d 70 6c 61 74 65 5f 76 6f 72 6c 61 67 65 2f 62 72 61 6d 62 6c 65 2f 73 68 6f 70 5f 68 65 61 64 65 72 2f 64 65 2f 62 67 2d 70 61 74 74 65 72 6e 2d 32 2e 70 6e 67 Data Ascii: @charset "utf-8";.bg-pattern-1{background: url('../../../../../../shared/pix/template_vorlage/bramble/shop_header/de/bg-pattern-1.png'); }.bg-pattern-2{background: url('../../../../../../shared/pix/template_vorlage/bramble/shop_header/de/bg-pattern-2.png

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.20	43716	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:33 UTC	390	OUT	GET /cosmoshop/default/css/shop/content/layout/bramble.min.2.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:34 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:33 GMT Content-Type: text/css Content-Length: 24328 Connection: close Last-Modified: Fri, 10 Nov 2023 13:12:58 GMT ETag: "5f08-609cc14464d48" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:33 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:34 UTC	16004	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 2e 62 62 5f 65 72 72 6f 72 2c 20 23 62 62 5f 62 65 73 74 61 65 74 69 67 75 6e 67 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 7d 2e 72 65 71 75 65 73 74 42 74 6e 7b 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 2e 66 72 6f 6d 42 6f 74 74 6f 6d 2c 20 2e 62 62 5f 73 75 63 63 65 73 73 2c 20 2e 62 62 5f 65 72 72 6f 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 3b 7d 2e 72 65 71 75 65 73 74 49 6e 70 75 74 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 2e 63 68 61 6e 67 65 5f 6d 61 69 6c 20 2e 6c 65 66 74 63 6f 6c 7b 77 69 64 74 68 3a 20 31 32 30 70 78 3b 7d 20 2e 63 68 61 6e 67 65 5f 6d 61 69 6c 20 2e 65 69 6e 67 61 62 Data Ascii: @charset "utf-8";.bb_error, #bb_bestaetigung{display: none;}.requestBtn{float: right;margin-top: 5px;width: 100%;}.fromBottom, .bb_success, .bb_error{margin-bottom: 8px;}.requestInput{width: 100%;}.change_mail .leftcol{width: 120px;} .change_mail .eingab
2024-10-07 14:48:34 UTC	8324	IN	Data Raw: 63 6c 65 48 65 61 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 20 30 70 78 3b 7d 2e 70 72 6f 64 75 63 74 4c 69 73 74 69 6e 67 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 2e 62 61 6e 6e 65 72 42 6f 78 20 2e 62 61 6e 6e 65 72 20 69 6d 67 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 2e 73 68 69 70 70 69 6e 67 48 65 61 64 65 72 7b 6d 61 72 67 69 6e 3a 20 30 70 78 3b 7d 2e 73 68 69 70 70 69 6e 67 43 6f 73 74 73 52 69 67 68 74 43 6f 6c 75 6d 6e 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 7d 69 6e 70 75 74 2e 7a 61 68 6c 61 72 74 52 61 64 69 6f 2c 20 69 6e 70 75 74 2e 76 65 72 73 61 6e 64 61 72 74 52 61 64 69 6f 7b 77 69 64 74 68 3a 20 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 20 32 70 78 3b 7d 23 77 6b 5f Data Ascii: cleHeading{margin: 0px;}.productListing{overflow: hidden;}.bannerBox .banner img{width: 100%;}.shippingHeader{margin: 0px;}.shippingCostsRightColumn{text-align: right;}input.zahlartRadio, input.versandartRadio{width: auto;position: relative;top: 2px;}#wk_

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.20	43710	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:33 UTC	383	OUT	GET /cosmoshop/shared/template/css/bramble_rootStyles.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:34 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:33 GMT Content-Type: text/css Content-Length: 34194 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:14 GMT ETag: "8592-5feccda5f7354" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:33 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:34 UTC	16004	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0a 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 46 4f 4e 54 53 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 20 43 6f 6e 64 65 6e 73 65 64 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 4f 70 65 6e 20 53 61 6e 73 20 43 Data Ascii: @charset "utf-8";/* CSS Document // --------- FONTS -----------------------------------------------------------------------------*/@font-face { font-family: 'Open Sans Condensed'; font-style: normal; font-weight: 300; src: local('Open Sans C
2024-10-07 14:48:34 UTC	16384	IN	Data Raw: 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 7b 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 75 69 2d 77 69 64 67 65 74 20 7b 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 75 69 2d 77 69 64 67 65 74 2d 6f 76 65 72 6c 61 79 20 7b 62 61 63 6b 67 Data Ascii: t-transform: uppercase !important;padding: 9px 14px !important;}.ui-widget-content {color: #666666 !important;}.ui-widget {color: #666666 !important;font-family: Arial,Helvetica,sans-serif !important;font-size: 1em !important;}.ui-widget-overlay {backg
2024-10-07 14:48:34 UTC	1806	IN	Data Raw: 6c 20 75 6c 20 6c 69 20 61 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 30 3b 7d 0a 20 20 23 63 68 65 63 6b 6f 75 74 4d 65 6e 75 20 3e 20 75 6c 20 3e 20 6c 69 20 7b 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 7d 0a 20 20 23 63 68 65 63 6b 6f 75 74 4d 65 6e 75 20 75 6c 20 75 6c 20 6c 69 20 61 20 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 35 70 78 3b 7d 0a 20 20 23 63 68 65 63 6b 6f 75 74 4d 65 6e 75 20 75 6c 20 75 6c 20 75 6c 20 6c 69 20 61 20 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 35 70 78 3b 7d 0a 20 20 23 63 68 65 63 6b 6f 75 74 4d 65 6e 75 20 75 6c 20 75 6c 20 6c 69 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 7d 0a 20 20 23 63 68 65 63 6b 6f 75 74 4d Data Ascii: l ul li a {width: 100%;border-bottom: 0;} #checkoutMenu > ul > li {float: none;} #checkoutMenu ul ul li a {padding-left: 25px;} #checkoutMenu ul ul ul li a {padding-left: 35px;} #checkoutMenu ul ul li a {color: #ddd;background: none;} #checkoutM

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.20	43718	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:33 UTC	391	OUT	GET /cosmoshop/shared/css/shop/content/style/de/bramble.min.2.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:34 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:34 GMT Content-Type: text/css Content-Length: 870 Connection: close Last-Modified: Fri, 10 Nov 2023 13:12:58 GMT ETag: "366-609cc1446d9e8" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:34 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:34 UTC	870	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 2e 63 68 61 6e 67 65 5f 6d 61 69 6c 20 2e 6c 65 66 74 63 6f 6c 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 7d 2e 6c 61 6e 64 73 63 61 70 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 73 68 61 72 65 64 2f 70 69 78 2f 74 65 6d 70 6c 61 74 65 5f 76 6f 72 6c 61 67 65 2f 62 72 61 6d 62 6c 65 2f 75 6e 64 65 72 5f 63 6f 6e 73 74 72 75 63 74 69 6f 6e 2f 64 65 2f 62 67 2e 70 6e 67 22 29 3b 7d 2e 69 6d 61 67 65 5f 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 7d 2e 69 6d 61 67 65 5f 63 6f 6e 74 61 69 6e 65 72 2e 61 63 74 69 76 65 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 2e 63 6c 6f Data Ascii: @charset "utf-8";.change_mail .leftcol{font-weight: bold;}.landscape{background-image: url("../../../../../../shared/pix/template_vorlage/bramble/under_construction/de/bg.png");}.image_container{display: none;}.image_container.active{display: block;}.clo

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.20	43712	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:33 UTC	388	OUT	GET /cosmoshop/default/css/shop/frame/layout/bramble.min.2.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:34 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:34 GMT Content-Type: text/css Content-Length: 15189 Connection: close Last-Modified: Fri, 10 Nov 2023 13:12:58 GMT ETag: "3b55-609cc14469b68" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:34 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:34 UTC	15189	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 23 77 72 61 70 70 65 72 2c 20 66 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 3b 7d 23 68 65 61 64 65 72 7b 63 6c 65 61 72 3a 20 62 6f 74 68 3b 77 69 64 74 68 3a 20 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d 23 6d 61 69 6e 6e 61 76 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 23 69 6e 66 6f 62 6c 6f 63 6b 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 63 6c 65 61 72 3a 20 62 6f 74 68 3b 7d 23 69 6e 66 6f 62 6c 6f 63 6b 20 3e 20 23 6c 6f 67 6f 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a Data Ascii: @charset "utf-8";#wrapper, footer{margin: 0 auto;max-width: 1200px;width:100%;padding: 0 5px;}#header{clear: both;width: 100%;position: relative;}#mainnav{width: 100%;}#infoblock{width: 100%;clear: both;}#infoblock > #logo{margin-bottom: 3px;margin-left:

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.20	59210	13.32.121.112	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:33 UTC	295	OUT	GET /us-west/bundles-pregen/Firefox/en-us/default.json HTTP/1.1 Host: snippets.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive
2024-10-07 14:48:34 UTC	537	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 3 Connection: close Last-Modified: Wed, 30 Oct 2019 08:26:45 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 07 Oct 2024 14:48:34 GMT Cache-Control: max-age=600 ETag: "8a80554c91d9fca8acb82f023de02f11" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 857b0dca772798c338c78a1be69c955c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: LdIQmcL59tgyKVWnyjg2ymzAAxIaV_GfehZhf2V3MBfqZmKF7Ljs6w== Age: 304
2024-10-07 14:48:34 UTC	3	IN	Data Raw: 7b 7d 0a Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.20	43720	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:34 UTC	386	OUT	GET /cosmoshop/default/template/css/bramble_customDesign.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:34 UTC	352	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:34 GMT Content-Type: text/css Content-Length: 60 Connection: close Last-Modified: Thu, 07 Sep 2023 10:37:34 GMT ETag: "3c-604c272af63be" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:34 GMT LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:34 UTC	60	IN	Data Raw: 2e 63 73 2d 63 68 65 63 6b 6f 75 74 20 23 6c 6f 67 6f 20 69 6d 67 20 7b 6d 61 78 2d 77 69 64 74 68 3a 20 39 33 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 65 6d 3b 7d Data Ascii: .cs-checkout #logo img {max-width: 93px;margin-bottom: 1em;}

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.20	43730	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:34 UTC	374	OUT	GET /cosmoshop/shared/libs/Fontello/fontello.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:35 UTC	381	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:35 GMT Content-Type: text/css Content-Length: 84944 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:19 GMT ETag: "14bd0-5feccdab8af05" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:35 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:35 UTC	16003	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 63 73 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 2f 63 73 2e 65 6f 74 3f 32 39 37 35 39 35 30 37 29 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 2f 63 73 2e 65 6f 74 3f 32 39 37 35 39 35 30 37 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 66 6f 6e 74 2f 63 73 2e 77 6f 66 66 3f 32 39 37 35 39 35 30 37 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 66 6f 6e 74 2f 63 73 2e 74 74 66 3f 32 39 37 35 39 35 30 37 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 66 6f 6e 74 2f 63 73 2e 73 76 67 3f 32 39 37 35 39 35 30 37 23 63 73 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d Data Ascii: @font-face{font-family:cs;src:url(font/cs.eot?29759507);src:url(font/cs.eot?29759507#iefix) format('embedded-opentype'),url(font/cs.woff?29759507) format('woff'),url(font/cs.ttf?29759507) format('truetype'),url(font/cs.svg?29759507#cs) format('svg');font-
2024-10-07 14:48:35 UTC	16384	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 39 35 27 7d 2e 69 63 6f 6e 2d 62 6f 6d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 39 36 27 7d 2e 69 63 6f 6e 2d 73 6f 63 63 65 72 2d 62 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 39 37 27 7d 2e 69 63 6f 6e 2d 74 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 39 38 27 7d 2e 69 63 6f 6e 2d 62 69 6e 6f 63 75 6c 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 39 39 27 7d 2e 69 63 6f 6e 2d 70 6c 75 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 39 61 27 7d 2e 69 63 6f 6e 2d 6e 65 77 73 70 61 70 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 39 62 27 7d 2e 69 63 6f 6e 2d 63 61 6c 63 3a 62 65 66 Data Ascii: ore{content:'\e995'}.icon-bomb:before{content:'\e996'}.icon-soccer-ball:before{content:'\e997'}.icon-tty:before{content:'\e998'}.icon-binoculars:before{content:'\e999'}.icon-plug:before{content:'\e99a'}.icon-newspaper:before{content:'\e99b'}.icon-calc:bef
2024-10-07 14:48:35 UTC	16384	IN	Data Raw: 63 6f 6e 2d 6f 6b 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 62 33 62 27 7d 2e 69 63 6f 6e 2d 6f 6b 2d 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 62 33 63 27 7d 2e 69 63 6f 6e 2d 63 61 6e 63 65 6c 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 62 33 64 27 7d 2e 69 63 6f 6e 2d 63 61 6e 63 65 6c 2d 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 62 33 65 27 7d 2e 69 63 6f 6e 2d 63 61 6e 63 65 6c 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 62 33 66 27 7d 2e 69 63 6f 6e 2d 63 61 6e 63 65 6c 2d 61 6c 74 2d 66 69 6c 6c 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 62 34 30 27 7d 2e 69 63 6f 6e 2d 63 61 6e 63 65 6c 2d 63 Data Ascii: con-ok-outline:before{content:'\eb3b'}.icon-ok-1:before{content:'\eb3c'}.icon-cancel-outline:before{content:'\eb3d'}.icon-cancel-2:before{content:'\eb3e'}.icon-cancel-alt:before{content:'\eb3f'}.icon-cancel-alt-filled:before{content:'\eb40'}.icon-cancel-c
2024-10-07 14:48:35 UTC	16384	IN	Data Raw: 69 63 6f 6e 2d 6c 61 79 65 72 73 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 63 64 36 27 7d 2e 69 63 6f 6e 2d 73 75 6e 2d 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 63 64 37 27 7d 2e 69 63 6f 6e 2d 73 75 6e 2d 69 6e 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 63 64 38 27 7d 2e 69 63 6f 6e 2d 63 6c 6f 75 64 2d 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 63 64 39 27 7d 2e 69 63 6f 6e 2d 72 61 69 6e 2d 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 63 64 61 27 7d 2e 69 63 6f 6e 2d 66 6c 61 73 68 2d 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 63 64 62 27 7d 2e 69 63 6f 6e 2d 6d 6f 6f 6e 2d 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 63 64 63 Data Ascii: icon-layers-alt:before{content:'\ecd6'}.icon-sun-2:before{content:'\ecd7'}.icon-sun-inv:before{content:'\ecd8'}.icon-cloud-3:before{content:'\ecd9'}.icon-rain-1:before{content:'\ecda'}.icon-flash-3:before{content:'\ecdb'}.icon-moon-3:before{content:'\ecdc

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.20	43726	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:34 UTC	383	OUT	GET /cosmoshop/shared/template/css/bramble_responsive.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:35 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:35 GMT Content-Type: text/css Content-Length: 61120 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:14 GMT ETag: "eec0-5feccda610993" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:35 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:35 UTC	16004	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2f 2a 20 43 6f 73 6d 6f 73 68 6f 70 20 47 6d 62 48 20 2d 20 76 31 2e 30 20 2d 20 30 36 2e 31 30 2e 32 30 31 35 20 2a 2f 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: @charset "utf-8";/------------------------------------------------------------------------------------------------------//* Cosmoshop GmbH - v1.0 - 06.10.2015 //--------------------------------------------------------------------------------------
2024-10-07 14:48:35 UTC	16384	IN	Data Raw: 3b 7d 0a 20 20 2e 63 6f 73 6d 6f 2d 72 6f 77 2d 74 62 2d 6c 61 2d 37 35 20 7b 77 69 64 74 68 3a 20 37 36 25 3b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 63 6c 65 61 72 3a 20 62 6f 74 68 3b 7d 0a 20 20 2e 63 6f 73 6d 6f 2d 72 6f 77 2d 74 62 2d 6c 61 2d 35 30 20 7b 77 69 64 74 68 3a 20 35 31 25 3b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 63 6c 65 61 72 3a 20 62 6f 74 68 3b 7d 0a 20 20 2e 63 6f 73 6d 6f 2d 72 6f 77 2d 74 62 2d 6c 61 2d 32 35 20 7b 77 69 64 74 68 3a 20 32 36 25 3b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 63 6c 65 61 72 3a 20 62 6f 74 68 3b 7d 0a 20 20 2e 63 6f 73 6d 6f 2d 72 6f 77 2d 74 62 2d 6c 61 2d 30 20 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 7d 0a 20 20 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: ;} .cosmo-row-tb-la-75 {width: 76%;overflow: hidden;clear: both;} .cosmo-row-tb-la-50 {width: 51%;overflow: hidden;clear: both;} .cosmo-row-tb-la-25 {width: 26%;overflow: hidden;clear: both;} .cosmo-row-tb-la-0 {display: none;} /* --------------
2024-10-07 14:48:35 UTC	16384	IN	Data Raw: 0a 20 20 2e 63 6f 73 6d 6f 2d 63 6f 6c 2d 74 62 2d 70 6f 2d 31 2d 6e 6d 2e 63 6f 73 6d 6f 2d 63 6f 6c 75 6d 6e 73 2d 74 62 2d 70 6f 2d 35 2c 0a 20 20 2e 63 6f 73 6d 6f 2d 63 6f 6c 2d 74 62 2d 70 6f 2d 31 2d 6e 6d 2e 63 6f 73 6d 6f 2d 63 6f 6c 75 6d 6e 73 2d 74 62 2d 70 6f 2d 36 20 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 7d 0a 20 20 0a 20 20 2e 63 6f 73 6d 6f 2d 63 6f 6c 2d 74 62 2d 70 6f 2d 32 20 7b 77 69 64 74 68 3a 20 31 36 2e 37 25 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 25 3b 7d 0a 20 20 2e 63 6f 73 6d 6f 2d 63 6f 6c 2d 74 62 2d 70 6f 2d 32 2e 63 6f 73 6d 6f 2d 63 6f 6c 75 6d 6e 73 2d 74 62 2d 70 6f 2d 32 2c 20 0a 20 20 2e 63 6f 73 6d 6f 2d 63 6f 6c 2d 74 62 2d 70 6f 2d 32 2d 6e 6d 2e 63 6f 73 Data Ascii: .cosmo-col-tb-po-1-nm.cosmo-columns-tb-po-5, .cosmo-col-tb-po-1-nm.cosmo-columns-tb-po-6 {margin-right: 0;float: right;} .cosmo-col-tb-po-2 {width: 16.7%;margin-right: 1%;} .cosmo-col-tb-po-2.cosmo-columns-tb-po-2, .cosmo-col-tb-po-2-nm.cos
2024-10-07 14:48:35 UTC	12348	IN	Data Raw: 74 53 74 65 70 35 20 2e 63 61 72 74 54 61 62 6c 65 42 6f 78 48 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 7d 0a 2f 2a 20 2e 63 61 72 74 54 61 62 6c 65 42 6f 78 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 20 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 7d 20 2a 2f 20 2f 2a 20 41 6e 70 61 73 73 75 6e 67 20 44 72 75 63 6b 6b 6f 73 74 65 6e 6b 61 6c 6b 75 6c 61 74 6f 72 20 2a 2f 0a 20 20 23 62 65 73 74 65 6c 6c 73 63 68 72 69 74 74 5f 31 20 23 67 75 74 73 63 68 65 69 6e 5f 65 69 6e 67 61 62 65 20 7b 70 61 64 64 69 6e 67 3a 20 32 70 78 3b 77 69 64 74 68 3a 20 38 30 25 3b 7d 0a 20 20 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: tStep5 .cartTableBoxHeader{display: none;}/* .cartTableBox:first-of-type {border-width: 1px;} / / Anpassung Druckkostenkalkulator / #bestellschritt_1 #gutschein_eingabe {padding: 2px;width: 80%;} / ------------------------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.20	43728	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:34 UTC	390	OUT	GET /cosmoshop/default/template/css/bramble_customResponsive.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:35 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:35 GMT Content-Type: text/css Content-Length: 18022 Connection: close Last-Modified: Mon, 18 Sep 2023 10:13:06 GMT ETag: "4666-6059f636bd63f" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:35 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:35 UTC	16004	IN	Data Raw: 62 6f 64 79 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 33 33 33 3b 0d 0a 20 20 20 20 2f 2a 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 33 70 78 3b 20 2a 2f 0d 0a 7d 0d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 65 6d 61 69 6c 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 22 5d 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 Data Ascii: body { font-size: 16px; color: #333333; /* line-height: 23px; */}input[type="text"], input[type="email"], input[type="password"], input[type="number"], input[type="radio"], input[type="date"], select, textarea { border: 1px solid #
2024-10-07 14:48:35 UTC	2018	IN	Data Raw: 69 6e 67 3a 31 70 78 3b 7d 0d 0a 2e 61 72 74 69 63 6c 65 50 72 65 76 69 65 77 53 6d 61 6c 6c 20 3e 20 64 69 76 20 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 7d 0d 0a 2e 61 72 74 69 63 6c 65 50 72 65 76 69 65 77 53 6d 61 6c 6c 50 69 63 74 75 72 65 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 66 66 66 3b 7d 0d 0a 2e 61 72 74 69 63 6c 65 50 72 65 76 69 65 77 53 6d 61 6c 6c 44 65 73 63 72 69 70 74 69 6f 6e 42 6f 78 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 7d 0d 0a 2e 61 72 74 69 63 6c 65 50 72 65 76 69 65 77 53 6d 61 6c 6c 44 65 73 63 72 69 70 74 69 6f 6e 42 6f 78 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 72 67 62 28 31 39 34 2c 32 37 2c 32 33 29 3b 7d 0d 0a Data Ascii: ing:1px;}.articlePreviewSmall > div {padding-left: 10px;padding-right: 10px;}.articlePreviewSmallPicturebox{background:#ffffff;}.articlePreviewSmallDescriptionBox{margin-top:10px;}.articlePreviewSmallDescriptionBox a:hover{color:rgb(194,27,23);}

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.20	43734	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:35 UTC	358	OUT	GET /cosmoshop/shared/libs/jQuery/jquery.min.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:35 UTC	395	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:35 GMT Content-Type: application/javascript Content-Length: 86596 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:19 GMT ETag: "15244-5feccdab19a86" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:35 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:35 UTC	15989	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 30 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.2.0 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery
2024-10-07 14:48:35 UTC	16384	IN	Data Raw: 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 Data Ascii: w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)while(m=++n&&m&&
2024-10-07 14:48:35 UTC	16384	IN	Data Raw: 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 61 6c 6c 28 61 5b 68 5d 2c 68 2c 62 28 61 Data Ascii: ,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.call(a[h],h,b(a
2024-10-07 14:48:35 UTC	16384	IN	Data Raw: 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 54 28 74 68 69 73 2c 66 75 6e Data Ascii: r(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a){return T(this,fun
2024-10-07 14:48:35 UTC	16384	IN	Data Raw: 62 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 66 69 6e 64 2e 61 74 74 72 28 61 2c 22 74 61 62 69 6e 64 65 78 22 29 3b 72 65 74 75 72 6e 20 62 3f 70 61 72 73 65 49 6e 74 28 62 2c 31 30 29 3a 6e 62 2e 74 65 73 74 28 61 2e 6e 6f 64 65 4e 61 6d 65 29 7c 7c 6f 62 2e 74 65 73 74 28 61 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 61 2e 68 72 65 66 3f 30 3a 2d 31 7d 7d 7d 2c 70 72 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 63 6c 61 73 73 4e 61 6d 65 22 7d 7d 29 2c 6f 2e 6f 70 74 53 65 6c 65 63 74 65 64 7c 7c 28 72 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: b]},propHooks:{tabIndex:{get:function(a){var b=r.find.attr(a,"tabindex");return b?parseInt(b,10):nb.test(a.nodeName)\|\|ob.test(a.nodeName)&&a.href?0:-1}}},propFix:{"for":"htmlFor","class":"className"}}),o.optSelected\|\|(r.propHooks.selected={get:function(a)
2024-10-07 14:48:35 UTC	5071	IN	Data Raw: 28 62 5b 30 5d 29 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 26 26 63 28 29 7d 7d 7d 7d 29 3b 76 61 72 20 54 62 3d 5b 5d 2c 55 62 3d 2f 28 3d 29 5c 3f 28 3f 3d 26 7c 24 29 7c 5c 3f 5c 3f 2f 3b 72 2e 61 6a 61 78 53 65 74 75 70 28 7b 6a 73 6f 6e 70 3a 22 63 61 6c 6c 62 61 63 6b 22 2c 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 54 62 2e 70 6f 70 28 29 7c 7c 72 2e 65 78 70 61 6e 64 6f 2b 22 5f 22 2b 75 62 2b 2b 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 61 5d 3d 21 30 2c 61 7d 7d 29 2c 72 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 22 6a 73 6f 6e 20 6a 73 6f 6e 70 22 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 76 61 72 20 65 2c 66 2c 67 2c 68 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 Data Ascii: (b[0])},abort:function(){c&&c()}}}});var Tb=[],Ub=/(=)\?(?=&\|$)\|\?\?/;r.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var a=Tb.pop()\|\|r.expando+"_"+ub++;return this[a]=!0,a}}),r.ajaxPrefilter("json jsonp",function(b,c,d){var e,f,g,h=b.jsonp!==!1&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.20	43736	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:35 UTC	366	OUT	GET /cosmoshop/shared/libs/jQuery/jquery-migrate.min.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:35 UTC	393	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:35 GMT Content-Type: application/javascript Content-Length: 6978 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:19 GMT ETag: "1b42-5feccdab08146" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:35 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:35 UTC	6978	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 30 2e 30 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 63 28 63 29 7b 76 61 72 20 64 3d 62 2e 63 6f 6e 73 6f 6c 65 3b 65 5b 63 5d 7c 7c 28 65 5b 63 5d 3d 21 30 2c 61 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 70 75 73 68 Data Ascii: /! jQuery Migrate v3.0.0 \| (c) jQuery Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(a,b){"use strict";function c(c){var d=b.console;e[c]\|\|(e[c]=!0,a.migrateWarnings.push

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.20	43732	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:35 UTC	384	OUT	GET /cosmoshop/shared/libs/Fontello/fontello-animation.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:35 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:35 GMT Content-Type: text/css Content-Length: 1857 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:19 GMT ETag: "741-5feccdab91c65" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:35 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:35 UTC	1857	IN	Data Raw: 2f 2a 0a 20 20 20 41 6e 69 6d 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 2c 20 66 6f 72 20 73 70 69 6e 6e 65 72 73 0a 2a 2f 0a 2e 61 6e 69 6d 61 74 65 2d 73 70 69 6e 20 7b 0a 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 32 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 0a 20 20 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 32 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 32 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 32 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 40 2d 6d Data Ascii: /* Animation example, for spinners*/.animate-spin { -moz-animation: spin 2s infinite linear; -o-animation: spin 2s infinite linear; -webkit-animation: spin 2s infinite linear; animation: spin 2s infinite linear; display: inline-block;}@-m

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.20	43738	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:36 UTC	379	OUT	GET /cosmoshop/shared/libs/jQueryUI/jquery-ui.min.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:36 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:36 GMT Content-Type: text/css Content-Length: 31315 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:19 GMT ETag: "7a53-5feccdaac89a7" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:36 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:36 UTC	16004	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 37 2d 30 32 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 64 72 61 67 67 61 62 6c 65 2e 63 73 73 2c 20 63 6f 72 65 2e 63 73 73 2c 20 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 2c 20 73 65 6c 65 63 74 61 62 6c 65 2e 63 73 73 2c 20 73 6f 72 74 61 62 6c 65 2e 63 73 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 6d 65 6e 75 2e 63 73 73 2c 20 62 75 74 74 6f 6e 2e 63 73 73 2c 20 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2e 63 73 73 2c 20 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2e 63 73 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 64 69 61 6c 6f 67 Data Ascii: /! jQuery UI - v1.12.1 - 2017-02-14 http://jqueryui.com* Includes: draggable.css, core.css, resizable.css, selectable.css, sortable.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog
2024-10-07 14:48:36 UTC	15311	IN	Data Raw: 6e 2d 6c 65 66 74 3a 2e 34 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 65 6d 7d 2e 75 69 2d 73 70 69 6e 6e 65 72 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 2e 36 65 6d 3b 68 65 69 67 68 74 3a 35 30 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 35 65 6d 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 72 69 67 68 74 3a 30 7d 2e 75 69 2d 73 70 69 6e 6e 65 72 20 61 2e 75 69 2d 73 70 69 6e 6e 65 72 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d Data Ascii: n-left:.4em;margin-right:2em}.ui-spinner-button{width:1.6em;height:50%;font-size:.5em;padding:0;margin:0;text-align:center;position:absolute;cursor:default;display:block;overflow:hidden;right:0}.ui-spinner a.ui-spinner-button{border-top-style:none;border-

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.20	43744	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:36 UTC	385	OUT	GET /cosmoshop/shared/libs/jQueryUI/jquery-ui.theme.min.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:36 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:36 GMT Content-Type: text/css Content-Length: 14235 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:19 GMT ETag: "379b-5feccdab0cf66" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:36 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:36 UTC	14235	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 37 2d 30 32 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 0a 2e 75 69 2d 77 69 64 67 65 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 65 6d 7d 2e 75 69 2d 77 69 64 67 65 74 20 2e 75 69 2d 77 69 64 67 65 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 75 69 2d 77 69 64 67 65 74 20 69 6e 70 75 74 2c 2e 75 69 2d 77 69 64 67 Data Ascii: /! jQuery UI - v1.12.1 - 2017-02-14 http://jqueryui.com* Copyright jQuery Foundation and other contributors; Licensed MIT */.ui-widget{font-family:Verdana,Arial,sans-serif;font-size:1.1em}.ui-widget .ui-widget{font-size:1em}.ui-widget input,.ui-widg

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.20	43740	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:36 UTC	363	OUT	GET /cosmoshop/shared/libs/jQueryUI/jquery-ui.min.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:36 UTC	396	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:36 GMT Content-Type: application/javascript Content-Length: 253668 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:19 GMT ETag: "3dee4-5feccdab08146" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:36 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:36 UTC	15988	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 37 2d 30 32 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6a 71 75 65 72 79 2d 31 2d 37 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 72 61 Data Ascii: /! jQuery UI - v1.12.1 - 2017-02-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-1-7.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/dra
2024-10-07 14:48:36 UTC	16384	IN	Data Raw: 67 2e 6c 65 66 74 2c 74 6f 70 3a 67 2e 74 6f 70 2c 77 69 64 74 68 3a 70 2c 68 65 69 67 68 74 3a 66 7d 2c 65 6c 65 6d 65 6e 74 3a 7b 65 6c 65 6d 65 6e 74 3a 6c 2c 6c 65 66 74 3a 44 2e 6c 65 66 74 2c 74 6f 70 3a 44 2e 74 6f 70 2c 77 69 64 74 68 3a 68 2c 68 65 69 67 68 74 3a 63 7d 2c 68 6f 72 69 7a 6f 6e 74 61 6c 3a 30 3e 69 3f 22 6c 65 66 74 22 3a 65 3e 30 3f 22 72 69 67 68 74 22 3a 22 63 65 6e 74 65 72 22 2c 76 65 72 74 69 63 61 6c 3a 30 3e 72 3f 22 74 6f 70 22 3a 73 3e 30 3f 22 62 6f 74 74 6f 6d 22 3a 22 6d 69 64 64 6c 65 22 7d 3b 68 3e 70 26 26 70 3e 61 28 65 2b 69 29 26 26 28 75 2e 68 6f 72 69 7a 6f 6e 74 61 6c 3d 22 63 65 6e 74 65 72 22 29 2c 63 3e 66 26 26 66 3e 61 28 73 2b 72 29 26 26 28 75 2e 76 65 72 74 69 63 61 6c 3d 22 6d 69 64 64 6c 65 22 29 2c Data Ascii: g.left,top:g.top,width:p,height:f},element:{element:l,left:D.left,top:D.top,width:h,height:c},horizontal:0>i?"left":e>0?"right":"center",vertical:0>r?"top":s>0?"bottom":"middle"};h>p&&p>a(e+i)&&(u.horizontal="center"),c>f&&f>a(s+r)&&(u.vertical="middle"),
2024-10-07 14:48:36 UTC	16384	IN	Data Raw: 66 74 3a 74 2e 6c 65 66 74 2d 28 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 68 65 6c 70 65 72 2e 63 73 73 28 22 6c 65 66 74 22 29 2c 31 30 29 7c 7c 30 29 2b 28 65 3f 30 3a 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 29 7d 7d 2c 5f 63 61 63 68 65 4d 61 72 67 69 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6d 61 72 67 69 6e 73 3d 7b 6c 65 66 74 3a 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 6d 61 72 67 69 6e 4c 65 66 74 22 29 2c 31 30 29 7c 7c 30 2c 74 6f 70 3a 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 6d 61 72 67 69 6e 54 6f 70 22 29 2c 31 30 29 7c 7c 30 2c 72 69 67 68 74 3a 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 65 6c 65 Data Ascii: ft:t.left-(parseInt(this.helper.css("left"),10)\|\|0)+(e?0:this.scrollParent.scrollLeft())}},_cacheMargins:function(){this.margins={left:parseInt(this.element.css("marginLeft"),10)\|\|0,top:parseInt(this.element.css("marginTop"),10)\|\|0,right:parseInt(this.ele
2024-10-07 14:48:36 UTC	16384	IN	Data Raw: 73 7c 7c 74 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 2e 70 72 65 70 61 72 65 4f 66 66 73 65 74 73 28 65 2c 69 29 7d 29 7d 2c 64 72 61 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 65 2e 6f 70 74 69 6f 6e 73 2e 72 65 66 72 65 73 68 50 6f 73 69 74 69 6f 6e 73 26 26 74 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 2e 70 72 65 70 61 72 65 4f 66 66 73 65 74 73 28 65 2c 69 29 2c 74 2e 65 61 63 68 28 74 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 2e 64 72 6f 70 70 61 62 6c 65 73 5b 65 2e 6f 70 74 69 6f 6e 73 2e 73 63 6f 70 65 5d 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 26 26 21 74 68 69 73 2e 67 72 65 65 64 79 43 68 69 6c 64 26 26 74 68 69 73 2e 76 69 73 69 62 6c 65 29 7b 76 61 72 20 73 2c 6e Data Ascii: s\|\|t.ui.ddmanager.prepareOffsets(e,i)})},drag:function(e,i){e.options.refreshPositions&&t.ui.ddmanager.prepareOffsets(e,i),t.each(t.ui.ddmanager.droppables[e.options.scope]\|\|[],function(){if(!this.options.disabled&&!this.greedyChild&&this.visible){var s,n
2024-10-07 14:48:36 UTC	16384	IN	Data Raw: 66 73 65 74 2e 74 6f 70 2d 6c 2e 74 6f 70 29 29 2c 69 2b 61 2e 73 69 7a 65 2e 77 69 64 74 68 3e 3d 61 2e 70 61 72 65 6e 74 44 61 74 61 2e 77 69 64 74 68 26 26 28 61 2e 73 69 7a 65 2e 77 69 64 74 68 3d 61 2e 70 61 72 65 6e 74 44 61 74 61 2e 77 69 64 74 68 2d 69 2c 63 26 26 28 61 2e 73 69 7a 65 2e 68 65 69 67 68 74 3d 61 2e 73 69 7a 65 2e 77 69 64 74 68 2f 61 2e 61 73 70 65 63 74 52 61 74 69 6f 2c 70 3d 21 31 29 29 2c 73 2b 61 2e 73 69 7a 65 2e 68 65 69 67 68 74 3e 3d 61 2e 70 61 72 65 6e 74 44 61 74 61 2e 68 65 69 67 68 74 26 26 28 61 2e 73 69 7a 65 2e 68 65 69 67 68 74 3d 61 2e 70 61 72 65 6e 74 44 61 74 61 2e 68 65 69 67 68 74 2d 73 2c 63 26 26 28 61 2e 73 69 7a 65 2e 77 69 64 74 68 3d 61 2e 73 69 7a 65 2e 68 65 69 67 68 74 2a 61 2e 61 73 70 65 63 74 52 Data Ascii: fset.top-l.top)),i+a.size.width>=a.parentData.width&&(a.size.width=a.parentData.width-i,c&&(a.size.height=a.size.width/a.aspectRatio,p=!1)),s+a.size.height>=a.parentData.height&&(a.size.height=a.parentData.height-s,c&&(a.size.width=a.size.height*a.aspectR
2024-10-07 14:48:36 UTC	16384	IN	Data Raw: 22 3a 22 68 65 69 67 68 74 22 5d 3e 74 5b 74 68 69 73 2e 66 6c 6f 61 74 69 6e 67 3f 22 77 69 64 74 68 22 3a 22 68 65 69 67 68 74 22 5d 3f 70 3a 65 2b 74 68 69 73 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 77 69 64 74 68 2f 32 3e 6f 26 26 61 3e 69 2d 74 68 69 73 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 77 69 64 74 68 2f 32 26 26 73 2b 74 68 69 73 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 68 65 69 67 68 74 2f 32 3e 72 26 26 6c 3e 6e 2d 74 68 69 73 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 68 65 69 67 68 74 2f 32 7d 2c 5f 69 6e 74 65 72 73 65 63 74 73 57 69 74 68 50 6f 69 6e 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 73 3d 22 78 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f Data Ascii: ":"height"]>t[this.floating?"width":"height"]?p:e+this.helperProportions.width/2>o&&a>i-this.helperProportions.width/2&&s+this.helperProportions.height/2>r&&l>n-this.helperProportions.height/2},_intersectsWithPointer:function(t){var e,i,s="x"===this.optio
2024-10-07 14:48:37 UTC	16384	IN	Data Raw: 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3b 74 68 69 73 2e 70 72 65 76 53 68 6f 77 3d 74 68 69 73 2e 70 72 65 76 48 69 64 65 3d 74 28 29 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 22 75 69 2d 61 63 63 6f 72 64 69 6f 6e 22 2c 22 75 69 2d 77 69 64 67 65 74 20 75 69 2d 68 65 6c 70 65 72 2d 72 65 73 65 74 22 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 72 6f 6c 65 22 2c 22 74 61 62 6c 69 73 74 22 29 2c 65 2e 63 6f 6c 6c 61 70 73 69 62 6c 65 7c 7c 65 2e 61 63 74 69 76 65 21 3d 3d 21 31 26 26 6e 75 6c 6c 21 3d 65 2e 61 63 74 69 76 65 7c 7c 28 65 2e 61 63 74 69 76 65 3d 30 29 2c 74 68 69 73 2e 5f 70 72 6f 63 65 73 73 50 61 6e 65 6c 73 28 29 2c 30 3e 65 2e 61 63 74 69 76 65 Data Ascii: create:function(){var e=this.options;this.prevShow=this.prevHide=t(),this._addClass("ui-accordion","ui-widget ui-helper-reset"),this.element.attr("role","tablist"),e.collapsible\|\|e.active!==!1&&null!=e.active\|\|(e.active=0),this._processPanels(),0>e.active
2024-10-07 14:48:37 UTC	16384	IN	Data Raw: 74 68 69 73 29 2c 69 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2d 73 2b 6e 3e 30 7d 29 2c 74 68 69 73 2e 66 6f 63 75 73 28 65 2c 69 29 29 3a 74 68 69 73 2e 66 6f 63 75 73 28 65 2c 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 2e 66 69 6e 64 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 74 65 6d 73 29 2e 66 69 72 73 74 28 29 29 29 2c 76 6f 69 64 20 30 29 3a 28 74 68 69 73 2e 6e 65 78 74 28 65 29 2c 76 6f 69 64 20 30 29 7d 2c 5f 68 61 73 53 63 72 6f 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 3c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 70 72 6f 70 28 22 73 63 72 6f 6c 6c 48 65 69 67 68 74 22 29 7d 2c 73 65 6c 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 Data Ascii: this),i.offset().top-s+n>0}),this.focus(e,i)):this.focus(e,this.activeMenu.find(this.options.items).first())),void 0):(this.next(e),void 0)},_hasScroll:function(){return this.element.outerHeight()<this.element.prop("scrollHeight")},select:function(e){this
2024-10-07 14:48:37 UTC	16384	IN	Data Raw: 6b 22 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 69 63 6f 6e 2c 6e 75 6c 6c 2c 65 3f 22 75 69 2d 69 63 6f 6e 2d 62 6c 61 6e 6b 22 3a 22 75 69 2d 69 63 6f 6e 2d 63 68 65 63 6b 22 29 29 3a 69 2b 3d 22 75 69 2d 69 63 6f 6e 2d 62 6c 61 6e 6b 22 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 69 63 6f 6e 2c 22 75 69 2d 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2d 69 63 6f 6e 22 2c 69 29 2c 65 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 69 63 6f 6e 2c 6e 75 6c 6c 2c 22 75 69 2d 69 63 6f 6e 2d 63 68 65 63 6b 20 75 69 2d 73 74 61 74 65 2d 63 68 65 63 6b 65 64 22 29 2c 74 68 69 73 2e 69 63 6f 6e 2e 70 72 65 70 65 6e 64 54 6f 28 74 68 69 73 2e 6c 61 62 65 6c 29 2e 61 66 74 65 72 28 74 68 69 73 Data Ascii: k",this._removeClass(this.icon,null,e?"ui-icon-blank":"ui-icon-check")):i+="ui-icon-blank",this._addClass(this.icon,"ui-checkboxradio-icon",i),e\|\|this._removeClass(this.icon,null,"ui-icon-check ui-state-checked"),this.icon.prependTo(this.label).after(this
2024-10-07 14:48:37 UTC	16384	IN	Data Raw: 29 2c 74 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 69 6e 44 69 61 6c 6f 67 26 26 28 65 2e 76 61 6c 75 65 3d 22 22 29 2c 74 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 70 6f 73 7c 7c 28 74 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 70 6f 73 3d 74 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 66 69 6e 64 50 6f 73 28 65 29 2c 74 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 70 6f 73 5b 31 5d 2b 3d 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 2c 72 3d 21 31 2c 74 28 65 29 2e 70 61 72 65 6e 74 73 28 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7c 3d 22 66 69 78 65 64 22 3d 3d 3d 74 28 74 68 69 73 29 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 2c 21 72 7d 29 2c 6c 3d 7b 6c 65 66 74 3a 74 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 70 6f 73 5b 30 5d 2c 74 Data Ascii: ),t.datepicker._inDialog&&(e.value=""),t.datepicker._pos\|\|(t.datepicker._pos=t.datepicker._findPos(e),t.datepicker._pos[1]+=e.offsetHeight),r=!1,t(e).parents().each(function(){return r\|="fixed"===t(this).css("position"),!r}),l={left:t.datepicker._pos[0],t

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.20	43742	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:36 UTC	389	OUT	GET /cosmoshop/shared/libs/jQueryUI/jquery-ui.structure.min.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:36 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:36 GMT Content-Type: text/css Content-Length: 15548 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:19 GMT ETag: "3cbc-5feccdab0cf66" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:36 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:36 UTC	15548	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 37 2d 30 32 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 0a 2e 75 69 2d 64 72 61 67 67 61 62 6c 65 2d 68 61 6e 64 6c 65 7b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 7b 62 6f 72 64 Data Ascii: /! jQuery UI - v1.12.1 - 2017-02-14 http://jqueryui.com* Copyright jQuery Foundation and other contributors; Licensed MIT */.ui-draggable-handle{-ms-touch-action:none;touch-action:none}.ui-helper-hidden{display:none}.ui-helper-hidden-accessible{bord

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.20	43746	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:36 UTC	360	OUT	GET /cosmoshop/shared/libs/Cosmoshop/Cosmoshop.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:36 UTC	394	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:36 GMT Content-Type: application/javascript Content-Length: 42626 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "a682-5feccda8bd2ac" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:36 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:36 UTC	15990	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 2f 2a 2a 0a 20 2a 20 54 68 65 20 63 6f 72 65 20 6d 6f 64 75 6c 65 20 6f 66 20 74 68 69 73 20 66 72 61 6d 65 77 6f 72 6b 20 63 6f 6e 74 61 69 6e 73 20 63 6c 61 73 73 65 73 20 61 6e 64 20 6d 65 74 68 6f 64 73 20 74 68 61 74 20 61 72 65 20 67 6c 6f 62 61 6c 6c 79 20 76 61 6c 69 64 2e 20 54 68 65 79 20 61 62 73 74 72 61 63 74 20 6f 6e 6c 79 20 62 61 73 69 63 20 6c 6f 67 69 63 2e 0a 20 2a 20 44 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 20 61 72 65 61 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2c 20 64 69 66 66 65 72 65 6e 74 20 6e 61 6d 65 73 70 61 63 65 73 20 61 72 65 20 70 72 6f 76 69 64 65 64 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 0a 20 2a 20 54 68 69 73 20 66 72 61 Data Ascii: 'use strict';/** * The core module of this framework contains classes and methods that are globally valid. They abstract only basic logic. * Depending on the area of application, different namespaces are provided for specific applications. * This fra
2024-10-07 14:48:36 UTC	16384	IN	Data Raw: 6c 65 20 65 78 74 65 6e 73 69 6f 6e 21 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 2b 3d 20 27 20 66 69 6c 65 3a 20 27 20 2b 20 66 69 6c 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 6d 65 73 73 61 67 65 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 6e 65 77 4e 6f 64 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 66 69 6c 65 2d 74 79 70 65 27 2c 20 74 79 70 65 29 3b 0a 20 20 20 20 6e 65 77 4e 6f 64 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 69 64 27 2c 20 72 65 71 75 69 72 65 64 29 3b 0a 20 20 20 20 0a 20 20 20 20 6c 65 74 20 6c 6f 61 64 69 6e 67 45 76 65 6e 74 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 Data Ascii: le extension!'; message+= ' file: ' + file; throw new Error(message); } newNode.setAttribute('data-file-type', type); newNode.setAttribute('data-id', required); let loadingEventHandler = function(event) {
2024-10-07 14:48:36 UTC	10252	IN	Data Raw: 29 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 75 65 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 54 68 69 73 20 6d 65 74 68 6f 64 20 74 72 69 65 73 20 74 6f 20 74 72 61 6e 73 66 6f 72 6d 20 61 20 76 61 6c 75 65 20 72 65 63 75 72 73 69 76 65 6c 79 20 69 6e 74 6f 20 61 6e 20 6f 70 74 69 6d 61 6c 20 64 61 74 61 20 74 79 70 65 0a 20 2a 20 0a 20 2a 20 40 70 61 72 61 6d 20 20 7b 6d 69 78 65 64 7d 20 76 61 6c 75 65 20 2d 20 54 68 69 73 20 61 72 67 75 6d 65 6e 74 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 73 74 72 69 6e 67 20 74 6f 20 62 65 20 63 6f 6e 76 65 72 74 65 64 20 74 6f 20 61 6e 20 6f 70 74 69 6d 61 6c 20 64 61 74 61 20 74 79 70 65 0a 20 2a 20 40 72 65 74 75 72 6e 20 7b 6d 69 78 65 64 7d 20 54 68 65 20 72 65 74 75 72 6e 20 76 61 6c 75 Data Ascii: )); } return value;}/** * This method tries to transform a value recursively into an optimal data type * * @param {mixed} value - This argument contains the string to be converted to an optimal data type * @return {mixed} The return valu

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.20	43748	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:36 UTC	386	OUT	GET /cosmoshop/shared/libs/jQuerySlickCarousel/css/slick.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:36 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:36 GMT Content-Type: text/css Content-Length: 1722 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:19 GMT ETag: "6ba-5feccdab95ae5" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:36 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:36 UTC	1722	IN	Data Raw: 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 0a 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 73 65 72 2d 73 65 6c Data Ascii: /* Slider */.slick-slider{ position: relative; display: block; -moz-box-sizing: border-box; box-sizing: border-box; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none; user-sel

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.20	43750	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:37 UTC	392	OUT	GET /cosmoshop/shared/libs/jQuerySlickCarousel/css/slick-theme.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:37 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:37 GMT Content-Type: text/css Content-Length: 2253 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:19 GMT ETag: "8cd-5feccdab95ae5" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:37 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:37 UTC	2253	IN	Data Raw: 40 63 68 61 72 73 65 74 20 27 55 54 46 2d 38 27 3b 0a 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 2e 73 6c 69 63 6b 2d 6c 69 73 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 20 75 72 6c 28 27 2e 2f 61 6a 61 78 2d 6c 6f 61 64 65 72 2e 67 69 66 27 29 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 0a 2f 2a 20 49 63 6f 6e 73 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 73 6c 69 63 6b 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 73 72 63 3a 20 75 72 6c 28 27 2e 2f 66 6f 6e 74 73 2f 73 6c 69 63 6b 2e 65 6f 74 27 29 3b 0a 73 72 63 3a 20 75 72 6c 28 27 2e 2f 66 6f Data Ascii: @charset 'UTF-8';/* Slider /.slick-loading .slick-list{background: #fff url('./ajax-loader.gif') center center no-repeat;}/ Icons */@font-face{font-family: 'slick';font-weight: normal;font-style: normal;src: url('./fonts/slick.eot');src: url('./fo

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.20	43754	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:37 UTC	361	OUT	GET /cosmoshop/shared/libs/FormLib/shop_formlib.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:37 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:37 GMT Content-Type: application/javascript Content-Length: 1995 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:20 GMT ETag: "7cb-5feccdac21543" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:37 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:37 UTC	1995	IN	Data Raw: 2f 2a 0d 0a 46 6f 72 6d 75 6c 61 72 2d 46 65 6c 64 66 75 6e 63 74 69 6f 6e 73 0d 0a 32 30 30 34 2d 30 38 2d 32 34 0d 0a 44 69 65 74 65 72 20 53 69 65 62 65 63 6b 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 34 20 5a 61 75 6e 7a 20 50 75 62 6c 69 73 68 69 6e 67 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0d 0a 2a 2f 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 4c 69 62 5f 67 65 74 4f 70 74 69 6f 6e 48 61 73 68 46 72 6f 6d 41 72 72 61 79 28 6f 70 74 69 6f 6e 5f 61 72 72 61 79 29 7b 0d 0a 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 5f 68 61 73 68 20 3d 20 7b 7d 3b 0d 0a 20 20 20 20 76 61 72 20 69 3b 0d 0a 20 20 20 20 66 6f 72 28 69 3d 30 3b 69 3c 6f 70 74 69 6f 6e 5f 61 72 72 61 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b Data Ascii: /Formular-Feldfunctions2004-08-24Dieter SiebeckCopyright (c) 2004 Zaunz Publishing. All Rights Reserved./function formLib_getOptionHashFromArray(option_array){ var option_hash = {}; var i; for(i=0;i<option_array.length;i++){

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.20	43752	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:37 UTC	360	OUT	GET /cosmoshop/shared/libs/modernizr/modernizr.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:38 UTC	394	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:37 GMT Content-Type: application/javascript Content-Length: 11303 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:19 GMT ETag: "2c27-5feccdab80325" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:37 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:38 UTC	11303	IN	Data Raw: 2f 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 32 2e 38 2e 33 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 26 20 42 53 44 0a 20 2a 20 42 75 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 23 2d 66 6f 6e 74 66 61 63 65 2d 62 61 63 6b 67 72 6f 75 6e 64 73 69 7a 65 2d 62 6f 72 64 65 72 72 61 64 69 75 73 2d 62 6f 78 73 68 61 64 6f 77 2d 6f 70 61 63 69 74 79 2d 72 67 62 61 2d 74 65 78 74 73 68 61 64 6f 77 2d 63 73 73 61 6e 69 6d 61 74 69 6f 6e 73 2d 67 65 6e 65 72 61 74 65 64 63 6f 6e 74 65 6e 74 2d 63 73 73 67 72 61 64 69 65 6e 74 73 2d 63 73 73 74 72 61 6e 73 69 74 69 6f 6e 73 2d 69 6e 70 75 74 2d 69 6e 70 75 74 74 79 70 65 73 2d 73 68 69 76 2d 6d 71 2d 74 65 73 74 73 74 79 6c 65 73 2d 74 Data Ascii: /* Modernizr 2.8.3 (Custom Build) \| MIT & BSD * Build: http://modernizr.com/download/#-fontface-backgroundsize-borderradius-boxshadow-opacity-rgba-textshadow-cssanimations-generatedcontent-cssgradients-csstransitions-input-inputtypes-shiv-mq-teststyles-t

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.20	43756	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:37 UTC	367	OUT	GET /cosmoshop/shared/libs/jQueryCookie/jquery.cookie.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:38 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:37 GMT Content-Type: application/javascript Content-Length: 3937 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:20 GMT ETag: "f61-5feccdac253c3" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:37 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:38 UTC	3937	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 6f 6f 6b 69 65 20 70 6c 75 67 69 6e 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 36 20 4b 6c 61 75 73 20 48 61 72 74 6c 20 28 73 74 69 6c 62 75 65 72 6f 2e 64 65 29 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 3a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 67 70 6c 2e 68 74 6d 6c 0a 20 2a 0a 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 20 61 20 63 6f 6f 6b 69 65 20 77 69 74 68 20 74 68 65 Data Ascii: /** * Cookie plugin * * Copyright (c) 2006 Klaus Hartl (stilbuero.de) * Dual licensed under the MIT and GPL licenses: * http://www.opensource.org/licenses/mit-license.php * http://www.gnu.org/licenses/gpl.html * //* * Create a cookie with the

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.20	43758	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:37 UTC	369	OUT	GET /cosmoshop/shared/libs/jQuerySlickCarousel/js/slick.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:38 UTC	394	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:38 GMT Content-Type: application/javascript Content-Length: 65171 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:20 GMT ETag: "fe93-5feccdabbaca5" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:38 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:38 UTC	15990	IN	Data Raw: 2f 2a 0a 20 20 20 20 20 5f 20 5f 20 20 20 20 20 20 5f 20 20 20 20 20 20 20 5f 0a 20 5f 5f 5f 7c 20 28 5f 29 20 5f 5f 5f 7c 20 7c 20 5f 5f 20 20 28 5f 29 5f 5f 5f 0a 2f 20 5f 5f 7c 20 7c 20 7c 2f 20 5f 5f 7c 20 7c 2f 20 2f 20 20 7c 20 2f 20 5f 5f 7c 0a 5c 5f 5f 20 5c 20 7c 20 7c 20 28 5f 5f 7c 20 20 20 3c 20 5f 20 7c 20 5c 5f 5f 20 5c 0a 7c 5f 5f 5f 2f 5f 7c 5f 7c 5c 5f 5f 5f 7c 5f 7c 5c 5f 28 5f 29 2f 20 7c 5f 5f 5f 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 5f 5f 2f 0a 0a 20 56 65 72 73 69 6f 6e 3a 20 31 2e 34 2e 31 0a 20 20 41 75 74 68 6f 72 3a 20 4b 65 6e 20 57 68 65 65 6c 65 72 0a 20 57 65 62 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 6b 65 6e 77 68 65 65 6c 65 72 2e 67 69 74 68 75 62 2e 69 6f 0a 20 20 20 20 44 6f 63 73 3a 20 68 74 Data Ascii: /* _ _ _ _ ___\| (_) ___\| \| __ (_)___/ __\| \| \|/ __\| \|/ / \| / __\|\__ \ \| \| (__\| < _ \| \__ \\|___/_\|_\|\___\|_\|\_(_)/ \|___/ \|__/ Version: 1.4.1 Author: Ken Wheeler Website: http://kenwheeler.github.io Docs: ht
2024-10-07 14:48:38 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 5f 2e 72 65 73 70 6f 6e 64 54 6f 20 3d 3d 3d 20 22 77 69 6e 64 6f 77 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 73 70 6f 6e 64 54 6f 57 69 64 74 68 20 3d 20 77 69 6e 64 6f 77 57 69 64 74 68 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 5f 2e 72 65 73 70 6f 6e 64 54 6f 20 3d 3d 3d 20 22 73 6c 69 64 65 72 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 73 70 6f 6e 64 54 6f 57 69 64 74 68 20 3d 20 73 6c 69 64 65 72 57 69 64 74 68 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 5f 2e 72 65 73 70 6f 6e 64 54 6f 20 3d 3d 3d 20 22 6d 69 6e 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 73 70 6f 6e 64 54 6f 57 69 64 74 68 20 3d Data Ascii: (window).width(); if (_.respondTo === "window") { respondToWidth = windowWidth; } else if (_.respondTo === "slider") { respondToWidth = sliderWidth; } else if (_.respondTo === "min") { respondToWidth =
2024-10-07 14:48:38 UTC	16384	IN	Data Raw: 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 24 6c 69 73 74 2e 6f 6e 28 27 6d 6f 75 73 65 65 6e 74 65 72 2e 73 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 70 61 75 73 65 64 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 61 75 74 6f 50 6c 61 79 43 6c 65 61 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 24 6c 69 73 74 2e 6f 6e 28 27 6d 6f 75 73 65 6c 65 61 76 65 2e 73 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 70 61 75 73 65 64 20 3d 20 66 61 6c 73 65 Data Ascii: ) { _.$list.on('mouseenter.slick', function(){ _.paused = true; _.autoPlayClear(); }); _.$list.on('mouseleave.slick', function(){ _.paused = false
2024-10-07 14:48:38 UTC	16384	IN	Data Raw: 73 28 27 73 6c 69 63 6b 2d 63 65 6e 74 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 69 6e 64 65 78 20 3d 3d 3d 20 5f 2e 73 6c 69 64 65 43 6f 75 6e 74 20 2d 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 6c 53 6c 69 64 65 73 2e 65 71 28 5f 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 29 2e 61 64 64 43 6c 61 73 73 28 27 73 6c 69 63 6b 2d 63 65 6e 74 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 24 73 6c 69 64 65 73 2e 65 71 28 69 6e 64 65 78 29 2e 61 64 64 43 6c 61 73 73 28 27 73 6c 69 63 6b 2d 63 65 6e 74 65 72 27 29 3b 0a 0a 20 20 20 Data Ascii: s('slick-center'); } else if (index === _.slideCount - 1) { allSlides.eq(_.options.slidesToShow).addClass('slick-center'); } } _.$slides.eq(index).addClass('slick-center');
2024-10-07 14:48:38 UTC	29	IN	Data Raw: 63 6b 5d 27 29 2e 73 6c 69 63 6b 28 29 3b 0a 20 20 20 20 7d 29 3b 0a 0a 7d 29 29 3b 0a Data Ascii: ck]').slick(); });}));

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.20	43760	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:37 UTC	368	OUT	GET /cosmoshop/shared/libs/LiveSearch/jQueryLiveSearch.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:38 UTC	393	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:38 GMT Content-Type: application/javascript Content-Length: 5127 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:17 GMT ETag: "1407-5feccda9ac6ca" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:38 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:38 UTC	5127	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 20 76 61 72 20 64 65 6c 61 79 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 76 61 72 20 74 69 6d 65 72 20 3d 20 30 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 61 6c 6c 62 61 63 6b 2c 20 6d 73 29 7b 0a 20 20 20 20 20 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 20 28 74 69 6d 65 72 29 3b 0a 20 20 20 20 20 20 74 69 6d 65 72 20 3d 20 73 65 74 54 69 6d 65 6f 75 74 28 63 61 6c 6c 62 61 63 6b 2c 20 6d 73 29 3b 0a 20 20 20 20 7d 3b 0a 20 20 7d 29 28 29 3b 0a 0a 20 20 24 2e 66 6e 2e 6c 69 76 65 53 65 61 72 63 68 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 0a 20 20 20 20 76 61 72 20 6c 69 76 65 53 65 61 72 63 68 49 6e 70 75 74 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 76 Data Ascii: (function($){ var delay = (function(){ var timer = 0; return function(callback, ms){ clearTimeout (timer); timer = setTimeout(callback, ms); }; })(); $.fn.liveSearch = function(options){ var liveSearchInput = this; v

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.20	43762	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:38 UTC	369	OUT	GET /cosmoshop/shared/template/js/bramble_shopFunctions.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:39 UTC	395	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:38 GMT Content-Type: application/javascript Content-Length: 69098 Connection: close Last-Modified: Thu, 17 Aug 2023 12:42:17 GMT ETag: "10dea-6031dbe0d900c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:38 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:39 UTC	15989	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 6f 75 74 43 68 65 63 6b 20 28 66 6f 72 6d 29 20 7b 0a 09 76 61 72 20 66 6f 72 6d 20 3d 20 6a 51 75 65 72 79 28 22 23 22 2b 66 6f 72 6d 29 3b 0a 09 76 61 72 20 75 72 6c 20 3d 20 66 6f 72 6d 2e 61 74 74 72 28 27 61 63 74 69 6f 6e 27 29 3b 0a 09 6a 51 75 65 72 79 2e 61 6a 61 78 28 7b 0a 20 20 20 20 78 68 72 46 69 65 6c 64 73 3a 20 7b 0a 20 20 20 20 20 20 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0a 20 20 20 20 7d 2c 0a 09 09 73 75 63 63 65 73 73 20 3a 20 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 73 75 63 63 65 73 73 20 66 6f 72 20 22 2b 75 72 6c 29 3b 0a 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 64 61 74 61 29 3b 0a 20 Data Ascii: function checkoutCheck (form) {var form = jQuery("#"+form);var url = form.attr('action');jQuery.ajax({ xhrFields: { withCredentials: true },success : function(data) { console.log("success for "+url); console.log(data);
2024-10-07 14:48:39 UTC	16384	IN	Data Raw: 2f 2f 20 20 20 20 20 20 20 20 20 63 6f 6c 6c 69 73 69 6f 6e 3a 20 22 66 6c 69 70 20 66 6c 69 70 66 69 74 22 0a 20 20 20 20 20 20 2f 2f 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 2f 2f 20 20 20 20 20 6f 70 65 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 2c 20 75 69 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 20 20 20 20 20 20 20 20 69 66 20 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 64 61 74 61 2d 74 6f 6f 6c 74 69 70 49 6d 61 67 65 27 29 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 75 69 2e 74 6f 6f 6c 74 69 70 2e 63 73 73 28 22 6d 61 78 2d 77 69 64 74 68 22 2c 20 22 31 32 30 30 70 78 22 29 3b 0a 20 20 20 20 20 20 2f 2f 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2f 2f 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 2f Data Ascii: // collision: "flip flipfit" // }, // open: function (event, ui) { // if ($(this).attr('data-tooltipImage')) { // ui.tooltip.css("max-width", "1200px"); // } // }, /
2024-10-07 14:48:39 UTC	16384	IN	Data Raw: 6c 61 6e 64 5f 7a 61 68 6c 61 72 74 65 6e 5b 6a 73 5f 6c 61 6e 64 5d 2e 73 70 6c 69 74 28 2f 5c 2c 2f 29 3b 0a 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 20 3c 20 61 6c 6c 65 5f 76 65 72 73 61 6e 64 61 72 74 65 6e 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 61 6c 6c 65 5f 76 65 72 73 61 6e 64 61 72 74 65 6e 5b 69 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 65 66 75 6e 64 65 6e 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 6a 20 3d 20 30 3b 20 6a 20 3c 20 74 68 69 73 5f 76 65 72 73 61 6e 64 61 72 74 65 6e 2e 6c 65 6e 67 74 68 3b 20 6a 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 6c 6c 65 5f 76 65 72 73 61 6e 64 61 72 74 65 6e 5b Data Ascii: land_zahlarten[js_land].split(/\,/); for (i = 0; i < alle_versandarten.length; i++) { if (alle_versandarten[i]) { gefunden = false; for (j = 0; j < this_versandarten.length; j++) { if (alle_versandarten[
2024-10-07 14:48:39 UTC	16384	IN	Data Raw: 6f 70 64 6f 77 6e 49 63 6f 6e 4d 6f 62 69 6c 65 2b 27 20 6d 6f 62 69 6c 65 42 74 6e 22 3e 3c 2f 69 3e 20 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 74 69 74 6c 65 20 2b 20 27 3c 2f 64 69 76 3e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 66 69 6e 64 28 27 2e 6d 65 6e 75 2d 62 75 74 74 6f 6e 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 6d 65 6e 75 2d 6f 70 65 6e 65 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6d 61 69 6e 6d 65 6e 75 20 3d 20 24 28 74 68 69 73 29 2e 6e 65 78 74 28 27 75 6c 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6d 61 69 6e 6d 65 6e 75 2e 68 61 73 Data Ascii: opdownIconMobile+' mobileBtn"></i> ' + settings.title + '</div>'); $(this).find('.menu-button').click(function(){ $(this).toggleClass('menu-opened'); var mainmenu = $(this).next('ul'); if (mainmenu.has
2024-10-07 14:48:39 UTC	3957	IN	Data Raw: 65 69 74 65 72 6e 3c 69 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 61 6c 69 67 6e 2d 6a 75 73 74 69 66 79 22 3e 3c 2f 69 3e 27 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 53 75 62 28 29 20 20 7b 0a 0a 20 20 20 20 20 20 2f 2a 4f 4c 44 20 53 54 41 4e 44 41 52 44 20 42 4c 4f 43 4b 2a 2f 0a 20 20 20 20 20 20 6a 51 75 65 72 79 28 27 23 73 75 62 63 6f 6e 74 65 6e 74 27 29 2e 74 6f 67 67 6c 65 28 29 3b 0a 20 20 20 20 20 20 2f 2a 4f 4c 44 20 53 54 41 4e 44 41 52 44 20 42 4c 4f 43 4b 2a 2f 0a 0a 20 20 20 20 20 20 6a 51 75 65 72 79 28 27 2e 73 75 62 46 69 6c 74 65 72 42 6f 78 27 29 2e 66 61 64 65 54 6f 67 67 6c 65 28 29 3b 0a 20 20 20 20 20 20 6a 51 75 65 72 79 28 27 23 73 75 62 68 65 61 64 65 72 27 Data Ascii: eitern<i class="icon-align-justify"></i>'); } }; function toggleSub() { /OLD STANDARD BLOCK/ jQuery('#subcontent').toggle(); /OLD STANDARD BLOCK/ jQuery('.subFilterBox').fadeToggle(); jQuery('#subheader'

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.20	43764	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:38 UTC	387	OUT	GET /cosmoshop/default/lib/de_categories_61fc104855eb3a96fccf5f576c8595fd.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:39 UTC	393	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:39 GMT Content-Type: application/javascript Content-Length: 4732 Connection: close Last-Modified: Tue, 12 Mar 2024 15:57:54 GMT ETag: "127c-61378b898c2f0" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:39 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:39 UTC	4732	IN	Data Raw: 0a 76 61 72 20 73 68 6f 70 43 61 74 65 67 6f 72 69 65 73 20 3d 20 7b 0a 20 20 63 61 74 65 67 6f 72 69 65 73 20 3a 20 7b 0a 20 20 20 20 22 73 63 68 72 65 69 62 74 69 73 63 68 22 20 3a 20 7b 0a 20 20 20 20 20 20 69 6d 61 67 65 3a 20 27 68 74 74 70 73 3a 2f 2f 67 65 6e 65 72 61 6c 69 2e 77 65 72 62 65 61 72 74 69 6b 65 6c 2d 6f 6e 6c 69 6e 65 2d 73 68 6f 70 2e 63 6f 6d 2f 63 6f 73 6d 6f 73 68 6f 70 2f 64 65 66 61 75 6c 74 2f 70 69 78 2f 27 2c 20 0a 20 20 20 20 20 20 74 69 74 6c 65 3a 20 27 53 43 48 52 45 49 42 54 49 53 43 48 27 2c 0a 20 20 20 20 20 20 74 65 61 73 65 72 3a 20 22 22 2c 0a 20 20 20 20 20 20 75 72 6c 3a 20 27 68 74 74 70 73 3a 2f 2f 67 65 6e 65 72 61 6c 69 2e 77 65 72 62 65 61 72 74 69 6b 65 6c 2d 6f 6e 6c 69 6e 65 2d 73 68 6f 70 2e 63 6f 6d 2f Data Ascii: var shopCategories = { categories : { "schreibtisch" : { image: 'https://generali.werbeartikel-online-shop.com/cosmoshop/default/pix/', title: 'SCHREIBTISCH', teaser: "", url: 'https://generali.werbeartikel-online-shop.com/

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.20	43766	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:38 UTC	372	OUT	GET /cosmoshop/shared/libs/Cosmoshop/style.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:39 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:39 GMT Content-Type: text/css Content-Length: 309 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "135-5feccda8c112c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:39 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:39 UTC	309	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 6f 73 6d 6f 53 68 6f 70 4a 73 20 43 61 73 63 61 64 69 6e 67 20 53 74 79 6c 65 20 53 68 65 65 74 73 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 63 6c 61 73 73 20 73 74 6f 72 65 73 20 70 61 74 74 65 72 6e 73 20 74 68 61 74 20 61 72 65 20 76 61 6c 69 64 20 66 6f 72 20 61 6c 6c 20 61 72 65 61 73 20 6f 66 20 74 68 65 20 6c 69 62 72 61 72 79 0a 20 2a 2f 0a 0a 62 75 74 74 6f 6e 2e 6c 69 6e 6b 42 75 74 74 6f 6e 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 20 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 70 61 64 64 69 6e 67 3a 30 70 78 3b 20 6d 61 72 67 69 6e 3a 30 70 78 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c Data Ascii: /** * CosmoShopJs Cascading Style Sheets * * This class stores patterns that are valid for all areas of the library */button.linkButton {background: none; border:none;text-align:left; display: inline; padding:0px; margin:0px;text-decoration: underl

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.20	43768	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:38 UTC	378	OUT	GET /cosmoshop/shared/libs/Cosmoshop/lazyClasses.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:39 UTC	379	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:39 GMT Content-Type: text/css Content-Length: 5110 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "13f6-5feccda8c112c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:39 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:39 UTC	5110	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 6f 73 6d 6f 53 68 6f 70 4a 73 20 6c 61 7a 79 20 63 73 73 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 73 74 79 6c 65 20 73 68 65 65 74 20 73 74 6f 72 65 73 20 63 6f 6d 6d 6f 6e 20 70 61 74 74 65 72 6e 73 20 74 6f 20 75 73 65 20 74 68 69 6e 67 73 20 71 75 69 63 6b 6c 79 2e 0a 20 2a 2f 0a 0a 2f 2a 20 54 65 78 74 20 66 6f 72 6d 61 74 73 20 2a 2f 0a 2e 73 68 6f 72 74 65 6e 54 65 78 74 20 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 20 31 30 30 25 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 20 65 6c 6c 69 70 73 69 73 3b 7d 0a 2e 74 65 78 74 6c 65 66 74 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 7d 0a 2e 74 65 78 74 52 69 67 68 74 20 7b 74 65 Data Ascii: /** * CosmoShopJs lazy css * * This style sheet stores common patterns to use things quickly. // Text formats */.shortenText {white-space: nowrap;overflow: hidden;width: 100%;text-overflow: ellipsis;}.textleft {text-align: left;}.textRight {te

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.20	43770	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:39 UTC	376	OUT	GET /cosmoshop/shared/libs/Cosmoshop/overrides.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:39 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:39 GMT Content-Type: text/css Content-Length: 324 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "144-5feccda8c112c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:39 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:39 UTC	324	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 6f 73 6d 6f 53 68 6f 70 4a 73 20 6f 76 65 72 72 69 64 65 73 20 63 73 73 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 6f 76 65 72 77 72 69 74 65 73 20 69 6e 63 6f 72 72 65 63 74 20 43 53 53 20 70 72 6f 70 65 72 74 69 65 73 2e 20 49 74 20 6d 75 73 74 20 74 68 65 72 65 66 6f 72 65 20 62 65 20 6c 6f 61 64 65 64 20 6c 61 73 74 0a 20 2a 2f 0a 0a 2f 2a 20 42 75 67 66 69 78 20 69 6e 20 6a 51 75 65 72 79 55 69 20 56 65 72 73 69 6f 6e 20 3e 20 31 2e 31 30 20 2a 2f 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 7b 7a 2d 69 6e 64 65 78 3a 20 32 30 30 37 30 20 21 69 6d 70 6f 72 74 61 6e 74 20 3b 7d 0a 0a 2f 2a 20 54 6f 6f 6c 74 69 70 20 4c 69 6e 6b 20 6f 76 65 72 72 69 64 65 73 20 2a 2f 0a 2e 74 6f 6f 6c 74 69 70 2e 6c 69 6e 6b 77 69 7a 61 72 64 Data Ascii: /** * CosmoShopJs overrides css * * This file overwrites incorrect CSS properties. It must therefore be loaded last // Bugfix in jQueryUi Version > 1.10 /.ui-dialog {z-index: 20070 !important ;}/ Tooltip Link overrides */.tooltip.linkwizard

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.20	43772	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:39 UTC	356	OUT	GET /cosmoshop/shared/libs/Cosmoshop/Cache.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:39 UTC	394	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:39 GMT Content-Type: application/javascript Content-Length: 10254 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "280e-5feccda8be24c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:39 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:39 UTC	10254	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 2f 2a 2a 0a 20 20 2a 20 54 68 65 20 43 6f 73 74 72 75 63 74 6f 72 20 6f 66 20 74 68 69 73 20 63 6c 61 73 73 20 70 72 6f 76 69 64 65 73 20 73 6f 6d 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 73 0a 20 20 2a 0a 20 20 2a 20 40 70 75 62 6c 69 63 0a 20 20 2a 20 40 63 6c 61 73 73 0a 20 20 2a 20 40 63 6c 61 73 73 64 65 73 63 20 54 68 69 73 20 63 6c 61 73 73 20 62 75 6e 64 6c 65 73 20 66 75 6e 63 74 69 6f 6e 73 20 61 6e 64 20 70 72 6f 70 65 72 74 69 65 73 20 74 6f 20 75 73 65 20 74 68 65 20 57 65 62 53 74 6f 72 61 67 65 20 61 73 20 63 6c 69 65 6e 74 2d 73 69 64 65 20 63 61 63 68 65 0a 20 20 2a 0a 20 20 2a 20 40 6d 65 6d 62 65 72 6f 66 20 6d 6f 64 75 6c 65 3a 43 6f 72 65 0a 20 20 2a 20 0a 20 20 2a 20 40 61 75 74 68 6f Data Ascii: 'use strict';/** * The Costructor of this class provides some default values * * @public * @class * @classdesc This class bundles functions and properties to use the WebStorage as client-side cache * * @memberof module:Core * * @autho

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.20	43774	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:39 UTC	363	OUT	GET /cosmoshop/shared/libs/Cosmoshop/EventHandler.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:40 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:40 GMT Content-Type: application/javascript Content-Length: 2005 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "7d5-5feccda8bc30c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:40 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:40 UTC	2005	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 2f 2a 2a 0a 20 20 2a 20 40 70 75 62 6c 69 63 0a 20 20 2a 20 0a 20 20 2a 20 40 63 6c 61 73 73 0a 20 20 2a 20 40 63 6c 61 73 73 64 65 73 63 20 54 68 69 73 20 63 6c 61 73 73 20 63 6f 6e 74 61 69 6e 73 20 67 65 6e 65 72 61 6c 20 65 76 61 6e 74 20 68 61 6e 64 6c 65 72 20 66 6f 72 20 67 6c 6f 62 61 6c 20 75 73 65 20 63 61 73 65 73 0a 20 20 2a 20 40 68 69 64 65 63 6f 6e 73 74 72 75 63 74 6f 72 0a 20 20 2a 20 40 6d 65 6d 62 65 72 6f 66 20 6d 6f 64 75 6c 65 3a 43 6f 72 65 0a 20 20 2a 0a 20 20 2a 20 40 61 75 74 68 6f 72 20 46 72 61 6e 6b 20 47 65 79 65 72 0a 20 20 2a 20 0a 20 20 2a 20 40 74 6f 64 6f 3a 20 53 6f 6d 65 20 66 75 6e 63 74 69 6f 6e 73 20 61 6e 64 20 73 65 74 74 69 6e 67 73 20 61 72 65 20 6e 6f 74 20 69 6d 70 Data Ascii: 'use strict';/** * @public * * @class * @classdesc This class contains general evant handler for global use cases * @hideconstructor * @memberof module:Core * * @author Frank Geyer * * @todo: Some functions and settings are not imp

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.20	43776	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:39 UTC	357	OUT	GET /cosmoshop/shared/libs/Cosmoshop/Helper.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:40 UTC	394	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:40 GMT Content-Type: application/javascript Content-Length: 25021 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "61bd-5feccda8bc30c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:40 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:40 UTC	15990	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 2f 2a 2a 0a 20 20 2a 20 54 68 65 20 43 6f 73 74 72 75 63 74 6f 72 20 6f 66 20 74 68 69 73 20 63 6c 61 73 73 20 70 72 6f 76 69 64 65 73 20 73 6f 6d 65 20 64 65 66 61 75 6c 74 20 70 72 6f 70 65 72 74 69 65 73 20 66 6f 72 20 74 68 69 73 20 63 6c 61 73 73 0a 20 20 2a 0a 20 20 2a 20 40 70 75 62 6c 69 63 0a 20 20 2a 20 0a 20 20 2a 20 40 63 6c 61 73 73 0a 20 20 2a 20 40 63 6c 61 73 73 64 65 73 63 20 54 68 69 73 20 63 6c 61 73 73 20 63 6f 6e 74 61 69 6e 73 20 67 65 6e 65 72 61 6c 20 68 65 6c 70 65 72 20 6d 65 74 68 6f 64 73 20 66 6f 72 20 67 6c 6f 62 61 6c 20 75 73 65 20 63 61 73 65 73 0a 20 20 2a 20 0a 20 20 2a 20 40 6d 65 6d 62 65 72 6f 66 20 6d 6f 64 75 6c 65 3a 43 6f 72 65 0a 20 20 2a 0a 20 20 2a 20 40 61 75 74 68 Data Ascii: 'use strict';/** * The Costructor of this class provides some default properties for this class * * @public * * @class * @classdesc This class contains general helper methods for global use cases * * @memberof module:Core * * @auth
2024-10-07 14:48:40 UTC	9031	IN	Data Raw: 74 61 72 67 65 74 2c 20 6d 65 74 68 6f 64 4e 61 6d 65 29 20 7b 0a 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 74 61 72 67 65 74 29 20 21 3d 3d 20 27 6f 62 6a 65 63 74 27 0a 20 20 20 20 20 20 20 20 7c 7c 20 21 63 6f 73 6d 6f 73 68 6f 70 2e 56 61 6c 69 64 61 74 6f 72 73 2e 69 73 53 74 72 69 6e 67 28 6d 65 74 68 6f 64 4e 61 6d 65 29 0a 20 20 20 20 20 20 20 20 7c 7c 20 74 79 70 65 6f 66 28 6a 51 75 65 72 79 2e 66 6e 5b 6d 65 74 68 6f 64 4e 61 6d 65 5d 29 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 6a 51 75 65 72 79 2e 66 6e 5b 6d 65 74 68 6f 64 4e 61 6d 65 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 61 73 6b 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 0a 20 20 20 20 Data Ascii: target, methodName) { if (typeof(target) !== 'object' \|\| !cosmoshop.Validators.isString(methodName) \|\| typeof(jQuery.fn[methodName]) === 'function') { return; } jQuery.fn[methodName] = function (task, options) {

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.20	43778	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:39 UTC	361	OUT	GET /cosmoshop/shared/libs/Cosmoshop/Validators.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:40 UTC	393	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:40 GMT Content-Type: application/javascript Content-Length: 8997 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "2325-5feccda8bc30c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:40 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:40 UTC	8997	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 2f 2a 2a 0a 20 20 2a 20 54 68 65 20 43 6f 73 74 72 75 63 74 6f 72 20 6f 66 20 74 68 69 73 20 63 6c 61 73 73 0a 20 20 2a 0a 20 20 2a 20 40 70 75 62 6c 69 63 0a 20 20 2a 20 0a 20 20 2a 20 40 63 6c 61 73 73 0a 20 20 2a 20 40 63 6c 61 73 73 64 65 73 63 20 54 68 69 73 20 63 6c 61 73 73 20 63 6f 6e 74 61 69 6e 73 20 67 65 6e 65 72 61 6c 20 76 61 6c 69 64 61 74 6f 72 73 20 66 6f 72 20 67 6c 6f 62 61 6c 20 75 73 65 20 63 61 73 65 73 2e 20 0a 20 20 2a 20 40 68 69 64 65 63 6f 6e 73 74 72 75 63 74 6f 72 0a 20 20 2a 20 20 0a 20 20 2a 20 40 6d 65 6d 62 65 72 6f 66 20 6d 6f 64 75 6c 65 3a 43 6f 72 65 0a 20 20 2a 0a 20 20 2a 20 40 61 75 74 68 6f 72 20 46 72 61 6e 6b 20 47 65 79 65 72 0a 20 20 2a 20 0a 20 20 2a 20 40 74 6f 64 Data Ascii: 'use strict';/** * The Costructor of this class * * @public * * @class * @classdesc This class contains general validators for global use cases. * @hideconstructor * * @memberof module:Core * * @author Frank Geyer * * @tod

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.20	43780	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:40 UTC	355	OUT	GET /cosmoshop/shared/libs/Cosmoshop/Ajax.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:40 UTC	394	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:40 GMT Content-Type: application/javascript Content-Length: 17527 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "4477-5feccda8b460c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:40 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:40 UTC	15990	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 2f 2a 2a 0a 20 20 2a 20 54 68 65 20 43 6f 73 74 72 75 63 74 6f 72 20 6f 66 20 74 68 69 73 20 63 6c 61 73 73 20 70 72 6f 76 69 64 65 73 20 73 6f 6d 65 20 64 65 66 61 75 6c 74 20 70 72 6f 70 65 72 74 69 65 73 20 66 6f 72 20 74 68 69 73 20 63 6c 61 73 73 0a 20 20 2a 0a 20 20 2a 20 40 70 75 62 6c 69 63 0a 20 20 2a 20 0a 20 20 2a 20 40 63 6c 61 73 73 0a 20 20 2a 20 40 63 6c 61 73 73 64 65 73 63 20 54 68 69 73 20 63 6c 61 73 73 20 69 73 20 61 20 70 6c 61 69 6e 20 6a 61 76 61 53 63 72 69 70 74 20 62 61 73 65 64 20 61 6c 74 65 72 6e 61 74 69 76 65 20 74 6f 20 74 68 65 20 6a 51 75 65 72 79 20 73 6f 6c 75 74 69 6f 6e 0a 20 20 2a 20 0a 20 20 2a 20 40 6d 65 6d 62 65 72 6f 66 20 6d 6f 64 75 6c 65 3a 43 6f 72 65 0a 20 20 2a Data Ascii: 'use strict';/** * The Costructor of this class provides some default properties for this class * * @public * * @class * @classdesc This class is a plain javaScript based alternative to the jQuery solution * * @memberof module:Core *
2024-10-07 14:48:40 UTC	1537	IN	Data Raw: 29 29 20 7b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 6c 65 74 20 65 72 72 6f 72 54 65 78 74 20 3d 20 72 65 71 75 65 73 74 2e 73 74 61 74 75 73 54 65 78 74 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 73 6d 6f 73 68 6f 70 2e 56 61 6c 69 64 61 74 6f 72 73 2e 69 73 41 72 72 61 79 28 72 65 73 70 6f 6e 73 65 2e 65 72 72 6f 72 73 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 54 65 78 74 20 3d 20 72 65 73 70 6f 6e 73 65 2e 65 72 72 6f 72 73 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 63 6f 73 6d 6f 73 68 6f 70 2e 56 61 6c 69 64 61 74 6f 72 73 2e 69 73 45 6d 70 74 79 28 72 65 73 70 6f 6e 73 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 74 65 78 74 4b 65 79 20 3d 20 27 63 6f 73 6d 6f 73 68 Data Ascii: )) { let errorText = request.statusText; if (cosmoshop.Validators.isArray(response.errors)) { errorText = response.errors; } else if (cosmoshop.Validators.isEmpty(response)) { let textKey = 'cosmosh

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.20	43782	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:40 UTC	505	OUT	POST /cgi-bin/cosmoshop/lshop.cgi HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest Content-Length: 78 Connection: keep-alive
2024-10-07 14:48:40 UTC	78	OUT	Data Raw: 61 63 74 69 6f 6e 3d 74 6f 6b 65 6e 26 74 6f 6b 65 6e 3d 31 37 32 38 33 31 32 35 31 32 2e 37 31 31 31 37 2e 53 4a 4d 75 67 35 63 59 6b 30 6b 6f 66 6c 58 6f 56 55 78 6d 68 55 58 6c 30 30 77 54 57 34 46 43 67 55 6f 74 58 62 72 47 38 67 Data Ascii: action=token&token=1728312512.71117.SJMug5cYk0koflXoVUxmhUXl00wTW4FCgUotXbrG8g
2024-10-07 14:48:40 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:40 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-control-allow-credentials: true Access-control-allow-origin: https://generali.werbeartikel-online-shop.com Set-Cookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU; path=/; expires=Tue, 07-Oct-2025 14:48:40 GMT; secure; HttpOnly Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:40 GMT LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:40 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.20	43784	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:40 UTC	396	OUT	GET /cosmoshop/shared/pix/template_vorlage/bramble/shop_header/de/Logo.png HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:40 UTC	360	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:40 GMT Content-Type: image/png Content-Length: 17623 Connection: close Last-Modified: Wed, 28 Jun 2023 14:07:03 GMT ETag: "44d7-5ff31191ab992" Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Wed, 06 Nov 2024 14:48:40 GMT LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:40 UTC	16024	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 18 00 00 00 e2 08 06 00 00 00 95 f0 d8 47 00 00 20 00 49 44 41 54 78 9c ed 9d 07 d8 15 c5 d5 c7 8f 60 17 03 76 a3 43 20 c6 32 36 88 9a 88 3a 2a 0a d8 0b 36 6c a8 b1 77 63 2f 31 b1 9b a8 31 c6 f2 d9 62 8b bd f7 5e b0 81 a3 a2 a8 60 1d 4b b0 8d 82 2d 16 6c 88 e5 7b 8e fe d7 2c cb ce f6 dd bb f7 be fb 7b 9e fb 88 ef dd bb 3b bb 77 ef d9 99 53 fe 67 3a 6a 48 84 96 62 16 22 5a 8d 88 06 12 51 3f 22 fa 15 11 2d 48 44 bd 7c 9f ff 98 88 de 20 a2 37 89 c8 f0 c7 88 e8 71 65 ec 87 cd 55 6e e8 8a 34 06 26 02 2d c5 cc 44 b4 11 11 6d 49 44 6b 11 d1 cc 19 77 f5 1c 11 5d c7 2f 65 ac a9 64 f0 0d 0d 35 a0 31 30 21 68 29 7e 49 44 7f 24 a2 dd 03 33 94 22 78 86 88 ce 20 a2 ab 94 b1 93 eb 70 be 0d 0d 65 d1 18 18 1f 5a 8a Data Ascii: PNGIHDRG IDATx`vC 26:*6lwc/11b^`K-l{,{;wSg:jHb"ZQ?"-HD\| 7qeUn4&-DmIDkw]/ed510!h)~ID$3"x peZ
2024-10-07 14:48:40 UTC	1599	IN	Data Raw: 2d 42 b6 62 c6 04 9d 09 4a 47 4b b1 15 be a7 44 86 37 2d d3 23 da f2 5d 84 e3 73 ee 56 5f 84 92 b8 35 20 7d e8 62 04 96 91 51 ca 77 85 a0 8c 9d ac a5 d8 06 a5 04 33 3a f6 b9 18 22 4a 2d c9 57 51 c6 be a3 a5 78 2e 4e 13 06 39 3e ec 14 be 39 41 15 79 a1 20 05 60 7c 20 fb d6 63 06 7c 97 61 2d 5f fd 04 93 eb 4e d5 52 c4 cd 30 c3 88 4a 64 dd 11 b9 3a ad 64 17 f4 78 ba a5 0c d7 41 37 65 ec a7 30 32 2e e6 6d f1 05 28 8b d8 1e d1 5a 0a 81 e6 e9 95 81 1a 17 57 77 07 8f 03 b4 14 ad cc ae 75 a9 b7 f9 71 b5 bf a9 8a 8f 22 8e 13 19 72 87 23 38 e8 ab e9 01 61 b0 b4 af 28 a7 f2 72 5a 8a a5 5a 7c 9d 16 2d 73 e7 5e a2 dd 1d 11 21 b5 8e 6c 1e c5 aa 6b 5a 8a 0f 62 94 e5 4b bd f8 11 9c 8a 19 80 4b 92 72 3a b4 55 69 55 d9 43 d4 32 ce 23 4e cc ab 6c a2 6a bd e2 ee e9 21 be fb Data Ascii: -BbJGKD7-#]sV_5 }bQw3:"J-WQx.N9>9Ay `\| c\|a-_NR0Jd:dxA7e02.m(ZWwuq"r#8a(rZZ\|-s^!lkZbKKr:UiUC2#Nlj!

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.20	43786	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:40 UTC	351	OUT	GET /cosmoshop/shared/pix/template_vorlage/bramble/shop_header/de/apple-touch-icon.png HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive
2024-10-07 14:48:41 UTC	360	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:41 GMT Content-Type: image/png Content-Length: 11504 Connection: close Last-Modified: Wed, 28 Jun 2023 14:07:03 GMT ETag: "2cf0-5ff31191aa9f2" Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Wed, 06 Nov 2024 14:48:41 GMT LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:41 UTC	11504	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 02 00 00 00 b6 06 a1 85 00 00 2c 10 49 44 41 54 78 da ed 7d 77 7c 55 45 fa f7 33 a7 dd 5e 72 d3 3b a4 51 24 f4 0e ca 2a 08 62 47 51 6c ab ab 28 ba ea ae b2 ba ba ea da 57 41 5c fc 59 71 c5 06 58 50 2c a0 a2 22 81 04 48 68 52 02 81 10 42 7a 2f 37 b9 bd 9e 73 66 e6 fd e3 dc 9b 46 91 60 c8 bb ef ef cd f3 c9 27 9f 24 77 ce 9c 67 be f3 cc 33 4f 9b 09 a2 94 c2 00 9d 7f 62 fe 6f 33 f0 ff 0b 0d 00 dd 4f 34 00 74 3f d1 00 d0 fd 44 03 40 f7 13 0d 00 dd 4f 34 00 74 3f d1 00 d0 fd 44 03 40 f7 13 0d 00 dd 4f 34 00 74 3f d1 00 d0 fd 44 03 40 f7 13 0d 00 dd 4f 34 00 74 3f d1 00 d0 fd 44 03 40 f7 13 0d 00 dd 4f 34 00 74 3f 11 d7 cf ef a3 18 03 00 62 18 40 08 00 28 21 40 08 62 18 60 fe 97 4f 39 ea Data Ascii: PNGIHDRxx,IDATx}w\|UE3^r;Q$*bGQl(WA\YqXP,"HhRBz/7sfF`'$wg3Obo3O4t?D@O4t?D@O4t?D@O4t?D@O4t?b@(!@b`O9

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.20	43788	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:41 UTC	310	OUT	GET /cosmoshop/default/pix/s/favicon/icon.ico HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive
2024-10-07 14:48:41 UTC	373	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:41 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 13000 Connection: close Last-Modified: Wed, 28 Jun 2023 09:59:59 GMT ETag: "32c8-5ff2da58f1cb6" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:41 GMT LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:41 UTC	13000	IN	Data Raw: 00 00 01 00 01 00 00 00 00 00 01 00 20 00 b2 32 00 00 16 00 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 32 79 49 44 41 54 78 da ed 5d 09 bc 96 63 da ef 2c 2d a7 7d d1 26 a9 44 22 3b 6d f2 09 45 48 59 53 a1 c9 16 26 59 d2 82 c6 1a 22 59 8a b2 cb 12 06 65 32 06 43 f6 23 b2 8c b1 a4 14 49 51 49 fb 69 ef 9c ce 39 df f3 7c df ff 99 b9 5d ae fb 59 de f7 79 df f3 9e 73 fe ff df ef fa 99 e9 bc cf 7e df ff fb ba af b5 4a 15 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 Data Ascii: 2PNGIHDR\rf2yIDATx]c,-}&D";mEHYS&Y"Ye2C#IQIi9\|]Yys~J

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.20	43790	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:41 UTC	395	OUT	GET /cosmoshop/shared/pix/template_vorlage/bramble/suchleiste/de/logo.png HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:41 UTC	360	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:41 GMT Content-Type: image/png Content-Length: 17623 Connection: close Last-Modified: Wed, 28 Jun 2023 14:08:31 GMT ETag: "44d7-5ff311e5a97c8" Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Wed, 06 Nov 2024 14:48:41 GMT LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:41 UTC	16024	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 18 00 00 00 e2 08 06 00 00 00 95 f0 d8 47 00 00 20 00 49 44 41 54 78 9c ed 9d 07 d8 15 c5 d5 c7 8f 60 17 03 76 a3 43 20 c6 32 36 88 9a 88 3a 2a 0a d8 0b 36 6c a8 b1 77 63 2f 31 b1 9b a8 31 c6 f2 d9 62 8b bd f7 5e b0 81 a3 a2 a8 60 1d 4b b0 8d 82 2d 16 6c 88 e5 7b 8e fe d7 2c cb ce f6 dd bb f7 be fb 7b 9e fb 88 ef dd bb 3b bb 77 ef d9 99 53 fe 67 3a 6a 48 84 96 62 16 22 5a 8d 88 06 12 51 3f 22 fa 15 11 2d 48 44 bd 7c 9f ff 98 88 de 20 a2 37 89 c8 f0 c7 88 e8 71 65 ec 87 cd 55 6e e8 8a 34 06 26 02 2d c5 cc 44 b4 11 11 6d 49 44 6b 11 d1 cc 19 77 f5 1c 11 5d c7 2f 65 ac a9 64 f0 0d 0d 35 a0 31 30 21 68 29 7e 49 44 7f 24 a2 dd 03 33 94 22 78 86 88 ce 20 a2 ab 94 b1 93 eb 70 be 0d 0d 65 d1 18 18 1f 5a 8a Data Ascii: PNGIHDRG IDATx`vC 26:*6lwc/11b^`K-l{,{;wSg:jHb"ZQ?"-HD\| 7qeUn4&-DmIDkw]/ed510!h)~ID$3"x peZ
2024-10-07 14:48:41 UTC	1599	IN	Data Raw: 2d 42 b6 62 c6 04 9d 09 4a 47 4b b1 15 be a7 44 86 37 2d d3 23 da f2 5d 84 e3 73 ee 56 5f 84 92 b8 35 20 7d e8 62 04 96 91 51 ca 77 85 a0 8c 9d ac a5 d8 06 a5 04 33 3a f6 b9 18 22 4a 2d c9 57 51 c6 be a3 a5 78 2e 4e 13 06 39 3e ec 14 be 39 41 15 79 a1 20 05 60 7c 20 fb d6 63 06 7c 97 61 2d 5f fd 04 93 eb 4e d5 52 c4 cd 30 c3 88 4a 64 dd 11 b9 3a ad 64 17 f4 78 ba a5 0c d7 41 37 65 ec a7 30 32 2e e6 6d f1 05 28 8b d8 1e d1 5a 0a 81 e6 e9 95 81 1a 17 57 77 07 8f 03 b4 14 ad cc ae 75 a9 b7 f9 71 b5 bf a9 8a 8f 22 8e 13 19 72 87 23 38 e8 ab e9 01 61 b0 b4 af 28 a7 f2 72 5a 8a a5 5a 7c 9d 16 2d 73 e7 5e a2 dd 1d 11 21 b5 8e 6c 1e c5 aa 6b 5a 8a 0f 62 94 e5 4b bd f8 11 9c 8a 19 80 4b 92 72 3a b4 55 69 55 d9 43 d4 32 ce 23 4e cc ab 6c a2 6a bd e2 ee e9 21 be fb Data Ascii: -BbJGKD7-#]sV_5 }bQw3:"J-WQx.N9>9Ay `\| c\|a-_NR0Jd:dxA7e02.m(ZWwuq"r#8a(rZZ\|-s^!lkZbKKr:UiUC2#Nlj!

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.20	43792	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:41 UTC	428	OUT	GET /cosmoshop/shared/libs/Fontello/fontello.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive Range: bytes=65155- If-Range: "14bd0-5feccdab8af05"
2024-10-07 14:48:41 UTC	434	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Mon, 07 Oct 2024 14:48:41 GMT Content-Type: text/css Content-Length: 19789 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:19 GMT ETag: "14bd0-5feccdab8af05" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:41 GMT Vary: Accept-Encoding Content-Range: bytes 65155-84943/84944 LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:41 UTC	15950	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 65 37 62 27 7d 2e 69 63 6f 6e 2d 77 69 6e 64 6f 77 73 2d 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 65 37 63 27 7d 2e 69 63 6f 6e 2d 78 69 6e 67 2d 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 65 37 64 27 7d 2e 69 63 6f 6e 2d 79 61 68 6f 6f 2d 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 65 37 65 27 7d 2e 69 63 6f 6e 2d 63 68 72 6f 6d 65 2d 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 65 37 66 27 7d 2e 69 63 6f 6e 2d 65 6d 61 69 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 65 38 30 27 7d 2e 69 63 6f 6e 2d 6d 61 63 73 74 6f 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 65 38 31 27 7d 2e 69 63 6f 6e 2d 6d 79 73 70 61 63 65 3a Data Ascii: e{content:'\ee7b'}.icon-windows-1:before{content:'\ee7c'}.icon-xing-1:before{content:'\ee7d'}.icon-yahoo-1:before{content:'\ee7e'}.icon-chrome-1:before{content:'\ee7f'}.icon-email:before{content:'\ee80'}.icon-macstore:before{content:'\ee81'}.icon-myspace:
2024-10-07 14:48:41 UTC	3839	IN	Data Raw: 74 69 6f 6e 2d 63 61 70 2d 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 30 31 31 27 7d 2e 69 63 6f 6e 2d 6d 65 67 61 70 68 6f 6e 65 2d 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 30 31 32 27 7d 2e 69 63 6f 6e 2d 64 61 74 61 62 61 73 65 2d 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 30 31 33 27 7d 2e 69 63 6f 6e 2d 6b 65 79 2d 35 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 30 31 34 27 7d 2e 69 63 6f 6e 2d 62 65 61 6b 65 72 2d 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 30 31 35 27 7d 2e 69 63 6f 6e 2d 74 72 75 63 6b 2d 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 30 31 36 27 7d 2e 69 63 6f 6e 2d 6d 6f 6e 65 79 2d 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 Data Ascii: tion-cap-2:before{content:'\f011'}.icon-megaphone-3:before{content:'\f012'}.icon-database-3:before{content:'\f013'}.icon-key-5:before{content:'\f014'}.icon-beaker-1:before{content:'\f015'}.icon-truck-1:before{content:'\f016'}.icon-money-2:before{content:'

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.20	43794	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:42 UTC	360	OUT	GET /cosmoshop/shared/libs/Cosmoshop/shop/Core.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive
2024-10-07 14:48:42 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:42 GMT Content-Type: application/javascript Content-Length: 2862 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "b2e-5feccda8b078c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:42 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:42 UTC	2862	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 43 6f 72 65 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 72 65 71 75 69 72 65 53 63 72 69 70 74 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 6a 73 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 63 6f 73 6d 6f 73 68 6f 70 2e 65 78 74 65 72 6e 61 6c 2e 6a 51 75 65 72 79 2e 4c 6f 61 64 69 6e 67 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 63 6f 73 6d 6f 73 68 6f 70 2e 65 78 74 65 72 6e 61 6c 2e 6a 51 75 65 72 79 2e 4d 6f 64 61 6c 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 63 6f 73 6d 6f 73 68 6f 70 2e 65 78 74 65 72 6e 61 6c 2e 45 6a 73 5f 33 5f 31 5f 36 5f 6d 69 6e 27 0a 20 20 20 20 20 20 20 20 5d 0a 20 20 20 20 7d 3b 0a 7d 0a 0a 43 6f 72 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 61 Data Ascii: 'use strict';function Core() { this.requireScripts = { js: [ 'cosmoshop.external.jQuery.Loading', 'cosmoshop.external.jQuery.Modal', 'cosmoshop.external.Ejs_3_1_6_min' ] };}Core.prototype.fa

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.20	43796	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:42 UTC	491	OUT	GET /cosmoshop/shared/libs/Cosmoshop/external/Ejs_3_1_6_min.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive Cookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
2024-10-07 14:48:42 UTC	394	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:42 GMT Content-Type: application/javascript Content-Length: 22607 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "584f-5feccda8b078c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:42 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:42 UTC	15990	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 28 29 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 5b 5d 2c 66 29 7d 65 6c 73 65 7b 76 61 72 20 67 3b 69 66 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 67 3d 77 69 6e 64 6f 77 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 67 3d 67 6c 6f 62 61 6c 7d 65 6c 73 65 20 Data Ascii: (function(f){if(typeof exports==="object"&&typeof module!=="undefined"){module.exports=f()}else if(typeof define==="function"&&define.amd){define([],f)}else{var g;if(typeof window!=="undefined"){g=window}else if(typeof global!=="undefined"){g=global}else
2024-10-07 14:48:42 UTC	6617	IN	Data Raw: 21 21 70 7d 29 2c 21 69 73 41 62 73 6f 6c 75 74 65 29 2e 6a 6f 69 6e 28 22 2f 22 29 3b 69 66 28 21 70 61 74 68 26 26 21 69 73 41 62 73 6f 6c 75 74 65 29 7b 70 61 74 68 3d 22 2e 22 7d 69 66 28 70 61 74 68 26 26 74 72 61 69 6c 69 6e 67 53 6c 61 73 68 29 7b 70 61 74 68 2b 3d 22 2f 22 7d 72 65 74 75 72 6e 28 69 73 41 62 73 6f 6c 75 74 65 3f 22 2f 22 3a 22 22 29 2b 70 61 74 68 7d 3b 65 78 70 6f 72 74 73 2e 69 73 41 62 73 6f 6c 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 70 61 74 68 29 7b 72 65 74 75 72 6e 20 70 61 74 68 2e 63 68 61 72 41 74 28 30 29 3d 3d 3d 22 2f 22 7d 3b 65 78 70 6f 72 74 73 2e 6a 6f 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 70 61 74 68 73 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 Data Ascii: !!p}),!isAbsolute).join("/");if(!path&&!isAbsolute){path="."}if(path&&trailingSlash){path+="/"}return(isAbsolute?"/":"")+path};exports.isAbsolute=function(path){return path.charAt(0)==="/"};exports.join=function(){var paths=Array.prototype.slice.call(argu

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.20	43802	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:43 UTC	490	OUT	GET /cosmoshop/shared/libs/Cosmoshop/external/jQuery/Modal.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive Cookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
2024-10-07 14:48:43 UTC	393	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:43 GMT Content-Type: application/javascript Content-Length: 5130 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "140a-5feccda8b366c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:43 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:43 UTC	5130	IN	Data Raw: 2f 2a 0a 20 20 20 20 41 20 73 69 6d 70 6c 65 20 6a 51 75 65 72 79 20 6d 6f 64 61 6c 20 28 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6b 79 6c 65 66 6f 78 2f 6a 71 75 65 72 79 2d 6d 6f 64 61 6c 29 0a 20 20 20 20 56 65 72 73 69 6f 6e 20 30 2e 39 2e 31 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6f 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 2c 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 3a 6f 28 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 7d 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 74 2c 69 2c 65 29 7b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 66 Data Ascii: /* A simple jQuery modal (http://github.com/kylefox/jquery-modal) Version 0.9.1*/!function(o){"object"==typeof module&&"object"==typeof module.exports?o(require("jquery"),window,document):o(jQuery,window,document)}(function(o,t,i,e){var s=[],l=f

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.20	43798	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:43 UTC	583	OUT	GET /cosmoshop/shared/libs/Fontello/font/cs.woff?29759507 HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Referer: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Fontello/fontello.css Connection: keep-alive Cookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
2024-10-07 14:48:43 UTC	372	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:43 GMT Content-Type: application/font-woff Content-Length: 273992 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:19 GMT ETag: "42e48-5feccdab91c65" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:43 GMT LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:43 UTC	16012	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 04 2e 48 00 0e 00 00 00 06 ba 44 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 44 00 00 00 44 00 00 00 56 3e c0 52 1a 63 6d 61 70 00 00 01 88 00 00 00 3a 00 00 01 4a d8 82 19 b7 63 76 74 20 00 00 01 c4 00 00 00 0a 00 00 00 0a 00 00 00 00 66 70 67 6d 00 00 01 d0 00 00 05 94 00 00 0b 70 88 90 90 59 67 61 73 70 00 00 07 64 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 07 6c 00 03 d0 e6 00 05 ff 4e f8 63 d9 25 68 65 61 64 00 03 d8 54 00 00 00 35 00 00 00 36 08 69 31 18 68 68 65 61 00 03 d8 8c 00 00 00 21 00 00 00 24 0b 50 0f 10 68 6d 74 78 00 03 d8 b0 00 00 09 6f 00 00 21 cc a6 da 00 00 6c 6f 63 61 00 03 e2 20 00 00 15 cb 00 00 21 d0 1a 26 40 f6 6d 61 78 70 00 03 f7 ec 00 00 00 Data Ascii: wOFF.HDOS/2DDV>Rcmap:Jcvt fpgmpYgaspdglyflNc%headT56i1hhea!$Phmtxo!loca !&@maxp
2024-10-07 14:48:43 UTC	16384	IN	Data Raw: b2 0a 83 35 14 5e 99 be fa 7c 4b 04 1e b9 2f 41 89 98 e1 58 af ec dc fc a7 ac 23 33 75 da 02 21 27 fb ef 4a 44 f9 43 7c d5 c2 85 86 2d 23 56 ff 3f 1b db bb 84 83 8d 65 64 c9 f9 a8 be e7 82 69 5e f6 f8 ba c8 fc 9e f0 74 de 06 1d cd d5 38 cb 74 4c 50 75 24 f9 1f 53 b7 b6 92 20 31 0c e2 4f 31 27 14 a0 92 b0 ac ba 66 cd 70 7f d2 64 58 24 07 78 56 e4 99 b1 d8 06 74 3b e1 2b f0 14 fd 86 d2 0a bd 9f 0f c6 0a 23 1b fa 5b 33 6c 90 17 55 99 d3 4c e6 be 4d 97 2d f9 39 f0 15 4b 50 c4 1b f3 7d b3 96 d7 95 f0 cd 03 7e f6 b4 f9 eb b1 43 0f 5a 96 89 0e 26 ed 49 07 95 ea a3 15 36 77 ae 02 e8 d1 91 ae e3 5d 23 28 3f b1 6b 20 45 07 de 52 83 ab e2 d6 be ee 61 f4 c7 33 5c 89 39 e4 ca c0 f1 ee e1 e1 6e 74 eb c0 ae 89 bc 97 2d b9 6a 30 68 c7 87 bb cf 72 de a3 ff ff 36 d0 3f 92 Data Ascii: 5^\|K/AX#3u!'JDC\|-#V?edi^t8tLPu$S 1O1'fpdX$xVt;+#[3lULM-9KP}~CZ&I6w]#(?k ERa3\9nt-j0hr6?
2024-10-07 14:48:43 UTC	16384	IN	Data Raw: dc 9c 85 ac 90 10 25 44 b5 d4 c9 32 c2 f5 74 73 a9 00 23 4b 60 60 6e e5 50 22 43 a6 57 6e 1d c5 f8 2a 3e 0e 4d 3d c6 6b 62 7a 74 eb 4a 7a c3 de ee 91 08 b5 c6 ba dc e9 7e 2e 16 cb 67 32 f3 bb 69 e9 9d ef 8b 0f 1a de 59 bd bb a1 54 30 b6 6c 31 0a a5 86 6e 7d 96 f2 3e 4f b4 35 58 99 7f 6e f5 bf a4 d3 91 80 07 66 48 4d d3 3d fe 08 49 a5 fc ee 68 d8 b2 e2 d0 48 95 0f 99 43 01 5f e3 c6 c6 47 83 e1 88 ee 99 c5 85 5d d0 26 38 d3 78 84 e3 3c 8a a6 93 8e 74 0d 97 e1 e7 9c e5 32 19 cf d8 da 16 7b 8d 1a b9 40 d1 51 0e 07 b0 41 c2 90 95 4a 0c ef c6 79 1d b8 41 6a 03 f8 15 6d cf ba ac fd 63 10 03 8b 56 d1 92 08 ba 73 8c a2 c3 c9 ce 93 7f 3c a2 5a 8d 9a b7 a0 4d dc 87 6c f6 4d 6a e4 81 77 df 3c b3 69 9d bc 51 73 47 c2 e9 78 18 57 6b 92 b9 24 31 88 d0 35 75 b0 bf 79 d7 Data Ascii: %D2ts#K``nP"CWn*>M=kbztJz~.g2iYT0l1n}>O5XnfHM=IhHC_G]&8x<t2{@QAJyAjmcVs<ZMlMjw<iQsGxWk$15uy
2024-10-07 14:48:43 UTC	16384	IN	Data Raw: a0 f8 b2 1e 70 9e 76 3a 4f 63 df d4 97 f1 cf 4b ce 86 ef d5 46 f4 7e d8 97 36 63 c7 2a 95 3a 12 11 5d 15 88 ef 15 09 b7 b4 31 62 82 c0 6b 1f 61 66 26 7c 58 59 70 32 88 51 29 1a 67 f1 98 f4 89 77 ff b8 b6 ff ab 3f 7c 7e 1f 5d fb f1 0d 6f b7 7f e0 d9 83 d0 3e 38 f0 2c f8 68 ae f3 fc c6 50 7b 7e 67 ae 3e 89 0e 93 b5 44 a2 96 44 47 a7 cf 3a 07 af 47 a9 c3 f6 49 bc c1 31 b2 84 2b f3 a7 a8 2c 0a d5 42 b8 28 0a 76 cc 72 77 a9 b3 3d 6e 85 fc 9a 47 20 31 b2 04 d7 0c 0b 5f b4 61 f1 06 1a 21 30 c1 21 76 b5 e2 34 90 47 bf 56 92 c7 a2 3f 09 ba 8c 63 da 4a 34 a7 80 df 36 21 a1 9e fd e2 75 93 cc aa 9b 3e b7 63 f7 f9 7b b3 9b b3 7b cf af 07 f6 2a ca de 02 f8 44 33 61 77 53 24 03 17 ee 2d 14 f6 2a f4 44 c3 c7 a7 b1 19 2e 90 0b 66 6e b1 b3 7f bb fe b7 76 c2 77 1b cb ee 57 Data Ascii: pv:OcKF~6c:]1bkaf&\|XYp2Q)gw?\|~]o>8,hP{~g>DDG:GI1+,B(vrw=nG 1_a!0!v4GV?cJ46!u>c{{D3awS$-*D.fnvwW
2024-10-07 14:48:43 UTC	16384	IN	Data Raw: ed 03 28 1c d9 fe c8 c5 be bf cb 7c 9f 05 1d 65 b4 b1 ba d5 ab 89 c3 50 8b 2e 89 ba 6b f7 48 72 0f 05 92 01 29 48 a3 d4 8b 80 7a a4 1d 62 24 f7 a0 6a ea 98 e2 12 51 bf 00 a8 37 8b 19 7e 44 d4 81 6f 78 1d 7f 4b b7 8b 59 f3 06 41 07 9d 77 d4 48 05 63 62 42 4e d8 8d 99 72 6a b0 9e 44 5a 2e 97 bc be 5b 52 f3 9d 6d 39 4b b3 65 d3 dc 37 b3 6c a8 e1 bc b8 73 f2 ea ea f2 cc 28 c9 86 0b ac a0 3b cb ae f3 76 10 32 f3 96 21 73 1a 16 44 39 b0 5c 12 a3 01 39 d9 d2 5e 30 91 ea d4 97 39 25 1b 64 71 49 08 e6 2c a4 26 0c d5 31 4a 83 48 cb 34 ae bb 69 e7 8a 40 7d fe e0 f5 cb 96 57 07 97 6c 2f 8e 05 c1 0a 1c f3 4d c0 58 dc 78 43 43 f7 70 be e2 14 81 cc 63 3d 40 45 96 6c 9e c7 c3 4a 2f d9 6c b2 e2 76 52 0f e8 fc 66 99 26 38 72 14 ad d1 5f 49 f3 cc 28 ac 82 d2 ba 76 b6 60 27 Data Ascii: (\|eP.kHr)Hzb$jQ7~DoxKYAwHcbBNrjDZ.[Rm9Ke7ls(;v2!sD9\9^09%dqI,&1JH4i@}Wl/MXxCCpc=@ElJ/lvRf&8r_I(v`'
2024-10-07 14:48:43 UTC	16384	IN	Data Raw: 6f 26 8e 0c ae 7b 43 46 8b aa d7 34 e5 9a 1a d5 4e 3d 52 22 da 65 0d fd 45 94 a3 6e bf d4 ef 96 fb 65 f1 b8 6b d6 e1 11 7b 89 96 10 eb 59 c6 c0 38 1e b3 83 8e ce 38 9a 3c 4c 39 47 40 09 0f dc 99 54 14 b0 1b 01 80 f4 ff fa 18 f8 8c d2 97 e7 8f 73 cc e0 26 dc d6 c0 35 3c 7c 67 12 91 e0 dd a4 b9 c3 32 9e 01 d8 a3 a2 17 69 6c af eb f3 fe 77 a8 9d ff 50 6e 87 c0 c1 b7 0e 8f c3 07 c8 90 ec 0d 60 d0 39 8c 9b 02 bb 55 15 0d 40 d3 64 3c 42 dc 96 33 a1 a9 e8 b5 0c 0f 6a 04 cd 0b cb 89 5e e2 5f b8 0e 30 64 34 38 19 1d e5 77 f6 3a fb 10 54 c0 5e d4 d4 5e 55 d5 66 70 c3 08 34 60 0e b5 b4 53 53 15 a2 37 7c 06 0f c2 1b 88 26 32 3f a3 31 4c d7 41 4c 4a e0 41 e7 23 e7 a3 2b 40 06 a3 ce 2c da 8a 7d ce b1 e5 b5 78 0f 9e 24 f7 93 18 23 d4 27 56 d0 80 9d ce 1c d8 09 fa 9d 05 Data Ascii: o&{CF4N=R"eEnek{Y88<L9G@Ts&5<\|g2ilwPn`9U@d<B3j^_0d48w:T^^Ufp4`SS7\|&2?1LALJA#+@,}x$#'V
2024-10-07 14:48:43 UTC	16384	IN	Data Raw: 3c 0e 32 a0 db 68 02 e0 a7 98 3e fc d4 70 ef 36 6b 87 70 4d c8 65 f8 bb 31 3f 31 4c 63 df 09 e0 b8 1f 11 c1 be 6a 35 ec ff 3f 81 7b 71 ea 3f 03 ca e0 df fe 53 00 4b ad 1a b7 89 e0 fa 16 19 2e b5 66 b8 4b c3 fc 75 a3 5b 1a d5 57 06 03 bd 95 41 fc 72 b9 77 bc ff 7e 97 ca 51 df 23 71 17 5b 3c bf 8d f7 df b7 eb 37 22 21 8f c4 49 d5 20 f9 1d 17 6c 07 ee 0a f5 12 67 35 b4 d9 30 cb 8c 5d d6 7c 44 b6 c3 49 f3 2d c6 57 8b 71 a0 97 1c 03 e4 58 5f 3e ca 4a 33 29 0d 8b 0d fc 24 98 ac 69 f9 d8 4c 8e 7f 01 16 9c 7e 30 e2 fc 12 1c fb 46 0f e8 cd fe f1 a7 7f 5c 7e ff d4 a8 6d 72 fa 9b d0 2a 27 f3 5c 73 30 94 26 b0 d0 54 6b d4 1a 46 ed 8a 17 ac 75 fe 87 38 92 89 5e c1 df eb cd 2e f6 a0 a6 86 86 7a b3 f0 04 fa f0 d3 9f fe 05 ba 7f 68 08 35 8b 9f 50 13 e6 49 e2 66 c8 c0 2f Data Ascii: <2h>p6kpMe1?1Lcj5?{q?SK.fKu[WArw~Q#q[<7"!I lg50]\|DI-WqX_>J3)$iL~0F\~mr*'\s0&TkFu8^.zh5PIf/
2024-10-07 14:48:43 UTC	16384	IN	Data Raw: dd 9f 00 00 35 2a 00 00 dc 78 f1 13 e0 a6 93 ea 2f 15 b2 ce 46 86 a7 7d a5 ee a2 5c d5 44 bc 00 23 eb f3 0a 42 39 bd c4 cb b2 1a 88 d9 6b 67 bc 53 c8 47 1f c9 da 74 48 0e a1 9b 24 96 0e d2 9c cc 32 72 da 94 23 b7 d2 fb 33 1f 12 8f 3b 22 b8 d2 c1 cc 07 a1 14 8b 52 23 a7 c3 29 82 e5 f7 c7 fe 8b 7c d3 60 92 5f a6 39 23 35 6e f9 97 6c 0d 3e 28 ac 13 ec aa 22 55 04 b8 60 13 ae c1 c6 e9 d1 ea a0 47 89 77 ca 32 6d 1e 8d 90 e5 d9 18 8d 40 1c 5c 3f c5 9d d0 94 28 73 e8 b0 b2 97 0e 89 36 19 0b 10 b4 cb 45 a8 96 fc 11 a3 11 fa 31 ce a3 0f 8f fa 30 d0 80 3c 55 bd a2 35 5d 73 6d 2a ce 35 0a 62 ed 2e 8d de 68 9d e2 21 e6 cc d6 6c ab a9 13 f0 e4 f8 57 f8 81 9c a9 de bd 82 06 af c1 2e 88 a7 e8 6b 5f 48 a4 ea a3 a5 3b 4c a5 05 45 22 a9 1d 84 af fd 9f 3b d5 23 0c c7 1c 26 Data Ascii: 5x/F}\D#B9kgSGtH$2r#3;"R#)\|`_9#5nl>("U`Gw2m@\?(s6E10<U5]sm5b.h!lW.k_H;LE";#&
2024-10-07 14:48:43 UTC	16384	IN	Data Raw: 7e 58 3d fc b6 3d ee 6a 6f 67 f4 96 62 16 7d b3 a8 88 7f ef 30 7f 1c 73 bd 0e 10 6b 19 27 ff 14 66 36 17 dd 42 56 82 d0 ff 8f ae be 2f fd 19 9e ff 08 b6 23 97 49 6e 87 fe af ed eb 9e 9d 29 15 62 40 45 81 c0 88 30 e1 11 72 38 25 17 aa 5a 92 98 77 21 95 4a 21 e8 4a 10 8d 8b cd 24 82 c5 9f 46 24 5b 48 4e bc f5 22 8e 2f 91 d3 64 d9 e3 55 83 48 00 18 c1 68 c0 57 09 7b 16 c0 7d 09 16 1f 90 04 02 3a 88 83 96 a3 32 5b 7b db f2 eb 8e 20 4d e8 f8 e6 f9 4d e5 f5 fc 95 59 90 ac d9 87 ca 19 57 69 a6 d5 53 5c d1 c1 f4 7c ab 98 d3 68 5b 19 bd 46 17 d6 e8 08 b8 21 eb 2a a6 d8 8b 76 b7 4f 54 8d 6f df 9e 48 54 7d b5 32 89 c9 51 8a 1e 6c 59 83 52 ae de fa c5 25 3a b7 cb a7 d3 5a 4d 1c 27 44 43 39 c3 94 bf de 4b c3 94 0f 50 ff b2 70 d1 3d 6b 43 81 a6 d6 4d c7 51 49 49 71 f1 Data Ascii: ~X==jogb}0sk'f6BV/#In)b@E0r8%Zw!J!J$F$[HN"/dUHhW{}:2[{ MMYWiS\\|h[F!*vOToHT}2QlYR%:ZM'DC9KPp=kCMQIIq
2024-10-07 14:48:43 UTC	16384	IN	Data Raw: d5 7f ec 2f c8 ab 74 bd 98 34 31 8a ef 8d 87 6a ca 0a ed ec 0c 43 8c 21 37 b4 2f 68 85 18 c2 13 76 a0 48 f5 1c cb 78 80 00 b2 c2 e0 46 46 59 88 23 4f 0b e7 79 82 40 12 b6 90 17 28 27 dc 64 37 7e f2 d3 4f 8c b6 f9 c1 52 77 63 29 89 24 a3 5c 69 83 bb 34 a8 9c ec db 57 56 b6 af af e7 be d2 d2 fb 86 20 4a f9 49 ad b6 20 5a ee 10 3b 5a 5a 3a 44 c7 a1 37 3b 82 09 a3 37 18 f4 1a 13 c1 8e 37 95 df 43 a0 b2 a2 10 a0 b0 a2 32 c8 c6 f1 5b dc ad e4 cf ec 94 5e 10 ed f7 b9 5d 4e 2b d3 bf c0 8a b2 35 5e 97 51 f7 7b 04 d4 9d cb c2 c1 ba 38 f7 05 33 40 32 3e 4e f9 43 b0 c0 a8 b9 b8 b6 c4 7c e3 d5 1d 21 ca e5 96 b6 95 96 f4 ba e5 62 4a 2e 25 13 b2 9b 6c 93 3c 1e e9 6b ca 5b 50 a6 dc 08 25 91 50 49 49 7b a9 0a ab be cd 55 50 18 cd 31 ab e4 c6 43 2e 8b 5e 95 b9 c7 28 dd e9 Data Ascii: /t41jC!7/hvHxFFY#Oy@('d7~ORwc)$\i4WV JI Z;ZZ:D7;77C2[^]N+5^Q{83@2>NC\|!bJ.%l<k[P%PII{UP1C.^(

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.20	43800	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:43 UTC	492	OUT	GET /cosmoshop/shared/libs/Cosmoshop/external/jQuery/Loading.js HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive Cookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
2024-10-07 14:48:43 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:43 GMT Content-Type: application/javascript Content-Length: 3275 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "ccb-5feccda8b366c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:43 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:43 UTC	3275	IN	Data Raw: 2f 2a 21 20 6c 6f 61 64 69 6e 67 2e 63 73 73 20 2d 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 44 6e 39 78 2f 6c 6f 61 64 69 6e 67 2e 6a 73 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 31 2e 30 2e 30 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 44 6e 39 78 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 31 30 30 2c 63 3d 7b 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 Data Ascii: /! loading.css -https://github.com/Dn9x/loading.js Version - 1.0.0 * Licensed under the MIT license - http://opensource.org/licenses/MIT * Copyright (c) 2016 Dn9x */"use strict";!function(a){var b=100,c={top:function(a){var c=document.createElement("d

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.20	43804	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:44 UTC	508	OUT	GET /cosmoshop/shared/libs/Cosmoshop/external/jQuery/loading.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive Cookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
2024-10-07 14:48:44 UTC	379	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:44 GMT Content-Type: text/css Content-Length: 7909 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "1ee5-5feccda8b078c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:44 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:44 UTC	7909	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 6c 6f 61 64 69 6e 67 2e 63 73 73 20 2d 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 44 6e 39 78 2f 6c 6f 61 64 69 6e 67 2e 6a 73 0a 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 31 2e 30 2e 30 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 44 6e 39 78 0a 20 2a 2f 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 63 69 72 63 6c 65 2d 66 61 64 65 7b 35 30 25 7b 6f 70 61 63 69 74 79 3a 2e 32 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 Data Ascii: @charset "UTF-8";/! loading.css -https://github.com/Dn9x/loading.js * Version - 1.0.0 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2016 Dn9x */@-webkit-keyframes circle-fade{50%{opacity:.2;-webkit-transf

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.20	43806	95.142.78.35	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:44 UTC	506	OUT	GET /cosmoshop/shared/libs/Cosmoshop/external/jQuery/modal.css HTTP/1.1 Host: generali.werbeartikel-online-shop.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://generali.werbeartikel-online-shop.com/ Connection: keep-alive Cookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
2024-10-07 14:48:44 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:44 GMT Content-Type: text/css Content-Length: 3196 Connection: close Last-Modified: Fri, 23 Jun 2023 14:31:16 GMT ETag: "c7c-5feccda8b078c" Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Tue, 08 Oct 2024 14:48:44 GMT Vary: Accept-Encoding LT-SERVERNAME: generali.werbeartikel-online-shop.com
2024-10-07 14:48:44 UTC	3196	IN	Data Raw: 2e 62 6c 6f 63 6b 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 7a 2d 69 6e 64 65 78 3a 33 30 30 30 30 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 37 35 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 62 6c 6f 63 6b 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 Data Ascii: .blocker{position:fixed;top:0;right:0;bottom:0;left:0;width:100%;height:100%;overflow:auto;z-index:30000;padding:20px;box-sizing:border-box;background-color:#000;background-color:rgba(0,0,0,0.75);text-align:center}.blocker:before{content:"";display:inline

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.20	58630	35.244.181.201	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:52 UTC	444	OUT	GET /update/3/GMP/66.0.3/20190410113011/Linux_x86_64-gcc3/null/release-cck-ubuntu/Linux%204.4.0-116-generic%20(GTK%203.18.9%2Clibpulse%208.0.0)/canonical/1.0/update.xml HTTP/1.1 Host: aus5.mozilla.org User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
2024-10-07 14:48:52 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 14:48:52 GMT Content-Type: text/xml; charset=utf-8 Content-Length: 718 Vary: Accept-Encoding Rule-ID: unknown Rule-Data-Version: unknown Content-Signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/202402/aus.content-signature.mozilla.org-2024-11-22-13-24-38.chain; p384ecdsa=FdD14R8qAq_iBL0o07yChdiejLE5Mcu-1h4EEMWPBmIZuhcLRJbY_UBoOfq19ayRVSvS0SqtS64f_NMwyCIyinQLsOYYIM2nMSLArOMbgtFlHWtzRgUziCntDhfq210X Strict-Transport-Security: max-age=31536000; X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; frame-ancestors 'none' X-Proxy-Cache-Status: MISS Via: 1.1 google Cache-Control: public,max-age=90 Alt-Svc: clear Connection: close
2024-10-07 14:48:52 UTC	718	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 0a 3c 75 70 64 61 74 65 73 3e 0a 20 20 20 20 3c 61 64 64 6f 6e 73 3e 0a 20 20 20 20 20 20 20 20 3c 61 64 64 6f 6e 20 69 64 3d 22 67 6d 70 2d 67 6d 70 6f 70 65 6e 68 32 36 34 22 20 55 52 4c 3d 22 68 74 74 70 3a 2f 2f 63 69 73 63 6f 62 69 6e 61 72 79 2e 6f 70 65 6e 68 32 36 34 2e 6f 72 67 2f 6f 70 65 6e 68 32 36 34 2d 6c 69 6e 75 78 36 34 2d 36 63 32 65 37 30 30 38 66 38 62 62 65 32 66 66 39 30 31 30 30 39 37 32 66 39 37 30 37 31 65 62 38 37 65 63 33 37 63 62 2e 7a 69 70 22 20 68 61 73 68 46 75 6e 63 74 69 6f 6e 3d 22 73 68 61 35 31 32 22 20 68 61 73 68 56 61 6c 75 65 3d 22 32 36 61 66 66 37 32 63 33 64 35 34 36 65 32 61 37 35 39 66 30 31 63 36 65 37 33 32 39 66 33 32 64 32 65 63 33 39 39 33 64 Data Ascii: <?xml version="1.0"?><updates> <addons> <addon id="gmp-gmpopenh264" URL="http://ciscobinary.openh264.org/openh264-linux64-6c2e7008f8bbe2ff90100972f97071eb87ec37cb.zip" hashFunction="sha512" hashValue="26aff72c3d546e2a759f01c6e7329f32d2ec3993d

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.20	43884	34.107.243.93	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:52 UTC	522	OUT	GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: xev8YB1whZWmp3xLeb+PtQ== Connection: keep-alive, Upgrade Pragma: no-cache Cache-Control: no-cache Upgrade: websocket
2024-10-07 14:48:52 UTC	220	IN	HTTP/1.1 500 Internal Server Error Content-Length: 81 content-type: application/json date: Mon, 07 Oct 2024 14:48:52 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 14:48:52 UTC	81	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 35 30 30 2c 22 65 72 72 6e 6f 22 3a 35 30 30 2c 22 65 72 72 6f 72 22 3a 22 41 63 74 69 78 20 57 65 62 20 65 72 72 6f 72 3a 20 57 65 62 53 6f 63 6b 65 74 20 75 70 67 72 61 64 65 20 69 73 20 65 78 70 65 63 74 65 64 22 7d Data Ascii: {"code":500,"errno":500,"error":"Actix Web error: WebSocket upgrade is expected"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.20	43888	34.107.243.93	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:58 UTC	522	OUT	GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: Giwk5E669Eu9xuCnED93cg== Connection: keep-alive, Upgrade Pragma: no-cache Cache-Control: no-cache Upgrade: websocket
2024-10-07 14:48:58 UTC	220	IN	HTTP/1.1 500 Internal Server Error Content-Length: 81 content-type: application/json date: Mon, 07 Oct 2024 14:48:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 14:48:58 UTC	81	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 35 30 30 2c 22 65 72 72 6e 6f 22 3a 35 30 30 2c 22 65 72 72 6f 72 22 3a 22 41 63 74 69 78 20 57 65 62 20 65 72 72 6f 72 3a 20 57 65 62 53 6f 63 6b 65 74 20 75 70 67 72 61 64 65 20 69 73 20 65 78 70 65 63 74 65 64 22 7d Data Ascii: {"code":500,"errno":500,"error":"Actix Web error: WebSocket upgrade is expected"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.20	43890	34.107.243.93	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:49:09 UTC	522	OUT	GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: DhrbBwdwLy0yYGCNGbsk2Q== Connection: keep-alive, Upgrade Pragma: no-cache Cache-Control: no-cache Upgrade: websocket
2024-10-07 14:49:09 UTC	220	IN	HTTP/1.1 500 Internal Server Error Content-Length: 81 content-type: application/json date: Mon, 07 Oct 2024 14:49:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 14:49:09 UTC	81	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 35 30 30 2c 22 65 72 72 6e 6f 22 3a 35 30 30 2c 22 65 72 72 6f 72 22 3a 22 41 63 74 69 78 20 57 65 62 20 65 72 72 6f 72 3a 20 57 65 62 53 6f 63 6b 65 74 20 75 70 67 72 61 64 65 20 69 73 20 65 78 70 65 63 74 65 64 22 7d Data Ascii: {"code":500,"errno":500,"error":"Actix Web error: WebSocket upgrade is expected"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.20	43892	34.107.243.93	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:49:29 UTC	522	OUT	GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: dmzcw8f+mp0a8xDMLWeZpg== Connection: keep-alive, Upgrade Pragma: no-cache Cache-Control: no-cache Upgrade: websocket
2024-10-07 14:49:29 UTC	220	IN	HTTP/1.1 500 Internal Server Error Content-Length: 81 content-type: application/json date: Mon, 07 Oct 2024 14:49:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 14:49:29 UTC	81	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 35 30 30 2c 22 65 72 72 6e 6f 22 3a 35 30 30 2c 22 65 72 72 6f 72 22 3a 22 41 63 74 69 78 20 57 65 62 20 65 72 72 6f 72 3a 20 57 65 62 53 6f 63 6b 65 74 20 75 70 67 72 61 64 65 20 69 73 20 65 78 70 65 63 74 65 64 22 7d Data Ascii: {"code":500,"errno":500,"error":"Actix Web error: WebSocket upgrade is expected"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.20	43894	34.107.243.93	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:50:10 UTC	522	OUT	GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: DZJ26dvtPenqt++cA0yyNQ== Connection: keep-alive, Upgrade Pragma: no-cache Cache-Control: no-cache Upgrade: websocket
2024-10-07 14:50:10 UTC	220	IN	HTTP/1.1 500 Internal Server Error Content-Length: 81 content-type: application/json date: Mon, 07 Oct 2024 14:50:10 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 14:50:10 UTC	81	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 35 30 30 2c 22 65 72 72 6e 6f 22 3a 35 30 30 2c 22 65 72 72 6f 72 22 3a 22 41 63 74 69 78 20 57 65 62 20 65 72 72 6f 72 3a 20 57 65 62 53 6f 63 6b 65 74 20 75 70 67 72 61 64 65 20 69 73 20 65 78 70 65 63 74 65 64 22 7d Data Ascii: {"code":500,"errno":500,"error":"Actix Web error: WebSocket upgrade is expected"}

System Behavior

Analysis Process: exo-open PID: 4782, Parent PID: 4722

General

Start time (UTC):	14:48:28
Start date (UTC):	07/10/2024
Path:	/usr/bin/exo-open
Arguments:	exo-open https://generali.werbeartikel-online-shop.com
File size:	22856 bytes
MD5 hash:	39c5fa78f1cb3d950b9944f784018d3a

Start time (UTC):	14:48:28
Start date (UTC):	07/10/2024
Path:	/usr/bin/exo-open
Arguments:	-
File size:	22856 bytes
MD5 hash:	39c5fa78f1cb3d950b9944f784018d3a

Start time (UTC):	14:48:28
Start date (UTC):	07/10/2024
Path:	/usr/bin/exo-open
Arguments:	-
File size:	22856 bytes
MD5 hash:	39c5fa78f1cb3d950b9944f784018d3a

Start time (UTC):	14:48:28
Start date (UTC):	07/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 --launch WebBrowser https://generali.werbeartikel-online-shop.com
File size:	63560 bytes
MD5 hash:	c27a648e34ba5ce625d064af015be147

Start time (UTC):	14:48:29
Start date (UTC):	07/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1
Arguments:	-
File size:	63560 bytes
MD5 hash:	c27a648e34ba5ce625d064af015be147

Start time (UTC):	14:48:29
Start date (UTC):	07/10/2024
Path:	/usr/bin/sensible-browser
Arguments:	/bin/sh /usr/bin/sensible-browser https://generali.werbeartikel-online-shop.com
File size:	1132 bytes
MD5 hash:	a5909f49ad9c97574d2b4c49cc24905d

Start time (UTC):	14:48:29
Start date (UTC):	07/10/2024
Path:	/usr/bin/x-www-browser
Arguments:	/bin/sh /usr/bin/x-www-browser https://generali.werbeartikel-online-shop.com
File size:	0 bytes
MD5 hash:	unknown

Start time (UTC):	14:48:29
Start date (UTC):	07/10/2024
Path:	/usr/bin/x-www-browser
Arguments:	-
File size:	0 bytes
MD5 hash:	unknown

Start time (UTC):	14:48:29
Start date (UTC):	07/10/2024
Path:	/usr/bin/which
Arguments:	/bin/sh /usr/bin/which /usr/bin/x-www-browser
File size:	0 bytes
MD5 hash:	unknown

Start time (UTC):	14:48:29
Start date (UTC):	07/10/2024
Path:	/usr/lib/firefox/firefox
Arguments:	/usr/lib/firefox/firefox https://generali.werbeartikel-online-shop.com
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	14:48:29
Start date (UTC):	07/10/2024
Path:	/usr/lib/firefox/firefox
Arguments:	-
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Analysis Process: firefox PID: 4825, Parent PID: 4797

General

Start time (UTC):	14:48:29
Start date (UTC):	07/10/2024
Path:	/usr/lib/firefox/firefox
Arguments:	-
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	14:48:29
Start date (UTC):	07/10/2024
Path:	/usr/lib/firefox/firefox
Arguments:	-
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	14:48:29
Start date (UTC):	07/10/2024
Path:	/usr/bin/lsb_release
Arguments:	/usr/bin/python3 -Es /usr/bin/lsb_release -idrc
File size:	3638 bytes
MD5 hash:	18cba7de7bfedd0d9f027bd1c54cc2b2

Start time (UTC):	14:48:30
Start date (UTC):	07/10/2024
Path:	/usr/lib/firefox/firefox
Arguments:	-
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	14:48:30
Start date (UTC):	07/10/2024
Path:	/usr/bin/dbus-launch
Arguments:	dbus-launch --autolaunch=11ced2f07072c6ae389b731c5cc84014 --binary-syntax --close-stderr
File size:	26616 bytes
MD5 hash:	e4a469f27d130d783c21ce9c1c4456c3

Start time (UTC):	14:48:30
Start date (UTC):	07/10/2024
Path:	/usr/lib/firefox/firefox
Arguments:	-
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	14:48:30
Start date (UTC):	07/10/2024
Path:	/usr/lib/firefox/firefox
Arguments:	-
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	14:48:30
Start date (UTC):	07/10/2024
Path:	/usr/lib/firefox/firefox
Arguments:	/usr/lib/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 172334 -parentBuildID 20190410113011 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appdir /usr/lib/firefox/browser 4797 true tab
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	14:48:31
Start date (UTC):	07/10/2024
Path:	/usr/lib/firefox/firefox
Arguments:	-
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	14:48:31
Start date (UTC):	07/10/2024
Path:	/usr/lib/firefox/firefox
Arguments:	-
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	14:48:31
Start date (UTC):	07/10/2024
Path:	/usr/lib/firefox/firefox
Arguments:	/usr/lib/firefox/firefox -contentproc -childID 2 -isForBrowser -prefsLen 6115 -prefMapSize 172334 -parentBuildID 20190410113011 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appdir /usr/lib/firefox/browser 4797 true tab
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	14:48:33
Start date (UTC):	07/10/2024
Path:	/usr/lib/firefox/firefox
Arguments:	-
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	14:48:33
Start date (UTC):	07/10/2024
Path:	/usr/lib/firefox/firefox
Arguments:	-
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	14:48:33
Start date (UTC):	07/10/2024
Path:	/usr/lib/firefox/firefox
Arguments:	/usr/lib/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 6934 -prefMapSize 172334 -parentBuildID 20190410113011 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appdir /usr/lib/firefox/browser 4797 true tab
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-aliveUpgrade-Insecure-Requests: 1
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/NormalizeCss/normalize.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /6/Firefox/66.0.3/20190410113011/Linux_x86_64-gcc3/en-US/release-cck-ubuntu/Linux%204.4.0-116-generic%20(GTK%203.18.9%2Clibpulse%208.0.0)/canonical/1.0/ HTTP/1.1Host: snippets.cdn.mozilla.netUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/css/shop/frame/style/de/bramble.min.2.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/default/css/shop/content/layout/bramble.min.2.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/template/css/bramble_rootStyles.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/css/shop/content/style/de/bramble.min.2.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/default/css/shop/frame/layout/bramble.min.2.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /us-west/bundles-pregen/Firefox/en-us/default.json HTTP/1.1Host: snippets.cdn.mozilla.netUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/default/template/css/bramble_customDesign.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Fontello/fontello.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/template/css/bramble_responsive.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/default/template/css/bramble_customResponsive.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/jQuery/jquery.min.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/jQuery/jquery-migrate.min.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Fontello/fontello-animation.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/jQueryUI/jquery-ui.min.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/jQueryUI/jquery-ui.theme.min.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/jQueryUI/jquery-ui.min.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/jQueryUI/jquery-ui.structure.min.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/Cosmoshop.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/jQuerySlickCarousel/css/slick.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/jQuerySlickCarousel/css/slick-theme.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/FormLib/shop_formlib.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/modernizr/modernizr.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/jQueryCookie/jquery.cookie.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/jQuerySlickCarousel/js/slick.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/LiveSearch/jQueryLiveSearch.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/template/js/bramble_shopFunctions.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/default/lib/de_categories_61fc104855eb3a96fccf5f576c8595fd.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/style.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/lazyClasses.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/overrides.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/Cache.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/EventHandler.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/Helper.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/Validators.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/Ajax.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/pix/template_vorlage/bramble/shop_header/de/Logo.png HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: image/webp,/Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/pix/template_vorlage/bramble/shop_header/de/apple-touch-icon.png HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: image/webp,/Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/default/pix/s/favicon/icon.ico HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: image/webp,/Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/pix/template_vorlage/bramble/suchleiste/de/logo.png HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: image/webp,/Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Fontello/fontello.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-aliveRange: bytes=65155-If-Range: "14bd0-5feccdab8af05"
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/shop/Core.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/external/Ejs_3_1_6_min.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-aliveCookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/external/jQuery/Modal.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-aliveCookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Fontello/font/cs.woff?29759507 HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8Accept-Language: en-US,en;q=0.5Accept-Encoding: identityReferer: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Fontello/fontello.cssConnection: keep-aliveCookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/external/jQuery/Loading.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-aliveCookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/external/jQuery/loading.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-aliveCookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
Source: global traffic	HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/external/jQuery/modal.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-aliveCookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
Source: global traffic	HTTP traffic detected: GET /update/3/GMP/66.0.3/20190410113011/Linux_x86_64-gcc3/null/release-cck-ubuntu/Linux%204.4.0-116-generic%20(GTK%203.18.9%2Clibpulse%208.0.0)/canonical/1.0/update.xml HTTP/1.1Host: aus5.mozilla.orgUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: push.services.mozilla.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brSec-WebSocket-Version: 13Origin: wss://push.services.mozilla.com/Sec-WebSocket-Protocol: push-notificationSec-WebSocket-Extensions: permessage-deflateSec-WebSocket-Key: xev8YB1whZWmp3xLeb+PtQ==Connection: keep-alive, UpgradePragma: no-cacheCache-Control: no-cacheUpgrade: websocket
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: push.services.mozilla.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brSec-WebSocket-Version: 13Origin: wss://push.services.mozilla.com/Sec-WebSocket-Protocol: push-notificationSec-WebSocket-Extensions: permessage-deflateSec-WebSocket-Key: Giwk5E669Eu9xuCnED93cg==Connection: keep-alive, UpgradePragma: no-cacheCache-Control: no-cacheUpgrade: websocket
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: push.services.mozilla.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brSec-WebSocket-Version: 13Origin: wss://push.services.mozilla.com/Sec-WebSocket-Protocol: push-notificationSec-WebSocket-Extensions: permessage-deflateSec-WebSocket-Key: DhrbBwdwLy0yYGCNGbsk2Q==Connection: keep-alive, UpgradePragma: no-cacheCache-Control: no-cacheUpgrade: websocket
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: push.services.mozilla.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brSec-WebSocket-Version: 13Origin: wss://push.services.mozilla.com/Sec-WebSocket-Protocol: push-notificationSec-WebSocket-Extensions: permessage-deflateSec-WebSocket-Key: dmzcw8f+mp0a8xDMLWeZpg==Connection: keep-alive, UpgradePragma: no-cacheCache-Control: no-cacheUpgrade: websocket
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: push.services.mozilla.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brSec-WebSocket-Version: 13Origin: wss://push.services.mozilla.com/Sec-WebSocket-Protocol: push-notificationSec-WebSocket-Extensions: permessage-deflateSec-WebSocket-Key: DZJ26dvtPenqt++cA0yyNQ==Connection: keep-alive, UpgradePragma: no-cacheCache-Control: no-cacheUpgrade: websocket

Source: global traffic	DNS traffic detected: DNS query: generali.werbeartikel-online-shop.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com

Description:	Adversaries may attempt to hide artifacts associated with their behaviors to evade detection. Operating systems may have features to hide various artifacts, such as important system files and administrative task execution, to avoid disrupting user work environments and prevent users from changing files or features on the system. Adversaries may abuse these features to hide artifacts such as files, directories, user accounts, or other system activity to evade detection.
Tactics:	Defense Evasion
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Creation, File: File Metadata, File: File Modification, Firmware: Firmware Modification, Process: OS API Execution, Process: Process Creation, Script: Script Execution, Service: Service Creation, User Account: User Account Creation, User Account: User Account Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report https://generali.werbeartikel-online-shop.com

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/home/james/.cache/dconf/user

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/17BCC6A55E85E8F6A4C660529BB763D3464877E1

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/1ACD9749AAE3D02FEE084B8576784A1535E5546C

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/1B22BDA5BA68A1448FCB56906398FE61B0AEE710

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/255180BBFC392A33F03051F3DC10335C080DDA20

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/40ABD0A962B8FE31514026AD426D53FC2AD624FE

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/66B7941C45385F0CD6B46B392D0BEF2CBD64288D

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/919AD4B6B4DF5BEE81EE8EC9665A5FC662F12E3B

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/9E876DD8AD3949F308300382320CBAFF2C684314

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/AD059B96D97FE240161540F36D46C5F70734D6F2

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/C389DE279BF5275924497D5B33D1F1900116E591

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/C451CAD6E876978E63FFFC9865A83D89CFBE951D

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/C7093830EE04AD47A1F61AE4D939134F0A4244BF

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/E39A30365062FED6A062C3B828869E960E9E1641

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/E8D2EF960BE529ACF6A67B8DF1D64710B0CD15D1

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/allow-flashallow-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/allow-flashallow-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/base-track-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/base-track-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/block-flash-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/block-flash-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/block-flashsubdoc-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/block-flashsubdoc-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flash-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flash-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flashallow-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flashallow-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flashsubdoc-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flashsubdoc-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/mozplugin-block-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/mozplugin-block-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/mozstd-trackwhite-digest256.pset

Linux Analysis Report
https://generali.werbeartikel-online-shop.com