Edit tour

Windows Analysis Report
http://aholding-croatia.com/

Overview

General Information

Sample URL:	http://aholding-croatia.com/
Analysis ID:	1528489
Tags:	urlscan
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4568 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1164 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=1912,i,4966215485567083278,9426922408629113011,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2636 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5908 --field-trial-handle=1912,i,4966215485567083278,9426922408629113011,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6976 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://aholding-croatia.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /event/ HTTP/1.1Host: stat.tildacdn.comConnection: keep-aliveContent-Length: 743sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: */*Origin: https://aholding-croatia.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://aholding-croatia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_282.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_416.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_384.2.dr	String found in binary or memory: http://schema.org/ImageObject
Source: chromecache_282.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_356.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_384.2.dr	String found in binary or memory: https://aholding-croatia.com/cases/privlaka-relax-residence
Source: chromecache_384.2.dr	String found in binary or memory: https://aholding-croatia.com/thank-you-page
Source: chromecache_369.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_441.2.dr, chromecache_292.2.dr, chromecache_382.2.dr, chromecache_356.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_435.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_384.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_435.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_282.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_282.2.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_282.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_412.2.dr, chromecache_265.2.dr, chromecache_280.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_282.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_282.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_282.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_384.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Montserrat:wght
Source: chromecache_384.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_428.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_428.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_428.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_428.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_428.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_300.2.dr	String found in binary or memory: https://geo.tildacdn.com/geo/country/
Source: chromecache_282.2.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_356.2.dr	String found in binary or memory: https://google.com
Source: chromecache_356.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_410.2.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/58/7/intl/uk_ALL/geometry.js
Source: chromecache_410.2.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/58/7/intl/uk_ALL/main.js
Source: chromecache_410.2.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/58/7/intl/uk_ALL/search.js
Source: chromecache_265.2.dr, chromecache_280.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/mapsjs/mapConfigs:batchGet
Source: chromecache_212.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/entity11.png);background-size:70px
Source: chromecache_212.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/entity11_hdpi.png);background-size:70px
Source: chromecache_212.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/exp2.png);background-size:109px
Source: chromecache_212.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/exp2_hdpi.png);background-size:109px
Source: chromecache_384.2.dr	String found in binary or memory: https://neo.tildacdn.com/js/tilda-fallback-1.0.min.js
Source: chromecache_261.2.dr, chromecache_251.2.dr	String found in binary or memory: https://neo.tildacdn.com/js/tilda-fallback-advanced-1.0.min.js
Source: chromecache_356.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_441.2.dr, chromecache_292.2.dr, chromecache_382.2.dr, chromecache_356.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_287.2.dr	String found in binary or memory: https://player.vimeo.com/video/
Source: chromecache_261.2.dr, chromecache_251.2.dr	String found in binary or memory: https://static.tildacdn.
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.com/css/fonts-georgia.css
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/css/highlight.min.css
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/css/tilda-animation-2.0.min.css
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/css/tilda-forms-1.0.min.css
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/css/tilda-grid-3.0.min.css
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/css/tilda-menusub-1.0.min.css
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/css/tilda-popup-1.1.min.css
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/css/tilda-slds-1.4.min.css
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/css/tilda-zoom-2.0.min.css
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/hammer.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/highlight.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-animation-2.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-events-1.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-forms-1.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-lazyload-1.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-menu-1.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-menusub-1.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-phone-mask-1.1.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-polyfill-1.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-popup-1.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-scripts-3.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-skiplink-1.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-slds-1.4.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-stat-1.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-submenublocks-1.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-video-1.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-video-processor-1.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-zero-1.1.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-zero-scale-1.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/js/tilda-zoom-2.0.min.js
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3030-6636-4764-a633-633162613234/6.png
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3039-3061-4433-b030-646365333238/Apartment_14.png
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3061-3530-4762-a634-643162363737/Night_01.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3065-6235-4663-b331-623064626663/Apartment_6_1.png
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3137-3466-4865-b663-396335366161/Apartment_12.png
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3166-3333-4163-a661-383766393661/6.png
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3234-6435-4139-a630-333832333134/10.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3238-3737-4863-b364-353434636432/04.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3366-3231-4264-b438-306335373163/Full_Ground.png
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3435-3763-4564-b634-373233303864/05.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3533-3764-4161-b064-323333616631/Frame_67.svg
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3632-3264-4562-a338-656166656465/logologologo_1.svg
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3634-6431-4564-b735-633463656536/taras3.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3663-3635-4365-b735-393766313137/01.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3832-3366-4631-b063-353464373162/07.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3934-3836-4036-a433-333232646436/Apartment_4.png
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild3938-6466-4465-b630-313637633536/image_179.svg
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild6230-6437-4163-a262-373465643835/Apartment_3_1.png
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild6265-6530-4236-a436-303039626332/Apartment_5.png
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild6331-6166-4535-b233-663033316636/image.png
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild6335-6438-4735-b439-643130626636/Apartment_11.png
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild6437-3938-4537-a565-646531386230/Night_02.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild6437-3965-4062-b861-633362613735/09.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild6439-3738-4561-b630-653430626564/Apartment_13.png
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild6561-6166-4166-a138-666434396361/11.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild6564-6166-4662-b430-623864636138/03.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/tild6634-6437-4332-a261-376332653038/Apartment_2.png
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/ws/project10309827/tilda-blocks-page53194931.min.css?t=1725003854
Source: chromecache_384.2.dr	String found in binary or memory: https://static.tildacdn.one/ws/project10309827/tilda-blocks-page53194931.min.js?t=1725003854
Source: chromecache_382.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_369.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_282.2.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_212.2.dr	String found in binary or memory: https://support.google.com/maps?p=kml
Source: chromecache_259.2.dr, chromecache_234.2.dr	String found in binary or memory: https://sysstat.tildacdn.com/api/
Source: chromecache_369.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_441.2.dr, chromecache_292.2.dr, chromecache_382.2.dr, chromecache_356.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild3039-3061-4433-b030-646365333238/-/resizeb/20x/Apartment_14.png
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild3061-3530-4762-a634-643162363737/-/resizeb/20x/Night_01.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild3065-6235-4663-b331-623064626663/-/resizeb/20x/Apartment_6_1.png
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild3137-3466-4865-b663-396335366161/-/resizeb/20x/Apartment_12.png
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild3234-6435-4139-a630-333832333134/-/resizeb/20x/10.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild3238-3737-4863-b364-353434636432/-/resizeb/20x/04.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild3366-3231-4264-b438-306335373163/-/resizeb/20x/Full_Ground.png
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild3435-3763-4564-b634-373233303864/-/resizeb/20x/05.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild3634-6431-4564-b735-633463656536/-/resizeb/20x/taras3.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild3663-3635-4365-b735-393766313137/-/resizeb/20x/01.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild3832-3366-4631-b063-353464373162/-/resizeb/20x/07.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild3934-3836-4036-a433-333232646436/-/resizeb/20x/Apartment_4.png
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild6230-6437-4163-a262-373465643835/-/resizeb/20x/Apartment_3_1.png
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild6265-6530-4236-a436-303039626332/-/resizeb/20x/Apartment_5.png
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild6331-6166-4535-b233-663033316636/-/resizeb/20x/image.png
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild6335-6438-4735-b439-643130626636/-/resizeb/20x/Apartment_11.png
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild6437-3938-4537-a565-646531386230/-/resizeb/20x/Night_02.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild6437-3965-4062-b861-633362613735/-/resizeb/20x/09.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild6439-3738-4561-b630-653430626564/-/resizeb/20x/Apartment_13.png
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild6561-6166-4166-a138-666434396361/-/resizeb/20x/11.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild6564-6166-4662-b430-623864636138/-/resizeb/20x/03.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://thb.tildacdn.one/tild6634-6437-4332-a261-376332653038/-/resizeb/20x/Apartment_2.png
Source: chromecache_299.2.dr	String found in binary or memory: https://tilda.cc/registration/
Source: chromecache_384.2.dr	String found in binary or memory: https://ws.tildacdn.com
Source: chromecache_384.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_369.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_369.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_369.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_356.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_369.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_384.2.dr	String found in binary or memory: https://www.google.com/maps/embed?pb=
Source: chromecache_358.2.dr, chromecache_240.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/16671369731/?random
Source: chromecache_356.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_356.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_441.2.dr, chromecache_292.2.dr, chromecache_356.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_369.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_384.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_384.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-P78MTL62
Source: chromecache_441.2.dr, chromecache_292.2.dr, chromecache_356.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_382.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_287.2.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: chromecache_382.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443

Source: unknown

HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49811 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@24/402@70/21

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=1912,i,4966215485567083278,9426922408629113011,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://aholding-croatia.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5908 --field-trial-handle=1912,i,4966215485567083278,9426922408629113011,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=1912,i,4966215485567083278,9426922408629113011,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5908 --field-trial-handle=1912,i,4966215485567083278,9426922408629113011,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
http://g.co/dev/maps-no-account	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://connect.facebook.net/en_US/fbevents.js	0%	URL Reputation	safe
https://goo.gle/js-api-loading	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	0%	URL Reputation	safe
https://support.google.com/fusiontables/answer/9185417).	0%	URL Reputation	safe
https://developers.google.com/maps/deprecations	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	0%	URL Reputation	safe
https://player.vimeo.com/video/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
edge-block-www-env.dropbox-dns.com	162.125.66.15	true	false	unknown
ws.tildacdn.com	178.248.236.28	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
aholding-croatia.com	5.181.161.19	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
googleads.g.doubleclick.net	142.250.186.66	true	false	unknown
geo.tildacdn.com	5.181.161.195	true	false	unknown
neo.tildacdn.com	5.181.161.181	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
td.doubleclick.net	142.250.186.98	true	false	unknown
stat.tildacdn.com	193.3.17.197	true	false	unknown
cl-1707279c.gcdn.co	92.223.124.62	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
static.tildacdn.one	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
optim.tildacdn.one	unknown	unknown	false	unknown
thb.tildacdn.one	unknown	unknown	false	unknown
dl.dropbox.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
dl.dropboxusercontent.com	unknown	unknown	false	unknown
static.tildacdn.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://thb.tildacdn.one/tild6561-6166-4166-a138-666434396361/-/resizeb/20x/11.jpg	false		unknown
https://optim.tildacdn.one/tild3663-3635-4365-b735-393766313137/-/resize/900x500/-/format/webp/01.jpg	false		unknown
https://static.tildacdn.com/tild3234-6435-4139-a630-333832333134/10.jpg	false		unknown
https://static.tildacdn.one/js/tilda-zero-scale-1.0.min.js	false		unknown
https://static.tildacdn.one/tild3938-6466-4465-b630-313637633536/image_179.svg	false		unknown
https://static.tildacdn.one/ws/project10309827/tilda-blocks-page53194931.min.js?t=1725003854	false		unknown
https://optim.tildacdn.one/tild6437-3965-4062-b861-633362613735/-/resize/900x500/-/format/webp/09.jpg	false		unknown
https://static.tildacdn.com/tild6437-3938-4537-a565-646531386230/Night_02.jpg	false		unknown
https://static.tildacdn.one/css/tilda-forms-1.0.min.css	false		unknown
https://neo.tildacdn.com/js/tilda-fallback-1.0.min.js	false		unknown
https://static.tildacdn.one/css/tilda-grid-3.0.min.css	false		unknown
https://static.tildacdn.com/tild3663-3635-4365-b735-393766313137/01.jpg	false		unknown
https://static.tildacdn.one/js/tilda-submenublocks-1.0.min.js	false		unknown
https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0	false		unknown
https://optim.tildacdn.one/tild3634-6139-4566-a231-383662633464/-/resize/600x500/-/format/webp/image.png	false		unknown
https://optim.tildacdn.one/tild3663-3635-4365-b735-393766313137/-/format/webp/01.jpg	false		unknown
https://optim.tildacdn.one/tild6437-3938-4537-a565-646531386230/-/resize/900x500/-/format/webp/Night_02.jpg	false		unknown
https://connect.facebook.net/signals/config/3778676962456122?v=2.9.170&r=stable&domain=aholding-croatia.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112	false		unknown
https://connect.facebook.net/en_US/fbevents.js	false	URL Reputation: safe	unknown
https://optim.tildacdn.one/tild3234-6435-4139-a630-333832333134/-/resize/900x500/-/format/webp/10.jpg	false		unknown
https://dl.dropbox.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0	false		unknown
https://thb.tildacdn.one/tild3061-3530-4762-a634-643162363737/-/resizeb/20x/Night_01.jpg	false		unknown
https://optim.tildacdn.one/tild3435-3763-4564-b634-373233303864/-/format/webp/05.jpg	false		unknown
https://static.tildacdn.one/css/tilda-animation-2.0.min.css	false		unknown
https://optim.tildacdn.one/tild3234-6435-4139-a630-333832333134/-/format/webp/10.jpg	false		unknown
https://optim.tildacdn.one/tild3832-3366-4631-b063-353464373162/-/format/webp/07.jpg	false		unknown
https://static.tildacdn.com/tild3238-3737-4863-b364-353434636432/04.jpg	false		unknown
https://aholding-croatia.com/	false		unknown
https://static.tildacdn.one/lib/tildaicon/63316563-3530-4438-b236-386566363465/sn_youtube.svg	false		unknown
https://static.tildacdn.com/tild3435-3763-4564-b634-373233303864/05.jpg	false		unknown
https://static.tildacdn.com/lib/flags/flags7.png	false		unknown
https://static.tildacdn.one/css/highlight.min.css	false		unknown
https://static.tildacdn.one/js/tilda-skiplink-1.0.min.js	false		unknown
https://static.tildacdn.one/js/highlight.min.js	false		unknown
https://aholding-croatia.com/#our-projects	false		unknown
https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0	false		unknown
https://thb.tildacdn.one/tild6230-6437-4163-a262-373465643835/-/resizeb/20x/Apartment_3_1.png	false		unknown
https://static.tildacdn.one/css/tilda-zoom-2.0.min.css	false		unknown
https://thb.tildacdn.one/tild3435-3763-4564-b634-373233303864/-/resizeb/20x/05.jpg	false		unknown
https://optim.tildacdn.one/tild3832-3366-4631-b063-353464373162/-/resize/900x500/-/format/webp/07.jpg	false		unknown
https://optim.tildacdn.one/tild6564-6166-4662-b430-623864636138/-/format/webp/03.jpg	false		unknown
https://thb.tildacdn.one/tild3634-6139-4566-a231-383662633464/-/resizeb/20x/image.png	false		unknown
https://static.tildacdn.one/js/tilda-events-1.0.min.js	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=3778676962456122&ev=PageView&dl=https%3A%2F%2Faholding-croatia.com%2F&rl=&if=false&ts=1728339267284&sw=1280&sh=1024&v=2.9.170&r=stable&a=pltilda&ec=0&o=4126&fbp=fb.1.1728339267281.802210285189088884&ler=empty&cdl=API_unavailable&it=1728339263462&coo=false&rqm=FGET	false		unknown
http://aholding-croatia.com/	false		unknown
https://optim.tildacdn.one/tild3039-3739-4331-b732-363433636164/-/resize/600x500/-/format/webp/image.png	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=3778676962456122&ev=PageView&dl=https%3A%2F%2Faholding-croatia.com%2F%23contact-us&rl=&if=false&ts=1728339320643&sw=1280&sh=1024&v=2.9.170&r=stable&a=pltilda&ec=0&o=4126&fbp=fb.1.1728339267281.802210285189088884&ler=empty&cdl=API_unavailable&it=1728339318172&coo=false&rqm=FGET	false		unknown
https://www.facebook.com/tr/?id=3778676962456122&ev=PageView&dl=https%3A%2F%2Faholding-croatia.com%2F%23our-projects&rl=&if=false&ts=1728339286379&sw=1280&sh=1024&v=2.9.170&r=stable&a=pltilda&ec=0&o=4126&fbp=fb.1.1728339267281.802210285189088884&ler=empty&cdl=API_unavailable&it=1728339286056&coo=false&rqm=GET	false		unknown
https://optim.tildacdn.one/tild3061-3530-4762-a634-643162363737/-/resize/900x500/-/format/webp/Night_01.jpg	false		unknown
https://thb.tildacdn.one/tild6335-6438-4735-b439-643130626636/-/resizeb/20x/Apartment_11.png	false		unknown
https://optim.tildacdn.one/tild3238-3737-4863-b364-353434636432/-/format/webp/04.jpg	false		unknown
https://static.tildacdn.one/js/hammer.min.js	false		unknown
https://static.tildacdn.one/js/tilda-menusub-1.0.min.js	false		unknown
https://thb.tildacdn.one/tild6634-6437-4332-a261-376332653038/-/resizeb/20x/Apartment_2.png	false		unknown
https://static.tildacdn.one/css/tilda-menusub-1.0.min.css	false		unknown
https://thb.tildacdn.one/tild6265-6530-4236-a436-303039626332/-/resizeb/20x/Apartment_5.png	false		unknown
https://thb.tildacdn.one/tild3137-3466-4865-b663-396335366161/-/resizeb/20x/Apartment_12.png	false		unknown
https://thb.tildacdn.one/tild3663-3635-4365-b735-393766313137/-/resizeb/20x/01.jpg	false		unknown
https://static.tildacdn.one/js/tilda-lazyload-1.0.min.js	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_382.2.dr	false	URL Reputation: safe	unknown
http://www.broofa.com	chromecache_282.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/embed/	chromecache_287.2.dr	false		unknown
https://static.tildacdn.one/tild6439-3738-4561-b630-653430626564/Apartment_13.png	chromecache_384.2.dr	false		unknown
http://g.co/dev/maps-no-account	chromecache_282.2.dr	false	URL Reputation: safe	unknown
https://static.tildacdn.one/tild6437-3938-4537-a565-646531386230/Night_02.jpg	chromecache_384.2.dr	false		unknown
https://static.tildacdn.one/tild3634-6431-4564-b735-633463656536/taras3.jpg	chromecache_384.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_369.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_356.2.dr	false		unknown
https://www.youtube.com/iframe_api	chromecache_382.2.dr	false		unknown
https://static.tildacdn.	chromecache_261.2.dr, chromecache_251.2.dr	false		unknown
https://goo.gle/js-api-loading	chromecache_282.2.dr	false	URL Reputation: safe	unknown
https://ws.tildacdn.com	chromecache_384.2.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_369.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/pagead/1p-user-list/16671369731/?random	chromecache_358.2.dr, chromecache_240.2.dr, chromecache_321.2.dr	false		unknown
https://static.tildacdn.one/tild3030-6636-4764-a633-633162613234/6.png	chromecache_384.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_282.2.dr	false	URL Reputation: safe	unknown
https://static.tildacdn.one/tild6265-6530-4236-a436-303039626332/Apartment_5.png	chromecache_384.2.dr	false		unknown
https://support.google.com/fusiontables/answer/9185417).	chromecache_282.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/deprecations	chromecache_282.2.dr	false	URL Reputation: safe	unknown
https://static.tildacdn.one/tild3934-3836-4036-a433-333232646436/Apartment_4.png	chromecache_384.2.dr	false		unknown
https://static.tildacdn.one/tild6335-6438-4735-b439-643130626636/Apartment_11.png	chromecache_384.2.dr	false		unknown
https://static.tildacdn.one/tild3061-3530-4762-a634-643162363737/Night_01.jpg	chromecache_384.2.dr	false		unknown
https://static.tildacdn.one	chromecache_384.2.dr	false		unknown
https://static.tildacdn.one/tild3663-3635-4365-b735-393766313137/01.jpg	chromecache_384.2.dr	false		unknown
https://support.google.com/maps?p=kml	chromecache_212.2.dr	false		unknown
https://static.tildacdn.one/js/tilda-polyfill-1.0.min.js	chromecache_384.2.dr	false		unknown
https://static.tildacdn.one/tild3832-3366-4631-b063-353464373162/07.jpg	chromecache_384.2.dr	false		unknown
http://schema.org/ImageObject	chromecache_384.2.dr	false		unknown
https://cct.google/taggy/agent.js	chromecache_441.2.dr, chromecache_292.2.dr, chromecache_382.2.dr, chromecache_356.2.dr	false	URL Reputation: safe	unknown
https://connect.facebook.net/	chromecache_435.2.dr	false	URL Reputation: safe	unknown
https://static.tildacdn.one/tild6331-6166-4535-b233-663033316636/image.png	chromecache_384.2.dr	false		unknown
https://static.tildacdn.one/tild6230-6437-4163-a262-373465643835/Apartment_3_1.png	chromecache_384.2.dr	false		unknown
https://www.google.%/ads/ga-audiences	chromecache_369.2.dr	false		unknown
https://neo.tildacdn.com/js/tilda-fallback-advanced-1.0.min.js	chromecache_261.2.dr, chromecache_251.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	chromecache_282.2.dr	false	URL Reputation: safe	unknown
https://tilda.cc/registration/	chromecache_299.2.dr	false		unknown
https://aholding-croatia.com/thank-you-page	chromecache_384.2.dr	false		unknown
https://player.vimeo.com/video/	chromecache_287.2.dr	false	URL Reputation: safe	unknown
https://static.tildacdn.one/tild6437-3965-4062-b861-633362613735/09.jpg	chromecache_384.2.dr	false		unknown
https://sysstat.tildacdn.com/api/	chromecache_259.2.dr, chromecache_234.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
5.181.161.19	aholding-croatia.com	Moldova Republic of	39144	ARAGON-ASES	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.185.162	unknown	United States	15169	GOOGLEUS	false
5.181.161.181	neo.tildacdn.com	Moldova Republic of	39144	ARAGON-ASES	false
142.250.186.98	td.doubleclick.net	United States	15169	GOOGLEUS	false
5.181.161.197	unknown	Moldova Republic of	39144	ARAGON-ASES	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
193.3.17.197	stat.tildacdn.com	Denmark	2107	ARNES-NETAcademicandResearchNetworkofSloveniaSI	false
162.125.66.15	edge-block-www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
157.240.251.9	unknown	United States	32934	FACEBOOKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
172.217.23.100	unknown	United States	15169	GOOGLEUS	false
92.223.124.62	cl-1707279c.gcdn.co	Austria	199524	GCOREAT	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
142.250.186.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
5.181.161.195	geo.tildacdn.com	Moldova Republic of	39144	ARAGON-ASES	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528489
Start date and time:	2024-10-08 00:13:17 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://aholding-croatia.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@24/402@70/21
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://aholding-croatia.com/#our-projects Browse: https://aholding-croatia.com/cases/privlaka-relax-residence Browse: https://aholding-croatia.com/#contact-us

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 142.250.185.78, 64.233.167.84, 34.104.35.123, 172.217.18.3, 142.250.186.42, 172.217.18.8, 184.28.90.27, 142.250.185.234, 142.250.185.74, 142.250.186.74, 142.250.181.234, 216.58.206.42, 142.250.184.202, 142.250.185.202, 142.250.185.170, 172.217.16.138, 142.250.185.106, 142.250.74.202, 172.217.18.10, 216.58.212.138, 142.250.184.234, 142.250.185.138, 142.250.185.104, 52.149.20.212, 172.217.18.14, 199.232.210.172, 192.229.221.95, 20.3.187.198, 216.58.212.170, 216.58.206.74, 142.250.185.227, 142.250.185.67, 142.250.186.99, 142.250.186.78, 88.221.110.91, 2.16.100.168
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, maps.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, e16604.g.akamaiedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, prod.fs.microsoft.com.akadns.net, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, maps.gstati
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://aholding-croatia.com/

Input	Output
URL: https://aholding-croatia.com/ Model: jbxai	{ "brand":["A-HOLDING"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Apartments for sale", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Residence Adriatic Privlaka Relax Residence", "has_visible_qrcode":false}

URL: https://aholding-croatia.com/ Model: jbxai	{ "brand":["A-HOLDING"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Apartments for sale", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Residence Adriatic Privlaka Relax Residence", "has_visible_qrcode":false}

URL: https://aholding-croatia.com/ Model: jbxai	{ "brand":["A-HOLDING"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Apartments for sale", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Residence Adriatic Privlaka Relax Residence", "has_visible_qrcode":false}

URL: https://aholding-croatia.com/#our-projects Model: jbxai	{ "brand":["A-HOLDING"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Apartments for sale", "has_visible_qrcode":false}

URL: https://aholding-croatia.com/cases/privlaka-relax-residence Model: jbxai	{ "brand":["A-HOLDING"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Contact us", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Privlaka Relax Residence Open a new chapter of your life in a premium residential complex in the heart of the Adriatic. Croatia, Privlaka (Zadar). Start of construction: September 15, 2024 Completion of construction: May 15, 2025", "has_visible_qrcode":false}

URL: https://aholding-croatia.com/cases/privlaka-relax-residence Model: jbxai	{ "brand":["A-HOLDING"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Contact us", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Privlaka Relax Residence Open a new chapter of your life in a premium residential complex in the heart of the Adriatic. Croatia, Privlaka (Zadar). Start of construction: September 15, 2024 Completion of construction: May 15, 2025", "has_visible_qrcode":false}

URL: https://aholding-croatia.com/cases/privlaka-relax-residence Model: jbxai	{ "brand":["A-HOLDING"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Contact us", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Privlaka Relax Residence Open a new chapter of your life in a premium residential complex in the heart of the Adriatic. Croatia, Privlaka (Zadar). Start of construction: September 15, 2024 Completion of construction: May 15, 2025", "has_visible_qrcode":false}

URL: https://aholding-croatia.com/#contact-us Model: jbxai	{ "brand":["A-HOLDING"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Send", "text_input_field_labels":["Your Full Name", "Your Email"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Contact us Phone/WhatsApp: +385955577991 Email: info@aholding-invest.com", "has_visible_qrcode":false}

URL: https://aholding-croatia.com/#contact-us Model: jbxai	{ "brand":["A-HOLDING"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Send", "text_input_field_labels":["Your Full Name", "+1(999)999-9999", "Your Email"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Contact us Phone/WhatsApp: +385955577991 Email: info@aholding-invest.com Your Full Name +1(999)999-9999 Your Email What object would you like to discuss? Residence Adriatic Privilaka Relax Residence Comments I agree with the privacy policy", "has_visible_qrcode":false}

URL: https://aholding-croatia.com/#contact-us Model: jbxai	{ "phishing_score":7, "brands":"A-HOLDING", "legit_domain":"aholding.hr", "classification":"unknown", "reasons":["The brand 'A-HOLDING' is not widely recognized, making it difficult to classify as 'known' or 'wellknown'.", "The URL 'aholding-croatia.com' contains a hyphen and an additional geographic term 'croatia', which is a common tactic in phishing URLs to appear legitimate.", "The legitimate domain for a Croatian company named 'A-HOLDING' would likely be 'aholding.hr', given the local domain extension.", "The presence of a generic input field 'Your Full Name' without further context or security measures is suspicious."], "brand_matches":[false], "url_match":true, "brand_input":"A-HOLDING", "input_fields":"Your Full Name"}

URL: https://aholding-croatia.com/#contact-us Model: jbxai	{ "phishing_score":7, "brands":"A-HOLDING", "legit_domain":"a-holding.com", "classification":"unknown", "reasons":["The brand 'A-HOLDING' is not widely recognized, making it difficult to classify as 'known' or 'wellknown'.", "The URL 'aholding-croatia.com' contains a hyphen, which is often used in phishing attempts to mimic legitimate domains.", "The domain 'aholding-croatia.com' does not match the expected domain 'a-holding.com', suggesting a potential phishing attempt.", "The presence of a geographic term 'croatia' in the domain name could indicate a regional branch, but it is also a common tactic in phishing to add extra words to legitimate-sounding domains."], "brand_matches":[false], "url_match":true, "brand_input":"A-HOLDING", "input_fields":"Your Full Name"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 21:14:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9778638357786202
Encrypted:	false
SSDEEP:	48:8EdJsTKGEHHidAKZdA19ehwiZUklqehRy+3:8AsrYqy
MD5:	FF229FAA705C80A81E8D1CDEC8578CAF
SHA1:	08DE406EB57D1A900405AEB4C78436FC871D64D1
SHA-256:	BF96047A325F236AE5361D03F196853F838A44528E1FAE0E0988204EE942E4F5
SHA-512:	BE11EBF627B89C9A4266A0D9E9E876905AAD4E95E4CADEBFC87A8EF46511E76A38216891F9446FE0A2A9F356EBDA67527FD0DC9CB3A1B896331C850E8D1C23E7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........)e.V.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 21:14:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9943940683717294
Encrypted:	false
SSDEEP:	48:8XNdJsTKGEHHidAKZdA1weh/iZUkAQkqehay+2:8Zsry9Q/y
MD5:	FBF90D68A747F2B0A7C9A6A7A6684010
SHA1:	EAC52044F0AD714042E674ED1AA71A5B83ED3FC6
SHA-256:	6483ADC7D251E41A5A6BE516168598838700CBB1E8469AFFD1BADB49CC806CD4
SHA-512:	E3A6777024D96424D38955737E6E539C9734D0791081242D2EA271C2C39C71B1FF6CBB226529FCFA53D29DF661A5D2C3D0E1D8D22FBF04262B05AF07C28075D3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........)e.V.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.002040116076215
Encrypted:	false
SSDEEP:	48:8xvdJsTKGsHHidAKZdA14tseh7sFiZUkmgqeh7soy+BX:8xfsrSnGy
MD5:	0F26B7773B787753A3F0F9991E30E58D
SHA1:	82F8386441E5351A3BE9A54707DABC13EA71C666
SHA-256:	38AD75088BAA883C5A8F8644B87D37BBE58CA55ADA4EB591E658DE6CF7E99A60
SHA-512:	B8C544DEF9C60382EA4D1FCC594293D0D6A80086A209B7078DEC6920D3658B92EDAB66B44B7C5E3D8413B5B3A1A8A3A76B01B6C8CF151B943D41CFB8897D686A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........)e.V.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 21:14:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.992538880683662
Encrypted:	false
SSDEEP:	48:83dJsTKGEHHidAKZdA1vehDiZUkwqehuy+R:83srZQy
MD5:	3C9103772E37B498AD75B6CB930FF529
SHA1:	8A4B5FA4B27EABB141A8287DC8E4F04BDB2B7949
SHA-256:	955A8F3BC5C509E25A25ECA4CF3DF1E1E420B551B823B8DD87249E527BA94D30
SHA-512:	6EC2198DB34BEC82FA905453E202BC0B8C2BC85002F2A24333C014E4677AD6FD66CC114805CD8ACFABDE4ADA9C6115A87C6FEA26DCADF7CCFDDB5FB46CDEC6E5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....@.>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........)e.V.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 21:14:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.979605438774435
Encrypted:	false
SSDEEP:	48:8idJsTKGEHHidAKZdA1hehBiZUk1W1qehUy+C:8ysrp90y
MD5:	2A6F1C1F6FB58765D1464207A78DC02B
SHA1:	1A58CBFFEE5BEEAD65F74A7AF193F1CEA2F5B2DC
SHA-256:	6F685B631EC4626C0EDCED1A10433441C5D22DAB111B83D95B15EA280540DFDC
SHA-512:	D133668B98A0DD8AEEFFA6D6F278D3F8F862EF99734A09DD15621840ADA2A72B27526FE758C9FDB051406E2A4C49D0CC1B43862244769FC6665FC17F5D4BBDFA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....i$.>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........)e.V.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 21:14:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9912520301512306
Encrypted:	false
SSDEEP:	48:88dJsTKGEHHidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbGy+yT+:8Isr1T/TbxWOvTbGy7T
MD5:	ABDC80331CC1E6AF986F4365A3E845EA
SHA1:	C341AE25D23DBD4F4741053CD260896164D5DA20
SHA-256:	6C2DA4CB64CAB3176AFBBD9B66F4FA5E8BCE70800651BEAEE9BFA2DA07D39363
SHA-512:	1FB41C226FB3A7BC3FEE383D438613F8FA52256BE21D32D4AAFA448646A9261592C685A2167D7FED193F0AB6F6C34FD0883A5816873EEF4365E7B310676247A6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........)e.V.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	downloaded
Size (bytes):	297928
Entropy (8bit):	7.975697833803698
Encrypted:	false
SSDEEP:	6144:+F/Ttp7zsVVzb9i2u/OycxOzxGTyuWxAorHMtYW77ZQK4bEWf9Nxyzzk:Kpp7Kzbc2yOycMw3Wre7NgBfxyzzk
MD5:	8436B470F8BBF293AEF48EC4289532BD
SHA1:	853E556A0778F9102ECABC42088624D91BC47D94
SHA-256:	0A95B54A5E04C3062D81DB61D3AC54CD270AFFC0B7A042FA28B545C5613BCE92
SHA-512:	297EBDC4BFF8BBB5E50F2EC870A2F95A69ED227D87B20483F63462293B6BFCD785A8586898AFB089D293DDF68001583362F1A70E4F100C8C2013831382285D24
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.com/tild6437-3938-4537-a565-646531386230/Night_02.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0.............................................b.........................!1A..Qa"q..2....#B...Rb..$3r......%4Cs.&6DSTcdt....5....u....'Ue7EFV.................................4......................!.1A.Q."2aq...B......#R.3.4b............?.......^......).\ H...D.l .B...@....4..Cd..E...h.h....J..d...i...$.j...4....).R.......P..D.........$. )...D..!.... ..........M(WH-@v@.+WHv..P... .....P...Qi.&.....).$....)......H..SH..(..(SA}...4................@}..P...4.@&.@ ...H..............)".D...@ h.....@}........".A...~..J......8T;P%@.EA.,.EF...,..'..H.T.. D.T....e6....l....P..6."....)P..` . )@"...D....T..@...qj+......P.T$......FB).(.. T.H...D......@...6. ).\ .......H..D..@ H.WHj(@...".. H......R...@ .....@R.....H. H....T$P.....@...,.... . .B E...(D......W.. E...@..H..:E$..:D.......$.R..H. ....... H.@.I". ).H....T.@ ...)X.P...

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:D:D
MD5:	7516FD43ADAA5E0B8A65A672C39845D2
SHA1:	AA3093554472FD113135BED5B63E12F84C2E9FE8
SHA-256:	9B202ECBC6D45C6D8901D989A918878397A3EB9D00E8F48022FC051B19D21A1D
SHA-512:	8A76767D863ACF40AB29D713E6979F1E8568449A14227F8ACE9F4B67EEBAEF85B25AE8082738AD3704BC483A5A94CCFC24F659D1492E0215C77513C0AC04A117
Malicious:	false
Reputation:	low
URL:	https://geo.tildacdn.com/geo/country/
Preview:	US

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	downloaded
Size (bytes):	480029
Entropy (8bit):	7.977997805693447
Encrypted:	false
SSDEEP:	12288:jN4yhA9Ii4v25T9m4gVA9xGOnLAPbAjF91yD:JfC9R4vwhmHVwxGOnSbIkD
MD5:	6F9ACBC5187F7A4DBF7CD93526060701
SHA1:	2772E1AEF07FB3934071E60BF27A42BB14B47F15
SHA-256:	501F2CE1CE59E366A42D23BE63E25B4169C460B9F933A810474AC490F4C36643
SHA-512:	77155F47C98A1A9DA739C4D50C4569E7E24B7074D594D296CFC8EC408718D4331DA68B2215554003B0EB1F465562215C0181FB41F5E806C5F6C23D2027C202B5
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.com/tild6564-6166-4662-b430-623864636138/03.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0.............................................b................!........!1A.."Q.aq..2..#B..R....$3br..C.....S...%4Dcs..'5Ed...&7Tt..6Ueu...F...................................;.....................!..1AQ..a."q..2........#B3R.bCr$................?..M.W..`..,.o.E.KM.p.z.T...E.j.#.@..:.1...Y-..d...,U.,T.......EL.\T.V;p.B..J.H.TA.~UH4.P7e,..A@..`k%i2...[ .R.-.P. P.)T...".A`P!.1.B.i.. ....... ..qYh.a-...#.. .=..@. .U .u.....B....,...r...i1..Y44..L....A@..YeY...j.i!.J.K... .M..!.;R...@.,.1..Q...T@..R22..`[.Ab..()....iHz..O.6........*.,...ZF^H.C.......J.......fhAG...m.R...Q...T"...=C.h.i$.Plh.@.".B..\..8.R%.f...iEB.@.P.QB..T....;u.X7f...(.....j...(QWi7Pc....FD.@{.F..x9...\b.Fl.,...[.L9.;..+.9.U .k..!.E(......mL.&.W7.jD..;.v.R'YW..6..eS..w"/0....D.kH...........vh.([....T8.....H...6..z..m...j.).`q....5......U.;

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	613
Entropy (8bit):	7.544108853146711
Encrypted:	false
SSDEEP:	12:6v/7Xr0qFhkwhDJard7CRvcAg86hGrzchXP5t1Cz1v3/yywOeLyfG:bqFhFj8eRUAg86U4hXs1v68fG
MD5:	0CE4C8A00760761AA93467C1B712B9DE
SHA1:	F38819B5AADF25FB89F8DFA50A72152212449D82
SHA-256:	D88013C025DFEF53DF44FCC50056DC7CA8DE3F30EFD4188280CD396DC570D507
SHA-512:	BF0CD888117D24BE3FA11C458E5F7351E3C2C56155A9DFA0C9D5DD5DA365AC5AB32DA7F4835B884BEAC0005A724D9E7F4AEF87BAA71E736C31A48AC3A4F34120
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b.......pHYs...........~.....IDAT(.m.n.0....+N.6,.w.Ax.=....&.'.,?.6...L.u.D[..-.V..@."..."..k..>.KX..e...H.r...C.kP......Xo.xK..^.'...x.,R<.g$:E......395...Z1R.....$..M.....7....S.....#Y1......H. .......d..)A\....u.....bV..9"...Ib..O....El....4.f1.\|E..='.'h....Ch.C\|xa..\|..<?...QvM).T..[w-..C.;.....:......._..Gg\|.L.K..]......}.....%7#..%7D..M..71.5......MH..Mi.5.z.\|.-....y(.iV....C......#LUIVq.UkQ.Q.XS...._C........)xl...x..&~co.8#.5.X...I..{WB.%.X.J...Vn.W.9.c..@...}.o.{1XpG..H.C8R...#..X.\|l.v<........9...D\|.......}....m;b......e.......IEND.B`.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	606
Entropy (8bit):	7.512490201514892
Encrypted:	false
SSDEEP:	12:6v/7XoGyxGb23sQDyIP94xJBy9olzAv+swy6bw7ZIZtwbHg:RRUVo94xPin1IZtwc
MD5:	03118F55FDE75A1EBD759C5993108051
SHA1:	DA76092DB15CAC20F70EAC18F33865AC4D4E1F04
SHA-256:	4A710213870DB815D33E24D126F9D815A11B29846489D842F8C31F534123A5D0
SHA-512:	C10734DB93D4B4004C7FC642AA2E707DC46D3A383F3D8CE97FE9432CAA7563A2A581C8F5B6D446575487701415B8369B92EEF5E3CECDC76D0762C1529A4C4D28
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b.......pHYs...........~.....IDAT(.U..r.0.D..?.8...wb.H.....U........6k..N...N.....@.^..O.k$.a]......q.n....Mp....tP.\|.U.W..so...9...\..1..X].U\.M9.xX.'.............#..0VC;..-.w.ML.H.....p.t}............/({b. ..I.4.hHk.hga).L..sw........'..S...7J.X&V...r..(.J.E.(5L....d.S.A.s.].?....CI..0....]....jU..',.'\|........%....BI.dJYdD1...R...tw.O..o....w\|...a.)F(.@Q..EUF...9....e.%.d.1E<....".~J..jf.%.K4ER.,.(s..R.r.h#.::r<....^....B.9.F..V().*.HL.q..L.Vd..l.9.u.g..........c!<H1.5.\|..\|..rs[C...9:......s.l..o).m.$=X...m...e..../.....oA.....IEND.B`.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	187527
Entropy (8bit):	5.653416184606529
Encrypted:	false
SSDEEP:	3072:DxJytW8fIqgeSwAX03dHFaBvOd43FK9+e5aUFD/98xh43KlH0XaCwleuiFFF0Env:dJylfIqgnwAk3eBvOd4VKR5ak98xhQKY
MD5:	B658B57F5811B1942D5CE93E9CB51D5B
SHA1:	3B6B3540A823A940AA76EA0149348035666D057C
SHA-256:	DDB0612E8C5BD7D49FCAEC37E2F32A1379B4268127B4BFA8AA8156539692FBCA
SHA-512:	C226DC92AB8AA2D1723B50A356E447EA00F9FE30B074F74B7A5BAE59E64D7B1748D01DF50CB34A8C3381C46B55A9B7AC86F3EA366E1C12D7A379AA13D22B4FAC
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/7/intl/uk_ALL/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Vya,Xya,Zya,$ya,aza,bza,dza,OC,QC,RC,fza,hza,UC,jza,VC,lza,WC,nza,mza,oza,pza,qza,rza,sza,tza,uza,vza,wza,xza,yza,zza,Aza,Bza,Cza,Dza,Eza,Fza,Gza,$C,Jza,bD,Kza,Lza,Mza,Nza,Oza,Pza,Qza,Rza,Sza,Tza,Uza,Wza,Yza,$za,bAa,dAa,fAa,hAa,jAa,lAa,nAa,oAa,pAa,qAa,rAa,sAa,tAa,uAa,cD,vAa,wAa,xAa,yAa,zAa,AAa,CAa,eD,fD,DAa,EAa,FAa,GAa,HAa,IAa,JAa,KAa,LAa,MAa,NAa,gD,OAa,hD,PAa,QAa,RAa,SAa,TAa,UAa,VAa,iD,WAa,jD,XAa,YAa,ZAa,$Aa,aBa,bBa,cBa,dBa,eBa,fBa,gBa,hBa,iBa,jBa,kBa,lBa,mBa,nBa,oBa,qBa,rBa,sBa,uBa,lD,vBa,wBa,.xBa,yBa,zBa,ABa,CBa,FBa,GBa,IBa,LBa,MBa,NBa,ED,FD,GD,PBa,ID,JD,KD,LD,ND,RBa,OD,SBa,TBa,UBa,PD,QD,RD,SD,TD,VBa,WBa,XBa,ZBa,$Ba,UD,aCa,YBa,dCa,eCa,$D,iCa,mCa,nCa,oCa,cE,pCa,rCa,sCa,tCa,uCa,fE,wCa,DCa,qE,GCa,FCa,sE,HCa,uE,JCa,KCa,LCa,NCa,OCa,TE,QCa,UE,RCa,SCa,TCa,UCa,WE,WCa,VCa,XCa,ZCa,aDa,cDa,gDa,eDa,hDa,fDa,XE,YE,kDa,lDa,ZE,$E,aF,cF,dF,eF,nDa,gF,hF,oDa,iF,pDa,jF,kF,qDa,lF,mF,rDa,nF,xD

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2512)
Category:	dropped
Size (bytes):	81537
Entropy (8bit):	5.533330486807108
Encrypted:	false
SSDEEP:	1536:P/JEJKogMzDhDhxDovBTRZdElfcBJpfZ/ni9PN0X4r0Z8WIcR5mZVarvhjn7N:HJEJK+zDhHDovBFZ+fOrf5ni9V0XDZ8q
MD5:	3DD7C4469105FCCD31C7E4736CC84B44
SHA1:	F630DE5A1FBA1CF301EB134E713411F9CCDF2AB7
SHA-256:	F82EF122482E30D385AF7C7DB65DF438CA47B90A7609F1A5895A2183F492CED6
SHA-512:	069F18AF933C248537EA98771B8E4256486C58F0A226242DB00E5FF962BEF49C9E62DCF87F7CB9134CCC8D2FD4F2425F278728D435F58D70CDC31FCD1CE8F0B0
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('map', function(_){var Cva=function(){var a=_.er();return _.hi(a.Gg,18)},Dva=function(){var a=_.er();return _.H(a.Gg,17)},Eva=function(a,b){return a.Eg?new _.cm(b.Eg,b.Fg):_.dm(a,_.mr(_.nr(a,b)))},Fva=function(a){if(!a.getDiv().hasAttribute("dir"))return!1;const b=a.getDiv().dir;return b==="rtl"?!0:b==="ltr"?!1:window.getComputedStyle(a.getDiv()).direction==="rtl"},Gva=function(a){return new Promise((b,c)=>{window.requestAnimationFrame(()=>{try{a?_.Km(a,!1)?b():c(Error("Error focusing element: The element is not focused after the focus attempt.")):.c(Error("Error focusing element: null element cannot be focused"))}catch(d){c(d)}})})},Hva=function(a,b){a.Fg.has(b);return new _.fra(()=>{Date.now()>=a.Ig&&a.reset();a.Eg.has(b)\|\|a.Hg.has(b)?a.Eg.has(b)&&!a.Hg.has(b)&&a.Eg.set(b,"over_ttl"):(a.Eg.set(b,_.Dn()),a.Hg.add(b));return a.Eg.get(b)})},aC=function(a,b){return _.$s(b).filter(c=>(0,_.Oqa)(c)?c===a.Eg\|\|c===a.Fg\|\|c.offsetWidth&&c.offsetHeight&&window.getComputed

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.975267852113163
Encrypted:	false
SSDEEP:	24576:EVlx9uAByBA4ZD2+Z076f0vQ/ty1jTWy6ekPE01PhJ5Ykuu1V:EVH0VB4+aunty1jTWy6E0h5YklV
MD5:	A8BBEBB5237AF7E7C30D794AA75166FE
SHA1:	8474F4DD748199A18D1503A5D762E07B0E111D48
SHA-256:	714005CDDB8ABD018C11862E08FBC7BA1FF0D3E7CEFA16DF95396660FD7EF105
SHA-512:	4C017E1C89F0150E1D86974C33B944C2716A0F326175571D59C9FEA5B84DB1AE7C4CA61414021A2F82941CFF56CDADE4E866F0E1951CB84C099DC419DF782FCB
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:1
Preview:	/.9.^.iO.Ij....y..>.?."M.o$...w..t....-K.U..#.J..r..w.e..in\..'.4.V.."i.."W)...EH....".;Md.3I...Ea.../~.^%.}9..J.zv...{.".RZD..x[.!.n.95....o..L.lv..m.)..1.t..P.. .r.. .Sv..D.......Z.<....aD..5./...cMo.5.>....S=P.F.`.se.I.N...Uf........GL..\R..Q.x.....(...5G...\.g.yss".gLfX8.......>.1.NW.f.y...=.7ZDfb.........I..VS\|.b.3{].F............y+..d9F.b.......q.?.9.....bS#.....q..a"c.....1...b.f.....1x......~A-.!..^NJ...+fh?q...cj5vB......>.q......[...&....fzO+.j..].."........vN.Oab.....t=.%.U....t.BZ7..w.;.....VC..fx.2.a>....Io..Fb.s....U...X]..(Is....u.I......'t..r....G{..,xE.V.1.).l...^.]Tf...~XmK.y....EZ.].>..dEs.K.-i4.5XW..b....)..x^..r..Um..."....d.....P....k.m..t}......f..... .......q/-...b+.....7\|...;\|.r..}..<.....O-........I.i.m....I...}8Ay.\...._.W.Z&Fz....&?D..s_d.F^.j"l.k.(...U..u.&.W.$..Y...._...k....x..7.#..ur...$..PBb..&64......Lx..W...\^..:.RjdQ-'.%I.E.x...........evog...z.....o{.tKTZ*B.Yp[!i...h.r.V.0.\R..m.r..D

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	dropped
Size (bytes):	406002
Entropy (8bit):	7.969442882710842
Encrypted:	false
SSDEEP:	6144:/OwWYn+HR8LwtjOuUKhv0oInNm1oR2nPpkzLMutRa3Jlm68H8WyrVD+:TIxywtSFMv05NE42nPpSt2mL8nY
MD5:	F6ADAE35660B22326F84B3D6DFE34BEF
SHA1:	96E1267379C3CD8466C60252118671AB4EFE2C3B
SHA-256:	0E2DD63506EACBBABA843CFA7037B78698FD05C7E08CA545EAB12D30A164D73E
SHA-512:	CAC3A7E4B57E5AD8C2DF83A879824B2AD6CC48CD5283B1020505CFD8EBF8D4B08957BE0275BB98CAB09353AAE70B83B38460144C7F9652B9A56C45A07A84FB56
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0.............................................d.........................!.1A."Qa..2q..#B.....3Rbr..$C....4st....%56Scd...&DETu..7....'...UVe..f..................................=.......................!1.AQ.."2aq.......3B..#R..4.$S.Cb.r.............?....\|...@..@.......P..(.........7...t(....Kw..oI/p.4.s-.M..d....S)o=....c.-O.....kK$...%=....N.m3.{o%vn.....'.....B}K..GAqfg.~....#...g..So.....+l..?}k.F^&R^~O.knN.5...l...UfF}9..^.8..g._.<KH...3W...C.S].].nl.V...e.....M,....i.hI.Z`....N..n0..Q..U4M$w8s$..+.T.U$)....5...L..lQ.l:....I.Hb6.6...a.G.F. HFf..W>..)....K..-+..SJ.oO....v...M%R6'..>..B......6.....Ypf..!....^G.$......@..Y.9][...f..%.../J.%.~.cB2..Gy..u]Dpf=.j.}.#>..J.6;..JD...1...iI.C.`Y....)..Fh....F%..V.F%..U1F%..Z..]..5.I.h..j...^Ul..t..X..7.?e..e.x....$u.SJ*a.C.M.L.+q<..4.Q.\/L.B...Q..'

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.988409267701199
Encrypted:	false
SSDEEP:	24576:zjKqSTPt+2/O0DQKpoz8RydmGvxo4a8ZzBtNAKsbYk:38Ptlm0jaz8RydFoGZzdAHYk
MD5:	255E16C7EE1B6641E1E472943B1A92A3
SHA1:	76CEE78F9B2E75FFBEE05EC9AA3D412FDC0409E0
SHA-256:	F78850D61C34C313B0CD8A232FCE141AF38921B4D8E9565BAD9167A5292283BE
SHA-512:	6A37CF09EF3E24A741583CDD73EF37F47EF05A38BDBB0405D261286AA5C80DED7DABB629D4A563FA63302D07C736EF8836032C4AD1F9F32FFFC809CEED18C668
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:0
Preview:	... ftypisom....isomiso2avc1mp41..$.moov...lmvhd....................................................................@...................................trak...\tkhd........................................................................@........8.....$edts....elst........................mdia... mdhd..............<............-hdlr........vide............VideoHandler....*minf....vmhd...............$dinf....dref............url ........stbl....stsd............avc1...........................8.H...H...............................................9avcC.d.(....gd.(..@x.'........ ......2....h..\|.........colrnclx...........btrt......1...1.....stts...................$stss...................]............ctts.....................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:D:D
MD5:	7516FD43ADAA5E0B8A65A672C39845D2
SHA1:	AA3093554472FD113135BED5B63E12F84C2E9FE8
SHA-256:	9B202ECBC6D45C6D8901D989A918878397A3EB9D00E8F48022FC051B19D21A1D
SHA-512:	8A76767D863ACF40AB29D713E6979F1E8568449A14227F8ACE9F4B67EEBAEF85B25AE8082738AD3704BC483A5A94CCFC24F659D1492E0215C77513C0AC04A117
Malicious:	false
Reputation:	low
Preview:	US

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	606
Entropy (8bit):	7.512490201514892
Encrypted:	false
SSDEEP:	12:6v/7XoGyxGb23sQDyIP94xJBy9olzAv+swy6bw7ZIZtwbHg:RRUVo94xPin1IZtwc
MD5:	03118F55FDE75A1EBD759C5993108051
SHA1:	DA76092DB15CAC20F70EAC18F33865AC4D4E1F04
SHA-256:	4A710213870DB815D33E24D126F9D815A11B29846489D842F8C31F534123A5D0
SHA-512:	C10734DB93D4B4004C7FC642AA2E707DC46D3A383F3D8CE97FE9432CAA7563A2A581C8F5B6D446575487701415B8369B92EEF5E3CECDC76D0762C1529A4C4D28
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild3065-6235-4663-b331-623064626663/-/resizeb/20x/Apartment_6_1.png
Preview:	.PNG........IHDR.............b.......pHYs...........~.....IDAT(.U..r.0.D..?.8...wb.H.....U........6k..N...N.....@.^..O.k$.a]......q.n....Mp....tP.\|.U.W..so...9...\..1..X].U\.M9.xX.'.............#..0VC;..-.w.ML.H.....p.t}............/({b. ..I.4.hHk.hga).L..sw........'..S...7J.X&V...r..(.J.E.(5L....d.S.A.s.].?....CI..0....]....jU..',.'\|........%....BI.dJYdD1...R...tw.O..o....w\|...a.)F(.@Q..EUF...9....e.%.d.1E<....".~J..jf.%.K4ER.,.(s..R.r.h#.::r<....^....B.9.F..V().*.HL.q..L.Vd..l.9.u.g..........c!<H1.5.\|..\|..rs[C...9:......s.l..o).m.$=X...m...e..../.....oA.....IEND.B`.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	DOS executable (COM, 0x8C-variant)
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.959260057298889
Encrypted:	false
SSDEEP:	24576:d69zWUcPdo/ulOwbZp1ONEOt73BWyjpAstF:s9zy+u4wb86unttF
MD5:	92A6F7B934A409DDDBBFEA3ADCDC43D5
SHA1:	4C158E66EBAF0D834B001F3F2E471C5869279702
SHA-256:	EB410AF2FE0F702781B0BE525FAB0D6D374D96CCECDFD16C4E6B056419C778E1
SHA-512:	F4E770A0484931BDC0B52162C26C8611641EABF4634CB8B1BAC43FF0279D06D90D7E8DC5AA676EB54E2196D777B029A5681221C1C1613E06958AE069284673CD
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:6
Preview:	.N..c..X?.h.B.:v........&.....'>...9..&!.U..Q<..aJ.x8.`...Z..=....:P.\q ..O.b.r.......b(.....`..J....Q..1.._...u..`.o.......)Y.-.c&/.[".A!(.8...Z_zU1..l.`...p.`x+.`a.N..d...bD..LWvJ......(..;.[.`.(w.(..D..(...I\|.....N.....z......xi..T...8c0......{.......,0L......i...h...a......h.."}F.....P.P.g0?....D..c..u.C.u.,(...h'.T.d..J...~...8..(Ad..:w....K.,..mU$...B..e.zw...?..=.1.%kX1...,m......(.n.B;.o.g...y..}M.....;...7ZfY.~F.p..8f.o#z...a......z...FN..=h.O9.}.......a...a.X.E....OD...t...).X......j.N..../S....=.#:.....V....RR...Oz.^.<...\|O.z.....(wTP..Rh{o.@Y1n.P.S.....I.M.%z..P..'...t....\S.....>K..J#.1...t...L...5./........x.w..J..G. .+.o.\.....R.TO/.7+wzZ...}.}.(..\|G{...5K.Z&/.J".N.w..o-..P........]3k....p...%..-....$b%i.......0(.....77...W......o,PL2....L.#R..br...).....}.......W... z..1[.....U.'>{.x.y.......4)..{..\|.../.7y.?..2.B..]v1..EC.:,Mpe..N.5...aL.l..Ni.......e... .%8... .u.....}_..B.rH<D...ry...,..`.F...hYG5.q..Jg..+-..Y,

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x11, components 3
Category:	dropped
Size (bytes):	832
Entropy (8bit):	6.352485440078224
Encrypted:	false
SSDEEP:	24:NYQi9YMWUo0XxDuLHeOWXG4OZ7DAJuLHenX3c8T:NYn9YMOuERAyI
MD5:	3D698533D93378350F1B607069047C2A
SHA1:	6957137279EAD84D4A495204C0C3614427B2BB9B
SHA-256:	53CDC35C961868FCFF64A116DC4083A2F009A7CA51DABB1038BD134FFB54250D
SHA-512:	29DA42077C064DFA48CC8D4D9BE9FA006F6F1C05BC05874E50F869E106A0798CEF8A668B348F908AC3AA8642E685C01ACEDA3C51903E66B59A288E732AA1E97C
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..05....UFzT..J.....uX.ES.}h..h.GL..

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4827)
Category:	downloaded
Size (bytes):	246256
Entropy (8bit):	5.705627056956243
Encrypted:	false
SSDEEP:	3072:PVEu2U7s/QadShrusrp9id4hgXPfmatH9p:Pqu5iKjN9ZhgXPfmatz
MD5:	3AA1F4E3551AB759D7ED2904377F5E2B
SHA1:	167BECEB3A99DD5DBF8B51FBE86CA9F0AA5988B8
SHA-256:	259C3D190124A14A00727719D2794C0567644D3AB4E70ED126B570D2B3AFBD1D
SHA-512:	E1A0F10880D7FE0BA63F15787A9BC0101C687C46ADC8E5854E79510D874D6A035909A05A5863C856EE542F0CD7039BC4F7EDC2D7B24DF74BF99774DCEB2F4ED7
Malicious:	false
Reputation:	low
URL:	https://maps.gstatic.com/maps-api-v3/embed/js/58/7/intl/uk_ALL/init_embed.js
Preview:	(function() {'use strict';function aa(){return function(a){return a}}function ba(){return function(){}}function ea(a){return function(){return this[a]}}function fa(a){return function(){return a}}var m;function ha(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ia=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ja(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var la=ja(this);function p(a,b){if(b)a:{var c=la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ia(c,a,{configurable:!0,writable:!0,value:b})}}.p("Symbol",function(a){function b(f){if(this instanceo

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	42445
Entropy (8bit):	5.385506041773314
Encrypted:	false
SSDEEP:	768:NDIfA5SonihN2nLEAsGHcSyl7ujzTCzkfz2pkpJvDy87EZ3yT:lIo5SonSknLx2Syl+zTCmty8vT
MD5:	D87F71A78EA32C4321E6FD1E59927464
SHA1:	F72AE6FC1E2E654536299911979CBCE8C2328E93
SHA-256:	5AD5171287C6D8CD3F604DF3559129C28C5AAEA6CC67CCDEF3D0A509DBDD7A64
SHA-512:	9DA75C60B23AD862452EB27C51519655B7F16D944107C9A6187C3A03C3CDCFA9B1975E698DF668BA0B29189676F0A27804738CFCA6811A52CB265340F11E4D0F
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/highlight.min.js
Preview:	!function(e){"undefined"!=typeof exports?e(exports):(window.hljs=e({}),"function"==typeof define&&define.amd&&define("hljs",[],function(){return window.hljs}))}(function(e){function t(e){return e.replace(/&/gm,"&").replace(/</gm,"<").replace(/>/gm,">")}function r(e){return e.nodeName.toLowerCase()}function a(e,t){var r=e&&e.exec(t);return r&&0==r.index}function n(e){return/^(no-?highlight\|plain\|text)$/i.test(e)}function i(e){var t,r,a,i=e.className+" ";if(i+=e.parentNode?e.parentNode.className:"",r=/\blang(?:uage)?-([\w-]+)\b/i.exec(i))return y(r[1])?r[1]:"no-highlight";for(i=i.split(/\s+/),t=0,a=i.length;a>t;t++)if(y(i[t])\|\|n(i[t]))return i[t]}function s(e,t){var r,a={};for(r in e)a[r]=e[r];if(t)for(r in t)a[r]=t[r];return a}function c(e){var t=[];return function a(e,n){for(var i=e.firstChild;i;i=i.nextSibling)3==i.nodeType?n+=i.nodeValue.length:1==i.nodeType&&(t.push({event:"start",offset:n,node:i}),n=a(i,n),r(i).match(/br\|hr\|img\|input/)\|\|t.push({event:"stop",offset:n,node:

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5590), with no line terminators
Category:	dropped
Size (bytes):	5590
Entropy (8bit):	5.337053728237261
Encrypted:	false
SSDEEP:	96:YTjp+EnjtTMTuTqToIJTIITqzToTCTeTyUd1EDwjTslhryvW9534QrDQeQrED7h1:IpRTMTuTqTocTBTqzToTCTeTy4MlhWvA
MD5:	F3CD7BF8C0F0FFEAD717E064B27FF2AF
SHA1:	0100B6577EC5B924A8AE1455E31EE0273B024CC5
SHA-256:	0D8EFCC663EF3B20C54173C784B0E6EB3B181371B9DD463AFD27BB66F7D29C4E
SHA-512:	59597CD4F4C4BA970A87DF9C4FC021DBDCFAA22851905D21C90B8DDC33D34834A85C43CB97A0056A379E80707F840750898E24B42B5847DDA5ED1D1F60872AAA
Malicious:	false
Reputation:	low
Preview:	function t_video_lazyload_init(){if("IntersectionObserver"in window){var e,t=300;/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)&&(t=150);var o=document.querySelectorAll(".t-video-lazyload:not(.t-video-no-lazyload)"),i=new IntersectionObserver((function(e,t){e.forEach((function(e){if(e.isIntersecting){var o=e.target;t.unobserve(o),t_video_lazyload__addVideo(o)}}))}),{rootMargin:t+"px 0px"});Array.prototype.forEach.call(o,(function(e){i.observe(e)}))}else t_video_lazyload__addVideoWithCheckViewport(),window.addEventListener("scroll",t_throttle((function(){t_video_lazyload__addVideoWithCheckViewport()}),300))}function t_video_lazyload__addVideoWithCheckViewport(){var e=document.documentElement.clientHeight,t=/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent),o=700,i;t&&(o=350),i=document.documentMode<9?Array.prototype.slice.call(document.querySelectorAll(".t-video-lazyload")).filter((function(e){var t=e.cl

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2162)
Category:	dropped
Size (bytes):	2163
Entropy (8bit):	4.94586153192999
Encrypted:	false
SSDEEP:	48:8jC0C+yf/Ix8/xvi5W79xf9mlo8DTifWgiDx/MgN3A++//uCWEi77+//7uTI:kLI/1i5Wpxf9miccWgiNw++//uCWZ77W
MD5:	86E0986A26D38270CAB32F67C7290E71
SHA1:	89910871BB25F5ABD09520338E749DE495A1766E
SHA-256:	6FA30765FAD8BFEA2D395AF7D421841D89BE0C0723FD5893B74AEDBD6EDDBE3F
SHA-512:	E38802324B51DBA72BB45E688645D94E290C37447816D789105FCBFD4BEEEEDC8C7BA21F58B2129B97A2F9A4D21F7EDD75B7D4EB2178DB2F5671509239CA2AC3
Malicious:	false
Reputation:	low
Preview:	function t_cards__moveClickOnCard(t){t_card__moveClickOnCard(t)}function t_cards__addFocusOnTab(t){t_card__addFocusOnTab(t)}function t_card__moveClickOnCard(t){var e=document.getElementById("rec"+t);if(e){var c=e.querySelectorAll(".t-card__col");c&&Array.prototype.forEach.call(c,(function(t){var e,c,a=t.querySelector(".t-card__link");a&&(t.style.cursor="pointer",t.addEventListener("mousedown",(function(){e=Date.now()})),t.addEventListener("mouseup",(function(t){var r=0===t.button,s=1===t.button;if(c=Date.now(),!(t.target.closest(".t-card__link_second")\|\|t.target.closest(".t-card__link")\|\|t.target.closest(".ql-undercut")\|\|c-e>=300))if(r)a.click();else if(s){var n=a.getAttribute("target");a.setAttribute("target","_blank"),a.click(),n?a.setAttribute("target",n):a.removeAttribute("target")}})))}))}}function t_card__addFocusOnTab(t){if(!window.isMobile){var e=document.getElementById("rec"+t),c;if(e)if(e.querySelector(".t-card__container")){var a=document.querySelectorAll(".t-card__link, .t-

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.972128659611473
Encrypted:	false
SSDEEP:	24576:f8pTSzQ6L//N7IhVi9MIaYvyNarEvGHgG60szmcc5iB:fOSzZpnFv8uHgG60s3ccB
MD5:	23EEB17EF65F925439A5E349AE379240
SHA1:	0E1A1782D8C8048A0216E92FF0995DDE87CE14DD
SHA-256:	D1C9E42D9B8A4311D728D094D2A554E88E9DA33FA4677C909672723B2458B1B5
SHA-512:	3DFC49DC457BD2C04986B683E61806DF7797D09C1BE36805BB509728D191E2C6483AB7243AC49742708F0C4D049E02FCD1301EAC22FEC4E6C157E99AA3F469CE
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0:2f8280a041b4fa:1
Preview:	.T$#...?.wc....#.(;0'....../...F....j.....ns/.$..f..K..>.r.xC95....j.zu..w....iB0.......lq}...6....j.k..+/J.^.$n..u !.I..aAX...7.l...&}_.(wV.N._/.Yh..7.$Fv.F.6?bDb......{B...W..&m.....i.!.<......?. .%.....X../.......y.r9..6Ui...!.)M.^.........N...L;#...4.E..N;.....uK.."E..L'.f<'......W\|0..6......5m..n."C..G..G\|...;U.(0;u..........?..'.H....../]..$.....m9....%ST.....T...y.C..p..#+).`..YHZ...fC..AD.1..JX.".^.....x..U..3....-..B.x.%R..LO..B..S...of.H#R..\|.H-uZ.......K.......F.Qq.E...-;....q(....b..4k,dU....T....Zf5....G.E....Q+...4=. .d.C...x.B..#..v.....$g.<W....l..g..}.f8.{M.Z4.T.._~.%...D......'..J.m@....4.zm.s.n%...C(<.NR..>.,..#o..y.B._.i;.b......:...{..n..J/..[.L...i.+,...].....b.V...+J........W.h...~6...n..XUA.Pre..X.)T.J.;.%..Q6.w>Y2...I.....u`.J,.. .]o.._m..lU..M.+s.$F...[.5.H.......X.."..zm......cI.\w.>b..........+......Z.kM...4..B.T{..x.p.[..v...~..\|}7s..gh..@.sr..{=!....J}.Q..?+.~..,.Y.. ..x...b.#h6 ...&yLC.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	663
Entropy (8bit):	7.62454757829505
Encrypted:	false
SSDEEP:	12:6v/7XWbN1PBGf6G5/fcye6b/tzZuMgE4VRMbrbmFTtVvFI16X:dN9BG6G/fcy3hzZuMfLrkTtVvmW
MD5:	1B7CFC3ACCCAE1C5DA5D8A66F6E4B5D3
SHA1:	832B4B1F6331477A8AB376219BA98C91974575BD
SHA-256:	72F6D4611D15597581B5E3BB9CA3370AE6FEB02E7BFBCF48E833316B4D8D5718
SHA-512:	7BBC0A45E55625D03F677831F896663AE820D7DE1C6B44230DB93D246B925F766247603125EB2D9B7B163B1E5BA6EC3AC6357B1EAAEF6CD6FB8D15FD8AEE8006
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild3039-3061-4433-b030-646365333238/-/resizeb/20x/Apartment_14.png
Preview:	.PNG........IHDR.............b.......pHYs...........~....IIDAT(.]...0.......m6...g...l."......L.o$.O...\|>V\|.+>..%.Z#...d.):.T.\|..^.t).....K.T..Z.t_+.....%Z.Ac.....@k%.J[Ei........7z.%bI....).....Z......QRB2.jF.8.-QZ..@..M{L..S....S...5....((..8S.t.i.p..g9#....&....Z...-Mc.....O...g...8..8..pd_..T........NsZ..Tol.xa...2j.....B...tC..9J....R 0W...`..z.....................}....` ..e5X....1'(..1!.@....@.O...0.4.G.0...{... ..JK0...B..J...........q.4i'..]0.N...[.b.R.]i...y.C.=..K-}Y.~...T.F4....k.7.d.......Y..s...ZL...amYj[.k;..........{..{..@..o.....S.{)y......u....~Z...I.....iyU..>.nt.(z.x~..,.A...n.m..c..W....f{.....IEND.B`.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	dropped
Size (bytes):	844
Entropy (8bit):	6.396307717357084
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3m:NYw9YMnrfuERAc
MD5:	98162ECEE43ED9F8F074444AE26357D0
SHA1:	2D89B2EFF8041C8B2420CECAF70D24492CFF284C
SHA-256:	A18FEDEA96D424077C473AEABBF02C299BBDBE31E782BCB3B9CFEFBE880472F7
SHA-512:	403713331E2ED719B97E7BCEF99CC7A45BD48251743594BF019C7832F7AFDAFC195B089F28E466927FDD3136B6B1F15DB11330D2C09D7CD0DDC8622AEAE2EE51
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..:.?.T.jK..q.\......2T.&......d...h..X..?..

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	dropped
Size (bytes):	300788
Entropy (8bit):	7.978177044600007
Encrypted:	false
SSDEEP:	6144:ugzOSw91S9EDAJ3QSfOs9wOYeaNoLgGjVcLF6xO/1OPTP5kO9W68F4t:tzYXS6DK3jfF9rzvjVcF6xO/1OrP5kUj
MD5:	36AB604F9E50D2639436CBF76B6121E3
SHA1:	2F6DFD44F0CF17EACEA9275FC4F2C65D68BB5761
SHA-256:	5923C78FC92D39544D2A54121E4C2C0B27FF900FF3C9A9B2BC05BC026949EA2C
SHA-512:	7494E83263859C10A3F171387BAD6EC467FCE1342FBDF62E7C998C39BE8AC12F3EFDF277A67BAB709305C92561D42AF49F83E142B20B616DF21E547C74DC4181
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0..............................................d.........................!1.."AQa.q.2.....#B..3Rbr..$Cs.......%4Sct....&'56DTd..u....7U.Ee......................................6.....................!..1AQ..a"2.q.....B...#..3R.C.b............?..../.$.._.............P%.P........h.......... EAI. .A9@Rh..J@R.."(P(.@.M........M.&..jh..........P....h.Rh<.d.....)..(.T(....@t@ ).&.r..@SJ.@D..".4.D...E.j....D.^....".@R..4..&.Rh.4..M.&..P.h&.r.)..&..>..}......E%"hQE.... .......%..@.M....P...iE&. (..H...4......P.....".}P....@.....@ Et...@ .....(.QH..G(..@"...M(..).R .X...@P....D.E..k.... ^....."...D....!. ?.........d.'/...Z..........Ytq...yI.t.P.....".....B..% T.........p.@ .....T. T....P"..%*.@......E.....@ j..@Z.I@.(.T.T.H..9....T......H.@R..........J@ .E.R(.P(..)..@..P".....P...QJ..`).B...)PR..E".QE(.E.......k..ddN.&..m

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4530
Entropy (8bit):	5.239502540343936
Encrypted:	false
SSDEEP:	96:2fsa2gxYNKX4zPG2y01/AmiTKRVTVqVaVbURV7sVsVaHVxVT+VG:2fsgx2XLG2fmTQ5CywjE4a1DTeG
MD5:	F4DE2D8E4AC649E7AA3AF1DD0A3036B7
SHA1:	BDEC368C0AB96BA6928A83C627BA368287F7CCE1
SHA-256:	EDCD62F6E4133A1BE137FCFC4F291FD3727573779522EC82DE11563FDCA795A0
SHA-512:	E056AB75707DBCF085D5B9791A7F58DFC5C6FF8F9954DF42AF5153D52D518D913BECC6FC2CC537EBD89DE6F919373A6F1AB4EB25D324037712F47508A4257477
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64" fill="none"><g clip-path="url(#clip0_21_67)"><mask id="mask0_21_67" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="64" height="64"><path d="M63.4004 0H0.400391V64H63.4004V0Z" fill="white"></path></mask><g mask="url(#mask0_21_67)"><path d="M50.8006 30.2H22.9006L15.9006 41.3H47.5006L45.8006 38.6H20.8006L24.4006 32.9H49.3006L49.5006 33.2L58.2006 47.1H5.50059L31.8006 5.1L43.9006 24.3H47.1006L31.9006 0L0.600586 49.8H63.1006L50.8006 30.2Z" fill="url(#paint0_linear_21_67)"></path><path d="M1.90039 54.1001L0.400391 64.0001H2.30039L2.60039 61.9001H5.10039L5.40039 64.0001H7.30039L5.70039 54.1001H1.90039ZM2.80039 60.2001L3.50039 55.8001H4.00039L4.70039 60.2001H2.80039Z" fill="url(#paint1_linear_21_67)"></path><path d="M12.1006 58.2002H8.10059V59.9002H12.1006V58.2002Z" fill="url(#paint2_linear_21_67)"></path><path d="M15.6002 54.1001H13.7002V64.0001H1

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (758), with no line terminators
Category:	downloaded
Size (bytes):	758
Entropy (8bit):	4.552729258636812
Encrypted:	false
SSDEEP:	12:FlWRskTUWRK5WRy8AWRsbWRs/CWRTAWRvWRsbWRs/CWRKFkAWRmWR6Hl6ttkTkMa:MnKay89F6vT9QF6vKu9bzx74qT1fU6fZ
MD5:	046CF5DBE65BB482A75CAB15E5B9601C
SHA1:	1CD4A7525AA226DEFED540A00B4D0A6A4869D179
SHA-256:	5D1F6A0C5F49CFEAE147B675599153C5118AA2691CCB1C18939FB9035436CC8C
SHA-512:	E37190DD1B50A28360E7F7E8DAC3E7593DD7A30CEDE8BFB34E15B9D974DC0BBAEED3F9BBF1E870AE34D1633053C125A3D34F5CC6675DEB9FEEA5B61595F70EA9
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/css/tilda-cards-1.0.min.css
Preview:	#allrecords ul.t-cards__container{margin-bottom:0;padding-left:0;list-style:none}.t-cards__col:focus-within .t-cards__link:focus,#allrecords .t-cards__container:not(.t-cards__container_focus) .t-cards__link,#allrecords .t-cards__link_second,.t-cards__container:not(.t-cards__container_focus) .t-cards__col:focus-within{outline:none}#allrecords .t-cards__col .t-cards__link{color:inherit!important}#allrecords ul.t-card__container{margin-bottom:0;padding-left:0;list-style:none}ul.t-card__container li ul{list-style-type:disc}#allrecords .t-card__col .t-card__link,#allrecords .t-card__col .t-card__link_second{color:inherit!important;outline:none}#allrecords .t-focusable,#allrecords .t-focusable .t-btn,#allrecords .t-focusable .t-btntext{position:relative}

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.994797646131061
Encrypted:	true
SSDEEP:	24576:llbTopmOWDXlRHeZP6ySLmLa3FNfrGw4W0ahsJ1RUtzTY:MpwDXlm5SLisNDGyCJTgnY
MD5:	9DEE71B1EC8FFC27AE76DDFF5B8884BB
SHA1:	F3F82C0D7508D9F324F2F08187610099BA0FA69A
SHA-256:	B1A0C74DA4B6B7C24E7076687B6E0F9D7CFEE46C6E30CA4496E1EB67AC121CF5
SHA-512:	E81362D7191C0FDF7D4DD06194D43C4C3574497B25A2031D60D8EA4058D4A330D0673EE4E400EDD0684715D0954EA2B4ED4CB3B837A157BFBB6CD14D5BCC0E7B
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:9
Preview:	....uSNC..<..).U...)(.eO...;..bt.....6`. .b.s:..\.;r!.W.W.7(Q..:-..K..;......ld<..g..F..}.6..(.......e.1..).l...e&...9o4.E+..k.Cl.....[._.k.)...J....1\|2..gY#.Fr.Vd.xO.Kz{p....,......BkeP..QHN[...d...UWEK.X....aj..I...{....f..&+..S&....`..?s:.(y...:...cKb...R~..~..v.1...X..[.I...e..?P\.,....4K.\|..x.;.2.O.#p(.4.....pg...~.+..[)`d...W...M.W&.(..AsWNP..V.^....V.17.[.W.I..NQ..?.~E...az..(..T.<.w......-...QMF.Pv&.Y.u..".........S..4F5I.... ..DO.$;.....&.q..CY%...............i.".........).Yt....21..f"H5dw'J-.Ar%X.p3H.m;p.....^...._2o.AZ...u.O..Q..Ct._.....8...%R.b.h....."..9-6..X...v.3..&..F.>Fwd.....).W..c.B.eBa..DC...f.}Wu&4..~.L..S.>j6..k.iUz...&G.P.5.P.H(.:..D.,.a..4..%2..P...Hu..Mi.P"g%X..'.a..E...-....b..]:.w.......Q4.o.5..[...n....Q...3 ....KC.[...l.^Q.`X..p.t:........fQ.....O.8...~e.n..[}..i.3..*W...u.T....O.O..4..E..&......X..E..C....&.5.xd;..<..Km.3........T..9q.3....rK........T...j....e@.U#.m....0.H.\|MWI.^.j.:D.>E5Q......An...p....:

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.27882847002467
Encrypted:	false
SSDEEP:	3:IntSunS79PfWoiCkv1r9IKY:sNSBfWoiv4KY
MD5:	0601730790CDA3AAA93ED34D53420F1A
SHA1:	A38CDD9D30E1F502FD77395907DB9465FC2F0C2D
SHA-256:	E5A227BFCF66FD7C67F899B25733DA5AF3B2EACF3C12021DEED99267F1D7B7EA
SHA-512:	74E91E96D040276A1C732923C845E1F8EA347B0BD1206246AA38279318AB04672EF8A74F6FD00E9F5A651C7482157D761A5D81BF633BA1321A0FC957A3581AB3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAlQjMaCYfWeoxIFDZRU-s8SBQ16r-fgEgUND6hsDBIFDTE9lDASBQ2uKxWi?alt=proto
Preview:	Ci0KBw2UVPrPGgAKBw16r+fgGgAKBw0PqGwMGgAKBw0xPZQwGgAKBw2uKxWiGgA=

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8462
Entropy (8bit):	3.928002989386659
Encrypted:	false
SSDEEP:	192:Lqc+7porEPXy7GyQhmf3rd76ZBr8bS6xFcDmK/:/+RXfa9SBg2RmK/
MD5:	A693859B36771EC847891B56847624D8
SHA1:	EC5C9ED3834F5872E83A159DD268D25D2568BF29
SHA-256:	0F1455C85554D00C0598AD922F44678EC681F11D39E8ECD91959CF87671231AD
SHA-512:	0BCFD19618C841852B7932424DA55D9C2EA28AE1B3B84685AF89BE06BADBF3841642E43BB1ED540774ADE29EF82591E1B5C79051917E97728D63D0256EBBD197
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/tild3636-6139-4435-a266-393363346437/Group_15.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="1092" height="294" viewBox="0 0 1092 294" fill="none"><path d="M262.4 121.116L236.396 90.228V82.836L262.4 51.948V72.54L248.936 86.532L262.4 100.524V121.116ZM233.888 121.116L207.884 90.228V82.836L233.888 51.948V72.54L220.424 86.532L233.888 100.524V121.116ZM264.945 126L285.141 19.08H312.069L332.001 126H310.221L306.657 103.428H290.949L287.253 126H264.945ZM293.061 89.304H304.413L298.737 47.592L293.061 89.304ZM338.044 86.532V72.804H372.232V86.532H338.044ZM383.55 126V19.08H407.178V62.376H423.678V19.08H447.438V126H423.678V79.272H407.178V126H383.55ZM489.065 127.584C481.057 127.584 474.721 126.176 470.057 123.36C465.393 120.544 462.049 116.496 460.025 111.216C458.001 105.936 456.989 99.644 456.989 92.34V52.608C456.989 45.216 458.001 38.924 460.025 33.732C462.049 28.54 465.393 24.58 470.057 21.852C474.721 19.036 481.057 17.628 489.065 17.628C497.161 17.628 503.541 19.036 508.205 21.852C512.957 24.58 516.345 28.

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	326955
Entropy (8bit):	5.599747732258957
Encrypted:	false
SSDEEP:	6144:n4eYIGKlqBQ1DMvO5K1x72Dej7rsNFVVl2bT+lBf:4eYwUBQ1nlgT+lR
MD5:	12C58FDA503A1AE4C8E580809168201B
SHA1:	457726D8F6A8F5649A9B199444D7A8F3BFBC46B7
SHA-256:	C3BBD09688AF46690E43CA1CBA2280D6C58DB44C337C9944AA28C4177051B206
SHA-512:	CE95BAC05A5A0420F24DADBD513651B5140C2BB3FEC306DDF2975073735A2CECBD9E3AE33B5DAB835B55A511B1F3877A5694712A943AAA58B991B7C503767B8A
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	dropped
Size (bytes):	843
Entropy (8bit):	6.384532333029923
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3q6fo:NYw9YMnrfuERApo
MD5:	621C4157A02BF2A4F7D5E79D388EA111
SHA1:	D21DFF99EFCBDC7C96C5C206A8C31EADBF8DCD30
SHA-256:	15782F3F37FF6174DC0ED0E339A0BA728ADAC4F8B4278F49F96F6B6075BDE2C5
SHA-512:	8008450E38278BE4B3EE3842398BFF47B8D85FE24503B8F7186B504B4220477C2F6AED1F36ADE375D5850160919333775C65A5B458B577F4DA7388B8114CC052
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......iP!9.}&q.k.v...X.&..X.k.Hy...F,I4Q.......

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4480), with no line terminators
Category:	downloaded
Size (bytes):	4480
Entropy (8bit):	5.186314292855384
Encrypted:	false
SSDEEP:	96:6E7VyxtWBFXkB9O+9HgP5OPxnuiTudsLRrRkZDJQpaX:6OyxtWQBItP5CTwSrucaX
MD5:	E07BD59E01C8ED1F99E4E85D379FCAEC
SHA1:	C835271B33ECC57A01FEE1F044C1C8ADF1F4140F
SHA-256:	8B24BA590FECA22CE6E3633085D978045F4AA64F5A2AC57C97E9E53AA04F88AE
SHA-512:	73F68123498C11D1C47200D48BD4DC25A4904E4893F02741181D8700650EE8D1E0BC961A3AEF065FBF7AC20F92CDC1396F62977841AA956B366C9891F5E6A370
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-zero-scale-1.0.min.js
Preview:	function t396_scaleBlock(t){var e,d,a,l,u=t396_isOnlyScalableBrowser(),p=t396_detectResolution(t),o=document.getElementById("rec"+t);o&&(e=t396_scale__getElementsToScale(o=o.querySelector(".t396__artboard")),o&&0!==e.length&&(d="function"==typeof window.t396__getCurrentScaleFactor?t396__getCurrentScaleFactor(t):(d=window.tn&&window.tn["ab"+t]&&window.tn["ab"+t].scaleFactor)\|\|window.tn_scale_factor,t=t396_ab__getFieldValue(o,"height"),t=Math.floor(td),t396_ab__getFieldValue(o,"height_vh")&&(l=t396_ab__getFieldValue(o,"height"),t=(a=t396_ab__getHeight(o))<=(l=ld)?l:a),t396_scale__updateArtboardState(o,t),e.forEach(function(t){var e,a,l,o,_,r,i,s=t.querySelector(".tn-molecule, .tn-atom"),n=t396_scale__getElementType(t),c=t396_elem__getFieldValue(t,"container");c\|\|"group"!==n\|\|(c="grid"),s&&"grid"===c&&(u?((c=s.closest(".tn-atom__scale-wrapper"))\|\|(t396_scale__wrapElement(s,d,"tn-atom__scale-wrapper"),c=s.closest(".tn-atom__scale-wrapper")),t.style.zoom="",t396_scale__processBackdropFilt

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6265), with no line terminators
Category:	downloaded
Size (bytes):	6265
Entropy (8bit):	4.951101561737797
Encrypted:	false
SSDEEP:	96:Hi3xldQGg97kIvxGQ4WWF9wysUofwC6pDYF:4xnQGgxzv0Q4WOLsU8wC6pDs
MD5:	595A184930C44BEC50A87A50DA7C8EA3
SHA1:	CD16A5693A419D4A0A5BAA3081E16DA0AAAEB002
SHA-256:	D39FA660D73906967C73E5D704F5E55798CC1704F12D7314AF4A700B78DEAB87
SHA-512:	C56938081AF5D2A355C9BE2B81D5B7DD8EE7F9403AED5BED537D41474DE8354ABFA9582B5C30BC4DEF40943F27A4456E4B4927F876C7978582DD4EDB56EB2B2A
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/css/tilda-zoom-2.0.min.css
Preview:	@-webkit-keyframes hide{0%{opacity:1}to{opacity:0}}@keyframes hide{0%{opacity:1}to{opacity:0}}.t-body_scroll-locked{position:fixed;left:0;width:100%}.t-zoomer__show_fixed{height:100vh;max-height:100vh;max-width:100%;overflow:hidden}.t-zoomer__wrapper{position:fixed;top:0;left:0;right:0;bottom:0;z-index:-1;opacity:0;-webkit-transform:translate3d(0,0,0);transform:translate3d(0,0,0);-webkit-user-select:none;-ms-user-select:none;user-select:none;transition:transform .3s ease-out;transition:transform .3s ease-out,-webkit-transform .3s ease-out}.t-zoomer__show .zoomer-no-scale .t-carousel__zoomer__inner{cursor:default}.t-zoomer__show .t-zoomer__wrapper{z-index:9999999;opacity:1}.t-zoomer__container{text-align:center;top:0}.t-zoomer__bg,.t-zoomer__container{position:absolute;right:0;bottom:0;left:0}.t-zoomer__bg{top:0;background:#fff;cursor:zoom-in}.t-zoomer__comments{display:block;height:auto;padding:14px;text-align:center;max-width:700px;box-sizing:border-box;margin:0 auto;-webkit-transform

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2401), with no line terminators
Category:	downloaded
Size (bytes):	2401
Entropy (8bit):	4.927186669337826
Encrypted:	false
SSDEEP:	48:zidMsdJvK4q0E98WfC6EKrLNIfH952NsO:z0FdJvCfC6EsIP2Nd
MD5:	2E04E8AB02A49FF8968147F1EF4E10C3
SHA1:	443B190F12D8CE04F8A7B3B8429FB3C482591040
SHA-256:	C9D323C102499633DFE64C95BA5E0043C070FFA04683F796FBB7C5B625EE72C7
SHA-512:	B2C7C64B5BA5D5266E1995E442D672F74DE3BAF3BFFD0E5468EB9485659CA3AB5922212A08EB6BC4440FA0DFECFAA1264373CAD35131AC653699CC127A4B38C8
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/css/tilda-popup-1.1.min.css
Preview:	.t-body_popupshowed{height:100vh;min-height:100vh;overflow:hidden}.t-popup{position:fixed;top:0;right:0;bottom:0;left:0;overflow-y:auto;opacity:0;-webkit-transition:opacity ease-in-out .3s;-moz-transition:opacity ease-in-out .3s;-o-transition:opacity ease-in-out .3s;transition:opacity ease-in-out .3s;width:100%;height:100%;box-sizing:border-box;cursor:pointer;padding:0 20px;background-color:rgba(0,0,0,.6);z-index:9999999;display:none;outline:0}.t-popup.t-popup_show{opacity:1}.t-popup__container{background:#fff;margin:0 auto;width:auto;position:absolute;top:50%;right:20px;left:20px;z-index:1;cursor:default;-moz-transform:translateY(-30%) scale(.9);-ms-transform:translateY(-30%) scale(.9);-webkit-transform:translateY(-30%) scale(.9);-o-transform:translateY(-30%) scale(.9);transform:translateY(-30%) scale(.9)}@media all and (-ms-high-contrast:none),(-ms-high-contrast:active){.t-popup__container{width:100%}}.t-popup__container-animated{-webkit-transition:transform ease-in-out .3s;-moz-tran

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	dropped
Size (bytes):	830
Entropy (8bit):	6.358230609724948
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3GMk:NYw9YMnrfuERA2
MD5:	1BA575AA70E66339CDC3184B41C799FC
SHA1:	453EB30465D6FD7C5D7FB39F949669B13D4E73C1
SHA-256:	81E46AC6BE4D55A57685EC67D47419717871C932C52ED22A1BA223F5FB102AF0
SHA-512:	A0EFC8B56D907EB65A20873110E798A010C3C9955705709D179C7D6CEE8EAE34BE0D2FD6C80F02FFC4E0BDF7665F1552F4B9D666952E326771E37E6E194E463F
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..uF.....5.rs.`f.......QL..+..C...

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8721), with no line terminators
Category:	dropped
Size (bytes):	8721
Entropy (8bit):	5.265716002748674
Encrypted:	false
SSDEEP:	192:u42r4BABJ3tqyMzf0b61AubcbNc+24vt9rJkSWinvOAnmKd:u4s4AbM7d1Au4bNc+24vt9rJbWQNmKd
MD5:	DBD89BAB9890F6E886E4917526035F4A
SHA1:	B46AA11B961C5D65F7F5ADC1C5E875A5178BCCF4
SHA-256:	0565DE9B4919BF1CBC345D8218425E4951D97C7E8C36263BEE72E2D72038C73F
SHA-512:	8D3ED4B434D3A04F65E897C09CB38A4B057594B7CF250EE966DA47E7BC633D439492083360FFB7626F4493199795DE653E92C992984B46B06AC0D501A4282E82
Malicious:	false
Reputation:	low
Preview:	!function(){var r=document.getElementById("allrecords");function e(){var e=Math.floor(899999Math.random())+1e5;return(new Date).getTime()+"."+e}function n(e){e=e.replace(/([\.$?\|{}\[\]\\\/\+^])/g,"\\$1"),e=new RegExp("(?:^\|; )"+e+"=([^;])"),e=document.cookie.match(e);if(e)return decodeURIComponent(e[1])}function o(e,t,n){if(i=n.expires){"number"==typeof i&&(o=(new Date).getTime()+1e3i,(i=new Date(o)).toUTCString&&(n.expires=i.toUTCString()));var o,i,a,r=e+"="+(t=encodeURIComponent(t));for(a in n)r+="; "+a,!0!==n[a]&&(r+="="+n[a]);document.cookie=r}}function a(){var e=window.pageYOffset,t=window.innerHeight,n=Math.max(document.body.scrollHeight,document.documentElement.scrollHeight,document.body.offsetHeight,document.documentElement.offsetHeight,document.body.clientHeight,document.documentElement.clientHeight),o=0,i=0,a=(m=!0,document.getElementById("t-header")),r=document.getElementById("t-footer"),d=document.getElementById("tildacopy"),c=(a&&(o=a.offsetHeight),r&&(i=r.offsetHe

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (906)
Category:	downloaded
Size (bytes):	2675
Entropy (8bit):	5.320393671652214
Encrypted:	false
SSDEEP:	48:DZxkqjCAaNR34ZSVWcjPlmVKTimWyWCHC5OhckMy0FiSQvQEIvwsoXPTRn:DZxZCAa3P5PQLlDO6kMMSQ0vNePTRn
MD5:	5669B9282E2E72582EF2D708EA5F9B72
SHA1:	E1747DA3DAE6E06BCC451761925C9A236C513B73
SHA-256:	3C69E8DBA54B4B573AB8442505AF7A8E1F239255C51329436DB14F3A3CE4A5EF
SHA-512:	45E302BD7B61F58A9F8CB6F6A7149DD7AA896001CD024B559852679B23D0E69257322182843CC126B50FBBCE454A235D3375C0E725533BCA189E731749A3AAFB
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/7/intl/uk_ALL/search.js
Preview:	google.maps.__gjsload__('search', function(_){var sva=function(){},WB=function(a){this.setValues(a);_.Ri("search_impl")},uva=function(a){let b=_.ol,c=-1;a.tiles.forEach(e=>{e.zoom>c&&(b=e.ii,c=e.zoom)});if(c===-1)return[];const d=[];a.Fu().forEach(e=>{e.a&&e.a.length>=2&&d.push(new tva(e,b,c))});return d},vva=function(a){const b=[];a.data.forEach(c=>{b.push(...uva(c))});return b};_.Ga(sva,_.sk);var wva={["1"]:{}},tva=class{constructor(a,b,c){this.Kp=b;this.zoom=c;this.bounds=this.anchor=null;this.Eg=wva;this.source=a;this.featureId=this.source.id\|\|"0";this.infoWindowOffset=(this.source.io\|\|[]).length===2?new google.maps.Point(this.source.io[0],this.source.io[1]):null}getAnchor(){if(!this.anchor){const a=1<<this.zoom;this.anchor=_.Rl(new _.cm((this.Kp.x256+this.source.a[0])/a,(this.Kp.y256+this.source.a[1])/a)).toJSON()}return this.anchor}getCompleteBounds(){return this.getBounds().reduce((a,.b)=>{a.extendByBounds(b);return a},_.Vl(0,0,0,0))}getBounds(){if(this.bounds===null){this.bou

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21012), with no line terminators
Category:	downloaded
Size (bytes):	21012
Entropy (8bit):	5.231875859639831
Encrypted:	false
SSDEEP:	384:AOOSoas2Ikp488lTyLAmDzNeCaIkjoYbjBxlkLDijSJC:AOOSoaPHp488lunDLaIkjoYbjBxWLDid
MD5:	F1E5C57E7FF99D6D675BDE8D32F490D1
SHA1:	23191F7B0C735391C4F9FD5136E091D881D49AC9
SHA-256:	AD9195982DB84ADB45E0062740B5D142B37602DF00AB554D929E04DAD5C8322E
SHA-512:	2C85422A84604989BDA5BFB8932E216DEDA8813F55BB88BAB8276671DE1656DC73ADFA1F75B0079A2F393BF5B3636406AFDF567C8E803151C938CDF063772873
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-menusub-1.0.min.js
Preview:	function t_menusub_init(recid){var rec=document.getElementById("rec"+recid);if(rec)if(t_menusub__isBlockVisible(rec))t_menusub__lazyInit(recid);else{var menuIsInited=!1,orientationchangeEvent=function(){!menuIsInited&&t_menusub__isBlockVisible(rec)&&(menuIsInited=!0,window.removeEventListener("orientationchange",orientationchangeEvent),t_menusub__lazyInit(recid))};window.addEventListener("orientationchange",t_throttle((function(){orientationchangeEvent()}),500))}}function t_menusub__lazyInit(recid){var rec=document.getElementById("rec"+recid);if(rec){var submenuWrapperList=rec.querySelectorAll(".t-menusub"),submenuHooks=rec.querySelectorAll("a.t-menu__link-item"),isNewVersion=Array.prototype.some.call(submenuHooks,(function(link){return link.getAttribute("data-menu-submenu-hook")})),closeEvent=window.t_menusub__isMobile?"orientationchange":"resize";Array.prototype.forEach.call(submenuWrapperList,(function(submenuWrapper){var hook=submenuWrapper.getAttribute("data-submenu-hook");if(hook

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3312), with no line terminators
Category:	downloaded
Size (bytes):	3312
Entropy (8bit):	5.0917090133708545
Encrypted:	false
SSDEEP:	96:BvRvBI+FZ4TxTnY6xzecil18YX2QHyyqBdv:BJpFZ4TxE6xicilH8yqBB
MD5:	085A93DC89FE3B0B497F99A222F9AC57
SHA1:	339D9C7557C0FD2CA1C4D73227F9274BDD080EF3
SHA-256:	15CB1CFFA887EC74A9AE3DAD3C5C539E2B24C0C2E8E66F82FA536406E0C95DB1
SHA-512:	429B8C4D240686DD6FF59AC1945A825BCFAA51CD3914FD49F68C7492054268729D87ED07A4D0A3E2A30BDEB0CBABD1FB715BAA43DC02F1EA0FB7C49471F9501C
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.com/js/tilda-performance-1.0.min.js
Preview:	function t_performance__createMetric(e){var t;"undefined"!=typeof PerformanceObserver&&window.performance&&e&&void 0!==navigator.sendBeacon&&(e.isMob=~navigator.userAgent.indexOf("Mobi")?"y":"n",e.hasZB=document.querySelector(".t396")?"y":"n",e.hasCCode=t_performance__hasCustomCode(),e.url=window.location.href,navigator.connection&&navigator.connection.downlink&&(e.speed=navigator.connection.downlink,e.connectionType=navigator.connection.effectiveType),t_performance__createPerformanceObserver(e),(t=performance.getEntriesByType("navigation"))&&t.length&&(e.domInteractive=Math.floor(t[t.length-1].domInteractive)),e.DOMloaded=performance.timing.domContentLoadedEventEnd-performance.timing.navigationStart,e.TTFB=performance.timing.responseStart-performance.timing.navigationStart)}function t_performance__hasCustomCode(){if(document.querySelectorAll(".t123, .tn-atom__html").length)return"y";var e=document.getElementById("allrecords");return"yes"===e.getAttribute("data-tilda-project-headcode")

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4847), with no line terminators
Category:	dropped
Size (bytes):	4847
Entropy (8bit):	5.814114878793573
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU9yO2Zm:1DY0hf1bT47OIqWb1syFs
MD5:	784DF6E06FF8F45D8564B68674FF2F1F
SHA1:	8DB5EDB44D6580B5FCA3893DFBC69EFB6E773669
SHA-256:	D541CD7DAC282A13BA39B8F7471C0E9540046882FEC7E3F62A974774F2BF31D9
SHA-512:	5C06D2139EFF63C7FB4741D712359201C8ABD4ABC322A97273D06817994B6FA152BCFFE7C66CC7617FF3DB936D22C9F7275157D2FC8B8F6077B49467D53E6418
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4530
Entropy (8bit):	5.239502540343936
Encrypted:	false
SSDEEP:	96:2fsa2gxYNKX4zPG2y01/AmiTKRVTVqVaVbURV7sVsVaHVxVT+VG:2fsgx2XLG2fmTQ5CywjE4a1DTeG
MD5:	F4DE2D8E4AC649E7AA3AF1DD0A3036B7
SHA1:	BDEC368C0AB96BA6928A83C627BA368287F7CCE1
SHA-256:	EDCD62F6E4133A1BE137FCFC4F291FD3727573779522EC82DE11563FDCA795A0
SHA-512:	E056AB75707DBCF085D5B9791A7F58DFC5C6FF8F9954DF42AF5153D52D518D913BECC6FC2CC537EBD89DE6F919373A6F1AB4EB25D324037712F47508A4257477
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/tild3632-3264-4562-a338-656166656465/logologologo_1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64" fill="none"><g clip-path="url(#clip0_21_67)"><mask id="mask0_21_67" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="64" height="64"><path d="M63.4004 0H0.400391V64H63.4004V0Z" fill="white"></path></mask><g mask="url(#mask0_21_67)"><path d="M50.8006 30.2H22.9006L15.9006 41.3H47.5006L45.8006 38.6H20.8006L24.4006 32.9H49.3006L49.5006 33.2L58.2006 47.1H5.50059L31.8006 5.1L43.9006 24.3H47.1006L31.9006 0L0.600586 49.8H63.1006L50.8006 30.2Z" fill="url(#paint0_linear_21_67)"></path><path d="M1.90039 54.1001L0.400391 64.0001H2.30039L2.60039 61.9001H5.10039L5.40039 64.0001H7.30039L5.70039 54.1001H1.90039ZM2.80039 60.2001L3.50039 55.8001H4.00039L4.70039 60.2001H2.80039Z" fill="url(#paint1_linear_21_67)"></path><path d="M12.1006 58.2002H8.10059V59.9002H12.1006V58.2002Z" fill="url(#paint2_linear_21_67)"></path><path d="M15.6002 54.1001H13.7002V64.0001H1

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	downloaded
Size (bytes):	656115
Entropy (8bit):	7.978804387883691
Encrypted:	false
SSDEEP:	12288:kDYom4Rb8I2zUlK9rX7nonJA3OFKRox6kiLZ2vKH6U86edG:ot3R8IDKBr0SOFc64SKHy6edG
MD5:	DF1A465A9A9A02505D96D02F1D67E9FD
SHA1:	11BA5B06463DDE0C296F18AA545C115F0FDC2B2A
SHA-256:	78984649714BA8BF0B505F0662E3BF82B3A93871722D2F836A0B041993121190
SHA-512:	A61857870BE229EA47925EBB6170CAA145140B4B0CE2A72A016EBAA46E0C82DABB9F4CF95BA5BB18FAFF4C10D6914E6A693838BB4622FF094FF3AF60BA12A4DA
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.com/tild6561-6166-4166-a138-666434396361/11.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0..............................................^.........................!..1A"Qa..2q..#B..R...3br...$C....S...%4cs...&Ddu..'567Tet.U.E.(F.................................<.....................!..1AQ.."a2q.......B.#.3R.b.C$rS...............?.....t...."C.U..n....$CC.uy...zX\.....$.1.1Hlz....\IC.V.P\|. ....8..>.b:...CCyp.#X.{\...0.."TmD/Klo\|".P.E.8.......3-.e..;.,2G3.,....p.GF..4....[..q......k....$mUO.)....Z.a...J^B.D.#.2..6.Pmb....a..Vy.0y..G..e.Y..,n-bU.F...eDk.l......,[.m$..aYj#.>^...b.8`.rD...9.(........Bbc~t.u..}p..a...u...@L...e$.`.P8.8.M...w....c.3.[..w..}0..H.~ ...t.....XZ".....Sdh......q.` `.'&C..R.....f 3...c..6.J..O.H6.'.@m .FR7:.......v.q%.....S..2B.-.-../]..Y..HUR..C..RDz..c...^.....X. ..`B...`.!oA..v.=db.(.W.....ab.$BU^H..".........7.....H..R.A.za.hd..N...b0.......F......H^f...

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	810375
Entropy (8bit):	7.860171483929771
Encrypted:	false
SSDEEP:	12288:ioLjCXDZtbw58o0ale+7dHSxNlKqxWxfH/Q+grclJfVyJZEaqgh7HzXhQ7yKZ0:F6XF0dEePl5VyrEtyX
MD5:	EF12BB0FC7A495D373332C7C722C4848
SHA1:	9057CB8AAAD260F8C9DE65A401B6A3504650BF3D
SHA-256:	0665378D5E4632194888058ABE57DF7F8408A7092E04F3BD74C755EB33770774
SHA-512:	1FF3EA5DA1EB0CA0361253AF50E1A1EA2E6B3D4F86DFD83A9329AE51E7CE447FA0F9387EF95D1BE6324BDA923B807D8B1394A36E32B02D65DB4485D47901AEF4
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0:2f8280a041b4fa:d
Preview:	.\V(mc+U..g6....:.\......._.?.h.C.Y....&k...D.Fo.!\H.j.t.4.L.%w.O....(<^i..uqY{.w.:.Q..=dWXQ....(?.E.\|.p]L.w.......kJm.o..'.lij/w..uQ...@.dV....U{.QX..pw....2.6.....G....uJ.A.9...q^.....2...\|}+V...L..h.FT....2.......,I.1v....!....m%uk....V...+...Q.HV..{..Y.W.......+..+.....Sqb.i.f...;...6.+>E0dkvl^+...\|..b.....Ug.kh_4F.'~O.W.{...]R....d.V.+..&ZY.[>...?.Enmn.....n...u..}.SS..[..&..u.n+.u[.b.\|W...].....W._...}.p{ 1.w.c0.Qx.+....n.B.Z.................",pfR.\|\|..=w...^...4-.#.\|.q5...Z.]........T..I...Z....].Z.?.=}..a.....%t..r.SN...n.3..[B..6..f..=.....Nn..t.o..Ej..d.A......../i'.A.t...e..E....F.>j..q..\...2g5y....]w...sFY.y.._.[5....9..UE.d...(.L...x.W..ve.o....q\..\Z.U%...5C.....B...N...6+.3n....5.3..SF....3Q..5".t.L..Q.[/}.=...\|]$.6Z{By.............p..N+n....~.+0.F+....'K5.j..{i:..T(...[vl......t.....B...9.[..+>..L.qy........,.h.S..J.U(....>..sV/x..7Zro...+...(.V..']m.1.]...yp..X9..w.X.X..aY..t..S1..Z.V.o.?T-;F...f....

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	dropped
Size (bytes):	656115
Entropy (8bit):	7.978804387883691
Encrypted:	false
SSDEEP:	12288:kDYom4Rb8I2zUlK9rX7nonJA3OFKRox6kiLZ2vKH6U86edG:ot3R8IDKBr0SOFc64SKHy6edG
MD5:	DF1A465A9A9A02505D96D02F1D67E9FD
SHA1:	11BA5B06463DDE0C296F18AA545C115F0FDC2B2A
SHA-256:	78984649714BA8BF0B505F0662E3BF82B3A93871722D2F836A0B041993121190
SHA-512:	A61857870BE229EA47925EBB6170CAA145140B4B0CE2A72A016EBAA46E0C82DABB9F4CF95BA5BB18FAFF4C10D6914E6A693838BB4622FF094FF3AF60BA12A4DA
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0..............................................^.........................!..1A"Qa..2q..#B..R...3br...$C....S...%4cs...&Ddu..'567Tet.U.E.(F.................................<.....................!..1AQ.."a2q.......B.#.3R.b.C$rS...............?.....t...."C.U..n....$CC.uy...zX\.....$.1.1Hlz....\IC.V.P\|. ....8..>.b:...CCyp.#X.{\...0.."TmD/Klo\|".P.E.8.......3-.e..;.,2G3.,....p.GF..4....[..q......k....$mUO.)....Z.a...J^B.D.#.2..6.Pmb....a..Vy.0y..G..e.Y..,n-bU.F...eDk.l......,[.m$..aYj#.>^...b.8`.rD...9.(........Bbc~t.u..}p..a...u...@L...e$.`.P8.8.M...w....c.3.[..w..}0..H.~ ...t.....XZ".....Sdh......q.` `.'&C..R.....f 3...c..6.J..O.H6.'.@m .FR7:.......v.q%.....S..2B.-.-../]..Y..HUR..C..RDz..c...^.....X. ..`B...`.!oA..v.=db.(.W.....ab.$BU^H..".........7.....H..R.A.za.hd..N...b0.......F......H^f...

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4848), with no line terminators
Category:	downloaded
Size (bytes):	4848
Entropy (8bit):	5.812360610900739
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUnyO5Zy:1DY0hf1bT47OIqWb1WyGU
MD5:	FC44083CB6CF9EF6EA1D25D3FB1CBD62
SHA1:	16F8800B6FD173F6B460CDB9495577025B7523C5
SHA-256:	C1F21C547BD6EBD2CEC8AF7893791860C9FC701703E190AA169AA2A3308794BE
SHA-512:	2B676A6C121F13BCEACD66874ADCD8220D980DA7B8E7346C42ECEE6AC9B80C08E45C419A9FE60568268BAE50DDCEE2CBBE71194EA78CAEEE99285D982210EF09
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/16671369731/?random=1728339318067&cv=11&fst=1728339318067&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	dropped
Size (bytes):	297928
Entropy (8bit):	7.975697833803698
Encrypted:	false
SSDEEP:	6144:+F/Ttp7zsVVzb9i2u/OycxOzxGTyuWxAorHMtYW77ZQK4bEWf9Nxyzzk:Kpp7Kzbc2yOycMw3Wre7NgBfxyzzk
MD5:	8436B470F8BBF293AEF48EC4289532BD
SHA1:	853E556A0778F9102ECABC42088624D91BC47D94
SHA-256:	0A95B54A5E04C3062D81DB61D3AC54CD270AFFC0B7A042FA28B545C5613BCE92
SHA-512:	297EBDC4BFF8BBB5E50F2EC870A2F95A69ED227D87B20483F63462293B6BFCD785A8586898AFB089D293DDF68001583362F1A70E4F100C8C2013831382285D24
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0.............................................b.........................!1A..Qa"q..2....#B...Rb..$3r......%4Cs.&6DSTcdt....5....u....'Ue7EFV.................................4......................!.1A.Q."2aq...B......#R.3.4b............?.......^......).\ H...D.l .B...@....4..Cd..E...h.h....J..d...i...$.j...4....).R.......P..D.........$. )...D..!.... ..........M(WH-@v@.+WHv..P... .....P...Qi.&.....).$....)......H..SH..(..(SA}...4................@}..P...4.@&.@ ...H..............)".D...@ h.....@}........".A...~..J......8T;P%@.EA.,.EF...,..'..H.T.. D.T....e6....l....P..6."....)P..` . )@"...D....T..@...qj+......P.T$......FB).(.. T.H...D......@...6. ).\ .......H..D..@ H.WHj(@...".. H......R...@ .....@R.....H. H....T$P.....@...,.... . .B E...(D......W.. E...@..H..:E$..:D.......$.R..H. ....... H.@.I". ).H....T.@ ...)X.P...

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2375)
Category:	downloaded
Size (bytes):	51294
Entropy (8bit):	5.319415435833439
Encrypted:	false
SSDEEP:	768:uJkJyljiaAlIRIIR0JuWblodUfM1NBXH6KxuE0c3Nc+NUnUO24qS:ykJyljiplEIE0JuKM1DX6glS+N574qS
MD5:	E297791B4ADF1A6A8748624613C5A8B0
SHA1:	2EC1C1B224727C03EA5485BCFB1CF7D2964B1A55
SHA-256:	4C16B27A70AA99ABA3777CDE0E801478002A45D8D7B6B97D4247889458E62705
SHA-512:	B093B7897392153EC8FB24516ACE20E9DA0F1E0505938A3350A43E39903E37FDAC93A34BDFFE79E7DE22777602E2898DDDE71F4039B418A61F45B43FBA19D509
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/ws/project10309827/tilda-blocks-page53194931.min.js?t=1725003854
Preview:	window.isMobile=!1;if(/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)){window.isMobile=!0}.window.isiOS=!1;if(/iPhone\|iPad\|iPod/i.test(navigator.userAgent)){window.isiOS=!0}.window.isiOSVersion='';if(window.isiOS){var version=(navigator.appVersion).match(/OS (\d+)_(\d+)_?(\d+)?/);if(version!==null){window.isiOSVersion=[parseInt(version[1],10),parseInt(version[2],10),parseInt(version[3]\|\|0,10)]}}.window.isIE=!!document.documentMode;function t_throttle(fn,threshhold,scope){var last;var deferTimer;threshhold\|\|(threshhold=250);return function(){var context=scope\|\|this;var now=+new Date();var args=arguments;if(last&&now<last+threshhold){clearTimeout(deferTimer);deferTimer=setTimeout(function(){last=now;fn.apply(context,args)},threshhold)}else{last=now;fn.apply(context,args)}}}.function t454_setLogoPadding(recid){var rec=document.getElementById('rec'+recid);if(!rec\|\|window.innerWidth<=980)return;var menu=rec.querySelector('.t454');var logo=menu?menu

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 934x500, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	151202
Entropy (8bit):	7.998741560096956
Encrypted:	true
SSDEEP:	3072:xPWU3h3La8pGwkPb1u6NNbxEBlRu3GYUDtviiGy7eZTY:fh3RF6NNbxEBTl9VCpY
MD5:	E3A394004AEC9C1A8511CBBCC10FD110
SHA1:	30658E34DCCC0F42440643BE1CACB65537A6D955
SHA-256:	5C145737D9F916D55C832E36F719B1F848A11BCBBC9C201113BC9C9A5432EF2C
SHA-512:	773194DB73973E06A10D52C58DDFCB1761C8861B54D62824CD30007DB7D03AEFDBA3214331B2D3338BE7C7E5AA9D1220B7D0FF064637FCC9D021752A62B87DD9
Malicious:	false
Reputation:	low
Preview:	RIFF.N..WEBPVP8 .N..0....*....>I..D"..$...H...cl8.<...e........W.o..YW...7.f....bl.........1.........?...n.C.....k.3....._...}......A.........>..............'...o...........~.{.~........i.....o......m........\|......M......p...;......\|&t......=..c..........M.7.O._.)}...._._.....\|..E...7.o.....~.}.\|...................K...?..............#........[...>..._.........o...3................_.?.}3.i......._i.Q...U.......o......................?......^.........Vj......<..Cs.%.8C.D..\|..gy..D.3)#1...f.;.@...t.y.h..w..I...CU..7.u...a9$..h.n.k..S.?.8V....4.r...Vq.!\|.....y......&.{>...a....2.Fh. o`.LX?.6.YO.>T#a_.w5.6y..e.....M.e...pZ...WG.N....M.YsCQ%......(....C.......{{.y.W+..o5.Tz$....d.x.'...Zry...e....3G.e/.io.(.:$...&-#..4...\oz....TK.}J.f....bC.-)..C..........<...}...&.^<............\|...uV.$...+{ . ....x.8.u..m..O..i...&&..P............T.Y..G5.j..I..>tm;....`5.`......A.s....vEP..Z.U.pwu.......qZb.....+.m..!...@N.\vJ......~.5F...(s.2{..3..U`...^.

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	3487
Entropy (8bit):	5.354515738054961
Encrypted:	false
SSDEEP:	96:rf7x0YZpBne4BkSnz1hAlawUvz6Xe8FtzGXEtEZEsEfE8ECEIEJn:fx0YZGHSzTZL6O8FJQEtEZEsEfE8ECE/
MD5:	86388C0CC914B9725F97922615E886C2
SHA1:	637BADFD2D7038B2214A67D96AFCC09BB3186233
SHA-256:	D3AF90E05AE477FE5862722A774A6FC95207DC982E33897055DA58A447DCCC57
SHA-512:	CC53CAEBC725C469753B8F21F933BDAF1504DC9C93E4E8711956EA095A47070B0CC4F74AC25FB87031FB9C06AFACD41B2BF6D26F063700A9A2E8EF6CEFFC2933
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/7/intl/uk_ALL/overlay.js
Preview:	google.maps.__gjsload__('overlay', function(_){var Kya=function(){},EC=function(a){a.yA=a.yA\|\|new Kya;return a.yA},Lya=function(a){this.Eg=new _.om(()=>{const b=a.yA;if(a.getPanes()){if(a.getProjection()){if(!b.Hg&&a.onAdd)a.onAdd();b.Hg=!0;a.draw()}}else{if(b.Hg)if(a.onRemove)a.onRemove();else a.remove();b.Hg=!1}},0)},Nya=function(a,b){const c=EC(a);let d=c.Fg;d\|\|(d=c.Fg=new Lya(a));_.Cb(c.Eg\|\|[],_.ek);var e=c.Ig=c.Ig\|\|new _.xsa;const f=b.__gm;e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("center",f,"projectionCenterQ");e.bindTo("projection",.b);e.bindTo("projectionTopLeft",f);e=c.Kg=c.Kg\|\|new Mya(e);e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("projection",b);e.bindTo("projectionTopLeft",f);a.bindTo("projection",e,"outProjection");a.bindTo("panes",f);e=()=>_.pm(d.Eg);c.Eg=[_.ck(a,"panes_changed",e),_.ck(f,"zoom_changed",e),_.ck(f,"offset_changed",e),_.ck(b,"projection_changed",e),_.ck(f,"projectioncenterq_changed",e)];_.pm(d.Eg);b instanceof _.Hk?(_.Wk(b,"Ox"),_.K(b,148440)):b

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x11, components 3
Category:	downloaded
Size (bytes):	832
Entropy (8bit):	6.352485440078224
Encrypted:	false
SSDEEP:	24:NYQi9YMWUo0XxDuLHeOWXG4OZ7DAJuLHenX3c8T:NYn9YMOuERAyI
MD5:	3D698533D93378350F1B607069047C2A
SHA1:	6957137279EAD84D4A495204C0C3614427B2BB9B
SHA-256:	53CDC35C961868FCFF64A116DC4083A2F009A7CA51DABB1038BD134FFB54250D
SHA-512:	29DA42077C064DFA48CC8D4D9BE9FA006F6F1C05BC05874E50F869E106A0798CEF8A668B348F908AC3AA8642E685C01ACEDA3C51903E66B59A288E732AA1E97C
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild3634-6431-4564-b735-633463656536/-/resizeb/20x/taras3.jpg
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..05....UFzT..J.....uX.ES.}h..h.GL..

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	679
Entropy (8bit):	7.597775694402076
Encrypted:	false
SSDEEP:	12:6v/7XAv/xEfUoTRuEiOrheFsexR9hDpSEsemWsMGpeNTjXTBhyBXTL1ScHD:T2FuO9eFXR93FNoQDEXTL1BHD
MD5:	210F55E977FD5D4DCC3940A8ECCEBD74
SHA1:	0903D000AE8943885D598D1D27E9B50E3567EBE2
SHA-256:	BE4DBD11928204EF8F2B2E5CFFA4118D97ABCFB3025248996D4A0F0150708BB1
SHA-512:	FE306848926D90A72B1BA3D4375895CDF0035E7AAF4FD4E07DCA81807A3EAE7B65CA564D24CFC5FA4D746F506FE00C3EB1F3A317CA82032A2A30F5B9FCFCB147
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild6230-6437-4163-a262-373465643835/-/resizeb/20x/Apartment_3_1.png
Preview:	.PNG........IHDR.............b.......pHYs...........~....YIDAT(.=..r.0..`...M.&...hE....$.^H.?.X.....:=.+....%.>G..cI.sr.."G.H....../&.#6....RB...;AK...O9LHN!Z.`...#....LVS&.#..YL~....!'.fj..t ~bp......a:.A..J...Aj.9I........O-O.......D.+.x...!..!.+8...=........EM...P."N.i8.0...x... n..>_)?1.z.k.p.8~..G........v0.l,...L.o...........x....C.N...u.b.....}..@.=b...G;...#`..7.....G....w..p..6...8..@3L.....UC....Q.6~.4j....6.~7...I.7.X.l...m!..SlyN.6ej~...)vm..k4....wo...&.0M.!...9..B.9.e..4GW.S....UjZ.....K..T.ou.C5.Wkd.n......9.:..V.u..u..>.Bh....bU_........oe.N..lI..BY.T.%..:..})..ZN............C.h...[..t.7:..#.6:a.c]..}......8....}.........IEND.B`.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (906)
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	5.320393671652214
Encrypted:	false
SSDEEP:	48:DZxkqjCAaNR34ZSVWcjPlmVKTimWyWCHC5OhckMy0FiSQvQEIvwsoXPTRn:DZxZCAa3P5PQLlDO6kMMSQ0vNePTRn
MD5:	5669B9282E2E72582EF2D708EA5F9B72
SHA1:	E1747DA3DAE6E06BCC451761925C9A236C513B73
SHA-256:	3C69E8DBA54B4B573AB8442505AF7A8E1F239255C51329436DB14F3A3CE4A5EF
SHA-512:	45E302BD7B61F58A9F8CB6F6A7149DD7AA896001CD024B559852679B23D0E69257322182843CC126B50FBBCE454A235D3375C0E725533BCA189E731749A3AAFB
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('search', function(_){var sva=function(){},WB=function(a){this.setValues(a);_.Ri("search_impl")},uva=function(a){let b=_.ol,c=-1;a.tiles.forEach(e=>{e.zoom>c&&(b=e.ii,c=e.zoom)});if(c===-1)return[];const d=[];a.Fu().forEach(e=>{e.a&&e.a.length>=2&&d.push(new tva(e,b,c))});return d},vva=function(a){const b=[];a.data.forEach(c=>{b.push(...uva(c))});return b};_.Ga(sva,_.sk);var wva={["1"]:{}},tva=class{constructor(a,b,c){this.Kp=b;this.zoom=c;this.bounds=this.anchor=null;this.Eg=wva;this.source=a;this.featureId=this.source.id\|\|"0";this.infoWindowOffset=(this.source.io\|\|[]).length===2?new google.maps.Point(this.source.io[0],this.source.io[1]):null}getAnchor(){if(!this.anchor){const a=1<<this.zoom;this.anchor=_.Rl(new _.cm((this.Kp.x256+this.source.a[0])/a,(this.Kp.y256+this.source.a[1])/a)).toJSON()}return this.anchor}getCompleteBounds(){return this.getBounds().reduce((a,.b)=>{a.extendByBounds(b);return a},_.Vl(0,0,0,0))}getBounds(){if(this.bounds===null){this.bou

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14872), with no line terminators
Category:	dropped
Size (bytes):	14872
Entropy (8bit):	5.1395903569137396
Encrypted:	false
SSDEEP:	384:XxshurrSmRSS/lpN91CW4siVsA/Q6fWwNPQvYnc5M0i+JWU5Oo:XahurrSmRp/lpN9vA/LWwNOYnc5M0i+v
MD5:	CB1FB0F3D59A568605F978B96D4D5BEA
SHA1:	EF357F187E807F62690B111C2C492A424BA2A2FE
SHA-256:	85FB9529A24098AF140928CFEAE8BE952FDABC885D7DEF896865385A8EF149B1
SHA-512:	FD5ED2949EF5E8272A12ED8A10F9F3D397826EB0E27681E03316F2BE4909D83C6B6C1B2400B7D7D27F7DBEBFF5DDB9FAD148CCAF729BC45DF035E717E236E4ED
Malicious:	false
Reputation:	low
Preview:	function processYoutubeVideo(i,r){var e;document.getElementById("youtube-api")\|\|((e=document.createElement("script")).id="youtube-api",e.src="https://www.youtube.com/iframe_api",document.head.insertAdjacentElement("beforeend",e)),t_videoprocessor__onFuncLoad("YT",function(){var e,t={"url-youtube":"",nomute:"",noloop:"",nocover:""};for(e in t){var o=i.getAttribute("data-content-video-"+e);o&&(t[e]=o)}"yes"!==t.nocover&&(t.nomute=""),t.mute="yes"!==t.nomute,t.loop="yes"!==t.noloop,t.cover="yes"!==t.nocover,t_videoprocessor__setYoutubePlayer(i,t),t_videoprocessor__updateVideoHeight(i,r,"youtube"),/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)\|\|"ontouchend"in document\|\|(window.addEventListener("resize",function(){t.cover&&t_videoprocessor__updateVideoHeight(i,r,"youtube")}),i.addEventListener("coverHeightUpdated",function(){t_videoprocessor__updateVideoHeight(i,r,"youtube")},{once:!0}))})}function t_videoprocessor__updateVideoHeight(e,t,o){var i=

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	downloaded
Size (bytes):	830
Entropy (8bit):	6.358230609724948
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3GMk:NYw9YMnrfuERA2
MD5:	1BA575AA70E66339CDC3184B41C799FC
SHA1:	453EB30465D6FD7C5D7FB39F949669B13D4E73C1
SHA-256:	81E46AC6BE4D55A57685EC67D47419717871C932C52ED22A1BA223F5FB102AF0
SHA-512:	A0EFC8B56D907EB65A20873110E798A010C3C9955705709D179C7D6CEE8EAE34BE0D2FD6C80F02FFC4E0BDF7665F1552F4B9D666952E326771E37E6E194E463F
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild3238-3737-4863-b364-353434636432/-/resizeb/20x/04.jpg
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..uF.....5.rs.`f.......QL..+..C...

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2512)
Category:	downloaded
Size (bytes):	81537
Entropy (8bit):	5.533330486807108
Encrypted:	false
SSDEEP:	1536:P/JEJKogMzDhDhxDovBTRZdElfcBJpfZ/ni9PN0X4r0Z8WIcR5mZVarvhjn7N:HJEJK+zDhHDovBFZ+fOrf5ni9V0XDZ8q
MD5:	3DD7C4469105FCCD31C7E4736CC84B44
SHA1:	F630DE5A1FBA1CF301EB134E713411F9CCDF2AB7
SHA-256:	F82EF122482E30D385AF7C7DB65DF438CA47B90A7609F1A5895A2183F492CED6
SHA-512:	069F18AF933C248537EA98771B8E4256486C58F0A226242DB00E5FF962BEF49C9E62DCF87F7CB9134CCC8D2FD4F2425F278728D435F58D70CDC31FCD1CE8F0B0
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/7/intl/uk_ALL/map.js
Preview:	google.maps.__gjsload__('map', function(_){var Cva=function(){var a=_.er();return _.hi(a.Gg,18)},Dva=function(){var a=_.er();return _.H(a.Gg,17)},Eva=function(a,b){return a.Eg?new _.cm(b.Eg,b.Fg):_.dm(a,_.mr(_.nr(a,b)))},Fva=function(a){if(!a.getDiv().hasAttribute("dir"))return!1;const b=a.getDiv().dir;return b==="rtl"?!0:b==="ltr"?!1:window.getComputedStyle(a.getDiv()).direction==="rtl"},Gva=function(a){return new Promise((b,c)=>{window.requestAnimationFrame(()=>{try{a?_.Km(a,!1)?b():c(Error("Error focusing element: The element is not focused after the focus attempt.")):.c(Error("Error focusing element: null element cannot be focused"))}catch(d){c(d)}})})},Hva=function(a,b){a.Fg.has(b);return new _.fra(()=>{Date.now()>=a.Ig&&a.reset();a.Eg.has(b)\|\|a.Hg.has(b)?a.Eg.has(b)&&!a.Hg.has(b)&&a.Eg.set(b,"over_ttl"):(a.Eg.set(b,_.Dn()),a.Hg.add(b));return a.Eg.get(b)})},aC=function(a,b){return _.$s(b).filter(c=>(0,_.Oqa)(c)?c===a.Eg\|\|c===a.Fg\|\|c.offsetWidth&&c.offsetHeight&&window.getComputed

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1918), with no line terminators
Category:	dropped
Size (bytes):	1918
Entropy (8bit):	5.171724467282514
Encrypted:	false
SSDEEP:	48:oCXNjEPW6m+kVq+yOSXHyBGRK6zxmNChSmkLjws:LjEP5J99K2k2s
MD5:	8E582042C3E2C49A8F2C1AAF96C70DA0
SHA1:	D72CCDCC11D24594480A4CA8B699C029A8E0765C
SHA-256:	CDF65E26B905A653BCE60DF182886B032B606940391BADB1E3A655F434CA446C
SHA-512:	B289159BB4CD83316CE8A9A9E0E53A845065454AC847E54FCDDECBDB201EE84C0A4623C5288680E472E5C47BB4EF5852B399DF43786A1E745F4165D99A6B0644
Malicious:	false
Reputation:	low
Preview:	function t_fallback__init(){t_fallback__initTags("LINK"),t_fallback__initTags("SCRIPT"),"loading"!=document.readyState?t_fallback__initTags("IMG"):document.addEventListener("DOMContentLoaded",(function(){t_fallback__initTags("IMG")}))}function t_fallback__initTags(t){var a=document.querySelectorAll(t);Array.prototype.forEach.call(a,(function(a){"set"!==a.isReloadFuncSet&&(a.onerror=function(){t_fallback__reloadSRC(this),this.isReloadFuncSet="set"}),"y"===a.loaderr&&(a.loaderr="",t_fallback__reloadSRC(a)),"IMG"==t&&a.complete&&0===a.naturalWidth&&""!==a.src&&t_fallback__reloadSRC(a)}))}function t_fallback__reloadSRC(t){"function"==typeof t_falladv__reloadSRC?t_falladv__reloadSRC(t):(t_fallback__loadAdvancedJS(),setTimeout((function(){t_fallback__reloadSRC(t)}),500))}function t_fallback__handleTimeout(){"loading"==document.readyState&&"object"==typeof window.performance&&null!==document.head.querySelector('script[src^="https://static.tildacdn."]')&&(t_fallback__loadAdvancedJS(),setTimeou

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	626
Entropy (8bit):	7.537055170768238
Encrypted:	false
SSDEEP:	12:6v/7XyiVlXRGamI1JdHXKARu1d7vjpIi9I81tGSiCLwHa0Q:nCM21JrW77+81tLiCLw60Q
MD5:	005C432AAC44DC2DE69E7759E9E2DCA6
SHA1:	FDFB99495E35237B61A596983252912C3449DAFC
SHA-256:	5B6017CBFB66D29A4EB4C9C632E72BF85F276914C29F27D3194B918072E2C17D
SHA-512:	26B3970808B57A09644F34CD9C535B0DA59202357B5B7AE35BB7F43726074CD8CDCC6508A8F781949A27161FFE072F24BE40A81CA0EB4FF45D7ED3E90A784014
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b.......pHYs...........~....$IDAT(.e....0.E.....Lw.}_X.lW>..D..S!...y.........Z.LK.Tk.R...).H....$.9a<S,.......%..fO%9..R.1...y{c..qd...1.K.d..%\....h(yE.I.V.3.,0@.A.H.F....R..W..SI.R....U/2.IZ<I..IT!^$.L\2..A\..R$u1..W..D^.d.4.E.}..?I...."..4...b&&/.$a.....j.Ju......$....A....=o)..N.Gh!.......: ......C<.....p .`.9....\|.-.2z...a...vyL9..,.N..._]...i.@.\|v........d]*.Q][.w..z..Z.T.m........ n.....x5-..oZ.f.j..k>..Y.%.Zk...NHO....s..N.......#Ng%.s...!.3.p..N.z.Z.eY.i[.C}.....,....HW...#E...R8r.G..(%.....cY.c.c....e..%.K.or..^....k..,.f].}....../.\,4J.....IEND.B`.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.99426596531879
Encrypted:	true
SSDEEP:	24576:/ksDXIDCGAbpcGkp3+s86QMaxq0qLQHyxIAQWau7z9:nlWF+sDfacv1eAbX
MD5:	C900CB95A345F874D587F620ED5C0F78
SHA1:	755318B61718564912CFC5D5C0D0B114E1F75EC4
SHA-256:	75DF9F225F23AA6110927A3CF4DA21B6F4A86DF75F5BA94A0509637C971B67F5
SHA-512:	E3C7C76638B8E85B4F66F2272A3EBB5A34713DC5CCAAA2535F1AD875D8C960A05EFAEF80123C65C9689A00896767A9A3D3C4BB2B842400EA6778952248BDFA22
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:b
Preview:	...-.&.".......;R.]..N..k...oh$..t.Q.Q....}\|.U.G5...#w..(.D.ZP...q.3.3.(.o+..`.Z}A.qK~..%...P.07.;....Q..d9.%.A.f...z.....r..>.l..1SJ..n..,v.!.qC..)/.r...3.K.#.6j.%.v.~Vv...".!XU.cGO..F..-.cq+h..38.............ChDlM;-B"..^....6B..P...I.C.-.2.4.;2.vMe.B......Pl$(.U.u..l..FB..o.;i.K.D2.C.....h.0......%DUl.8./.S..!..[..u...^o...)...5.;...+.../.!..1T..5@.R..2.........'R0...C~m.vL...@.g.#NL.V.5.E..f.3.....R...\...Q..FC1.3.......=.<.^..R....y'...Z.w.xP......sl.B. b...`....3........T.N..1r..^.....N..K/I.7P..m...K.8g7.j_!(...q.x...o._..sv.e..76.3w6.L.f....0.8..q.[.~R...5c....O....\|.N.W9.......b...@.{n.\..{j\.....B..........oN..Mi.hh....._.b.!..Kcx.-..BZ.........b..\|.'#...&.J,..2q.....Z.{....*.{..i.2......3.U^W..a.FJ...I.......G.z.l.1.....p.B^......."%.C..BV3c..S.....{C.NN.UV..).X.Y4...=N.U5]U.F..\|.\..P+.V.....A.....f(..=."E....U.?q.x.rn.C7.#._.+..v.?..&C'..[.k.s.......N...J_t...L.g<..HX+.z...J.....w.s..QGj ..,......=i#....Ee!..6.....r.K.#Hd1J.t..\|.i

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	downloaded
Size (bytes):	406002
Entropy (8bit):	7.969442882710842
Encrypted:	false
SSDEEP:	6144:/OwWYn+HR8LwtjOuUKhv0oInNm1oR2nPpkzLMutRa3Jlm68H8WyrVD+:TIxywtSFMv05NE42nPpSt2mL8nY
MD5:	F6ADAE35660B22326F84B3D6DFE34BEF
SHA1:	96E1267379C3CD8466C60252118671AB4EFE2C3B
SHA-256:	0E2DD63506EACBBABA843CFA7037B78698FD05C7E08CA545EAB12D30A164D73E
SHA-512:	CAC3A7E4B57E5AD8C2DF83A879824B2AD6CC48CD5283B1020505CFD8EBF8D4B08957BE0275BB98CAB09353AAE70B83B38460144C7F9652B9A56C45A07A84FB56
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.com/tild6437-3965-4062-b861-633362613735/09.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0.............................................d.........................!.1A."Qa..2q..#B.....3Rbr..$C....4st....%56Scd...&DETu..7....'...UVe..f..................................=.......................!1.AQ.."2aq.......3B..#R..4.$S.Cb.r.............?....\|...@..@.......P..(.........7...t(....Kw..oI/p.4.s-.M..d....S)o=....c.-O.....kK$...%=....N.m3.{o%vn.....'.....B}K..GAqfg.~....#...g..So.....+l..?}k.F^&R^~O.knN.5...l...UfF}9..^.8..g._.<KH...3W...C.S].].nl.V...e.....M,....i.hI.Z`....N..n0..Q..U4M$w8s$..+.T.U$)....5...L..lQ.l:....I.Hb6.6...a.G.F. HFf..W>..)....K..-+..SJ.oO....v...M%R6'..>..B......6.....Ypf..!....^G.$......@..Y.9][...f..%.../J.%.~.cB2..Gy..u]Dpf=.j.}.#>..J.6;..JD...1...iI.C.`Y....)..Fh....F%..V.F%..U1F%..Z..]..5.I.h..j...^Ul..t..X..7.?e..e.x....$u.SJ*a.C.M.L.+q<..4.Q.\/L.B...Q..'

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4827)
Category:	dropped
Size (bytes):	246256
Entropy (8bit):	5.705627056956243
Encrypted:	false
SSDEEP:	3072:PVEu2U7s/QadShrusrp9id4hgXPfmatH9p:Pqu5iKjN9ZhgXPfmatz
MD5:	3AA1F4E3551AB759D7ED2904377F5E2B
SHA1:	167BECEB3A99DD5DBF8B51FBE86CA9F0AA5988B8
SHA-256:	259C3D190124A14A00727719D2794C0567644D3AB4E70ED126B570D2B3AFBD1D
SHA-512:	E1A0F10880D7FE0BA63F15787A9BC0101C687C46ADC8E5854E79510D874D6A035909A05A5863C856EE542F0CD7039BC4F7EDC2D7B24DF74BF99774DCEB2F4ED7
Malicious:	false
Reputation:	low
Preview:	(function() {'use strict';function aa(){return function(a){return a}}function ba(){return function(){}}function ea(a){return function(){return this[a]}}function fa(a){return function(){return a}}var m;function ha(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ia=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ja(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var la=ja(this);function p(a,b){if(b)a:{var c=la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ia(c,a,{configurable:!0,writable:!0,value:b})}}.p("Symbol",function(a){function b(f){if(this instanceo

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.96555834613279
Encrypted:	false
SSDEEP:	24576:s2OQ7X1FxtxjrWV7+ovpRFZxFrRpvwcQ+:s2zX1F/xj27fpRFZrrRp7Q+
MD5:	173C790BB7A5CD22906D20DDA5F33821
SHA1:	3CDB75CF397479033CCD8A134641885BDFDEECD2
SHA-256:	19B3BBA817ACC475172D907125D65545528753A6DA452D4147CC82B21D5B8B36
SHA-512:	FF4065D3CB0F4B84B339FD297E1A301F01783DA14C58395ABCBC23C9B8554248422B848EE3E21FE6B7154F5005389F0474AB3652FCEB6819A0A8DD0C684E8F2A
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:f
Preview:	.%.4..V...7...w )...~..-O..6....e}.g6..jk...F.....(.....h.......#..e..6.\.P...}..p...G...y.:8.....5..TT.t'...{.......}..2t.U..P..W...L*......clb..tnc\..{i.."b.VN?.GO.{..E....PG..6......v..^..5.J.)..yt.Y.....W.....S...2.f.bA...8.......b...&...>.aRL<N>z.......J.L(..-...?..L.X..K0..`..~...D}..D.......0,...O.3..$....NN+.Pr...2S...X?.........X.........#&,..A..\|b.X.....).7D.=.[.g.h.........T...j.@b.`...B....P1.8.Y.8.P.<W.G,/.B.>...+.0.s...-......D.........v.\f(>(.L..A..I.>...:AG..x...>.b.q\P..+........fx.o....D...P....`........u...o......F.KZ.u3E..Rw~.4ta...(..}........}C A.....\|P.....(...........O.....`.@.P.#.=S.......f".5.`............6N.{.A BX..R.{.Q.E.O.`......\..+...bU.q .<P.]E.....@y.\P..@...C0y..{.....2.#;...'C....`fX.;4.(.....n_..+.. .....[v......Vv8T.tS...YK...\|.j..D...@.....EN....r.y.lf.._...y.3l......\..:....,...K....g.......@.[..........HV.....da.8s.L..`.....$._.e....@.....b....Q.i.........Ta.i...8.}..1..#:S<p.l..8.:....p.RP.9)a1PTnWg

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	dropped
Size (bytes):	671635
Entropy (8bit):	7.973258752115259
Encrypted:	false
SSDEEP:	12288:KG5Az114HjBx5sdWDd8IPFD9Lyt6koSmvvpzQQAPoUNl:KiAz1AG6dhLyte3vhzlAPog
MD5:	3515CC83E1744E86CBAB80C6D971B213
SHA1:	17DB1871C13D74D02D2872F77D3E82C22A8481AF
SHA-256:	E4EEB9E3058B4109C1AA361994952B73FC52939E7E6F849DE81F886999A35E34
SHA-512:	F513D82B9BAF157FD20EE19406E27DD1BCEC58E045F1DF998243827F28F20F9E45402EF81CD6C727381ACDCC68E0D7B6A25CCDE4242D281EDAAA75511131BDBA
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0..............................................a.........................!1.A."Qa.2q..#..B...Rb....$3r..C..%45Ss....Tcdt..&'D..6Ueu...7E...V..................................8.......................!1.AQ.a"q..2........#B.3R.$brCS............?...rI.>.#..x...Xa.2.. `..1]...x.I...-....F..hc.I...@##..l..k&.".ac......E.~...8(.k"........0PP..$......I.../..ml..K..>..#f...4;\.......{v.........N.aP..^...V9aqa..*..........?\.8.n,}p..,O8.O.....!.`M...(b.X.6..!....`.H'aa..n?.\|0$....C...1...ks....M....o{ql..%w..0....<``1%x.....c`p..'.v.....~..........k.$}`.n~..VEe.s.8d.#9.\.0P.I..0..p.(b...5.#..!k.......0....n98.1p8.......b..Y....[..c.7....copE..... {`.......~.x....L{_..C.}......)........\|.....L..b.....Ao...G.[.0.]...1\.....d...H....<m...-........6...,p..$..$[.k..7?\.?...w......pPX.~.Z...k.b/.c...8.c..11j.a.C

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26847), with no line terminators
Category:	dropped
Size (bytes):	26847
Entropy (8bit):	5.247573960021826
Encrypted:	false
SSDEEP:	768:nnDb2HWtwgBhwFlU18oilKk5yUrsRpFhEOmHYzqlbVlC1pvuYeME1GnzNzDKEcUa:nnsWWgBSg8nodhm1rYJ/cUOL
MD5:	A37B0F2C48534911150736861C27CCB4
SHA1:	83204E3C372F714CF81D856E48FC15E3C0DA6009
SHA-256:	FBCE4CF91174BC909024140E485E0BBA070CEF92C0733112A9D93C54A0C58B40
SHA-512:	C993AAF927293263937DB527600E0F6B571A6881EBE0D2FDA9C1998A7B90C386846CBE33BFE9208D9DCB03A5F01F7228B04DFF7E07641D91F0A1C961E0BF0796
Malicious:	false
Reputation:	low
Preview:	function t396_init(e){var i,t,n,o,r,a=document.getElementById("rec"+e),l=a?a.querySelector(".t396"):null,d=a?a.querySelector(".t396__artboard"):null;d&&(t396_initTNobj(e,d),t396__initOnlyScalable(),r=t396_detectResolution(e),i=document.getElementById("allrecords"),t396_switchResolution(e,r),t="window"===t396_ab__getFieldValue(d,"upscale"),t396__setGlobalScaleVariables(e,r,t),t396_updateTNobj(e),t396_artboard_build("",e),n="ontouchend"in document,window.addEventListener("resize",function(){d.classList.add("t396_resizechange"),t396_waitForFinalEvent(function(){window.t396__isMobile\|\|n?document.documentElement.clientWidth!==window.tn_window_width&&a&&t396_isBlockVisible(a)&&(t396_doResize(e),d.classList.remove("t396_resizechange")):a&&t396_isBlockVisible(a)&&(t396_doResize(e),d.classList.remove("t396_resizechange"))},500,"resizeruniqueid"+e)}),window.addEventListener("orientationchange",function(){t396_waitForFinalEvent(function(){a&&t396_isBlockVisible(a)&&t396_doResize(e)},600,"orientat

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3312), with no line terminators
Category:	dropped
Size (bytes):	3312
Entropy (8bit):	5.0917090133708545
Encrypted:	false
SSDEEP:	96:BvRvBI+FZ4TxTnY6xzecil18YX2QHyyqBdv:BJpFZ4TxE6xicilH8yqBB
MD5:	085A93DC89FE3B0B497F99A222F9AC57
SHA1:	339D9C7557C0FD2CA1C4D73227F9274BDD080EF3
SHA-256:	15CB1CFFA887EC74A9AE3DAD3C5C539E2B24C0C2E8E66F82FA536406E0C95DB1
SHA-512:	429B8C4D240686DD6FF59AC1945A825BCFAA51CD3914FD49F68C7492054268729D87ED07A4D0A3E2A30BDEB0CBABD1FB715BAA43DC02F1EA0FB7C49471F9501C
Malicious:	false
Reputation:	low
Preview:	function t_performance__createMetric(e){var t;"undefined"!=typeof PerformanceObserver&&window.performance&&e&&void 0!==navigator.sendBeacon&&(e.isMob=~navigator.userAgent.indexOf("Mobi")?"y":"n",e.hasZB=document.querySelector(".t396")?"y":"n",e.hasCCode=t_performance__hasCustomCode(),e.url=window.location.href,navigator.connection&&navigator.connection.downlink&&(e.speed=navigator.connection.downlink,e.connectionType=navigator.connection.effectiveType),t_performance__createPerformanceObserver(e),(t=performance.getEntriesByType("navigation"))&&t.length&&(e.domInteractive=Math.floor(t[t.length-1].domInteractive)),e.DOMloaded=performance.timing.domContentLoadedEventEnd-performance.timing.navigationStart,e.TTFB=performance.timing.responseStart-performance.timing.navigationStart)}function t_performance__hasCustomCode(){if(document.querySelectorAll(".t123, .tn-atom__html").length)return"y";var e=document.getElementById("allrecords");return"yes"===e.getAttribute("data-tilda-project-headcode")

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 390 x 368, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	43194
Entropy (8bit):	7.976879745109125
Encrypted:	false
SSDEEP:	768:HEUd6YfEC7pr+ZcKiiYRc3TbAHN539ac0S4DrLn+7sSl+89T2eSJ6sud:kUIYbkmFkoN54c0TrLn+7sQyeVsud
MD5:	A788FCD070DA2E0229D1B88DD532B746
SHA1:	02776898DD8C6A0099477F918B9834D39F606C4A
SHA-256:	B7DFA5EC690B8747455CE09B7DBD81588FA53DE614036CE3BF0A6904C7A0FFFF
SHA-512:	9D7061C5DC59B4C25848533A571DD0137EEFDB0D287814B5674EE82F6E376677480C437538BF1FF5DF8612C78F5D31623C8401F31B25E426917C76D2791200EA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......p......K......pHYs.................sRGB.........gAMA......a....OIDATx...\|S....IW.[.[h....!{..............+n.u#.......A..U..{..+y.9.I.6io..........4.....y.=..`0.....`0.....`0.....`0....H..z..nX5..)l..}......v..U.....PK$..{exw\|0L.Ia9.A...HS}...l.Y..W.o+..k......./..V.[V.s.^..k../.._...........(.uQ....,L..z).....DQ..pJ....#...g..A..,{S.1...<..>..q".k..}.g.,.).0p.P.{Q...T.........aL...l.....ww..>......o............"HJ..u5....o.....s.pL..`7om}Uu5.lm.}........9..K..'..H.L~j.F.>...&.... ...Cm.k..\%..`0......\.5...v.ud..j..?....6>..5R/.".B..t....!.4.. t...a...x.....&X.Z.&..j'..Kh.A...c....\......<..}..>q .%.a..2..I.mI.b...I.9&..p4i.h9>......t>..o..E......W }.Q.\...s.{XfP.4..+..,...$6....B;X...1z.^.{.i..3.....M...@..p..`..UH. ...O..U.,........o.U..j.4.@...q..v..;.VV..D..V..........,...S.m....s.%.......j.._..)W.T`.............17.6go;0......7....n5..g....mT..!-u.>...]F[D.&C.g6....{.........).......".(.z+~.8..w.B....d1

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1918), with no line terminators
Category:	downloaded
Size (bytes):	1918
Entropy (8bit):	5.171724467282514
Encrypted:	false
SSDEEP:	48:oCXNjEPW6m+kVq+yOSXHyBGRK6zxmNChSmkLjws:LjEP5J99K2k2s
MD5:	8E582042C3E2C49A8F2C1AAF96C70DA0
SHA1:	D72CCDCC11D24594480A4CA8B699C029A8E0765C
SHA-256:	CDF65E26B905A653BCE60DF182886B032B606940391BADB1E3A655F434CA446C
SHA-512:	B289159BB4CD83316CE8A9A9E0E53A845065454AC847E54FCDDECBDB201EE84C0A4623C5288680E472E5C47BB4EF5852B399DF43786A1E745F4165D99A6B0644
Malicious:	false
Reputation:	low
URL:	https://neo.tildacdn.com/js/tilda-fallback-1.0.min.js
Preview:	function t_fallback__init(){t_fallback__initTags("LINK"),t_fallback__initTags("SCRIPT"),"loading"!=document.readyState?t_fallback__initTags("IMG"):document.addEventListener("DOMContentLoaded",(function(){t_fallback__initTags("IMG")}))}function t_fallback__initTags(t){var a=document.querySelectorAll(t);Array.prototype.forEach.call(a,(function(a){"set"!==a.isReloadFuncSet&&(a.onerror=function(){t_fallback__reloadSRC(this),this.isReloadFuncSet="set"}),"y"===a.loaderr&&(a.loaderr="",t_fallback__reloadSRC(a)),"IMG"==t&&a.complete&&0===a.naturalWidth&&""!==a.src&&t_fallback__reloadSRC(a)}))}function t_fallback__reloadSRC(t){"function"==typeof t_falladv__reloadSRC?t_falladv__reloadSRC(t):(t_fallback__loadAdvancedJS(),setTimeout((function(){t_fallback__reloadSRC(t)}),500))}function t_fallback__handleTimeout(){"loading"==document.readyState&&"object"==typeof window.performance&&null!==document.head.querySelector('script[src^="https://static.tildacdn."]')&&(t_fallback__loadAdvancedJS(),setTimeou

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	664
Entropy (8bit):	7.52962526722269
Encrypted:	false
SSDEEP:	12:6v/7XVaULDgK+AMed8ev/v1XBSdZ64nUAn5tVtXpQwAV7ahc3WUZ1WmGCgiWlBeW:pSDd8O1IdlnUAn/XCxV7ahcGUZ1n3Eh
MD5:	C0CFEC5BE91CE151036EF619CB1F008A
SHA1:	4329FF7A78CA492456D198D74371A7D85D96F425
SHA-256:	CEEF540EAC137DBEE843FEF3EE68C950D0247C363933D198FBC67141E72BB4C1
SHA-512:	F9255DAC27AE1E5D910B469476711D314A759EDDA539C63A3891F5517CCAD1759FF1315DE219C57A2856C83258F93DEDDB310665F87B5727E677BB509FCA37C4
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild6439-3738-4561-b630-653430626564/-/resizeb/20x/Apartment_13.png
Preview:	.PNG........IHDR.............b.......pHYs...........~....JIDAT(.M..r.0..P...3...$....TRO.2y..O.n.4.c.c_.%.K.5{(.CN.Rt.1....p?..R...+!'.9....l'.@...W...o.8....F[..i...-...l.`........%".H0.8E.J.Z...yFR.r....-A....P.?\|6>[N%Z.g#.."..O....^...,.............\+...5.:l.p.){...!D.......@..@...r.B?.......T._..09.ZS.;H..8B............0?.0.......i)./..c<A\w 8........... ..A.. .6({.\{,b.\.......!.J.....4.F<.b.../...+w..Sr..;[H.u!y.ZumM..u.B.).\J...`y...;...?.....:_.s..bR...}a!.r.e]..&..-X.i.#...4..M.S..$kZ.l..f.i..bh1.rje-m.6.k....l..+...Q....VVoU.NW.m....CM).S-..u-u...{........-.^..$w....=s.p.....QJ>....B..v<..x>..?....:..Q....IEND.B`.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	downloaded
Size (bytes):	773737
Entropy (8bit):	7.973718525344364
Encrypted:	false
SSDEEP:	12288:1BOwgmNXzRiYvgmL7UEdf8+aq2NmFbjVe1cyN1dJoraBWLnYcWL9gTk1VfXYtlO:1mmNjn7JSQH4cyNVoIZcgqTk1VPCO
MD5:	315AFC364E4564DDA930C0BDBA80C8FC
SHA1:	CC84463A3FC1A84D91BB1DF69B86D53F28CD4489
SHA-256:	14BAC5BBEE800FEC48D785502363D8ED17AD7D21B3DCC7B3E17F91B58EF3544E
SHA-512:	71D3FD6380DFD8C0C46BBB8471F8B59C87AB52A829C71999C99334635E26E3D4BE31D0B0F88C4C5F0AD2F7135E85920F711843ACC680AD915588A84FE798B848
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.com/tild3234-6435-4139-a630-333832333134/10.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0.............................................T.........................!1.A."Qa.2q..#B..R..b....$3.Cr...S..%4...&DcTs...t..56Ed.................................9.......................!1.A."Qaq...2......#..B.3RCb.$4S............?..U#.~d..f..H..&......4.qh.t,kw..jP/.C.&.Gi".T..u..!.9wi.r..#.O.a"..cD..j.;]..`e........9?7...qC.3.8..6,.4g.z.K......./Q........%..gtTq...V..4f.:.)........{..u.RN...0...%.,....q~..M.nI...Slap...r..n1D..cY..f.pM..+.VE..M....R....\|.v9V.:..%.tr.>....../}.C^...$.fV-.(..n.......n....a...p.p.NtBH;...z..#r.Q)n.v..,V.......k....e...(g<.o.B......O{X..}.......Z.>b.........u.;..,....^5.N..0...Y..J.w'. .H].1....0.?\|.cPNl.@...$...GY".."...?\....b........b....6^E..4...j.8.....M....D. ........l.gU..:..(q.^.IR;...D..5.&.u!....df5P...~S..cZdKh.p.k.....n.e.+..\..$.;...T.1.M......$..

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1680x1072, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	572948
Entropy (8bit):	7.999643403482216
Encrypted:	true
SSDEEP:	12288:CNxFaWETIaxpPAYFC1oCBZZ77nilZXyqKORLtzQz35X8lZyAT:HWwp41oCl7Sw12pzueT
MD5:	560D4C57CE6AEBE319E54F2B53AF9405
SHA1:	F5D469E7AE66EDC0593878119AAB17C30BE68232
SHA-256:	CA3B58219F48BD609F5A38CC1A86EC40B59AE073DFBE0515E964A9B6208D8F0D
SHA-512:	125B275EA524CBE29C7C1EA7DC786D701063B717C70E42FA2AA0035847657C6D87B0CF9EE58FBFEAEC209B201BF818FDF50CBE534BA6D3656D091A5DF5ADD24A
Malicious:	false
Reputation:	low
URL:	https://optim.tildacdn.one/tild6561-6166-4166-a138-666434396361/-/format/webp/11.jpg
Preview:	RIFF....WEBPVP8 .........*..0.>M..D"...>Ux(...../g.bM.....K.k...3......7.?...^]...Po....3...........G.q.H...]9....................................@....\|?.....y..I..........._@....{......../...o...f=......../........p?..W.....g......................._.......?..........s......O..$..?..............................<......?p~..Q.O..............?.\|%{.._...............=.......o......S...?...~..;.......A.(.............7.......?............g.../....`..}[.../...?....$}W..._...~.\|..o..........k......./............/......W............S...;.....?.?............7...?..s.......g./.?.?.~..........g............................._..........a.............%9......\.X.4OZ60\...P...9.....8v..ab...uV.....lj!w.KE..f...g.4p. [.T.Ew.U....^dXA/...........^].....zj...D.....$.:......~......b{.....9..Ij.....-.J.......+.{...P...%HB....^....$.+.s..pw.E.....n....`.......k.)..~....mw..QG.%.wro.......j..o.HJ-.1A..T.h.]K........0?.6.,..o.P..U?+.....U..CYQ.^.J..Z.QKw?[JIe..M+..m...^2..\|.....

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3641)
Category:	downloaded
Size (bytes):	296893
Entropy (8bit):	5.479205773522951
Encrypted:	false
SSDEEP:	6144:5n06ZKLBVSbaD8MSadsNgYCsGsRtTzgRXjrkPPRLbDrsO/BMd0m1gBR:5n06ZKLBVSbaD8hadXYPzgRXniPRnDrf
MD5:	22AF6085E4182A4FA27EE62107D1E742
SHA1:	AF739B00CE321F17ADFB3DD22409DD09B4F3CC44
SHA-256:	0A8749B5BFB600B7A20473C030D2BB6083758063775C1BEDC7F6044EC988CD3F
SHA-512:	BD8EC75F95FCB76A6A13F3234CA6CFB6DFA4C3E520D332893AE66613021F6BD777F0B12ADAAEA27CEAD4C145D33768B955E3085C211ED933A41EFEB9D432AA94
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/7/intl/uk_ALL/common.js
Preview:	google.maps.__gjsload__('common', function(_){var jja,ija,lja,oq,nja,oja,rja,pq,sja,tq,vq,yq,tja,uja,vja,wja,xja,Lq,zja,Aja,Oq,Qq,Rq,Fja,Gja,Sq,Vq,Hja,Nja,Qja,Ar,Jr,Kr,Tja,Mr,Uja,Vja,Wja,Xja,Yja,Zja,$ja,aka,eka,fka,gka,hka,ika,Qr,Rr,jka,Sr,kka,Tr,lka,Ur,Xr,Zr,nka,oka,qka,pka,ska,tka,vka,Gs,xka,zka,Bka,Rs,Fka,xt,Oka,Qka,Pka,Uka,Vka,Yka,Zka,$ka,au,gu,ela,hu,ku,fla,lu,gla,ou,ola,Bu,sla,Cu,tla,ula,wla,yla,xla,Ala,zla,vla,Bla,Cla,Hu,Dla,jma,nma,pma,rma,Fma,dna,gna,kna,lna,tna,una,vna,wna,Ana,yna,yx,zx,Cna,Dna,Ena,Fna,Jq,Iq,pja,qja,Bja,Dja,Cx,Ija,.Hna,rw,sw,Ina,oma,qw,tw,Kja,Lja,sma,Mja,Ex,Jna,Gx,Hx,Kna,Lna,Nna,Jx,Ona,Pna,Lx,Mx,Qna,Rna,Ox,Sna,Px,Tna,Una,Sx,Vna,Wna,Xna,Wx,Yna,Zna,Yx,Zx,$x,ay,$na,aoa,boa,coa,bka,dka,hoa,ioa,joa,koa,loa,ey,hw,ooa,poa,qoa,soa,Lma,cna,Wma,Cka,Ls;jja=function(a){const b=[];let c=a.length;var d=a[c-1];let e;if(_.vg(d)){c--;e={};var f=0;for(const g in d)d[g]!=null&&(e[g]=ija(d[g],a,g),f++);f\|\|(e=void 0)}for(d=0;d<c;d++)f=a[d],f!=null&&(b[d]=ija(f,a,d+1));e&&b.push(e

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 10, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	649
Entropy (8bit):	7.612359742132296
Encrypted:	false
SSDEEP:	12:6v/7W0AchQlYw6tACzePG5rhfxekaAgrbDxoAXGb4wSsh74DtetMfntwWbPK3p1:T0AAQGGwhL5pUDxdA4C+t2Cw0PEv
MD5:	F977EEACCC1373CE496DFBFBA6B83D62
SHA1:	872462B246F2044AEBE1D85DF1AF02887997DA42
SHA-256:	CDD3576A15CC68C45D118892E7C248C8ED0AC3E2E8E8ECC367A942D46E0DDC71
SHA-512:	B6366769ACE82DA4DBB6A8B82EB59BC58F7719160D5611F508A9B2222E3F75DB7E170B4B14C8DB895F26D5CC6BC9A2F7B251E2FC89972C65C8ACCB09E37533B5
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild3039-3739-4331-b732-363433636164/-/resizeb/20x/image.png
Preview:	.PNG........IHDR..............U~.....pHYs...........~....;IDAT(...i..H.@...1...3....-^ ...Hq)=?.M..^dfU....>}.^......6...4._\|...].~.X......h0.7..%....9..../...}..i..a.nYD&zl..:.R.3...#.M.\|.z.....`y\1...r....]..E[Gs..M...l0.&Vz..y....9.!.3J..\......%z0a....]..74.:.N..N..f[y.'T.q.p.C.&"{R.I.,V......X.m.Gw:...hA.'..c6#......<..G5!.#.jc...D^.$.$JW.....>....(..C.\|.%_....r..]...{{..F...q.i<..O..e....!x.p..e.;i..IO..I..X..;......q...-\|I..]..D.:I2..}..?......p.>..}n.H....ee..q.D.....ms...E.$MFDQ.?.....V.../o..;J.y9 ......4...m..........E6'....w\|....7Z...SZ.;".'........jMU.d.=.'......dJ..8.:.................IEND.B`.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1207)
Category:	downloaded
Size (bytes):	22042
Entropy (8bit):	5.287700455428518
Encrypted:	false
SSDEEP:	384:fTHpJkJyljOVaAlIRIIR0UUhgHknmTBIDmhFUbhnHu2nEY2Jq8f:1JkJyljiaAlIRIIR0JuknmTBIDm0O24j
MD5:	FE02D8114E107A56411A4D233D04DDC0
SHA1:	4B5CF585C10CD78DC52E648B01FEA29A5B4999C0
SHA-256:	12AB2CC2C62FD9A93964350DAFB1894BC674A613CDDDA6DCC998E3668B822A69
SHA-512:	992245C9C0713CB75CDC595C57FD0BC0D35B0B67629A6BEF0E9FFF916D11DCF914FFF065B0EEEDF58A48DA1AD77A9296EE342B4E82C971FC83B4AD8269AAA67C
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/ws/project10309827/tilda-blocks-page53186309.min.js?t=1725003854
Preview:	window.isMobile=!1;if(/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)){window.isMobile=!0}.function t_throttle(fn,threshhold,scope){var last;var deferTimer;threshhold\|\|(threshhold=250);return function(){var context=scope\|\|this;var now=+new Date();var args=arguments;if(last&&now<last+threshhold){clearTimeout(deferTimer);deferTimer=setTimeout(function(){last=now;fn.apply(context,args)},threshhold)}else{last=now;fn.apply(context,args)}}}.function t454_setLogoPadding(recid){var rec=document.getElementById('rec'+recid);if(!rec\|\|window.innerWidth<=980)return;var menu=rec.querySelector('.t454');var logo=menu?menu.querySelector('.t454__logowrapper'):null;var leftWrapper=menu?menu.querySelector('.t454__leftwrapper'):null;var rightWrapper=menu?menu.querySelector('.t454__rightwrapper'):null;var logoWidth=logo?logo.offsetWidth:0;var updateWidth=(logoWidth/2)+50;if(leftWrapper)leftWrapper.style.paddingRight=updateWidth+'px';if(rightWrapper)rightWrapper.sty

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1842)
Category:	downloaded
Size (bytes):	1879
Entropy (8bit):	5.444499858116836
Encrypted:	false
SSDEEP:	48:kot8we2wBcdh3wrzGggBWMOH4xBs3ZUoeoc32Tg:L8MdhIahEGKc320
MD5:	EA12DEC71E029EBA297D483C7A123962
SHA1:	E07887A24D4DBA4E2E3BA5AABE2CA68DADEA86AE
SHA-256:	E30BE28D85F8DB5566078029D843D227687FD73CCFD6757D37B69B2FC06BF48D
SHA-512:	F71E32C78FE244B32640012F18B54B8CDC19F3D43402DBD814D105133D3D0ED229EC3EC57097CEE96FCB87FC248EAB4EC9E054C097E45186F291D8E3552D8979
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-skiplink-1.0.min.js
Preview:	function t_skiplink__addButton(){var e,t=document.getElementById("allrecords");t&&t.querySelector("#t-header")&&(e='<noindex><a href="#t-main-content" class="t-skiplink" rel="nofollow" aria-label="'+t_skiplink__dict("skiplinkAriaLabel")+'" style="opacity:0;">'+t_skiplink__dict("skiplink")+"</a></noindex>",document.head.insertAdjacentHTML("beforeend",'<style>.t-skiplink{position:absolute;top:0;left:20px;z-index:99999;padding:8px 10px;font-family:"Arial",sans-serif;font-size:18px;text-align:center;text-decoration:none;background-color:#c7d2e9;border:1px solid #c7d2e9;border-radius:8px;transform:translateY(-200px);transition:transform .3s ease;}.t-skiplink:focus{transform:translateY(20px);opacity:1 !important;}#allrecords a.t-skiplink{color:#000000;}</style>'),t.insertAdjacentHTML("afterbegin",e),t_skiplink__addAnchor())}function t_skiplink__addAnchor(){var e=document.querySelectorAll('[data-menu="yes"]'),t=document.getElementById("t-header"),n='<div id="t-main-content"></div>';if(t&&t.in

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2615), with no line terminators
Category:	dropped
Size (bytes):	2615
Entropy (8bit):	5.150667683732337
Encrypted:	false
SSDEEP:	48:v3t/6d7IERSqAFFbpXmR4qp8nBUBXjpW8x6usjIeLOf7dNVWlR:v3t/M8+SqAFFbp2R4qp8nBejpWHk1VO
MD5:	45201A5876A0BD1B4292A193C634ADC2
SHA1:	C9A419B42751BDC24BF8625FF20BFC082F8F4C6E
SHA-256:	BE39C25D97C8EB00AA33ABED99FDD18FC6993B9CC5D21B2B69596D7F13405245
SHA-512:	BCBCCDAA2000615281F44A9B3194BE0C4E15EC80D434DBC3B7570CBFB4C5BA99DD7DD69B6F062FE93128CD3E284DE3DCE8F400859243AC99CD850C1FDE61B5C1
Malicious:	false
Reputation:	low
Preview:	function t_popup__trapFocus(t){var t=t.querySelectorAll('a, button, input:not([type="hidden"]):not(.js-form-spec-comments), select, textarea, embed, video, iframe, [tabindex="0"]'),e=t[0],o=t[t.length-1];document.addEventListener("keydown",function(t){!document.body.classList.contains("t-body_popupshowed")\|\|"Tab"!==t.key&&9!==t.keyCode\|\|(t.shiftKey&&document.activeElement.classList.contains("t-popup_show")&&o.focus(),"Tab"!==t.key\|\|t.shiftKey\|\|document.activeElement!==o\|\|(t.preventDefault(),e.focus()),"Tab"===t.key&&t.shiftKey&&document.activeElement===e&&(t.preventDefault(),o.focus()))})}function t_popup__addAttributesForAccessibility(t){t=document.querySelectorAll('a[href="'+t+'"]');Array.prototype.forEach.call(t,function(t){t&&(t.setAttribute("role","button"),t.setAttribute("aria-haspopup","dialog"))})}function t_popup__resizePopup(t){var e,o,p,n,t=document.getElementById("rec"+t);!t\|\|(e=t.querySelector(".t-popup__container"))&&(p=getComputedStyle(e,null),o=parseInt(p.paddingTop)\|\|0

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34334), with no line terminators
Category:	dropped
Size (bytes):	34334
Entropy (8bit):	5.132945322271882
Encrypted:	false
SSDEEP:	768:gkSec5c2mc2Wc21c2qc2Dc26c2pc2yc2bc24c2zc26c2bc2Xc2hGJc2BI05wlnEc:KY/mtU
MD5:	1151892353B2F9EB8AF4068C8AEFA1FB
SHA1:	073B68C712B9168DD339E554CD6773A3DD948438
SHA-256:	81EDD2311D9C814B44A5A95BB2B0AAAAD1453760B0CCDC89EFF51B675236D22A
SHA-512:	8B00874EF7904B488156A1FC67C0BB580AB5EFC4E6189DA773BB5F7A46C2126BFAE9960FB3B703DC8BC32E994BF553B19C28FC3D23D8ABC90CBF3AD189F08DA9
Malicious:	false
Reputation:	low
Preview:	function t_animate__init(){t_animate__checkAnimationAvailability()&&(t_animate__generateStyles(),t_animate__wrapTextWithOpacity(),t_animate__addNoHoverClassToBtns(),t_animate__preventHorizontalScroll(),1200<=window.innerWidth&&t_animate__parseNumberText(),setTimeout(function(){t_animate__startAnimation()},1500))}function t_animate__checkMobile(t){return t.filter(function(t){var e=t.closest(".t396__elem, .t396__group");return!(!e\|\|"y"!==e.getAttribute("data-animate-mobile"))\|\|(t.classList.contains("r")?Array.prototype.forEach.call(t.querySelectorAll(".t-animate"),function(t){t_animate__removeAnimationClass(t,"")}):t_animate__removeAnimationClass(t,""),!1)})}function t_animate__removeAnimationClass(e,t){var a;e&&(e.classList.remove(a="t-animate"),t&&(t="string"==typeof t?[t]:t).forEach(function(t){e.classList.remove(a+"_"+t)}))}function t_animate__preventHorizontalScroll(){var t=document.querySelectorAll("[data-animate-style=fadeinleft]");!Array.prototype.filter.call(t,function(t){return

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (30520)
Category:	dropped
Size (bytes):	31021
Entropy (8bit):	5.615486974368802
Encrypted:	false
SSDEEP:	768:tt7symthsLGOpwMXOrRu6FbsVatpU7Uh1OQXwkI0QJy0RjN7hZJSOvTZl:twthZR0ty851pTZl
MD5:	25CF0BA86C2195705305320455E2A07D
SHA1:	7553AD90036B4393684487035D5748CF9D9A0191
SHA-256:	52647C5CC90D2CE375EE91ECEA9E5B7AEE8E515C405C6315247AB85E6B808E5E
SHA-512:	4E50B29A9C8678A9036480FC268C1AE99B70F04D6CBDF7FB1F62C67428296AAA9888A5C8915505A1F6F64DC0C4AFDDAB5E0201D3E6272F24AB1163D970C9D909
Malicious:	false
Reputation:	low
Preview:	function t_ready(e){"loading"!=document.readyState?e():document.addEventListener("DOMContentLoaded",e)}function t_siblings(e,t){return e.parentNode?Array.prototype.filter.call(e.parentNode.children,(function(e){return e.classList.contains(t)})):[]}function t_remove(e){e&&e.parentNode&&e.parentNode.removeChild(e)}function t_form_phonemask__initPhoneMask(){var e=document.querySelectorAll(".js-phonemask-input");Array.prototype.forEach.call(e,t_form_phonemask_load)}function t_form_phonemask_load_one(e){var t=document.querySelectorAll("#rec"+e+" .js-phonemask-input");Array.prototype.forEach.call(t,t_form_phonemask_load)}function t_form_phonemask_load(e){if(e instanceof Element\|\|(e=e[0]),e&&void 0!==e.getAttribute){var t=e.getAttribute("data-phonemask-id"),n=e.getAttribute("data-phonemask-lid"),a=e.getAttribute("data-phonemask-maskcountry")\|\|"";e.setAttribute("data-phonemask-init","yes"),t_form_phonemask_init(t,n,a)}}function t_form_phonemask_init(e,t,n){if(n&&"undefined"!==n)t_form_phonemas

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4632)
Category:	downloaded
Size (bytes):	31196
Entropy (8bit):	5.558563340627671
Encrypted:	false
SSDEEP:	768:AB+3zZtdbouVrsskROtm5MiswJ4QtmBxfjMtTKxi7BLl6V/iq/ukBtINmIaCRW0m:ks06KW/in80sX
MD5:	78C8CAE7651DE16E67EFEF4EEC8C0736
SHA1:	52E095B651D7EA2BD8BA3A7EEECFAC0C81F3C503
SHA-256:	90CE2580A432A380A5E917C6B2AD0E241BF2C47F8F3A29D2111D7DF4986473C5
SHA-512:	403D9FA25671CD3DD75345F8554196B1BB36AEDD5AE9EF45E74A5B0D5A8397684A53E771477BCC2A85B2760C1EF97EF81277D0D954459A55D4516B6CF7447037
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/7/intl/uk_ALL/onion.js
Preview:	google.maps.__gjsload__('onion', function(_){var fZa,gZa,hZa,ZP,bQ,aQ,kZa,lZa,mZa,jZa,nZa,dQ,oZa,pZa,qZa,tZa,vZa,wZa,yZa,zZa,CZa,EZa,GZa,JZa,FZa,HZa,LZa,IZa,MZa,iQ,jQ,hQ,kQ,RZa,SZa,lQ,TZa,UZa,mQ,VZa,WZa,nQ,b_a,a_a,qQ,g_a,h_a,i_a,f_a,j_a,l_a,sQ,p_a,q_a,r_a,k_a,m_a,n_a,s_a,t_a,rQ,C_a,D_a,G_a,F_a;fZa=function(a){a=_.iJa(a);if(!a)return null;var b=new YP;b=_.$d(b,1,_.qD(String(_.Gc(_.ah(a.Fg))),0));a=_.$d(b,2,_.qD(String(_.Gc(_.ah(a.Eg))),0));b=new dZa;a=_.se(b,YP,1,a);return _.Ob(eZa(a),4)};gZa=function(a,b){_.Dg(a.Gg,1,b)};.hZa=function(a,b){_.Dg(a.Gg,2,b)};ZP=function(){iZa\|\|(iZa=[_.N,_.M,_.O])};bQ=function(a){_.NG.call(this,a,$P);aQ(a)};.aQ=function(a){_.eG(a,$P)\|\|(_.dG(a,$P,{entity:0,Zm:1},["div",,1,0,[" ",["div",,1,1,[" ",["div",576,1,2,"Dutch Cheese Cakes"]," "]]," ",["div",,1,3,[" ",["span",576,1,4,"Central Station"]," ",["div",,1,5]," "]]," "]],[],jZa()),_.eG(a,"t-ZGhYQtxECIs")\|\|_.dG(a,"t-ZGhYQtxECIs",{},["jsl",,1,0,[" \u041e\u0431\u043b\u0430\u0434\u043d\u0430\u043d\u0430 \u0437\

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	downloaded
Size (bytes):	663649
Entropy (8bit):	7.978806501666848
Encrypted:	false
SSDEEP:	12288:8OIZPVAY+JvWePUzg2Qwm57tm9dgEs6TPCazvGqrcg31aMkstanFsZlZ:uZPVCeowm57tm9CB6jjv131aMQFsZlZ
MD5:	D908E43936DEC746FE9B34E649E83B74
SHA1:	A888FB6811854EADCA0807090E0BBA40FE5753D1
SHA-256:	A8F054F7B87B9403086BA08BB5AE480C227951CA7AFBB23F6CCFBE53A563BA4A
SHA-512:	C9A40DB416292E5B885DF60F2A12FE8278FC61D7A18001E71EA8DC413060F3DEC36D6F2ED68D094043B08B2646A1FB1D59B82B4E9E5B063B8481E611D406C5DF
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.com/tild3238-3737-4863-b364-353434636432/04.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0.............................................[.........................!1.A."Qa.q..2....#B...Rb..$3r..C....%Sc..4s.Ddt.&5T.'6E.7FUe....................................:.....................!..1.AQaq."..2........#B.3R.b$C4Sr.............?..R@4...'@...U..._.(....\|. ..;X......{.....;.v.Kr0.ld.EBi...<{v.k'x.....c)....u6#\|[ .f.F.UKX...-.!..3\...y!7?<72.....E.8e...H........&......@..l7.m@x.Z.+..b&........8+..#n..(.!".o..@..8.Ca.....lK)._.4.. .m..B...{.....BJ..%..d......]..[z\|.w.Ja]H..M...........;.@U...#..o.R..A.......H.i<[.).r0...h.i8SB..w....,B....J..;..........\|..@5)..K....-.JC_....VS...(1...2....R._.F.......r}..K..U...;...,Lp.R}.....r.$.T...?S..f.....8..5..gQ....1...x...y\|...?.b.'..1/]V.!))....<>.}..Y...77.._._.....,.[.9.S.H..,U..ocRu.n...r......Wb\|I.$....uu..s.l..n~H...}O8.f.F....c...X..8...F)......"....

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	downloaded
Size (bytes):	841
Entropy (8bit):	6.394489017610487
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3ts9fd:NYw9YMnrfuERA09fd
MD5:	A00F598CA311FDD775CB5F8B7837D3AF
SHA1:	91446BE7AE4C458A0D9535AABEF9B14AD6EF4FB6
SHA-256:	B5F803ACF6C2C846C1211E85CA6CBF50B1176A959FC61A88437ADE696FB7DBE3
SHA-512:	4DC202F3CD9CAECCD24017534B4168F40DAAE28F6B7A321C04EBE1A6B4486D8142A6CF4AF3833EC394A5D56D24F11CC4A91D4C7D695DE6E6172D63CB216656B6
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild3663-3635-4365-b735-393766313137/-/resizeb/20x/01.jpg
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...c....d..IpH..&H.46m`$.n....]74R..."?..

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58112), with no line terminators
Category:	downloaded
Size (bytes):	58112
Entropy (8bit):	5.6843136062134345
Encrypted:	false
SSDEEP:	768:hzprb2TOA8IATwJmki9EF1bNaIQqRoZRZDDPREQVfE52Jr8vSWRku5IRzXGBroGn:9GK3lA2aBtx
MD5:	1DFE2C37DA36CE839C370E8C3B3CAF06
SHA1:	04E5513944C99969FF0ABE70A1E97180ED30BE6F
SHA-256:	A28A6B9B4F8A20FB9BD4969B94321AFAE9E2D3784C4C20A1F873EBC80AA4D7FB
SHA-512:	B327C7D9318AA06022316C9FE457E4533BE32121395A6AA53B7A00E46159CCC2F932F0793F9D04490E1053E5E89BDFFEF688C14378A638BDD61604121CC4D821
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/ws/project10309827/tilda-blocks-page53186309.min.css?t=1725003854
Preview:	.csssize{height:6828px}.t-body{margin:0}#allrecords{-webkit-font-smoothing:antialiased;background-color:none}#allrecords a{color:#ff8562;text-decoration:none}#allrecords a,#allrecords button,#allrecords .t-radio,#allrecords .t-checkbox,#allrecords .t-img-select{outline:none}#allrecords a:focus-visible,#allrecords button:focus-visible,#allrecords .t-focusable,#allrecords .t-focusable .t-btn,#allrecords .t-focusable .t-btntext,#allrecords .t-img-select:focus-visible+.t-img-select__indicator,#allrecords .t-img-select:focus-visible+.t-img-select__indicator:after,#allrecords .t-radio:focus-visible+.t-radio__indicator,#allrecords .t-checkbox:focus-visible+.t-checkbox__indicator{outline-color:#2015FF;outline-offset:4px;outline-style:auto}#allrecords .t-descr a:focus-visible,#allrecords .t-sociallinks a:focus-visible,#allrecords .ya-share2__link:focus-visible{outline-offset:2px}#allrecords a[href^=tel]{color:inherit;text-decoration:none}#allrecords ol{padding-left:22px}#allrecords ul{padding-l

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	downloaded
Size (bytes):	300788
Entropy (8bit):	7.978177044600007
Encrypted:	false
SSDEEP:	6144:ugzOSw91S9EDAJ3QSfOs9wOYeaNoLgGjVcLF6xO/1OPTP5kO9W68F4t:tzYXS6DK3jfF9rzvjVcF6xO/1OrP5kUj
MD5:	36AB604F9E50D2639436CBF76B6121E3
SHA1:	2F6DFD44F0CF17EACEA9275FC4F2C65D68BB5761
SHA-256:	5923C78FC92D39544D2A54121E4C2C0B27FF900FF3C9A9B2BC05BC026949EA2C
SHA-512:	7494E83263859C10A3F171387BAD6EC467FCE1342FBDF62E7C998C39BE8AC12F3EFDF277A67BAB709305C92561D42AF49F83E142B20B616DF21E547C74DC4181
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.com/tild3061-3530-4762-a634-643162363737/Night_01.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0..............................................d.........................!1.."AQa.q.2.....#B..3Rbr..$Cs.......%4Sct....&'56DTd..u....7U.Ee......................................6.....................!..1AQ..a"2.q.....B...#..3R.C.b............?..../.$.._.............P%.P........h.......... EAI. .A9@Rh..J@R.."(P(.@.M........M.&..jh..........P....h.Rh<.d.....)..(.T(....@t@ ).&.r..@SJ.@D..".4.D...E.j....D.^....".@R..4..&.Rh.4..M.&..P.h&.r.)..&..>..}......E%"hQE.... .......%..@.M....P...iE&. (..H...4......P.....".}P....@.....@ Et...@ .....(.QH..G(..@"...M(..).R .X...@P....D.E..k.... ^....."...D....!. ?.........d.'/...Z..........Ytq...yI.t.P.....".....B..% T.........p.@ .....T. T....P"..%*.@......E.....@ j..@Z.I@.(.T.T.H..9....T......H.@R..........J@ .E.R(.P(..)..@..P".....P...QJ..`).B...)PR..E".QE(.E.......k..ddN.&..m

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21814), with no line terminators
Category:	downloaded
Size (bytes):	21814
Entropy (8bit):	5.174646881426465
Encrypted:	false
SSDEEP:	384:SjrO3njSvQ/+EL7z5fyr9vLwD2mTxWCjkB/VVS4ZytCbQike5fny6p6Cj5GgOHGd:P3njSi+EL7lq5bCgDZZytCbmyGgOHGpb
MD5:	CEB2B0DAC4DB47594ADF521051DD14B6
SHA1:	7BDA1F4E5682496C41730F3A536EF37077F64C2F
SHA-256:	935FB0225D2CE45B0550EDC8F5025A7274AF8261A5A2D8FABE57F2219F387112
SHA-512:	6F19B2FB88690BE0256BBCBFB4B636A896EA892F499F1EC7874B1BEA9100851CC595974837D0072BDCA547C3010BE7DBD9D3C89D529766BF6E7179EE7AD8185E
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-submenublocks-1.0.min.js
Preview:	function t_submenublocks__highlightActiveLinks(e){var t=window.location.href,n=window.location.pathname,o=window.location.hash,e=(""===(n="/"===(n="/"===n[n.length-1]?n.slice(0,-1):n)[0]?n.slice(1):n)&&(n="/"),document.querySelectorAll(e));(e=Array.prototype.filter.call(e,function(e){e=e.getAttribute("href");return(e="/"===(e="/"===e[0]&&1<e.length?e.slice(1):e)[e.length-1]&&1<e.length?e.slice(0,-1):e)&&(e===t\|\|e===o\|\|e===n)})).forEach(function(e){e.classList.add("t-active")})}function t_submenublocks__addEventsDesktop(n,e,o,u){var s,t;window.t_submenuBlocks__isMobile\|\|(t=e.filter(function(e){return e!==n}),o=parseInt(o,10)\|\|0,n.addEventListener("mouseleave",function(){t.forEach(function(e){e=e.closest(".t-menusub__menu");e&&t_triggerEvent(e,"submenu:mouseleave")}),s=setTimeout(function(){t_submenublocks__hideSubmenu(n,u)},300)}),n.addEventListener("mouseenter",function(){t.forEach(function(e){e=e.closest(".t-menusub__menu");e&&t_triggerEvent(e,"submenu:mouseenter")}),s&&clearTimeout(s

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1680x1072, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	536092
Entropy (8bit):	7.9996134057229105
Encrypted:	true
SSDEEP:	12288:CNxFaWETIaxpPAYFC1oCBZZ77nilZXyqKORLtzQz35X8lZyAp:HWwp41oCl7Sw12pzuep
MD5:	5C75BFDF035000B5860273F301A77B6F
SHA1:	27E4006C3DDD8332ED53BEC6AF7F83050520491A
SHA-256:	AE704BCF51F51339B9FE88591625B81ABDA1D5DBAEFF13211BFB80A40280511D
SHA-512:	3216BC726D85BDD43E779915C3AA8FD34BC9A9FD2DB2C06ADF2DF8EE970D93F910D58D9AD8A948944628177AB486E827B8E8A77F81042AD007756210640F3572
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........*..0.>M..D"...>Ux(...../g.bM.....K.k...3......7.?...^]...Po....3...........G.q.H...]9....................................@....\|?.....y..I..........._@....{......../...o...f=......../........p?..W.....g......................._.......?..........s......O..$..?..............................<......?p~..Q.O..............?.\|%{.._...............=.......o......S...?...~..;.......A.(.............7.......?............g.../....`..}[.../...?....$}W..._...~.\|..o..........k......./............/......W............S...;.....?.?............7...?..s.......g./.?.?.~..........g............................._..........a.............%9......\.X.4OZ60\...P...9.....8v..ab...uV.....lj!w.KE..f...g.4p. [.T.Ew.U....^dXA/...........^].....zj...D.....$.:......~......b{.....9..Ij.....-.J.......+.{...P...%HB....^....$.+.s..pw.E.....n....`.......k.)..~....mw..QG.%.wro.......j..o.HJ-.1A..T.h.]K........0?.6.,..o.P..U?+.....U..CYQ.^.J..Z.QKw?[JIe..M+..m...^2..\|.....

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1207)
Category:	dropped
Size (bytes):	22042
Entropy (8bit):	5.287700455428518
Encrypted:	false
SSDEEP:	384:fTHpJkJyljOVaAlIRIIR0UUhgHknmTBIDmhFUbhnHu2nEY2Jq8f:1JkJyljiaAlIRIIR0JuknmTBIDm0O24j
MD5:	FE02D8114E107A56411A4D233D04DDC0
SHA1:	4B5CF585C10CD78DC52E648B01FEA29A5B4999C0
SHA-256:	12AB2CC2C62FD9A93964350DAFB1894BC674A613CDDDA6DCC998E3668B822A69
SHA-512:	992245C9C0713CB75CDC595C57FD0BC0D35B0B67629A6BEF0E9FFF916D11DCF914FFF065B0EEEDF58A48DA1AD77A9296EE342B4E82C971FC83B4AD8269AAA67C
Malicious:	false
Reputation:	low
Preview:	window.isMobile=!1;if(/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)){window.isMobile=!0}.function t_throttle(fn,threshhold,scope){var last;var deferTimer;threshhold\|\|(threshhold=250);return function(){var context=scope\|\|this;var now=+new Date();var args=arguments;if(last&&now<last+threshhold){clearTimeout(deferTimer);deferTimer=setTimeout(function(){last=now;fn.apply(context,args)},threshhold)}else{last=now;fn.apply(context,args)}}}.function t454_setLogoPadding(recid){var rec=document.getElementById('rec'+recid);if(!rec\|\|window.innerWidth<=980)return;var menu=rec.querySelector('.t454');var logo=menu?menu.querySelector('.t454__logowrapper'):null;var leftWrapper=menu?menu.querySelector('.t454__leftwrapper'):null;var rightWrapper=menu?menu.querySelector('.t454__rightwrapper'):null;var logoWidth=logo?logo.offsetWidth:0;var updateWidth=(logoWidth/2)+50;if(leftWrapper)leftWrapper.style.paddingRight=updateWidth+'px';if(rightWrapper)rightWrapper.sty

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3641)
Category:	dropped
Size (bytes):	296893
Entropy (8bit):	5.479205773522951
Encrypted:	false
SSDEEP:	6144:5n06ZKLBVSbaD8MSadsNgYCsGsRtTzgRXjrkPPRLbDrsO/BMd0m1gBR:5n06ZKLBVSbaD8hadXYPzgRXniPRnDrf
MD5:	22AF6085E4182A4FA27EE62107D1E742
SHA1:	AF739B00CE321F17ADFB3DD22409DD09B4F3CC44
SHA-256:	0A8749B5BFB600B7A20473C030D2BB6083758063775C1BEDC7F6044EC988CD3F
SHA-512:	BD8EC75F95FCB76A6A13F3234CA6CFB6DFA4C3E520D332893AE66613021F6BD777F0B12ADAAEA27CEAD4C145D33768B955E3085C211ED933A41EFEB9D432AA94
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('common', function(_){var jja,ija,lja,oq,nja,oja,rja,pq,sja,tq,vq,yq,tja,uja,vja,wja,xja,Lq,zja,Aja,Oq,Qq,Rq,Fja,Gja,Sq,Vq,Hja,Nja,Qja,Ar,Jr,Kr,Tja,Mr,Uja,Vja,Wja,Xja,Yja,Zja,$ja,aka,eka,fka,gka,hka,ika,Qr,Rr,jka,Sr,kka,Tr,lka,Ur,Xr,Zr,nka,oka,qka,pka,ska,tka,vka,Gs,xka,zka,Bka,Rs,Fka,xt,Oka,Qka,Pka,Uka,Vka,Yka,Zka,$ka,au,gu,ela,hu,ku,fla,lu,gla,ou,ola,Bu,sla,Cu,tla,ula,wla,yla,xla,Ala,zla,vla,Bla,Cla,Hu,Dla,jma,nma,pma,rma,Fma,dna,gna,kna,lna,tna,una,vna,wna,Ana,yna,yx,zx,Cna,Dna,Ena,Fna,Jq,Iq,pja,qja,Bja,Dja,Cx,Ija,.Hna,rw,sw,Ina,oma,qw,tw,Kja,Lja,sma,Mja,Ex,Jna,Gx,Hx,Kna,Lna,Nna,Jx,Ona,Pna,Lx,Mx,Qna,Rna,Ox,Sna,Px,Tna,Una,Sx,Vna,Wna,Xna,Wx,Yna,Zna,Yx,Zx,$x,ay,$na,aoa,boa,coa,bka,dka,hoa,ioa,joa,koa,loa,ey,hw,ooa,poa,qoa,soa,Lma,cna,Wma,Cka,Ls;jja=function(a){const b=[];let c=a.length;var d=a[c-1];let e;if(_.vg(d)){c--;e={};var f=0;for(const g in d)d[g]!=null&&(e[g]=ija(d[g],a,g),f++);f\|\|(e=void 0)}for(d=0;d<c;d++)f=a[d],f!=null&&(b[d]=ija(f,a,d+1));e&&b.push(e

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.99029978440114
Encrypted:	true
SSDEEP:	24576:xWzwaFHElFf593mn5B7ieXrrVTMk+WQw9H87kq+YunnbmUhM7:Azwa259i5tN1TuEH87kiGbmUC7
MD5:	25645077BE1B5CCBAE3DE3F6C7A04890
SHA1:	ED5C1DBB0AC051A75D497913FCBA700CF824600C
SHA-256:	B7ACAC6B61A5B6957DE472D794EABB32FA4EB0E3956F4E0F677484C6BBCC77D0
SHA-512:	C17C0568FC8E2FEBAE63A03F1B8879E023FBF39F4F2AF3D993E7B6B489627FA916870ABFA89E4052C9B859D1DE71D7C665962394441893A3EAEDF4A9BB832AA5
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:5
Preview:	..\...^..f[s...!....8.....D ..8O....,..Ae.q.;...%y..>.].).KnO..v.$.=...8...!...r..........eT.ay0.......:...B.8`...2.b...=..s...Il...&.h.67.Y.CKS......r..3./...kv~l<......<....z...$.,....jK!.&.r.k..a$^.n.}..B.d..%....q.g..`.4.jP...r..)..\(...\|....w.@..k!.....#-.}D8..</M.....R.!.LN...M..'L&....d...Q...S...l......n.......B.H.9t...?6.=1..F~o..S.C.o.,B.L.//..;..#-.av..%\|)..gM.!...k..5...7.eh?.gP:..+...q..v.\.B.......!...P.L&..f...H.j...L.....eff<..f........:.....zbuz...D...H,LC..;.d.xN.......q%b. KW...........uV...W.( ..=T"...w6p.\|.%..Ri.,hm{!...^..X./RF.........e.$W.\|.....?.j...S&.......].#....!.........T.H.J.\|.&.G.{.Q.U~..,...t...L. ..B...(...N....j.M..pe.9>....y..`."........`8.(ykp.....0j.....p....H....r...#k..vmX.8k%.X..;.3.....A..rU.~.......>.X#$0.1.1.c.!\rB. ".b..^..X..v....&=..H.Tq.U.Dl1Z.....19Y............2.(...(/...(.Q.<...5\|.a`.....C.F...C..u..h.e.x....V...r.f..{.@..S..2c....(..`...X.f.>.&.UH..`.8.@IO...<._.0.Q.+:._Q_.&-}.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (535)
Category:	downloaded
Size (bytes):	225012
Entropy (8bit):	5.579408293118199
Encrypted:	false
SSDEEP:	6144:cwJko+RLMdVbPJ93qEy8QYgLarl1nsRXCCzXG+bWa7q3s60TSFyo6n7h:cwJko+RLMrbPJQEy8PgLwl1nsRXCCzXP
MD5:	82C0489574C3B76823EEB90C98ABDF23
SHA1:	F1EF5CB0F3879108DDAC95D2DA3B1852A0278FEF
SHA-256:	3B82FBBC1FE23FA57EDF545B82547AAB71BFAC75BAC6B8FB7C53E9E358E9D3BA
SHA-512:	05DCF3B4100EB4BF75BCCFC3A73216C7C10969B2EBBE6A73A239C69250255FCC04DAA15BDA30F2963D22C7AFE4A38442B17148174AB0D31CF91A0B76308AB8FF
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/7/intl/uk_ALL/main.js
Preview:	(function(_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2019 Google LLC. SPDX-License-Identifier: BSD-3-Clause././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././..Math.uuid.js (v1.4).http://www.broofa.com.mailto:robert@broofa.com.Copyright (c) 2010 Robert Kieffer.Dual licensed under the MIT and GPL licenses../.var aaa,ma,oa,na,ra,caa,daa,Ma,nb,ob,faa,laa,naa,pc,qc,wc,taa,xaa,yaa,waa,Haa,Faa,Gaa,Daa,Caa,Eaa,Gd,Iaa,Jaa,Ed,Kaa,Maa,Laa,Naa,Oaa,Od,Paa,Qaa,Ud,Taa,Uaa,Waa,Xaa,ie,$aa,He,dba,gba,aba,fba,eba,cba,bba,hba,lba,Ye,oba,ef,pba,tba,vba,wba,xba,Aba,yf,zf,Af,Bf,Cba,Dba,Hba,Eba,Gba,Ef,Pf,Iba,Rf,Sf,Jba,Kba,Mba,Oba,Pba,Tba,Uba,Xf,Vba,Sba,Qba,Rba,Xba,Wba,Zf,$ba,Zba,aca,eg,bca,dca,eca,fca,ica,ig,kg,lg,gca,hca,lca,mg,ng,og,mca,qg,pg,nca,pca,rca,vca,xca,wca,zca,yca,Eca,Fca,Jca,Kca,Gi,Mca,Nca,Oca,Rca,Qca,Sca,Pi,.Pca,Tca,pj,vj,Lj,Mj,$ca,Vj,cda,eda,

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	dropped
Size (bytes):	773737
Entropy (8bit):	7.973718525344364
Encrypted:	false
SSDEEP:	12288:1BOwgmNXzRiYvgmL7UEdf8+aq2NmFbjVe1cyN1dJoraBWLnYcWL9gTk1VfXYtlO:1mmNjn7JSQH4cyNVoIZcgqTk1VPCO
MD5:	315AFC364E4564DDA930C0BDBA80C8FC
SHA1:	CC84463A3FC1A84D91BB1DF69B86D53F28CD4489
SHA-256:	14BAC5BBEE800FEC48D785502363D8ED17AD7D21B3DCC7B3E17F91B58EF3544E
SHA-512:	71D3FD6380DFD8C0C46BBB8471F8B59C87AB52A829C71999C99334635E26E3D4BE31D0B0F88C4C5F0AD2F7135E85920F711843ACC680AD915588A84FE798B848
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0.............................................T.........................!1.A."Qa.2q..#B..R..b....$3.Cr...S..%4...&DcTs...t..56Ed.................................9.......................!1.A."Qaq...2......#..B.3RCb.$4S............?..U#.~d..f..H..&......4.qh.t,kw..jP/.C.&.Gi".T..u..!.9wi.r..#.O.a"..cD..j.;]..`e........9?7...qC.3.8..6,.4g.z.K......./Q........%..gtTq...V..4f.:.)........{..u.RN...0...%.,....q~..M.nI...Slap...r..n1D..cY..f.pM..+.VE..M....R....\|.v9V.:..%.tr.>....../}.C^...$.fV-.(..n.......n....a...p.p.NtBH;...z..#r.Q)n.v..,V.......k....e...(g<.o.B......O{X..}.......Z.>b.........u.;..,....^5.N..0...Y..J.w'. .H].1....0.?\|.cPNl.@...$...GY".."...?\....b........b....6^E..4...j.8.....M....D. ........l.gU..:..(q.^.IR;...D..5.&.u!....df5P...~S..cZdKh.p.k.....n.e.+..\..$.;...T.1.M......$..

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.972476345943167
Encrypted:	false
SSDEEP:	24576:TwFnQaPCBMlEP9WXOe6187CtQH0W7UrBCkezbcySxQLm9nwn:Tw/CrPpe4OQk7UNCkgcBXnwn
MD5:	64AEADB2DC42E4208A6A54C29056EE04
SHA1:	01F657C6BF684863C63C3121E183054F27B79261
SHA-256:	A1330C50EC239125A83706F5CC879CD268BEBC2A8B7F4C63940B94DE69BE92D9
SHA-512:	1C9747DFE1C24F177887341756E8FEC7C99F41CF1AAF894575C9462A06F383B36D43549BDE9454473AFAB7F30BCEBBBA9D85E87EADCE6E05983A9E6FCF5F65C4
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:e
Preview:	...M5..J.b.^.......E.&..bL.)3.A..Zk.RI...^.J..W.i...b...t......{.K...:...Y..n.t.#..v..l.%.s...O....''s...%.C%~..>!.%.EL#..3j^..._i4........../,W%..Wi+..f.aqV..@V.+.Z...,t.\.....'.....+...I;.~Zr..Ef.$..t.I$.I{9.C.O._....nK4f..7..W.v.N.\|..Oz....D.2.../.{.....~3=....W..z.~6...).gds...o.<....]%..<...Ze...0../.o..mw..C@.A.N+.....~.3wy.....N..w...\|.~\|....!@.s......y#.hR...].....D../..v..&......&............;u..k.....D[.B..&#.n.;b..D.B.o>..b5....m.+6q~Q......w.......L.......Nl..s.n..pL..9.~...:..x!.^...6......;.ea....;V.[>G.y.\|...Me..ER._.T.....'-.^..%.t....>......m.q;.....l.-b.k..C....& F....Uz....F...f\|.x..I>....;.~..W..2.........I.........4k...d....M..^.}LpU...=.l....}..o..*9,FR.z9.q....m+b.._G.!..fZo.z.<\V\|.~.......af.6.~.h.\..'.N....5.-=.o.\|t.DT...y.h".M.\|..Z..:V....r.H..RQ.qF.\..WuHV...<~.Z..j......j..#.I.........V.x.V....ZW{...F.........{..9..Tw..K.A)8..'.?.I..h"t..Sv..b.~...2LKw.e...=.........r...[x.....Q<;........l)..e.>k

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.991888940077742
Encrypted:	true
SSDEEP:	24576:OzqBeYTZN7gsX9u4imiaLqAXwBGzwV86P9x7k+kQW34avu:OkeWZptu4PiaBXwBZVBu+kQW34aW
MD5:	F24371C5965D54F0C76E4EC2F7D3B3B3
SHA1:	AAC29A808C6E7CF99390E260822BB8173E8DF51F
SHA-256:	D3786F63CCB31AC8B5520C15F7A67A8A18EBA08B9BE3CAEB9C9A2199D7ED6F17
SHA-512:	5287CD4230EED2F0A1829044E9DEB6D70E3FD1627C36031791F060434D4B7B968C17E8883D5D276BD5AD437176C99076A9D21D0FD2DFF3BF28BE80780D310662
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0:2f8280a041b4fa:9
Preview:	e.^]..d.f...XasFt.D..%(.......l.p..A..'.J......`l..a$AG5.\.8U..(...\|.1m.9..#gTJ..d-x..tN.Z_....C...Bs..VD.........R...>....4..t.up.X`.......8U.."p;.....F..\|.?..0t~...8..FB2y......\.jk......4.C. ...h..`..o..Z..?u..+r.A......_..(....1g..6]uv..Y...'..p..NX....V...{.!.....2E...S..fVQ3E~Yx.)b...E.cx;..;...'....^.B.G.3[%IV.V.g..........Q..lir....R.....L.....kc...1.9..l......U?I....p..p....]&.Kd..S....x..EZ.}.....O..C............9~H5%..%+.J.<..X.]U...:]......9.6i....><....Q..@X....&..W..B.UJ.:.=..>...0...Q.....2.d]h....h..v..an!.!......p...........m.....ln....E.....fU.[...<..m.7..a.ef..mD.^J..o...'.l..j.B...b.x. Xws'0YG1H..G..;..w..../.......Jb..N.....8.QT........J.p.x1Y....Vf. D....V...`...]K?Q9....1r.O..Ap.:<9....;U..r\<s. ....LRI;y3..5.+K..).@...........j..A.o6..[.....?.#S.J..[.....(......U.UpoM=r.i....>.y..Y..O..-"F..bgv...g..5aHj. ......Z..S.T......".lB..E.1X..K.X.5...t.{*....Cd-F........n......^(YS'LW.VA.J.\.....4f....t/7...b.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	dropped
Size (bytes):	3487
Entropy (8bit):	5.354515738054961
Encrypted:	false
SSDEEP:	96:rf7x0YZpBne4BkSnz1hAlawUvz6Xe8FtzGXEtEZEsEfE8ECEIEJn:fx0YZGHSzTZL6O8FJQEtEZEsEfE8ECE/
MD5:	86388C0CC914B9725F97922615E886C2
SHA1:	637BADFD2D7038B2214A67D96AFCC09BB3186233
SHA-256:	D3AF90E05AE477FE5862722A774A6FC95207DC982E33897055DA58A447DCCC57
SHA-512:	CC53CAEBC725C469753B8F21F933BDAF1504DC9C93E4E8711956EA095A47070B0CC4F74AC25FB87031FB9C06AFACD41B2BF6D26F063700A9A2E8EF6CEFFC2933
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('overlay', function(_){var Kya=function(){},EC=function(a){a.yA=a.yA\|\|new Kya;return a.yA},Lya=function(a){this.Eg=new _.om(()=>{const b=a.yA;if(a.getPanes()){if(a.getProjection()){if(!b.Hg&&a.onAdd)a.onAdd();b.Hg=!0;a.draw()}}else{if(b.Hg)if(a.onRemove)a.onRemove();else a.remove();b.Hg=!1}},0)},Nya=function(a,b){const c=EC(a);let d=c.Fg;d\|\|(d=c.Fg=new Lya(a));_.Cb(c.Eg\|\|[],_.ek);var e=c.Ig=c.Ig\|\|new _.xsa;const f=b.__gm;e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("center",f,"projectionCenterQ");e.bindTo("projection",.b);e.bindTo("projectionTopLeft",f);e=c.Kg=c.Kg\|\|new Mya(e);e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("projection",b);e.bindTo("projectionTopLeft",f);a.bindTo("projection",e,"outProjection");a.bindTo("panes",f);e=()=>_.pm(d.Eg);c.Eg=[_.ck(a,"panes_changed",e),_.ck(f,"zoom_changed",e),_.ck(f,"offset_changed",e),_.ck(b,"projection_changed",e),_.ck(f,"projectioncenterq_changed",e)];_.pm(d.Eg);b instanceof _.Hk?(_.Wk(b,"Ox"),_.K(b,148440)):b

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2375)
Category:	dropped
Size (bytes):	51294
Entropy (8bit):	5.319415435833439
Encrypted:	false
SSDEEP:	768:uJkJyljiaAlIRIIR0JuWblodUfM1NBXH6KxuE0c3Nc+NUnUO24qS:ykJyljiplEIE0JuKM1DX6glS+N574qS
MD5:	E297791B4ADF1A6A8748624613C5A8B0
SHA1:	2EC1C1B224727C03EA5485BCFB1CF7D2964B1A55
SHA-256:	4C16B27A70AA99ABA3777CDE0E801478002A45D8D7B6B97D4247889458E62705
SHA-512:	B093B7897392153EC8FB24516ACE20E9DA0F1E0505938A3350A43E39903E37FDAC93A34BDFFE79E7DE22777602E2898DDDE71F4039B418A61F45B43FBA19D509
Malicious:	false
Reputation:	low
Preview:	window.isMobile=!1;if(/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)){window.isMobile=!0}.window.isiOS=!1;if(/iPhone\|iPad\|iPod/i.test(navigator.userAgent)){window.isiOS=!0}.window.isiOSVersion='';if(window.isiOS){var version=(navigator.appVersion).match(/OS (\d+)_(\d+)_?(\d+)?/);if(version!==null){window.isiOSVersion=[parseInt(version[1],10),parseInt(version[2],10),parseInt(version[3]\|\|0,10)]}}.window.isIE=!!document.documentMode;function t_throttle(fn,threshhold,scope){var last;var deferTimer;threshhold\|\|(threshhold=250);return function(){var context=scope\|\|this;var now=+new Date();var args=arguments;if(last&&now<last+threshhold){clearTimeout(deferTimer);deferTimer=setTimeout(function(){last=now;fn.apply(context,args)},threshhold)}else{last=now;fn.apply(context,args)}}}.function t454_setLogoPadding(recid){var rec=document.getElementById('rec'+recid);if(!rec\|\|window.innerWidth<=980)return;var menu=rec.querySelector('.t454');var logo=menu?menu

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/16671369731?random=1728339263492&cv=11&fst=1728339263492&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	557
Entropy (8bit):	7.55456969751002
Encrypted:	false
SSDEEP:	12:6v/7XF4w0yj4oxJEC6WCCUiU6l1EAVOrVtVoVxXy32:w90yrEJWJUinlSAApt+VxXH
MD5:	1E23376E124A25CB6A8C0E9BA7A0F0E9
SHA1:	5D75AC0F9F4F739F46957A4AF1708B2A9A16AB54
SHA-256:	F4161DEE03D590707007D010CC3F4F2A0E59EB5CAA80200E7DF89AC4D9727DC7
SHA-512:	527ECFD56F5FD905E68802A3166FC5B197533D7B2302B81934240946F4BC5C80510E0C43B90616C556517A1CC0F9FE88188262FCDEB5DE6483A64ABFBEA1BF6F
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild6265-6530-4236-a436-303039626332/-/resizeb/20x/Apartment_5.png
Preview:	.PNG........IHDR.............b.......pHYs...........~.....IDAT(.....0.D.......P....ji4.9<.....Lo......Yq..g.8^.zSkA!.$..!..r4....8.%.G.h9.f...J../..) .....M...P2.tK.....-r.H^!:I.......,1.B.....&.%.9..[+.l.........#V.-.......L....@Q.+.L......eS$.a.....C.%?....!.].....t.u<...0R8.c2.>`....~..7(J......)..-.z..:.[.^..C.(.L*fR5..H......o.:'...w.S..~.Y\|@S.).m+..I(.l8(Ga...y...........>8......p\|f.......a.....t#.4..c."wJ;w.s...9$.z.8.{`..,..v.]....b/.....<[...GMK..\n.....C..yU.rN...j?.o....wQ\|=.zQ~..8~...5.j...g...E.=...8.....oy....IEND.B`.

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	613
Entropy (8bit):	7.544108853146711
Encrypted:	false
SSDEEP:	12:6v/7Xr0qFhkwhDJard7CRvcAg86hGrzchXP5t1Cz1v3/yywOeLyfG:bqFhFj8eRUAg86U4hXs1v68fG
MD5:	0CE4C8A00760761AA93467C1B712B9DE
SHA1:	F38819B5AADF25FB89F8DFA50A72152212449D82
SHA-256:	D88013C025DFEF53DF44FCC50056DC7CA8DE3F30EFD4188280CD396DC570D507
SHA-512:	BF0CD888117D24BE3FA11C458E5F7351E3C2C56155A9DFA0C9D5DD5DA365AC5AB32DA7F4835B884BEAC0005A724D9E7F4AEF87BAA71E736C31A48AC3A4F34120
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild3137-3466-4865-b663-396335366161/-/resizeb/20x/Apartment_12.png
Preview:	.PNG........IHDR.............b.......pHYs...........~.....IDAT(.m.n.0....+N.6,.w.Ax.=....&.'.,?.6...L.u.D[..-.V..@."..."..k..>.KX..e...H.r...C.kP......Xo.xK..^.'...x.,R<.g$:E......395...Z1R.....$..M.....7....S.....#Y1......H. .......d..)A\....u.....bV..9"...Ib..O....El....4.f1.\|E..='.'h....Ch.C\|xa..\|..<?...QvM).T..[w-..C.;.....:......._..Gg\|.L.K..]......}.....%7#..%7D..M..71.5......MH..Mi.5.z.\|.-....y(.iV....C......#LUIVq.UkQ.Q.XS...._C........)xl...x..&~co.8#.5.X...I..{WB.%.X.J...Vn.W.9.c..@...}.o.{1XpG..H.C8R...#..X.\|l.v<........9...D\|.......}....m;b......e.......IEND.B`.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20581)
Category:	downloaded
Size (bytes):	20726
Entropy (8bit):	5.292935072690145
Encrypted:	false
SSDEEP:	384:mb5vj+l3jfaksTAAvNWUwLATFqACns+CSHDJDLrO:i5vj+5jfSTtrTFqACs+CSHtDm
MD5:	DEB120E036463F68A4CCF8C797BDCB2E
SHA1:	9063EC8FBE51FD80A857758E24B267F041761F21
SHA-256:	090A7068A2209545279F858C6F41FF7AE42815E11C3D69463A2A2EA835282BD9
SHA-512:	CEBE96684560909D47CFE1071C13EF34DAB5D341E49963792A9823C767748AF5658C601785FA786C1332E8AEB6F5862D44197BD6F65C7CCD3E037250D390BCFE
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/hammer.min.js
Preview:	/! Hammer.JS - v2.0.8 - 2016-04-23. http://hammerjs.github.io/. . Copyright (c) 2016 Jorik Tangelder;. * Licensed under the MIT license /.!function(a,b,c,d){"use strict";function e(a,b,c){return setTimeout(j(a,c),b)}function f(a,b,c){return Array.isArray(a)?(g(a,c[b],c),!0):!1}function g(a,b,c){var e;if(a)if(a.forEach)a.forEach(b,c);else if(a.length!==d)for(e=0;e<a.length;)b.call(c,a[e],e,a),e++;else for(e in a)a.hasOwnProperty(e)&&b.call(c,a[e],e,a)}function h(b,c,d){var e="DEPRECATED METHOD: "+c+"\n"+d+" AT \n";return function(){var c=new Error("get-stack-trace"),d=c&&c.stack?c.stack.replace(/^[^\(]+?[\n$]/gm,"").replace(/^\s+at\s+/gm,"").replace(/^Object.<anonymous>\s\(/gm,"{anonymous}()@"):"Unknown Stack Trace",f=a.console&&(a.console.warn\|\|a.console.log);return f&&f.call(a.console,e,d),b.apply(this,arguments)}}function i(a,b,c){var d,e=b.prototype;d=a.prototype=Object.create(e),d.constructor=a,d._super=e,c&&la(d,c)}function j(a,b){return function(){return a.apply(b,argumen

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2966)
Category:	downloaded
Size (bytes):	266494
Entropy (8bit):	5.54289000906043
Encrypted:	false
SSDEEP:	3072:FdIp9SXNKW40OkM9C0xHK82uBcO9yyqo5/Aux9SEgpnDF2Dej7E1k:jIGKl3kUb2vO5gbZDF2Dej71
MD5:	66773431F4643681021AF6AE648C2F2D
SHA1:	4FBC9CCE93CD8DC1687517869C224E0ACD7E8B29
SHA-256:	C9A56024B2E59A201768330CDCF573D8C55157693B8ABBC3E39127604180FCCD
SHA-512:	E43B4E14E32A27CA0803B43BF8F0DCBA96EAE6DD9C4304C210A56EBC27B83CABC7F1D914D19AAF96630AABECE3DBD8C40F06031FB984AE64C98A3F992C8B7837
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-P78MTL62
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__e"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__googtag","metadata":["map"],"once_per_event":true,"vtp_tagId":"G-CGEP7SS3WP","tag_id":3},{"function":"__gclidw","metadata":["map"],"once_per

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29166), with no line terminators
Category:	dropped
Size (bytes):	29166
Entropy (8bit):	5.261558456733808
Encrypted:	false
SSDEEP:	768:xpnFKonRx86rNEeAMAt8xb+U6aaQUTIN+atBroJh6ABS67o0N+3r9k9xgatfhDB0:HFPRGM1hbs6oRfc
MD5:	3219F72E19BF2BD476FD7A36BCC53646
SHA1:	AB4CA6CE67B1EBBDD9633083B7EA2E44BAB50D1E
SHA-256:	7BB452D091DE4C4E4997E69B6F28B50C9E7C304AB881903D9FD492D946C8492E
SHA-512:	61C7441B9F35932E35248DC132CAB631EE1E11BF139EC79BF80A39CCAA3A6CCDB93AD0619669B69E46C0593DAE5EEC7B74BD467A54F329FE2A335548E521D44E
Malicious:	false
Reputation:	low
Preview:	var version;function t_initZoom(){var t,e,o,r,n;document.querySelector(".t-zoomer__wrapper")\|\|(window.tzoominited=!0,window.tzoomopenonce=!1,window.isDoubletapScaleAdded=!1,t=document.querySelectorAll("[data-zoomable]"),t=Array.prototype.slice.call(t).filter(function(t){return"yes"===t.getAttribute("data-zoomable")&&!t.classList.contains("t-slds__thumbs_gallery")&&""!==t.getAttribute("data-img-zoom-url")}),Array.prototype.forEach.call(t,function(t){t.classList.add("t-zoomable")}),(t=document.createElement("div")).classList.add("t-zoomer__wrapper"),(e=document.createElement("div")).classList.add("t-zoomer__container"),(o=document.createElement("div")).classList.add("t-zoomer__bg"),r=t_zoom__createCloseBtn(),n=t_zoom__createScaleBtn(),t.appendChild(e),t.appendChild(o),t.appendChild(r),t.appendChild(n),document.body&&document.body.insertAdjacentElement("beforeend",t),t_zoom__initFullScreenImgOnClick(),t_zoom__closeAndSlideCarousel())}function t_zoom__createCloseBtn(){var t=document.create

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4514), with no line terminators
Category:	downloaded
Size (bytes):	4514
Entropy (8bit):	4.98516067650747
Encrypted:	false
SSDEEP:	96:ptBrBxFXC29lpgiikFFncB1XqRirWBQcoLlcY2e:pzVjS2BYzXwiXute
MD5:	FFD973CC9B002BA30CE57896976C7218
SHA1:	9E330A8EA115D5B11AB8E04040546956F9923FB6
SHA-256:	0B5F664C528F466606C93195975F671FC46C3A9C10FEE54426C2CD1CF89B1FEC
SHA-512:	3979C8E6ACFDFFADC1A5534AD9B05270FDD43484340974E03D973E0C77D1B7B72492AA65FD6FD296CACF135B218BC07DF0F5B5A583F0A25BBAE674D58F3C6CB4
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/css/tilda-grid-3.0.min.css
Preview:	,:before,*:after{-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box}div,span,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,code,img,b,u,i,center,table,tr,th,td,video{margin:0;padding:0;border:0}sup{line-height:0;font-size:smaller;vertical-align:super}sub{line-height:0;font-size:smaller;vertical-align:sub}.t-clear{clear:both}.t-row{margin:0}.t-container{margin-left:auto;margin-right:auto;width:100%;max-width:1200px;padding:0}.t-container.flexx{display:-webkit-box;display:-moz-box;display:-ms-flexbox;display:-webkit-flex;display:flex}.t-container_flex{display:-webkit-box;display:-moz-box;display:-ms-flexbox;display:-webkit-flex;display:flex}.t-container_100{width:100%;padding:0}.t-container_10{margin-left:auto;margin-right:auto;width:100%;max-width:1000px;padding:0}.t-container_8{margin-left:auto;margin-right:auto;width:100%;max-width:800px;padding:0}.t-container:before,.t-container:after,.t-container_10:before,.t-container_10:after,.t-container_8:before,.t-contai

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1546)
Category:	dropped
Size (bytes):	3482
Entropy (8bit):	5.280696112783717
Encrypted:	false
SSDEEP:	48:aR7ISgcW+EyRmDutn15/ioRq985/+4KJoQEgw7p0TEQuNdVJfTM/SPuRy/ksVw:ahISVgDa5/Xq9EGzJ/fwyfuNdVqS2KVw
MD5:	17A1CBB813E575BFD3FCB3C407760051
SHA1:	3D7A4AA448A92E1489285D36E523A208A8F512BD
SHA-256:	6BE43CC799A64AC69A1AF5BE6F4D4FAE21D4042474C9B59F00534DFE38115F05
SHA-512:	12DE76C8DA26B0E89B1116D614754FE226A0E855D5BD57D6CEF7D48D73D028CA00ADC02A7A97545402C56C64F40192794D1DEAEABDAAF2AEE27771AB33B81C6F
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('search_impl', function(_){var jzb=function(a,b){_.Dg(a.Gg,3,b)},nzb=function(a,b,c){var d=new kzb;d=_.YG(d);c.vr=d.load.bind(d);c.clickable=a.get("clickable")!==!1;_.DZa(c,_.oQ(b));b=[];b.push(_.ck(c,"click",lzb.bind(null,a)));for(const e of["mouseover","mouseout","mousemove"])b.push(_.ck(c,e,mzb.bind(null,a,e)));b.push(_.ck(a,"clickable_changed",()=>{a.Eg.clickable=a.get("clickable")!==!1}));a.Fg=b},lzb=function(a,b,c,d,e){let f=null;if(e&&(f={status:e.getStatus()},e.getStatus()===0)){f.location=_.V(e.Gg,2)?new _.Nj(_.at(_.J(e.Gg,.2,_.gt).Gg,1),_.at(_.J(e.Gg,2,_.gt).Gg,2)):null;const g={};f.fields=g;const h=_.ai(e.Gg,3);for(let k=0;k<h;++k){const m=_.$q(e.Gg,3,_.yQ,k);g[m.getKey()]=m.getValue()}}_.pk(a,"click",b,c,d,f)},mzb=function(a,b,c,d,e,f,g){let h=null;f&&(h={title:f[1].title,snippet:f[1].snippet});_.pk(a,b,c,d,e,h,g)},ozb=function(){},pzb=class{},qzb=class extends _.U{constructor(){super()}Qi(){return _.si(this.Gg,2)}},rzb=[_.M,,,_.so,_.U_a];var szb=cla

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.985159873993755
Encrypted:	false
SSDEEP:	24576:X9Ampi9aNKF3h980ZL5sAnwjpOxDzvXHj9zl7IoJdXsEwZ:X9Ayi9D988Gzj0zb9p1g
MD5:	EDB88D815FC0DFCBD451BDA5F0DE1EF4
SHA1:	CEB79EC848C97461EEB2B1185EBC6C95B7B8930C
SHA-256:	4BD28D40D780FE872E5340CC397F59A5D72F34D89FDADD7C8D4DF377968B3091
SHA-512:	1EFD09EFEC05F23E401EA7FED3D4FBA8655D55A557A96F72BAB50B626C2092DD9189D068A25D255E8AFE1379063B5498793440500752C8C53099407F170D88A5
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0:2f8280a041b4fa:0
Preview:	... ftypisom....isomiso2avc1mp41..$.moov...lmvhd....................................................................@...................................trak...\tkhd........................................................................@....8.........$edts....elst.......................wmdia... mdhd..............<............-hdlr........vide............VideoHandler...."minf....vmhd...............$dinf....dref............url ........stbl....stsd............avc1.........................8...H...H...............................................9avcC.d.(....gd.(..@D........... ......2....h..\|.........colrnclx...........btrt................stts...................$stss...................]...........xctts.....................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2776), with no line terminators
Category:	downloaded
Size (bytes):	2776
Entropy (8bit):	4.639833762572049
Encrypted:	false
SSDEEP:	48:CpZGJxnBxahUWHHKWyv+gnWhvCWCvbxBWxlrm5xRour:CpZGJxnBxahUWHqWS+OWdCWinWfm5xRp
MD5:	FC7D8C218EED671F050F586026926B89
SHA1:	E1972375FE16F50364D348524AE73456D7B1BD72
SHA-256:	A5E6699516548DA9A782C797B047AC64685997AF8D2F3C1D5AF264F018B9C418
SHA-512:	942627B568404022308C73C28BE88B6D95FC680B463824FAA21B7C642E2B1CD8630DE07B0D475A9B52D918563A1EE8CD50BAD908AEC9DFC4D4A424804AB52354
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/css/tilda-animation-2.0.min.css
Preview:	.t396 .t-animate[data-animate-style=fadein],.t396 .t-animate[data-animate-style=fadeindown],.t396 .t-animate[data-animate-style=fadeinleft],.t396 .t-animate[data-animate-style=fadeinright],.t396 .t-animate[data-animate-style=fadeinup],.t396 .t-animate[data-animate-style=zoomin],.t396 .t-animate[data-animate-style=zoomout]{opacity:0}@media screen and (min-width:980px){.t-animate[data-animate-style=fadein],.t-animate[data-animate-style=fadeindown],.t-animate[data-animate-style=fadeinleft],.t-animate[data-animate-style=fadeinright],.t-animate[data-animate-style=fadeinup],.t-animate[data-animate-style=zoomin],.t-animate[data-animate-style=zoomout]{opacity:0;-webkit-transition-property:opacity,transform;transition-property:opacity,transform;-webkit-transition-duration:1s;transition-duration:1s;-webkit-transition-timing-function:cubic-bezier(.19,1,.22,1);transition-timing-function:cubic-bezier(.19,1,.22,1);-webkit-backface-visibility:hidden;backface-visibility:hidden}.t-title.t-animate{-webk

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	downloaded
Size (bytes):	275713
Entropy (8bit):	5.545050939296191
Encrypted:	false
SSDEEP:	3072:KFIp9SXNKW4sOlM9C0x/i82uBcO9yyqo5/Aux9SEgpix72Dej7q1i:0IGKlvlqD2vO5gbcx72Dej7J
MD5:	6561D1D96C60B923C6C72E5101038576
SHA1:	6E94F41E51AD758B6CD5EAA412C2670016273E8B
SHA-256:	8D0BBF29E20B0266C61C17234A7A1B400EBE06E8268C7C9110F372D68B88A82D
SHA-512:	A237D091815AB818205A0C7E748B1B03F54AD9A5FDDB35B8FB6A280D9DA339BB03D1C6DBDA5A4E3352ED9DCFE86E607457C3C639FC656B02DBDB2B3F0E3E2629
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-16671369731&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":15,"vtp_instanceDestinationId":"AW-16671369731","tag_id":9},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (20670)
Category:	downloaded
Size (bytes):	20692
Entropy (8bit):	5.281578187857137
Encrypted:	false
SSDEEP:	384:4n+t+yuz9WCkhrKRUp6o8VYk5qSVnBbMKzkm0oezbllh/RAv4usiyyHhw0t8yzv+:7tduz9Khvp6o8Ck5qSVnBbMKQm0oenll
MD5:	B9B6C7BBFD0941825FF015750ADCA5CB
SHA1:	1FEEC0E4FCEF6CF0F61F0F94CA0029C269652297
SHA-256:	DB4B1532DE361B8AD5DDE84A40AF151051352464D67B75D28F871CB2BE847201
SHA-512:	E23DFB71464FE57768F659956C5FDB5D41B2AC37B89460CDC1DE8D2A383CE706F9EA16508005C8E218543E12EF3FCA0C0C1332FEAA9DCC823F29FB592AC53294
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-scripts-3.0.min.js
Preview:	function t_onReady(t){"loading"!=document.readyState?t():document.addEventListener("DOMContentLoaded",t)}function t_addClass(t,e){document.body.classList?t.classList.add(e):t.className+=(t.className?" ":"")+e}function t_removeClass(t,e){document.body.classList?t.classList.remove(e):t.className=t.className.replace(new RegExp("(^\|\\s+)"+e+"(\\s+\|$)")," ").replace(/^\s+/,"").replace(/\s+$/,"")}function t_removeEl(t){t&&t.parentNode&&t.parentNode.removeChild(t)}function t_outerWidth(t){var e=getComputedStyle(t),n=e.width,i=e.marginLeft,o=e.marginRight;return"auto"===n&&(n=0),"auto"===i&&(i=0),"auto"===o&&(o=0),n=parseInt(n)+parseInt(i)+parseInt(o)}var version,version;(window.isSearchBot=!1,/Bot/i.test(navigator.userAgent)&&(window.isSearchBot=!0),window.isMobile=!1,window.$isMobile=!1,/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)&&(window.isMobile=!0,window.$isMobile=!0),window.isTablet=/(ipad\|tablet\|(android(?!.mobile))\|(windows(?!.phone)(.*t

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (30520)
Category:	downloaded
Size (bytes):	31021
Entropy (8bit):	5.615486974368802
Encrypted:	false
SSDEEP:	768:tt7symthsLGOpwMXOrRu6FbsVatpU7Uh1OQXwkI0QJy0RjN7hZJSOvTZl:twthZR0ty851pTZl
MD5:	25CF0BA86C2195705305320455E2A07D
SHA1:	7553AD90036B4393684487035D5748CF9D9A0191
SHA-256:	52647C5CC90D2CE375EE91ECEA9E5B7AEE8E515C405C6315247AB85E6B808E5E
SHA-512:	4E50B29A9C8678A9036480FC268C1AE99B70F04D6CBDF7FB1F62C67428296AAA9888A5C8915505A1F6F64DC0C4AFDDAB5E0201D3E6272F24AB1163D970C9D909
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-phone-mask-1.1.min.js
Preview:	function t_ready(e){"loading"!=document.readyState?e():document.addEventListener("DOMContentLoaded",e)}function t_siblings(e,t){return e.parentNode?Array.prototype.filter.call(e.parentNode.children,(function(e){return e.classList.contains(t)})):[]}function t_remove(e){e&&e.parentNode&&e.parentNode.removeChild(e)}function t_form_phonemask__initPhoneMask(){var e=document.querySelectorAll(".js-phonemask-input");Array.prototype.forEach.call(e,t_form_phonemask_load)}function t_form_phonemask_load_one(e){var t=document.querySelectorAll("#rec"+e+" .js-phonemask-input");Array.prototype.forEach.call(t,t_form_phonemask_load)}function t_form_phonemask_load(e){if(e instanceof Element\|\|(e=e[0]),e&&void 0!==e.getAttribute){var t=e.getAttribute("data-phonemask-id"),n=e.getAttribute("data-phonemask-lid"),a=e.getAttribute("data-phonemask-maskcountry")\|\|"";e.setAttribute("data-phonemask-init","yes"),t_form_phonemask_init(t,n,a)}}function t_form_phonemask_init(e,t,n){if(n&&"undefined"!==n)t_form_phonemas

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	dropped
Size (bytes):	841
Entropy (8bit):	6.404733871373563
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3W0g8:NYw9YMnrfuERADp
MD5:	977CEC0F456094CC210F315698EB0B0A
SHA1:	F6EF468C3D697C207E310B46445E433F5FB23B25
SHA-256:	830BDD004D02362AF15152BA77BBC4F1FE5F12D5F61BC016161A9AF4FAD88833
SHA-512:	605E6C255A3567BA7E994811A1BEE7A9CFEFD2D3C2237FA2934F2AA566A8F9330DA7B6D46F34B93999E0F80C9885647A899BDC7FDEF5E1A625C948D590DFA652
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..UF<56+..p.]....)]..U.O":..EgF.`.>. .H..

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33871)
Category:	dropped
Size (bytes):	58750
Entropy (8bit):	5.811342071257356
Encrypted:	false
SSDEEP:	768:xqOv/QbhGdnHNJbpPCUbhNLITca9kOESRFqFgCekJVL4rLaABLJUtzXggqyLp55E:hHLmF4e0AYzXDnG2zNhA
MD5:	93A6C23565410E97E34D6FF169F65F35
SHA1:	DFA02E1950DE1E4EF42EE7EC99838673EDFE895E
SHA-256:	19F66574A728ADDC8D4E0CF51816430F0C627D82CBFF6DFECB2CD3EAE8A866C1
SHA-512:	82F9B790735DD369D78A7FD910E29839E691EF560790E13862335794F07FA62441130A6392440747A2CA282D6B4D3AEA6170F1B3E4737110FDA1650022843686
Malicious:	false
Reputation:	low
Preview:	function t_forms__initForms(){var t=document.querySelectorAll('.r:not([data-record-type="1093"])');window.t_forms__inputData={},t_forms__addRecaptcha(),Array.prototype.forEach.call(t,(function(t){var e=t.id;window.initForms[e]\|\|(t_forms__initEventPlaceholder(t),t_forms__addInputItsGood(t),t_forms__addAttrAction(t),t_forms__onSubmit(t),t_forms__onClick(t),t_forms__onRender(t),t_forms__addFocusOnTab(t),t_onFuncLoad("t_throttle",(function(){window.addEventListener("resize",t_throttle((function(){t_forms__calculateInputsWidth(e)})))})),window.initForms[e]=!0)}))}function t_forms__addFocusOnTab(t){if(!window.isMobile){var e=t.querySelectorAll(".t-input, .t-select");if(e){var r=null;document.addEventListener("keydown",(function(){r="keyboard"})),document.addEventListener("mousedown",(function(){r="mouse"})),document.addEventListener("visibilitychange",(function(){r="mouse"})),Array.prototype.forEach.call(e,(function(t){t.addEventListener("focus",(function(){"keyboard"===r&&((t.classList.cont

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 390 x 368, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	43194
Entropy (8bit):	7.976879745109125
Encrypted:	false
SSDEEP:	768:HEUd6YfEC7pr+ZcKiiYRc3TbAHN539ac0S4DrLn+7sSl+89T2eSJ6sud:kUIYbkmFkoN54c0TrLn+7sQyeVsud
MD5:	A788FCD070DA2E0229D1B88DD532B746
SHA1:	02776898DD8C6A0099477F918B9834D39F606C4A
SHA-256:	B7DFA5EC690B8747455CE09B7DBD81588FA53DE614036CE3BF0A6904C7A0FFFF
SHA-512:	9D7061C5DC59B4C25848533A571DD0137EEFDB0D287814B5674EE82F6E376677480C437538BF1FF5DF8612C78F5D31623C8401F31B25E426917C76D2791200EA
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.com/lib/flags/flags7.png
Preview:	.PNG........IHDR.......p......K......pHYs.................sRGB.........gAMA......a....OIDATx...\|S....IW.[.[h....!{..............+n.u#.......A..U..{..+y.9.I.6io..........4.....y.=..`0.....`0.....`0.....`0....H..z..nX5..)l..}......v..U.....PK$..{exw\|0L.Ia9.A...HS}...l.Y..W.o+..k......./..V.[V.s.^..k../.._...........(.uQ....,L..z).....DQ..pJ....#...g..A..,{S.1...<..>..q".k..}.g.,.).0p.P.{Q...T.........aL...l.....ww..>......o............"HJ..u5....o.....s.pL..`7om}Uu5.lm.}........9..K..'..H.L~j.F.>...&.... ...Cm.k..\%..`0......\.5...v.ud..j..?....6>..5R/.".B..t....!.4.. t...a...x.....&X.Z.&..j'..Kh.A...c....\......<..}..>q .%.a..2..I.mI.b...I.9&..p4i.h9>......t>..o..E......W }.Q.\...s.{XfP.4..+..,...$6....B;X...1z.^.{.i..3.....M...@..p..`..UH. ...O..U.,........o.U..j.4.@...q..v..;.VV..D..V..........,...S.m....s.%.......j.._..)W.T`.............17.6go;0......7....n5..g....mT..!-u.>...]F[D.&C.g6....{.........).......".(.z+~.8..w.B....d1

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.985915627357674
Encrypted:	false
SSDEEP:	24576:ONQmDFVa8PzG+xJ7PzmxYPD1aImG8YVu7ibV7Hzg0voR0jw4+I3O3pH10fg+:inaU5xJWx6ajWu7ibVjEpSjw4rgH10f5
MD5:	5A775D6A66ED3382B9FA7564A0DB25ED
SHA1:	22DB27CC749F97D4AC27653813F64A181E7EE6D5
SHA-256:	2419F5BEB6AEB0D79B730CDC1B002976E6DA9D61C5C7FB50641DE1E70D0ABE93
SHA-512:	FE7A615F5C042562C7C288759B1179FE3FFF80B419E2BF6A5CAE7538226184224A7FCCAD2F5D315EAB2EA0B430340C6DECF40CE050E624AFAEF3977C4447322E
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:3
Preview:	+Jc....-..K...Ua.&l...#..t.ADj....1-....VJ...Q...0...)FvS.u.&.../.\|...,...^.Ki.N..l`.....~7.V5+...WT....4.o....A0JF...98...5..AY.........w..3v.>].......xHw.]...\..M.o..(.U.y..uk..z..N....w..\.$X.......uw.hX..D..v...F.V..CGk..^..s.UI.u*...v..4r.#.....T..Fn=.........DQ.B'....N...~....G..@.>#...^_K\......h..)r.n^.{.8..H}.Q/.5..6.c?..\|"..Q.....C.i.......B..Y..C+....u..{d....U.tq4b]y.t..)!{..$J.......X+.m.I.i...?.Fd..Z.qy.G...X+k'._..J...C.u.axF0$.L.Wv."QX.....(3..5..uv.y&.v....-J....!..n.n.~.Jv..eA.1..LL.4.\1.....3..-]....X.aPy.....A.m.G...VRg..)....C.5(.Y.Iv.._..{.\|..e..Al......()-..n6............p.7...}.U.....m...;.......K.Y.s..6.MeP].l./!.....2l^?.......F..%.#j5./..W.6k.Ug.WUU.O..Q...!.S...J.f&.n.q.....M..Sl.........a..O....O...N$...m!].Bg....Q\|.oF..g'..^.JH.Wl.D.=...X..Z.c.&oiq.+.L...r._F...Sf..-z:....l]....g.:...T..<j.n{/.Yx.V\..d...Wr...3...o RY.......c./..;.R[...S..yP.(l.Ra.GV..f...wT6.?...R...^.]....J....E.elH./...S..[/nY..#..

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/16671369731?random=1728339318067&cv=11&fst=1728339318067&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.977754791106994
Encrypted:	false
SSDEEP:	3:mSgGunS79PpKuiJH4NDfLKsXjEskCGUpYkn:mS6SBpKFULK2jEskFC
MD5:	3FAAC4AC4E898B9DA134A6132FC68953
SHA1:	1BFE2DA4A4FE76F5D64A77850DF474BD6D6B0B35
SHA-256:	713BB0131B4B6B90E1E525AC5E245F4E33CE2E3D5E26899F57DF2DAD2786E85C
SHA-512:	5502000BE72C5AB58C6F7055D48A4D93B8C77E63BCF637ED2ADEED345C7FB7998FB87584113DEAA851DA43A6ABC42B201E7CC9D17F6ECEDE2D580F630547C67D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgk3OGXYVlCbMxIFDZRU-s8SBQ16r-fgEgUNrisVohIsCVCMxoJh9Z6jEgUNlFT6zxIFDXqv5-ASBQ0PqGwMEgUNMT2UMBIFDa4rFaISEAkxVY13UEXsOBIFDZSQkvo=?alt=proto
Preview:	ChsKBw2UVPrPGgAKBw16r+fgGgAKBw2uKxWiGgAKLQoHDZRU+s8aAAoHDXqv5+AaAAoHDQ+obAwaAAoHDTE9lDAaAAoHDa4rFaIaAAoJCgcNlJCS+hoA

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.988656413074759
Encrypted:	false
SSDEEP:	24576:+eLKiPEa1ga0q7eY+3pqOPfGaVcImNeDtEwKdmCZUrVZmB80:VLKugfqpy4Cm5b61mm0
MD5:	6E4F69CF6DAF47A217E4DB5EDC0FF997
SHA1:	A97D072BB4101B786EE4AF8ADFC9709C713043DD
SHA-256:	01B68B358CC862CC2A518E07EC96C26C80DAA36B8FDECBE37E281EE4AAF322EB
SHA-512:	22E7A056F4B4250DB882568CD5516DA3FEE078344F332DED6D285E43AEB9B8E5BA0F6D5F54AA1E30E96657574F52D3463E5915B80F61E6221598BCBC29B0F89B
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0:2f8280a041b4fa:2
Preview:	.:..o.v.m....R.l..=;...'.i.~Y.:.k...y..5..Q...}].....-..9b>-)90..C.N^...`\|Y..O,..R>.S]B.t.\|jWLF...F`.:,8bPV"oz.n.A..Z..`,.DT.....6.4......3....vt.%a.XN<z..j..Gp4......l..#&k............A.}+]v.{J.,}....R...l..5.z..H...D.G.:.(-)9Q.1y.(F...-.E..J.......y.....X,g..hzS...cU...7....@q.=1./..f...3..VM....hK...s%x=3.A..ob+.}...i.Q` .,.T{....1.f.H4c.......I.....V..z.Q......i....3..b.....C.P...$.i.k;.H.k.?......^...vW..Xj.....e..Z....U...\|....7.....uqA....f.....".G.u!...:.y.....S......dF.#.V.....H.%u.mM.U.$2...0.t.....(..%..(t^...%Q`\......GP...jx.......Z.P@..J.b:..8.(Kk......<....B........W&.?e...q.i..P........e.jMIR.k......7./.IK.{"...3........%Q..l.l.#..,<..(3+.pkO.tI#p...e,. ..@J.S. $=E. .`[.L=...nx. .5....(....\+:'...aQ..0..V..h.....uj..L^o....[o.....N.c.....L?c0<.....1l..MK8.R....T. .....t.y..9.CXh..PiK.,.....m..j....sN.F.....J.....T.E....G. ...qU...3...Z.Zy ....J.`.B=7?..>bBd(.2....=..b.PEC...?...0JID.......A%.y..}4..K.;q]...W..t"}.1.)."6J.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	664
Entropy (8bit):	7.52962526722269
Encrypted:	false
SSDEEP:	12:6v/7XVaULDgK+AMed8ev/v1XBSdZ64nUAn5tVtXpQwAV7ahc3WUZ1WmGCgiWlBeW:pSDd8O1IdlnUAn/XCxV7ahcGUZ1n3Eh
MD5:	C0CFEC5BE91CE151036EF619CB1F008A
SHA1:	4329FF7A78CA492456D198D74371A7D85D96F425
SHA-256:	CEEF540EAC137DBEE843FEF3EE68C950D0247C363933D198FBC67141E72BB4C1
SHA-512:	F9255DAC27AE1E5D910B469476711D314A759EDDA539C63A3891F5517CCAD1759FF1315DE219C57A2856C83258F93DEDDB310665F87B5727E677BB509FCA37C4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b.......pHYs...........~....JIDAT(.M..r.0..P...3...$....TRO.2y..O.n.4.c.c_.%.K.5{(.CN.Rt.1....p?..R...+!'.9....l'.@...W...o.8....F[..i...-...l.`........%".H0.8E.J.Z...yFR.r....-A....P.?\|6>[N%Z.g#.."..O....^...,.............\+...5.:l.p.){...!D.......@..@...r.B?.......T._..09.ZS.;H..8B............0?.0.......i)./..c<A\w 8........... ..A.. .6({.\{,b.\.......!.J.....4.F<.b.../...+w..Sr..;[H.u!y.ZumM..u.B.).\J...`y...;...?.....:_.s..bR...}a!.r.e]..&..-X.i.#...4..M.S..$kZ.l..f.i..bh1.rje-m.6.k....l..+...Q....VVoU.NW.m....CM).S-..u-u...{........-.^..$w....=s.p.....QJ>....B..v<..x>..?....:..Q....IEND.B`.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12162), with no line terminators
Category:	downloaded
Size (bytes):	12162
Entropy (8bit):	4.91446297082647
Encrypted:	false
SSDEEP:	192:m3thxjJk3SvVIn+yZtsmm9Bk9q1JvqzcWXz:WhxBVy6Bk9qLvqIWXz
MD5:	A30EFB69003F98B8B768759AC5F0626D
SHA1:	CD44A8CC865DF4F2BC95DFB1F48D877FD9C97DFB
SHA-256:	3C80F7772E0F3841B2CED1722523C2C1299A163DD880857C37B2F2852CCBD7A1
SHA-512:	DA835CE467A59EB9EE2E3AE095DF0B9F3A0F1B8716B39C550C8CAA49676306B23C756F8513D601E7CA2C46E0D3F3A240F2ADF940D80738852248CFD5C3DFA3DA
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/css/tilda-slds-1.4.min.css
Preview:	.t-slds{position:relative;overflow:hidden}.t-slds__bgimg{background-size:cover;background-repeat:no-repeat;background-position:center}.t-slds__bgimg-contain{background-size:contain}.t-slds__iframe{position:relative}.t-slds__iframe__body{position:absolute;top:0;right:0;bottom:0;left:0}.t-slds__img{display:block;width:100%}.t-slds__container{overflow:hidden;position:relative}.t-slds__items-wrapper{position:relative;overflow:hidden}.t-store__relevants-grid-cont.t-store__valign-buttons .t-slds__items-wrapper{display:-webkit-box;display:-ms-flexbox;display:flex}.t-slds__nocycle .t-slds__item:not(.js-feed-post):first-child,.t-slds__nocycle .t-slds__item:not(.js-feed-post):not(.t-slds__item_dummy):last-child{opacity:0!important}.t-slds__nocycle .t-slds__arrow_wrapper-left{display:none}.t-slds__items-wrapper:before,.t-slds__items-wrapper:after{content:'';display:table;clear:both}.t-slds_animated.t-slds_animated-fast,.t-slds_animated.t-slds_animated-none{-webkit-transition:height ease-in-out .3

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	downloaded
Size (bytes):	843
Entropy (8bit):	6.384532333029923
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3q6fo:NYw9YMnrfuERApo
MD5:	621C4157A02BF2A4F7D5E79D388EA111
SHA1:	D21DFF99EFCBDC7C96C5C206A8C31EADBF8DCD30
SHA-256:	15782F3F37FF6174DC0ED0E339A0BA728ADAC4F8B4278F49F96F6B6075BDE2C5
SHA-512:	8008450E38278BE4B3EE3842398BFF47B8D85FE24503B8F7186B504B4220477C2F6AED1F36ADE375D5850160919333775C65A5B458B577F4DA7388B8114CC052
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild3435-3763-4564-b634-373233303864/-/resizeb/20x/05.jpg
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......iP!9.}&q.k.v...X.&..X.k.Hy...F,I4Q.......

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1680x1072, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	398690
Entropy (8bit):	7.999498525935328
Encrypted:	true
SSDEEP:	12288:P5zYaKUqAxM/G2E2IyjYSu2CzUKVqdjzj:Ca+wM/G2CfS7KVyr
MD5:	87E80C61420AF33B3411CFCB7E510996
SHA1:	F6E5C7E4AB68A7E848E1FDA7E7F61E440A191A97
SHA-256:	0D70B3EAF8D10DB79BE1B4D2278E012DAD81B947049B8038E8FFE8A63190139F
SHA-512:	A7FEAD0C8958FE977F059E06053653E730AFDC91AC263C412FB2D1305D00F5F0D9517F0B9DD81711E53C98530B7B5F91E68DF362B5F853EE54786FF8556FF1FC
Malicious:	false
Reputation:	low
URL:	https://optim.tildacdn.one/tild6564-6166-4662-b430-623864636138/-/format/webp/03.jpg
Preview:	RIFFZ...WEBPVP8 N..........0.>Q".D..!#.\).p..el..^?-......<K1........x......6...).(..w:....0...?...<......_.....?.w,...~...?.zo.I_..........G.o...z......~.....Y.o.7._.;.....q_%..'.7...............w./...._..z....../....../P_._..m....\|........7......_.._-...~.{..................?..k.....o...=...............?..\|.......a....._...{.....?....................O..........[..._.o._...\|&.7./._..l<.6/...?.{..1._........G.K.?...z.............o.../........................a..........K.Y.........?.............?...~..}.o.g.?....a_.?................?.................../...E...w......U~c..2.9/...f.y........+M.K..l....?.,.0.S......._L.(.\|2.G.r.c;.D0..s"!E.A..e.>+.f..g....nv..Z.Pu.(.w%.#6.H.!..#...H.$.{...G..?.F.o.k!....v.hv._0..a.Q.Y.%...;jpO.'.^.Y.l.o.......@..k{..:.M......#.[.....@.B........;..g.;..)._..l....A.._I.....F..<...kf.).M .0S..{...r..~.n....jp.@p\3....F.Ns....@...M....=i.<.....R..S7dQ.<.....^..4.C....=XS.3sz.R........:.T.@.C..o6y..vLg....l..v....}

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.252117439641128
Encrypted:	false
SSDEEP:	3:IntSunSWtiPfWoiCkv1r9IKY:sNSpfWoiv4KY
MD5:	3E5C499ACD09E2B9982BA9379A39CA08
SHA1:	BD78F64F3474560B3541B12B49080CC08071CA98
SHA-256:	E882F1068046388EECAF9F4BFD3CBE3BFA38EF3FCD8364F2DB53B16F9EAACFCE
SHA-512:	5AC15F377BCA222279C0053EECDE2AEBF1FC69209391C14B92240AE933F56891BCD0D3A0FC31308DE270897AC2DA16898A9E996A6F6118EA710F7C3EC677688A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAnwsHa6jPupQRIFDZRU-s8SBQ3UC6FPEgUND6hsDBIFDTE9lDASBQ2uKxWi?alt=proto
Preview:	Ci0KBw2UVPrPGgAKBw3UC6FPGgAKBw0PqGwMGgAKBw0xPZQwGgAKBw2uKxWiGgA=

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	downloaded
Size (bytes):	845
Entropy (8bit):	6.399499850176057
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3e7s:NYw9YMnrfuERAes
MD5:	7045D73F6CDCA6617379F10EF1D0EE32
SHA1:	0CC57848173021323A5287CC2503CD5896287D9C
SHA-256:	59B5CC93044BEA0084993401A27586F3882CB5F8A1A300207EDE9A78A447E965
SHA-512:	50473F87D12ECB93D7F041D2A071A6FF7518374C957AC1E7A68CEA5C6612A9A2703EEDB25FD1B9BF444AC9036DD9B6AE80C2123E639D2DE3AE896B1D4B722E1B
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild6437-3965-4062-b861-633362613735/-/resizeb/20x/09.jpg
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...)&..Ud.\p.....<.q.....s#~;....Er.g.....&a.X...

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	dropped
Size (bytes):	835
Entropy (8bit):	6.376769698841237
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3z3aY:NYw9YMnrfuERAZqY
MD5:	83CDFC006C129DA42F08023FF6EE7951
SHA1:	D8450EC74AF81AC3382C3B305AE884AD6E4BC85A
SHA-256:	94D6EBFA1B697C7C572498A75655DB7A7EA3E8C68666D26BA7D462FCF7023023
SHA-512:	D946DE29F67702BA407D6AA64C60FB2B8186E83DEAF6EADD71560959B5D57C4149DD41A9FBAE1E86B949560ADB5161D68EC5CDDA344EF0F8BA02091335584AEE
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.z.(..@J....{.8.7.....7.....8....N...?..

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24231)
Category:	downloaded
Size (bytes):	24232
Entropy (8bit):	5.441382722827938
Encrypted:	false
SSDEEP:	384:y5S8l6UVWBicX6ZNzQYvZKHgSffCeUrhdFkJdJJiDSt7CYhA4l1JA9WLr6OAUuPj:y5S8l6UVqicX6ZNlwHUTrLFktgDSXhAB
MD5:	0EDCD6C3ED612C54F1F4EAC5C612D841
SHA1:	BC84AF354F47B3D11AD84762A7713E0E853C91BE
SHA-256:	68DE40611264822B9A752F4E79ADC4EEA3D1E2BD168A93C888C1789225B08A8A
SHA-512:	DEB83B7E029F2563216BAD9F888C9328A72B0CB76A12CDC6BBBA36D2CCCB1A1AC6C7FD93C1B89572839E2573B53C0D837B888302186425E5F842229CE3A677BF
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-lazyload-1.0.min.js
Preview:	function t_lazyload__init(){t_lazyload__detectwebp();var elAllRecs=document.querySelector("#allrecords");elAllRecs&&"yes"===elAllRecs.getAttribute("data-tilda-imgoptimoff")?window.lazy_imgoptimoff="yes":window.lazy_imgoptimoff="";for(var elstoSkip=document.querySelectorAll(".t156 .t-img"),i=0;i<elstoSkip.length;i++)elstoSkip[i].setAttribute("data-lazy-rule","skip");var elstoRound=document.querySelectorAll(".t492,.t552,.t251,.t603,.t660,.t661,.t662,.t680,.t827,.t909,.t218,.t740,.t132,.t694,.t762,.t786,.t546");Array.prototype.forEach.call(elstoRound,(function(el){var bars=el.querySelectorAll(".t-bgimg");Array.prototype.forEach.call(bars,(function(bar){bar.setAttribute("data-lazy-rule","comm:resize,round:100")}))})),setTimeout((function(){window.lazyload_cover=new window.LazyLoad({elements_selector:".t-cover__carrier",show_while_loading:!1,data_src:"content-cover-bg",placeholder:"",threshold:700})}),100),setTimeout((function(){var $;if(window.lazyload_img=new window.LazyLoad({elements_sel

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1396
Entropy (8bit):	4.943124058972397
Encrypted:	false
SSDEEP:	24:2dVh5ATLf3KUI7UC2oQIaIF2prQLKFN+/y40bxU1UypT2ekPmUkjAFKxK:cVfAvf34woQIXF2prdCyTl+ryekPmUkU
MD5:	576A1E5D4CFE0025F5B7D4E472E029A0
SHA1:	A85787EDEEAE072183CE31F43E085614637D6C55
SHA-256:	7B215B9DF72DE45755C79E965000DBD0982C1C92B7243285C34DFE2204EF5D53
SHA-512:	90CE4128AABEC9E32429F6914194519748DA8CA9ACC9D8002E594620275494CC983EDDA103F6922EC8B73DF030351DBD978FDDEAE215D48641F1A12431C13125
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/lib/tildaicon/62623164-6334-4465-b161-343730373230/sn_instagram.svg
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>. Generator: Adobe Illustrator 21.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 98.624 98.624" style="enable-background:new 0 0 98.624 98.624;" xml:space="preserve">.<g>..<path d="M62.161,24.47H36.218c-6.492,0-11.774,5.282-11.774,11.774v26.181c0,6.492,5.282,11.774,11.774,11.774h25.943...c6.492,0,11.774-5.282,11.774-11.774V36.244C73.935,29.752,68.653,24.47,62.161,24.47z M49.239,65.011...c-8.8,0-15.959-7.083-15.959-15.789c0-8.706,7.16-15.789,15.959-15.789s15.959,7.083,15.959,15.789...C65.198,57.928,58.039,65.011,49.239,65.011z M65.482,36.542c-2.074,0-3.755-1.681-3.755-3.755c0-2.074,1.681-3.755,3.755-3.755...c2.074,0,3.755,1.681,3.755,3.755C69.237,34.861,67.556,36.542,65.482,36.542z"/>..<path d="M49.312,0C22.078,0,0,22.078,0,49.312s22.078,49.312,49.312,49.312s49.312-22.078,49.312-49.312S76.54

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1396
Entropy (8bit):	4.943124058972397
Encrypted:	false
SSDEEP:	24:2dVh5ATLf3KUI7UC2oQIaIF2prQLKFN+/y40bxU1UypT2ekPmUkjAFKxK:cVfAvf34woQIXF2prdCyTl+ryekPmUkU
MD5:	576A1E5D4CFE0025F5B7D4E472E029A0
SHA1:	A85787EDEEAE072183CE31F43E085614637D6C55
SHA-256:	7B215B9DF72DE45755C79E965000DBD0982C1C92B7243285C34DFE2204EF5D53
SHA-512:	90CE4128AABEC9E32429F6914194519748DA8CA9ACC9D8002E594620275494CC983EDDA103F6922EC8B73DF030351DBD978FDDEAE215D48641F1A12431C13125
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>. Generator: Adobe Illustrator 21.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 98.624 98.624" style="enable-background:new 0 0 98.624 98.624;" xml:space="preserve">.<g>..<path d="M62.161,24.47H36.218c-6.492,0-11.774,5.282-11.774,11.774v26.181c0,6.492,5.282,11.774,11.774,11.774h25.943...c6.492,0,11.774-5.282,11.774-11.774V36.244C73.935,29.752,68.653,24.47,62.161,24.47z M49.239,65.011...c-8.8,0-15.959-7.083-15.959-15.789c0-8.706,7.16-15.789,15.959-15.789s15.959,7.083,15.959,15.789...C65.198,57.928,58.039,65.011,49.239,65.011z M65.482,36.542c-2.074,0-3.755-1.681-3.755-3.755c0-2.074,1.681-3.755,3.755-3.755...c2.074,0,3.755,1.681,3.755,3.755C69.237,34.861,67.556,36.542,65.482,36.542z"/>..<path d="M49.312,0C22.078,0,0,22.078,0,49.312s22.078,49.312,49.312,49.312s49.312-22.078,49.312-49.312S76.54

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	downloaded
Size (bytes):	835
Entropy (8bit):	6.376769698841237
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3z3aY:NYw9YMnrfuERAZqY
MD5:	83CDFC006C129DA42F08023FF6EE7951
SHA1:	D8450EC74AF81AC3382C3B305AE884AD6E4BC85A
SHA-256:	94D6EBFA1B697C7C572498A75655DB7A7EA3E8C68666D26BA7D462FCF7023023
SHA-512:	D946DE29F67702BA407D6AA64C60FB2B8186E83DEAF6EADD71560959B5D57C4149DD41A9FBAE1E86B949560ADB5161D68EC5CDDA344EF0F8BA02091335584AEE
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild3234-6435-4139-a630-333832333134/-/resizeb/20x/10.jpg
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.z.(..@J....{.8.7.....7.....8....N...?..

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 896x500, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	74084
Entropy (8bit):	7.997425283807231
Encrypted:	true
SSDEEP:	1536:UeHMP2soyZTeHGxWzWBfD3RnSYY2IndLUi46WuEVjfD0ldYC:1siYm2fdn2dLUmkDQH
MD5:	763ACF33415CED77574B5189D1D7405E
SHA1:	C00E411BE45EAED0824CEDF8FC0FB79DA8EE7E66
SHA-256:	9EDA9C8BA8C6503AD920390EC63BD138F2414392B45671699D6EF3DEDBC38E61
SHA-512:	6C206003435F080B3B29435893D4F7BAA3962071D2DB8561025E3F94146ACDB72A3E4E0DCAD9F57E7977E48C8E4B919151AB10A9162A7507EC090F621256FE37
Malicious:	false
Reputation:	low
Preview:	RIFF\!..WEBPVP8 P!...q.......>Q".E#.#.K..8.....V.P..i..gj..V^...]{...>......g.i...}.........tGs....'.?3.r..3......?.<..\|.{.........w.N..}B?..d.....W....=...o.._.I..~.zR.....?.~@z?...............=g..............G.............'~B?(............3.../.>.....O.^...}..O.?.?.?..+.....................".........c.o......?3=.~....g........?....U...G....~....\|R.....Q....R..~.s...%..>...f.X..\B^.i.)U.....F;I..+?....E--.`..z.%.../.<...z.........c).........3.X}x..h..[...d.3..ZDhe.-m.srk.....59...U..%4C,pY.%kT.~.....'.@.&.GF.....iP...R....%..b..-..8.ON..q.i.!....b..a.....W...&1..94.^Y.)......,.R+......(.P!....!.........r..f#..2...e.KX.... te.r.[.}$?..9.7w..q.......P%.)..............F......S...rRag{p.L..F.06..;V..l.e......h.}.T...y.........k.M9D.A.q.......s..gM.s'e`......_r.7cT....l<W:.k0JzN8.da...j._.g;..w....t....}.M,,.P.....GXu.k....O.}.M.[.\|`.69......=.xM.kF......8..T7u:&..)...t.t--....3..8.+...T...E.L.................G..!....w../.C..P5...a.60..Q P.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4848), with no line terminators
Category:	downloaded
Size (bytes):	4848
Entropy (8bit):	5.8137386453922355
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUCyO0ZcWm:1DY0hf1bT47OIqWb1Tyzy
MD5:	5A561280DC4C066E5423CE4B0A0581B7
SHA1:	9002C303E7E5CFAFC555F3B13DDEB6AAA438A91C
SHA-256:	9030EEFBB164B809B4377E21A76B90E935F88C60DA3EABD43CE84401BC0A64A6
SHA-512:	3FE0AFDFC9F8CB72383AFCE717D959B9CF13D1729B49556DF949FF288187163A971A2FE2BA01909F0FC950D95B5CD27D899E0978F024B0BC8ED89B0C3654FAD6
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/16671369731/?random=1728339285300&cv=11&fst=1728339285300&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	73143
Entropy (8bit):	5.622033400502564
Encrypted:	false
SSDEEP:	768:Hzprb2TOA8IATwJmki8EF1bNaIQqRoZRZDDPREQVM3JehqlGWpG2Jr8vSWRku5I0:b1K3qw4G52aBtx
MD5:	E2E4ABDBF650F445F25AE2B46B48E60D
SHA1:	B1254E15E8E9C71C44A1AE61ED6D307BFB0159FE
SHA-256:	0AEBC0752F285595A9F6F34C5D3CF8F45D4698547A7C234EB679E9CCA4A7A237
SHA-512:	C22D1216DD81A34AB5614924916A04E170B8CD0EE98BF39674DEC6EF893C7A3AC2B26A3109A231EE8F5C8E231784743E6061C15CAF52B1A559D1B2713FB59F6C
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/ws/project10309827/tilda-blocks-page53194931.min.css?t=1725003854
Preview:	.csssize{height:8653px}.t-body{margin:0}#allrecords{-webkit-font-smoothing:antialiased;background-color:none}#allrecords a{color:#ff8562;text-decoration:none}#allrecords a,#allrecords button,#allrecords .t-radio,#allrecords .t-checkbox,#allrecords .t-img-select{outline:none}#allrecords a:focus-visible,#allrecords button:focus-visible,#allrecords .t-focusable,#allrecords .t-focusable .t-btn,#allrecords .t-focusable .t-btntext,#allrecords .t-img-select:focus-visible+.t-img-select__indicator,#allrecords .t-img-select:focus-visible+.t-img-select__indicator:after,#allrecords .t-radio:focus-visible+.t-radio__indicator,#allrecords .t-checkbox:focus-visible+.t-checkbox__indicator{outline-color:#2015FF;outline-offset:4px;outline-style:auto}#allrecords .t-descr a:focus-visible,#allrecords .t-sociallinks a:focus-visible,#allrecords .ya-share2__link:focus-visible{outline-offset:2px}#allrecords a[href^=tel]{color:inherit;text-decoration:none}#allrecords ol{padding-left:22px}#allrecords ul{padding-l

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.954276998092992
Encrypted:	false
SSDEEP:	24576:Ms+3cRUK18FEORVuVr45UA3VQhsBrq0xrB7xBQIQ:MV7K18cr4faj67UIQ
MD5:	C800BE5A4B01D84D8AEFDC7C232FA2DA
SHA1:	F997D16772D40AC38B27CB291C6A38933875CC20
SHA-256:	6F06BC245558BA00A4472CB5EEC610C863083A0BF49EDFF0FD96FDD2BB41C529
SHA-512:	F8390585EE2EA243047A5C696822796CEC83B6C7EB727FA0E74082991E27A86443B94681B83C8817CDDDE3DD28F3B9370F6545D545F295826AF6D82740F23A9C
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0:2f8280a041b4fa:b
Preview:	.@.Ti..5.........N.U.....W........].<'s....E...l.$.+N.`.f...)0%I......<.X]\|.a.w."k.p...$.1V.4..m..\Q...h....x.v5T.[..$....^..I\...%.1D..4..}8p.GEQ\|.<.,....0...0.....v.g..pB.`.......i..0...4.$...{.....^Js.\5...]Q....f..m.....-.N...K?1.~..Yw.p..:..3].:R....................l.5..J..b..... ....oLf....oW..$D.x...>.....q.(.;O....h....!5.....eR=.........Y..d.`UR..kbWY....$.hn...?2..SI.52.O6.....t..&.n.dS"..GZ0\..Iwz.g3...Dl.....1......3..i....@T....9.......Q.A.......(yM.^52.R..v..cQ.........i....F...d..R.x#...1/.U...~.<.\:.mX...3...ngs..;;1...8.....p.P\....u.~.(.\|.E.a.....i+....9~f..6u...A.,0;lD&.n....D2v..@..v....j......Ct...P.c+..hCY..P.D.....0.m..5......CK..ty.....f=...4..P.H..l(....\h.&...T..i..4....Lm.o....".-+.t;j.;.K.D.a....y...&,..{.-#...#\|.Lv...v.Qc....\.UVS..X.8.....!.+...J...2........P....u....\.kp@(.<b.D.2.....R..FI.t...>{..\V.\|..n.Oc.G..9.\|5.%.<.+..".+....A..&0..h.................h....5.......j.^..)Z.a.v3+.nw..q....gS..g.....{..h.F

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5590), with no line terminators
Category:	downloaded
Size (bytes):	5590
Entropy (8bit):	5.337053728237261
Encrypted:	false
SSDEEP:	96:YTjp+EnjtTMTuTqToIJTIITqzToTCTeTyUd1EDwjTslhryvW9534QrDQeQrED7h1:IpRTMTuTqTocTBTqzToTCTeTy4MlhWvA
MD5:	F3CD7BF8C0F0FFEAD717E064B27FF2AF
SHA1:	0100B6577EC5B924A8AE1455E31EE0273B024CC5
SHA-256:	0D8EFCC663EF3B20C54173C784B0E6EB3B181371B9DD463AFD27BB66F7D29C4E
SHA-512:	59597CD4F4C4BA970A87DF9C4FC021DBDCFAA22851905D21C90B8DDC33D34834A85C43CB97A0056A379E80707F840750898E24B42B5847DDA5ED1D1F60872AAA
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-video-1.0.min.js
Preview:	function t_video_lazyload_init(){if("IntersectionObserver"in window){var e,t=300;/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)&&(t=150);var o=document.querySelectorAll(".t-video-lazyload:not(.t-video-no-lazyload)"),i=new IntersectionObserver((function(e,t){e.forEach((function(e){if(e.isIntersecting){var o=e.target;t.unobserve(o),t_video_lazyload__addVideo(o)}}))}),{rootMargin:t+"px 0px"});Array.prototype.forEach.call(o,(function(e){i.observe(e)}))}else t_video_lazyload__addVideoWithCheckViewport(),window.addEventListener("scroll",t_throttle((function(){t_video_lazyload__addVideoWithCheckViewport()}),300))}function t_video_lazyload__addVideoWithCheckViewport(){var e=document.documentElement.clientHeight,t=/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent),o=700,i;t&&(o=350),i=document.documentMode<9?Array.prototype.slice.call(document.querySelectorAll(".t-video-lazyload")).filter((function(e){var t=e.cl

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1236)
Category:	downloaded
Size (bytes):	2255
Entropy (8bit):	5.379104573717346
Encrypted:	false
SSDEEP:	48:yMjDJXnQKCfekMRvOc5VH4wOVHciRkyLPyP5r2cI:yMDJXnBCfe5vOcLH4PHcSTLPvX
MD5:	DB463BD8F90CDFB2F95A679EAEEB4A42
SHA1:	0ED50E6AFCE5D0235E4796ABFCA07A3FDD1023C8
SHA-256:	A1DB1F8E2706CD67A10C93B5AF47D4444EE8F4684022329DC884C459F8A8AC4C
SHA-512:	D8934C7FCF298EFF283C981AAD301A6A43A1E75268DAAAAF62A62CBCE2F126B21431DD3CC9C8BFF3372CAD28E71172026129218346F6CE01BB87B8A07D7D54DA
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2857.4841249823353!2d15.115180200000003!3d44.2588588!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x47621f06bf4862a1%3A0x87e746d6b0890d0c!2zUHV0IFJva2luaWNlIDI2LTM1LCAyMzIzMywgUHJpdmxha2EsINCl0L7RgNCy0LDRgtGW0Y8!5e0!3m2!1suk!2sua!4v1723212451329!5m2!1suk!2sua
Preview:	<!DOCTYPE html>.<html>. <head>. <style type="text/css">. html, body, #mapDiv {. height: 100%;. margin: 0;. padding: 0;. }. </style>. </head>. <body>. <div id="mapDiv"></div>. . <script nonce="2bTrClAX6o6xzaVWFXe_3g">. function onEmbedLoad() {. initEmbed([null,null,null,null,null,[[[2,"spotlit",null,null,null,null,null,[null,null,null,null,null,null,null,null,null,null,11,null,[null,null,null,null,null,null,null,null,null,null,null,null,null,1]]]],null,null,[[null,null,null,null,null,null,null,null,null,null,null,null,null,[[["5143707838249984673","9792873802639150348"],"/g/11c2tp0s5j",null,[442588588,151151802],null,null,null,1,null,null,null,null,null,null,"gcid:road"],0,0,null,null,0,null,0]]]],null,["uk","ua"],[null,null,null,"/maps/api/js/ApplicationService.GetEntityDetails","/maps/embed/upgrade204",null,"/maps/embed/record204"],null,null,null,null,null,null,null,null,"YF0EZ52qKcCsi-gPrMO-4Qs",null,null,null,[[[2857.484

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21012), with no line terminators
Category:	dropped
Size (bytes):	21012
Entropy (8bit):	5.231875859639831
Encrypted:	false
SSDEEP:	384:AOOSoas2Ikp488lTyLAmDzNeCaIkjoYbjBxlkLDijSJC:AOOSoaPHp488lunDLaIkjoYbjBxWLDid
MD5:	F1E5C57E7FF99D6D675BDE8D32F490D1
SHA1:	23191F7B0C735391C4F9FD5136E091D881D49AC9
SHA-256:	AD9195982DB84ADB45E0062740B5D142B37602DF00AB554D929E04DAD5C8322E
SHA-512:	2C85422A84604989BDA5BFB8932E216DEDA8813F55BB88BAB8276671DE1656DC73ADFA1F75B0079A2F393BF5B3636406AFDF567C8E803151C938CDF063772873
Malicious:	false
Reputation:	low
Preview:	function t_menusub_init(recid){var rec=document.getElementById("rec"+recid);if(rec)if(t_menusub__isBlockVisible(rec))t_menusub__lazyInit(recid);else{var menuIsInited=!1,orientationchangeEvent=function(){!menuIsInited&&t_menusub__isBlockVisible(rec)&&(menuIsInited=!0,window.removeEventListener("orientationchange",orientationchangeEvent),t_menusub__lazyInit(recid))};window.addEventListener("orientationchange",t_throttle((function(){orientationchangeEvent()}),500))}}function t_menusub__lazyInit(recid){var rec=document.getElementById("rec"+recid);if(rec){var submenuWrapperList=rec.querySelectorAll(".t-menusub"),submenuHooks=rec.querySelectorAll("a.t-menu__link-item"),isNewVersion=Array.prototype.some.call(submenuHooks,(function(link){return link.getAttribute("data-menu-submenu-hook")})),closeEvent=window.t_menusub__isMobile?"orientationchange":"resize";Array.prototype.forEach.call(submenuWrapperList,(function(submenuWrapper){var hook=submenuWrapper.getAttribute("data-submenu-hook");if(hook

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	844
Entropy (8bit):	7.680778204177858
Encrypted:	false
SSDEEP:	24:n7slXOGxiTj2ci6ZoTHyF50sxOLSlpl2VyCV1H:nyrX0XF50HL4Wyw1H
MD5:	E93E13EFF5D15F14C80D4D59A951271B
SHA1:	F704C9D7E088990B74B1435F076B75F0E83EC4E9
SHA-256:	6D727635D993EC0B3257BC69B9B1505D3644C713C888572E6EDAE39A815E7872
SHA-512:	0EDEDF2BA30A6C7B0F8AB7036A9E5ACE1F94BFE03FAC0B23871700511D37CA8325B62ED0479D7ED68BB8C85660D2FF654726DB3B5E0D1FA85282FA2BD0E5A3DF
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild3366-3231-4264-b438-306335373163/-/resizeb/20x/Full_Ground.png
Preview:	.PNG........IHDR...............U....pHYs...........~.....IDAT8.=T.b.X....M..v.$m....`........q...t.i.a0.F.#........v5..@Q....Y.G..D#r...b.e..N.9......'._.H'..$..i..>.....;.ah......-.l.</.We!Z..I.z.q...F2fN. .=O...%,S.e......=.yD.44P...\|.c.a85.j.F.-\gE.........:.f.....Gli37...x...?..#i[D8..H...;..a.J..e~.e..2!.KB.m-..........F...V........:.2:.....b.....O.M..1.\|.L.2...5&5...U.}.y.bHc...6.i..,..d..`.....+^.>....,I.^.b.p.s..5.....S. .7p.9t...7........J...\.a.^.CwCB..D.".X2.b.0X..#.E...`Q._\|.6y..U.b...`.\K. .Y.a.......P..l:;.?.$...2..a..Z..z..}.L..\|..,.Lrt....RtZ.:.9C.1...>ql&. .......>...X...4.Qq..C.I.Tb.FR..<.I...\.4...i.+.....\|....I.p1.q....R.w8...;.}..Q....Z...~p}...t...b..]/..%.$......+.i.5h........$.B..{^.._M...N..d.........7...sDw._...j.Py.+a".Z..y..pl..C.z..u.y...w..H.$@@v8.....IEND.B`.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	844
Entropy (8bit):	7.680778204177858
Encrypted:	false
SSDEEP:	24:n7slXOGxiTj2ci6ZoTHyF50sxOLSlpl2VyCV1H:nyrX0XF50HL4Wyw1H
MD5:	E93E13EFF5D15F14C80D4D59A951271B
SHA1:	F704C9D7E088990B74B1435F076B75F0E83EC4E9
SHA-256:	6D727635D993EC0B3257BC69B9B1505D3644C713C888572E6EDAE39A815E7872
SHA-512:	0EDEDF2BA30A6C7B0F8AB7036A9E5ACE1F94BFE03FAC0B23871700511D37CA8325B62ED0479D7ED68BB8C85660D2FF654726DB3B5E0D1FA85282FA2BD0E5A3DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............U....pHYs...........~.....IDAT8.=T.b.X....M..v.$m....`........q...t.i.a0.F.#........v5..@Q....Y.G..D#r...b.e..N.9......'._.H'..$..i..>.....;.ah......-.l.</.We!Z..I.z.q...F2fN. .=O...%,S.e......=.yD.44P...\|.c.a85.j.F.-\gE.........:.f.....Gli37...x...?..#i[D8..H...;..a.J..e~.e..2!.KB.m-..........F...V........:.2:.....b.....O.M..1.\|.L.2...5&5...U.}.y.bHc...6.i..,..d..`.....+^.>....,I.^.b.p.s..5.....S. .7p.9t...7........J...\.a.^.CwCB..D.".X2.b.0X..#.E...`Q._\|.6y..U.b...`.\K. .Y.a.......P..l:;.?.$...2..a..Z..z..}.L..\|..,.Lrt....RtZ.:.9C.1...>ql&. .......>...X...4.Qq..C.I.Tb.FR..<.I...\.4...i.+.....\|....I.p1.q....R.w8...;.}..Q....Z...~p}...t...b..]/..%.$......+.i.5h........$.B..{^.._M...N..d.........7...sDw._...j.Py.+a".Z..y..pl..C.z..u.y...w..H.$@@v8.....IEND.B`.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	dropped
Size (bytes):	845
Entropy (8bit):	6.399499850176057
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3e7s:NYw9YMnrfuERAes
MD5:	7045D73F6CDCA6617379F10EF1D0EE32
SHA1:	0CC57848173021323A5287CC2503CD5896287D9C
SHA-256:	59B5CC93044BEA0084993401A27586F3882CB5F8A1A300207EDE9A78A447E965
SHA-512:	50473F87D12ECB93D7F041D2A071A6FF7518374C957AC1E7A68CEA5C6612A9A2703EEDB25FD1B9BF444AC9036DD9B6AE80C2123E639D2DE3AE896B1D4B722E1B
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...)&..Ud.\p.....<.q.....s#~;....Er.g.....&a.X...

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34334), with no line terminators
Category:	downloaded
Size (bytes):	34334
Entropy (8bit):	5.132945322271882
Encrypted:	false
SSDEEP:	768:gkSec5c2mc2Wc21c2qc2Dc26c2pc2yc2bc24c2zc26c2bc2Xc2hGJc2BI05wlnEc:KY/mtU
MD5:	1151892353B2F9EB8AF4068C8AEFA1FB
SHA1:	073B68C712B9168DD339E554CD6773A3DD948438
SHA-256:	81EDD2311D9C814B44A5A95BB2B0AAAAD1453760B0CCDC89EFF51B675236D22A
SHA-512:	8B00874EF7904B488156A1FC67C0BB580AB5EFC4E6189DA773BB5F7A46C2126BFAE9960FB3B703DC8BC32E994BF553B19C28FC3D23D8ABC90CBF3AD189F08DA9
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-animation-2.0.min.js
Preview:	function t_animate__init(){t_animate__checkAnimationAvailability()&&(t_animate__generateStyles(),t_animate__wrapTextWithOpacity(),t_animate__addNoHoverClassToBtns(),t_animate__preventHorizontalScroll(),1200<=window.innerWidth&&t_animate__parseNumberText(),setTimeout(function(){t_animate__startAnimation()},1500))}function t_animate__checkMobile(t){return t.filter(function(t){var e=t.closest(".t396__elem, .t396__group");return!(!e\|\|"y"!==e.getAttribute("data-animate-mobile"))\|\|(t.classList.contains("r")?Array.prototype.forEach.call(t.querySelectorAll(".t-animate"),function(t){t_animate__removeAnimationClass(t,"")}):t_animate__removeAnimationClass(t,""),!1)})}function t_animate__removeAnimationClass(e,t){var a;e&&(e.classList.remove(a="t-animate"),t&&(t="string"==typeof t?[t]:t).forEach(function(t){e.classList.remove(a+"_"+t)}))}function t_animate__preventHorizontalScroll(){var t=document.querySelectorAll("[data-animate-style=fadeinleft]");!Array.prototype.filter.call(t,function(t){return

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4632)
Category:	dropped
Size (bytes):	31196
Entropy (8bit):	5.558563340627671
Encrypted:	false
SSDEEP:	768:AB+3zZtdbouVrsskROtm5MiswJ4QtmBxfjMtTKxi7BLl6V/iq/ukBtINmIaCRW0m:ks06KW/in80sX
MD5:	78C8CAE7651DE16E67EFEF4EEC8C0736
SHA1:	52E095B651D7EA2BD8BA3A7EEECFAC0C81F3C503
SHA-256:	90CE2580A432A380A5E917C6B2AD0E241BF2C47F8F3A29D2111D7DF4986473C5
SHA-512:	403D9FA25671CD3DD75345F8554196B1BB36AEDD5AE9EF45E74A5B0D5A8397684A53E771477BCC2A85B2760C1EF97EF81277D0D954459A55D4516B6CF7447037
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('onion', function(_){var fZa,gZa,hZa,ZP,bQ,aQ,kZa,lZa,mZa,jZa,nZa,dQ,oZa,pZa,qZa,tZa,vZa,wZa,yZa,zZa,CZa,EZa,GZa,JZa,FZa,HZa,LZa,IZa,MZa,iQ,jQ,hQ,kQ,RZa,SZa,lQ,TZa,UZa,mQ,VZa,WZa,nQ,b_a,a_a,qQ,g_a,h_a,i_a,f_a,j_a,l_a,sQ,p_a,q_a,r_a,k_a,m_a,n_a,s_a,t_a,rQ,C_a,D_a,G_a,F_a;fZa=function(a){a=_.iJa(a);if(!a)return null;var b=new YP;b=_.$d(b,1,_.qD(String(_.Gc(_.ah(a.Fg))),0));a=_.$d(b,2,_.qD(String(_.Gc(_.ah(a.Eg))),0));b=new dZa;a=_.se(b,YP,1,a);return _.Ob(eZa(a),4)};gZa=function(a,b){_.Dg(a.Gg,1,b)};.hZa=function(a,b){_.Dg(a.Gg,2,b)};ZP=function(){iZa\|\|(iZa=[_.N,_.M,_.O])};bQ=function(a){_.NG.call(this,a,$P);aQ(a)};.aQ=function(a){_.eG(a,$P)\|\|(_.dG(a,$P,{entity:0,Zm:1},["div",,1,0,[" ",["div",,1,1,[" ",["div",576,1,2,"Dutch Cheese Cakes"]," "]]," ",["div",,1,3,[" ",["span",576,1,4,"Central Station"]," ",["div",,1,5]," "]]," "]],[],jZa()),_.eG(a,"t-ZGhYQtxECIs")\|\|_.dG(a,"t-ZGhYQtxECIs",{},["jsl",,1,0,[" \u041e\u0431\u043b\u0430\u0434\u043d\u0430\u043d\u0430 \u0437\

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	212370
Entropy (8bit):	5.9828385759015825
Encrypted:	false
SSDEEP:	3072:HBTy3461yM+rwhj0gPvM5T6E3RdfYIJ1fqoanTIzZiIYt9DGM4cr390eXKr:HBKRjEUg9qoan88kGtnW
MD5:	E287FCF0628CFC4ADCEECDD5149F2014
SHA1:	9CCC7D39FCA35F22253CD461179D5BC4DECACEE7
SHA-256:	65BD546C183C5C4A5743110F682243E1D76180FBDF82896412CB415D44187D6B
SHA-512:	555E4354B4D93F501A230A59E632B491459D17F6BB96E44E152FEAE089334E3D7F7AC730BB226A325D4A1AA525EF5F36DCB7D534E44AD44726561C22A0EC389A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="103" height="109" viewBox="0 0 103 109" fill="none"> <rect width="103" height="109" fill="url(#pattern0)"></rect> <defs> <pattern id="pattern0" patternContentUnits="objectBoundingBox" width="1" height="1"> <use xlink:href="#image0_596_357" transform="matrix(0.001 0 0 0.000944954 0 -0.000353211)"></use> </pattern> <image id="image0_596_357" width="1000" height="1059" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAA+gAAAQjCAYAAADzKwQdAAAKrmlDQ1BJQ0MgUHJvZmlsZQAASImVlwdUU9kWhs+9N52ElhABKaE3QToBpITQAghIBxshCRBKiIEgYlcGR3BEURFBRdFBioJjAWSsiGIbFJRiHZBBQRkHCzZU3gUWwZm33nvr7bXO2t/d2WeffW7OWeu/AFAUuWJxCqwIQKooQxLi48GIio5h4AcBBAhAHpgBey4vXcwKDg4AqE37v9v7LjQbtbvmE7X+/ff/akp8QToPACgY5Th+Oi8V5VPoeMETSzIAQA6gcb3lGeIJbkGZJkEbRLlnghOmeHiC4yYZAyZzwkLYKNMAIJC5XEkCAGQGGmdk8hLQOmR3lC1FfKEIZTHKrqmpaXyUj6NsjOagMfJEfWbcd3US/lYzTlaTy02Q8dReJo3gKUwXp3BX/J+v439baop0eg1DdJAT

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenPGP Public Key
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.9892947619833405
Encrypted:	false
SSDEEP:	24576:hdJhcZxyz1zIkuYdNxwyzs9w/AwuD1V5LmPZt5:h+Iz1FuY7xrs9w4wk1YP
MD5:	99ADFC15EFE5B5E53FA45F249A394ACA
SHA1:	5B589E5613FA9CD63B331189C0F34ECF40F2C730
SHA-256:	55321493A63CDBA67018B81C3B042CF9E1D81A9D1964A47D1248AFE9F1C491D0
SHA-512:	3AC7280C0A817383482A72FFE1E5F72E0126315DB9BB8954FD316517D4277590E3CEC3DCCBDC6061E9E071574812E0748A25DDA01242EBFB7C4B20CC1F69D828
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:2
Preview:	........8.+.r.!..+Oww../...u.p....q/...V+fE...H..........6.....~\.^.u5..yW...'"_E..'....f..YV...%.\.m.,G}'g......>..DZjo...1...!.T#..F.{b./...T...1...g._Y.\.....$.H...^..i.....}G........K..h......dTJ..Q4.....1.....!..p.H.l..OW.>...lA6.i^...B..z..3l.0..5....t...d&..W.jY..M..g$..6..'.o.s.b~B.![..}..M....%..q^..U..&e.....q...D....0]o.-.q.f.M......z".I.o.....V....K....E...iEk."....#.}.X......DRJ..t...Ez...t...n'{+..[...#5..L..A%.v..v..$_ib.Z..L......H..NG.....$..^.<......#].....?......;.${#m+..a..$..6v....Z{,X...a..].....?m....;.k....8T.....DI...o>i.%..w.9TV\Bwu.....E.....ya"..qa[Ck$.....W..4.{sn_..J...J.G..3.'t...hW.W..<..!..9..W..8.....?.g.!.dO.]..b.'xP.$...wO.o.(..,.#. ..IO.ED.Z..#.v.q.t.[.2h.....f..gSH...g.a...H...I..nU.RY.k..L......s..1..v.T'Ir...U..K.D;.@.[...?...r.d..Q{O..3.....7.).&...r;.b;:Tv.!.'v..Q\|.w.._....\|.O..Wi......b..<..vB.......yc..~@..d#.....".D-.E-U.R.n.".~^.{[R...3.+Z.v.m*.z....=.Br.....?~Jou.]/Z.F...

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	dropped
Size (bytes):	841
Entropy (8bit):	6.404957947890871
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3zh:NYw9YMnrfuERAxh
MD5:	4CA4D9EC4B0C188590BEDE2132192015
SHA1:	D1896D3637884EDA2518FE3F2224F7BD85002D64
SHA-256:	77A2F535A815F1646C3BCC5EAC4FB2079DA0F3C0B984A80FCE7BF91BF4A926DC
SHA-512:	69C121B4B54BE4821468C98CEFBCC78974FC1DA8F173C0A68E1ECC128615E83DB62E3BDAC794DE87DE5F0B6E4ED2ECA4FE1C0B7B3C71E57163DEBB6C0DCE13D8
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..P......x..\..&..5.&..'Q...3..Wne?.E/h....

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	679
Entropy (8bit):	7.597775694402076
Encrypted:	false
SSDEEP:	12:6v/7XAv/xEfUoTRuEiOrheFsexR9hDpSEsemWsMGpeNTjXTBhyBXTL1ScHD:T2FuO9eFXR93FNoQDEXTL1BHD
MD5:	210F55E977FD5D4DCC3940A8ECCEBD74
SHA1:	0903D000AE8943885D598D1D27E9B50E3567EBE2
SHA-256:	BE4DBD11928204EF8F2B2E5CFFA4118D97ABCFB3025248996D4A0F0150708BB1
SHA-512:	FE306848926D90A72B1BA3D4375895CDF0035E7AAF4FD4E07DCA81807A3EAE7B65CA564D24CFC5FA4D746F506FE00C3EB1F3A317CA82032A2A30F5B9FCFCB147
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b.......pHYs...........~....YIDAT(.=..r.0..`...M.&...hE....$.^H.?.X.....:=.+....%.>G..cI.sr.."G.H....../&.#6....RB...;AK...O9LHN!Z.`...#....LVS&.#..YL~....!'.fj..t ~bp......a:.A..J...Aj.9I........O-O.......D.+.x...!..!.+8...=........EM...P."N.i8.0...x... n..>_)?1.z.k.p.8~..G........v0.l,...L.o...........x....C.N...u.b.....}..@.=b...G;...#`..7.....G....w..p..6...8..@3L.....UC....Q.6~.4j....6.~7...I.7.X.l...m!..SlyN.6ej~...)vm..k4....wo...&.0M.!...9..B.9.e..4GW.S....UjZ.....K..T.ou.C5.Wkd.n......9.:..V.u..u..>.Bh....bU_........oe.N..lI..BY.T.%..:..})..ZN............C.h...[..t.7:..#.6:a.c]..}......8....}.........IEND.B`.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	dropped
Size (bytes):	846
Entropy (8bit):	6.3962662568766655
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3lfa8:NYw9YMnrfuERAba8
MD5:	795A377AB8BF197FC4D1B1E99DCC424D
SHA1:	D83C4DB0FB0C97B5DD910D10E4A221AE4F339C56
SHA-256:	4A8424724A0E0AF6AD7A8A9845D0A33B5225DF06B8483303CEBBC4FA1B6DD955
SHA-512:	4FC2806FA4586CE9C872CBDB8664C393B92A043130EDD98F85C2A1F5B6677FF8F53D910F9DE3ACD327D07A3B4DD4E90FE72BE63F5621EC5C38D5825B2D7F64A3
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.[{u`.8.U=6Ff.5.A..c".T.[...9.`zQ].[.....>.{....

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2615), with no line terminators
Category:	downloaded
Size (bytes):	2615
Entropy (8bit):	5.150667683732337
Encrypted:	false
SSDEEP:	48:v3t/6d7IERSqAFFbpXmR4qp8nBUBXjpW8x6usjIeLOf7dNVWlR:v3t/M8+SqAFFbp2R4qp8nBejpWHk1VO
MD5:	45201A5876A0BD1B4292A193C634ADC2
SHA1:	C9A419B42751BDC24BF8625FF20BFC082F8F4C6E
SHA-256:	BE39C25D97C8EB00AA33ABED99FDD18FC6993B9CC5D21B2B69596D7F13405245
SHA-512:	BCBCCDAA2000615281F44A9B3194BE0C4E15EC80D434DBC3B7570CBFB4C5BA99DD7DD69B6F062FE93128CD3E284DE3DCE8F400859243AC99CD850C1FDE61B5C1
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-popup-1.0.min.js
Preview:	function t_popup__trapFocus(t){var t=t.querySelectorAll('a, button, input:not([type="hidden"]):not(.js-form-spec-comments), select, textarea, embed, video, iframe, [tabindex="0"]'),e=t[0],o=t[t.length-1];document.addEventListener("keydown",function(t){!document.body.classList.contains("t-body_popupshowed")\|\|"Tab"!==t.key&&9!==t.keyCode\|\|(t.shiftKey&&document.activeElement.classList.contains("t-popup_show")&&o.focus(),"Tab"!==t.key\|\|t.shiftKey\|\|document.activeElement!==o\|\|(t.preventDefault(),e.focus()),"Tab"===t.key&&t.shiftKey&&document.activeElement===e&&(t.preventDefault(),o.focus()))})}function t_popup__addAttributesForAccessibility(t){t=document.querySelectorAll('a[href="'+t+'"]');Array.prototype.forEach.call(t,function(t){t&&(t.setAttribute("role","button"),t.setAttribute("aria-haspopup","dialog"))})}function t_popup__resizePopup(t){var e,o,p,n,t=document.getElementById("rec"+t);!t\|\|(e=t.querySelector(".t-popup__container"))&&(p=getComputedStyle(e,null),o=parseInt(p.paddingTop)\|\|0

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	5.088584697656694
Encrypted:	false
SSDEEP:	24:2dVh5ATLf3KUI7UwCU1UypT1LS6cr2jYlN0d6a:cVfAvf349C+rg6K2YN0dl
MD5:	87FBE1DB74A2D2EAC711CD7A5351643A
SHA1:	2B52884B3A0F24BE3029BFB25E8759A019F74972
SHA-256:	7F013F9EBA970EA26B35D861398238153EC72ECD2A294A85F50B896CFEB5C1ED
SHA-512:	C8D67AAC0F53ABF2B932AB3BA5838910D2D65B4563D788405496B04AA4CCBA20CA4717FC48F9258A6CC07ACF07D5D083D2D7E9C929A2FD3E28E14D5126020596
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>. Generator: Adobe Illustrator 21.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 98.624 98.624" style="enable-background:new 0 0 98.624 98.624;" xml:space="preserve">.<g>..<polygon points="43.716,56.528 58.987,48.427 43.716,40.49 ."/>..<path d="M49.312,0C22.078,0,0,22.078,0,49.312s22.078,49.312,49.312,49.312s49.312-22.078,49.312-49.312S76.546,0,49.312,0z... M76.845,60.797c-0.657,4.16-2.668,6.419-6.897,6.897c-4.726,0.534-15.352,0.78-20.075,0.78c-4.887,0-14.771-0.205-19.705-0.616...c-4.241-0.353-7.135-2.722-7.718-6.938c-0.424-3.07-0.698-6.719-0.698-12.521c0-6.459,0.233-9.192,0.78-12.11...c0.781-4.164,2.769-6.181,7.307-6.65c4.762-0.493,9.264-0.739,19.336-0.739c4.924,0,15.54,0.255,20.444,0.698...c4.283,0.387,6.696,3.007,7.225,7.184c0.369,2.915,0.698,7.088,0.698,11.577C77.543,56.24,76.845,60.797

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4480), with no line terminators
Category:	dropped
Size (bytes):	4480
Entropy (8bit):	5.186314292855384
Encrypted:	false
SSDEEP:	96:6E7VyxtWBFXkB9O+9HgP5OPxnuiTudsLRrRkZDJQpaX:6OyxtWQBItP5CTwSrucaX
MD5:	E07BD59E01C8ED1F99E4E85D379FCAEC
SHA1:	C835271B33ECC57A01FEE1F044C1C8ADF1F4140F
SHA-256:	8B24BA590FECA22CE6E3633085D978045F4AA64F5A2AC57C97E9E53AA04F88AE
SHA-512:	73F68123498C11D1C47200D48BD4DC25A4904E4893F02741181D8700650EE8D1E0BC961A3AEF065FBF7AC20F92CDC1396F62977841AA956B366C9891F5E6A370
Malicious:	false
Reputation:	low
Preview:	function t396_scaleBlock(t){var e,d,a,l,u=t396_isOnlyScalableBrowser(),p=t396_detectResolution(t),o=document.getElementById("rec"+t);o&&(e=t396_scale__getElementsToScale(o=o.querySelector(".t396__artboard")),o&&0!==e.length&&(d="function"==typeof window.t396__getCurrentScaleFactor?t396__getCurrentScaleFactor(t):(d=window.tn&&window.tn["ab"+t]&&window.tn["ab"+t].scaleFactor)\|\|window.tn_scale_factor,t=t396_ab__getFieldValue(o,"height"),t=Math.floor(td),t396_ab__getFieldValue(o,"height_vh")&&(l=t396_ab__getFieldValue(o,"height"),t=(a=t396_ab__getHeight(o))<=(l=ld)?l:a),t396_scale__updateArtboardState(o,t),e.forEach(function(t){var e,a,l,o,_,r,i,s=t.querySelector(".tn-molecule, .tn-atom"),n=t396_scale__getElementType(t),c=t396_elem__getFieldValue(t,"container");c\|\|"group"!==n\|\|(c="grid"),s&&"grid"===c&&(u?((c=s.closest(".tn-atom__scale-wrapper"))\|\|(t396_scale__wrapElement(s,d,"tn-atom__scale-wrapper"),c=s.closest(".tn-atom__scale-wrapper")),t.style.zoom="",t396_scale__processBackdropFilt

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	663
Entropy (8bit):	7.62454757829505
Encrypted:	false
SSDEEP:	12:6v/7XWbN1PBGf6G5/fcye6b/tzZuMgE4VRMbrbmFTtVvFI16X:dN9BG6G/fcy3hzZuMfLrkTtVvmW
MD5:	1B7CFC3ACCCAE1C5DA5D8A66F6E4B5D3
SHA1:	832B4B1F6331477A8AB376219BA98C91974575BD
SHA-256:	72F6D4611D15597581B5E3BB9CA3370AE6FEB02E7BFBCF48E833316B4D8D5718
SHA-512:	7BBC0A45E55625D03F677831F896663AE820D7DE1C6B44230DB93D246B925F766247603125EB2D9B7B163B1E5BA6EC3AC6357B1EAAEF6CD6FB8D15FD8AEE8006
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b.......pHYs...........~....IIDAT(.]...0.......m6...g...l."......L.o$.O...\|>V\|.+>..%.Z#...d.):.T.\|..^.t).....K.T..Z.t_+.....%Z.Ac.....@k%.J[Ei........7z.%bI....).....Z......QRB2.jF.8.-QZ..@..M{L..S....S...5....((..8S.t.i.p..g9#....&....Z...-Mc.....O...g...8..8..pd_..T........NsZ..Tol.xa...2j.....B...tC..9J....R 0W...`..z.....................}....` ..e5X....1'(..1!.@....@.O...0.4.G.0...{... ..JK0...B..J...........q.4i'..]0.N...[.b.R.]i...y.C.=..K-}Y.~...T.F4....k.7.d.......Y..s...ZL...amYj[.k;..........{..{..@..o.....S.{)y......u....~Z...I.....iyU..>.nt.(z.x~..,.A...n.m..c..W....f{.....IEND.B`.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33871)
Category:	downloaded
Size (bytes):	58750
Entropy (8bit):	5.811342071257356
Encrypted:	false
SSDEEP:	768:xqOv/QbhGdnHNJbpPCUbhNLITca9kOESRFqFgCekJVL4rLaABLJUtzXggqyLp55E:hHLmF4e0AYzXDnG2zNhA
MD5:	93A6C23565410E97E34D6FF169F65F35
SHA1:	DFA02E1950DE1E4EF42EE7EC99838673EDFE895E
SHA-256:	19F66574A728ADDC8D4E0CF51816430F0C627D82CBFF6DFECB2CD3EAE8A866C1
SHA-512:	82F9B790735DD369D78A7FD910E29839E691EF560790E13862335794F07FA62441130A6392440747A2CA282D6B4D3AEA6170F1B3E4737110FDA1650022843686
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-forms-1.0.min.js
Preview:	function t_forms__initForms(){var t=document.querySelectorAll('.r:not([data-record-type="1093"])');window.t_forms__inputData={},t_forms__addRecaptcha(),Array.prototype.forEach.call(t,(function(t){var e=t.id;window.initForms[e]\|\|(t_forms__initEventPlaceholder(t),t_forms__addInputItsGood(t),t_forms__addAttrAction(t),t_forms__onSubmit(t),t_forms__onClick(t),t_forms__onRender(t),t_forms__addFocusOnTab(t),t_onFuncLoad("t_throttle",(function(){window.addEventListener("resize",t_throttle((function(){t_forms__calculateInputsWidth(e)})))})),window.initForms[e]=!0)}))}function t_forms__addFocusOnTab(t){if(!window.isMobile){var e=t.querySelectorAll(".t-input, .t-select");if(e){var r=null;document.addEventListener("keydown",(function(){r="keyboard"})),document.addEventListener("mousedown",(function(){r="mouse"})),document.addEventListener("visibilitychange",(function(){r="mouse"})),Array.prototype.forEach.call(e,(function(t){t.addEventListener("focus",(function(){"keyboard"===r&&((t.classList.cont

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	downloaded
Size (bytes):	841
Entropy (8bit):	6.404957947890871
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3zh:NYw9YMnrfuERAxh
MD5:	4CA4D9EC4B0C188590BEDE2132192015
SHA1:	D1896D3637884EDA2518FE3F2224F7BD85002D64
SHA-256:	77A2F535A815F1646C3BCC5EAC4FB2079DA0F3C0B984A80FCE7BF91BF4A926DC
SHA-512:	69C121B4B54BE4821468C98CEFBCC78974FC1DA8F173C0A68E1ECC128615E83DB62E3BDAC794DE87DE5F0B6E4ED2ECA4FE1C0B7B3C71E57163DEBB6C0DCE13D8
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild3061-3530-4762-a634-643162363737/-/resizeb/20x/Night_01.jpg
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..P......x..\..&..5.&..'Q...3..Wne?.E/h....

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1680x1072, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	576888
Entropy (8bit):	7.9995698792343575
Encrypted:	true
SSDEEP:	12288:DiljUdPPb3r6FtKAfj5vBxkB9KNCjufwSqRg5coqN78PEg:DiGPb3ejnxkONrDqRgCH8h
MD5:	2EADCE8357239E2B559F7D4321190183
SHA1:	69B6C847DB59E7AEDF154E9D2AA8CDCC9C7CF2C0
SHA-256:	97FA11B70D80B9DCB360E8E3D1C0E185F9512D17B4B190E39033107B415D0817
SHA-512:	9D983BF4B99045AC30A61825FCCABC3364FE950ABE898D362C118E47434FF932E198AA940E4A8F3A875F42A0C9D580E82117AE5307C7976295F64B8CFE2C3FA3
Malicious:	false
Reputation:	low
URL:	https://optim.tildacdn.one/tild3832-3366-4631-b063-353464373162/-/format/webp/07.jpg
Preview:	RIFFp...WEBPVP8 d...0......0.>M..D".....T(...S.S=.~..;...._.>.9..vR.f....5/Y...#...#..^.Q7..qKg...........7._..5.7.7.#......?a....+..!.......=.....'.........._.>......>B...........<......M......./.O._.^........./.......?u...~.{..3.....O...^................7.....oyO......U.........7..........................O...;......W...2\|...._..x./.7....?...x........_..._......w...O......1......E.2...?.?.... ...=.U........._O.....?._..c....._..?.....1._._......I............_._.................._.?....K........i.............k.A...o.........?......W..._./......q......./.?....E...C....._...?....Y.............?..............?.............._....\|c."..'....\|..`P..xZa...v..\|M.&7&;"....$m.W.24.y....F.9"....,..#XW;...IH&$`B.h.%o[;.....Y.\|....5..!:3S..w.?Lc.w....x.D:..M._(5..... ...0..V:L..g..QA.(..}.YrsFQml..H.......r\|..Tty..\|....'`.]....P..UOW.u....6..\...b^.-.!9....IE..R..w ..\..h<..9C:..r.Stn7.y@..W..6...}h....XnP....K.Z.Z.ChsUN.`..k.l............zS.$r..-6O..o.8.\g.j.2..u

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (535)
Category:	dropped
Size (bytes):	225012
Entropy (8bit):	5.579408293118199
Encrypted:	false
SSDEEP:	6144:cwJko+RLMdVbPJ93qEy8QYgLarl1nsRXCCzXG+bWa7q3s60TSFyo6n7h:cwJko+RLMrbPJQEy8PgLwl1nsRXCCzXP
MD5:	82C0489574C3B76823EEB90C98ABDF23
SHA1:	F1EF5CB0F3879108DDAC95D2DA3B1852A0278FEF
SHA-256:	3B82FBBC1FE23FA57EDF545B82547AAB71BFAC75BAC6B8FB7C53E9E358E9D3BA
SHA-512:	05DCF3B4100EB4BF75BCCFC3A73216C7C10969B2EBBE6A73A239C69250255FCC04DAA15BDA30F2963D22C7AFE4A38442B17148174AB0D31CF91A0B76308AB8FF
Malicious:	false
Reputation:	low
Preview:	(function(_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2019 Google LLC. SPDX-License-Identifier: BSD-3-Clause././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././..Math.uuid.js (v1.4).http://www.broofa.com.mailto:robert@broofa.com.Copyright (c) 2010 Robert Kieffer.Dual licensed under the MIT and GPL licenses../.var aaa,ma,oa,na,ra,caa,daa,Ma,nb,ob,faa,laa,naa,pc,qc,wc,taa,xaa,yaa,waa,Haa,Faa,Gaa,Daa,Caa,Eaa,Gd,Iaa,Jaa,Ed,Kaa,Maa,Laa,Naa,Oaa,Od,Paa,Qaa,Ud,Taa,Uaa,Waa,Xaa,ie,$aa,He,dba,gba,aba,fba,eba,cba,bba,hba,lba,Ye,oba,ef,pba,tba,vba,wba,xba,Aba,yf,zf,Af,Bf,Cba,Dba,Hba,Eba,Gba,Ef,Pf,Iba,Rf,Sf,Jba,Kba,Mba,Oba,Pba,Tba,Uba,Xf,Vba,Sba,Qba,Rba,Xba,Wba,Zf,$ba,Zba,aca,eg,bca,dca,eca,fca,ica,ig,kg,lg,gca,hca,lca,mg,ng,og,mca,qg,pg,nca,pca,rca,vca,xca,wca,zca,yca,Eca,Fca,Jca,Kca,Gi,Mca,Nca,Oca,Rca,Qca,Sca,Pi,.Pca,Tca,pj,vj,Lj,Mj,$ca,Vj,cda,eda,

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.25
Encrypted:	false
SSDEEP:	3:YIzKIYn:YIhY
MD5:	BA518E7BB13F1B9D72A0569A52FC2832
SHA1:	331078CB830B731E900ECA7C6FCBE0A7B885305A
SHA-256:	FB1BF528D8237AAC3E9EAD389AB246BA0068F61FE281610110937EF2B8ADEFCE
SHA-512:	778A950DC96B5BC54714B3F7B94A9DEBB250D075CE004168FCD5E747D2F41324CC35AE410BDB822D5F534ACAEC509595A162109CEC1A642C1CBCA4E92F6A832C
Malicious:	false
Reputation:	low
Preview:	{"message":"OK"}

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/16671369731?random=1728339298228&cv=11&fst=1728339298228&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2Fcases%2Fprivlaka-relax-residence&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20Privlaka%20Relax%20Residence%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	557
Entropy (8bit):	7.55456969751002
Encrypted:	false
SSDEEP:	12:6v/7XF4w0yj4oxJEC6WCCUiU6l1EAVOrVtVoVxXy32:w90yrEJWJUinlSAApt+VxXH
MD5:	1E23376E124A25CB6A8C0E9BA7A0F0E9
SHA1:	5D75AC0F9F4F739F46957A4AF1708B2A9A16AB54
SHA-256:	F4161DEE03D590707007D010CC3F4F2A0E59EB5CAA80200E7DF89AC4D9727DC7
SHA-512:	527ECFD56F5FD905E68802A3166FC5B197533D7B2302B81934240946F4BC5C80510E0C43B90616C556517A1CC0F9FE88188262FCDEB5DE6483A64ABFBEA1BF6F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b.......pHYs...........~.....IDAT(.....0.D.......P....ji4.9<.....Lo......Yq..g.8^.zSkA!.$..!..r4....8.%.G.h9.f...J../..) .....M...P2.tK.....-r.H^!:I.......,1.B.....&.%.9..[+.l.........#V.-.......L....@Q.+.L......eS$.a.....C.%?....!.].....t.u<...0R8.c2.>`....~..7(J......)..-.z..:.[.^..C.(.L*fR5..H......o.:'...w.S..~.Y\|@S.).m+..I(.l8(Ga...y...........>8......p\|f.......a.....t#.4..c."wJ;w.s...9$.z.8.{`..,..v.]....b/.....<[...GMK..\n.....C..yU.rN...j?.o....wQ\|=.zQ~..8~...5.j...g...E.=...8.....oy....IEND.B`.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33380)
Category:	dropped
Size (bytes):	33381
Entropy (8bit):	5.147679076390747
Encrypted:	false
SSDEEP:	768:meFhXRntkiePwcq5FQo1+uNPTk4fZow5BiiSdO9s0TuqsfuGhNGi+fJtXxIJoIGx:vAlCQcYrl1u
MD5:	8A5B43232E2A5B4D259627815FC7B81B
SHA1:	CE200C2FAA3C6C872AE3B3790779F9FD06D993D6
SHA-256:	B7517363B9C2F5BD6921F03A9A26A4D466762E9EB27BBDFD75F03315E525312D
SHA-512:	8933C805C3282B248340E34C0EED4BBC136528BE85C19DED3A9AA999743BC06D2D9A85174EE09EC2CCF52A9CD55DA1977FA2F6632610B5AABC4674AC74A5BFE5
Malicious:	false
Reputation:	low
Preview:	function t_sldsInit(t,e){var s="object"==typeof t?t[0]:document.querySelector("#rec"+t);if(s){var i=s.querySelector(".t-slds__items-wrapper"),r;if(i)if(!i.getAttribute("data-slider-initialized")){var a=i.classList.contains("js-feed-container"),d=s.querySelectorAll(".t-slds__item:not(.t-slds__item_dummy)");if(d){e&&e.randomSort&&(d=t_slds_randomSortElements(d));var l=d.length,o=d[0],n=d[d.length-1],c=window.innerWidth,u=parseInt(i.getAttribute("data-slider-items-in-row"),10)\|\|0,_=i.getAttribute("data-slider-with-cycle"),p=parseFloat(i.getAttribute("data-slider-transition")),f;if(Array.prototype.forEach.call(d,(function(t,e){t.setAttribute("data-slide-index",e+1),window.t_slds__isiOS&&(t.style.transform="translateZ(0)")})),"true"!==i.getAttribute("data-slider-stop")){p\|\|0===p\|\|(p=300),isNaN(p)&&i.setAttribute("data-slider-transition","300"),i.classList.contains("t-slds_animated-fast")\|\|i.classList.contains("t-slds_animated-slow")\|\|i.classList.contains("t-slds_animated-none")\|\|i.classList

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1546)
Category:	downloaded
Size (bytes):	3482
Entropy (8bit):	5.280696112783717
Encrypted:	false
SSDEEP:	48:aR7ISgcW+EyRmDutn15/ioRq985/+4KJoQEgw7p0TEQuNdVJfTM/SPuRy/ksVw:ahISVgDa5/Xq9EGzJ/fwyfuNdVqS2KVw
MD5:	17A1CBB813E575BFD3FCB3C407760051
SHA1:	3D7A4AA448A92E1489285D36E523A208A8F512BD
SHA-256:	6BE43CC799A64AC69A1AF5BE6F4D4FAE21D4042474C9B59F00534DFE38115F05
SHA-512:	12DE76C8DA26B0E89B1116D614754FE226A0E855D5BD57D6CEF7D48D73D028CA00ADC02A7A97545402C56C64F40192794D1DEAEABDAAF2AEE27771AB33B81C6F
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/7/intl/uk_ALL/search_impl.js
Preview:	google.maps.__gjsload__('search_impl', function(_){var jzb=function(a,b){_.Dg(a.Gg,3,b)},nzb=function(a,b,c){var d=new kzb;d=_.YG(d);c.vr=d.load.bind(d);c.clickable=a.get("clickable")!==!1;_.DZa(c,_.oQ(b));b=[];b.push(_.ck(c,"click",lzb.bind(null,a)));for(const e of["mouseover","mouseout","mousemove"])b.push(_.ck(c,e,mzb.bind(null,a,e)));b.push(_.ck(a,"clickable_changed",()=>{a.Eg.clickable=a.get("clickable")!==!1}));a.Fg=b},lzb=function(a,b,c,d,e){let f=null;if(e&&(f={status:e.getStatus()},e.getStatus()===0)){f.location=_.V(e.Gg,2)?new _.Nj(_.at(_.J(e.Gg,.2,_.gt).Gg,1),_.at(_.J(e.Gg,2,_.gt).Gg,2)):null;const g={};f.fields=g;const h=_.ai(e.Gg,3);for(let k=0;k<h;++k){const m=_.$q(e.Gg,3,_.yQ,k);g[m.getKey()]=m.getValue()}}_.pk(a,"click",b,c,d,f)},mzb=function(a,b,c,d,e,f,g){let h=null;f&&(h={title:f[1].title,snippet:f[1].snippet});_.pk(a,b,c,d,e,h,g)},ozb=function(){},pzb=class{},qzb=class extends _.U{constructor(){super()}Qi(){return _.si(this.Gg,2)}},rzb=[_.M,,,_.so,_.U_a];var szb=cla

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	626
Entropy (8bit):	7.537055170768238
Encrypted:	false
SSDEEP:	12:6v/7XyiVlXRGamI1JdHXKARu1d7vjpIi9I81tGSiCLwHa0Q:nCM21JrW77+81tLiCLw60Q
MD5:	005C432AAC44DC2DE69E7759E9E2DCA6
SHA1:	FDFB99495E35237B61A596983252912C3449DAFC
SHA-256:	5B6017CBFB66D29A4EB4C9C632E72BF85F276914C29F27D3194B918072E2C17D
SHA-512:	26B3970808B57A09644F34CD9C535B0DA59202357B5B7AE35BB7F43726074CD8CDCC6508A8F781949A27161FFE072F24BE40A81CA0EB4FF45D7ED3E90A784014
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild6335-6438-4735-b439-643130626636/-/resizeb/20x/Apartment_11.png
Preview:	.PNG........IHDR.............b.......pHYs...........~....$IDAT(.e....0.E.....Lw.}_X.lW>..D..S!...y.........Z.LK.Tk.R...).H....$.9a<S,.......%..fO%9..R.1...y{c..qd...1.K.d..%\....h(yE.I.V.3.,0@.A.H.F....R..W..SI.R....U/2.IZ<I..IT!^$.L\2..A\..R$u1..W..D^.d.4.E.}..?I...."..4...b&&/.$a.....j.Ju......$....A....=o)..N.Gh!.......: ......C<.....p .`.9....\|.-.2z...a...vyL9..,.N..._]...i.@.\|v........d]*.Q][.w..z..Z.T.m........ n.....x5-..oZ.f.j..k>..Y.%.Zk...NHO....s..N.......#Ng%.s...!.3.p..N.z.Z.eY.i[.C}.....,....HW...#E...R8r.G..(%.....cY.c.c....e..%.K.or..^....k..,.f].}....../.\,4J.....IEND.B`.

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 11, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	657
Entropy (8bit):	7.592638131375676
Encrypted:	false
SSDEEP:	12:6v/7ybVwzFU7Q91h4/dbleOn9KdR8WwuuOimZCCt5/ukwAHSJnqzgxxmLj+0SE4A:bbVSGI4/2Onw1wFOzZhzwAUIgxYP5n4A
MD5:	7BD264E6DC97844626BA62A29A9729BB
SHA1:	A159776F6B5F02630C345F65E2217950AD7B2A11
SHA-256:	50751F9EE09A069354B2BEA6C3F1AB56C70F95ED827F926B847B1BDACC25F479
SHA-512:	2708F6E7929BA55B86127B4715B98C911A86BAE265DD6D5659919F5420AC232FB63AF25AA51D6F26D6BFB4B4E44FD6D0F0BB31283B75A3E5C49A79EF417BAF79
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................C....pHYs...........~....CIDAT(.....F.E.....#.G.Vn.^...mql.N......}.<u.X....9...h..5>..W.......Ix.+../....M_........(.n.(:.#.0....t...;~~......D..i ..O.......l...l.d#g..D..t......!..q!.7.. ^?.<..;Z..~.....m)~........(..Vc...GL.4&.4...4.i..2}...q1=..P\.@e.U..UK+..k....:....2f.8y.....y.F........$.V4....t..;b......Lr.ch.b.{.Q..&.y...[:[.'..H!......}G.o.n.vD.N.{&.b.g.T1.1.$......V.)...GT....}.........7.v.<...w.. ....,.a.0H..........j..^%Y......L..J.~.-l..-..c.[Y..$..J.]K....;...$.$.......X..uXs./<.(....r...."./X.^.I..+^....K.eg.L.\|..Z@k.N.,.W<.J._$.gF.I..H...g.....Fi...}....IEND.B`.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.99362498786911
Encrypted:	true
SSDEEP:	24576:aHSN42gOQpfK2xl6yR1wfsGjH6qi8/w+o4gD/:wO9pQPCAXGj/J/w+Nk/
MD5:	407139B140005E0D5C7EE39D6F09DF46
SHA1:	3FDC2DDED99B357B8A6ADE38B153BF537FDA23C3
SHA-256:	BE8BF99FD6106522177510ACC927279557A347A1C980F8E5061F825E0E8CB865
SHA-512:	0B944EB38B8C6651D03311066E8E17DD9A192C45BB8DC870D326D2FEE54D7B30AB35D749656CE2AB0081D3529D1931C0C47855E7D108D61BCA488B70DF2F58C0
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:8
Preview:	.>.'d..r.(..M.......7..P.....,..Tc!Z.w....C.9a~l1.....C../... S..0..c"....Ts.....+\....S.....-O...;..e.!!v:.M..V.G.{...]. .@B..6.L.y......'.6-......T.....;)^a.+.+.#qS.:..c......b...0.l?..&...te...$..!...{+h+..;....ydw...qd..v.........1..H......l.u."....[.L.R..[...d.H_..hZ....7.a'X.yj..hTc....kK.h.5$...XC.V.....t......Iw6h.C.v3...j3q!S............F....-..}8.#.YXb....0.....w7..FQ.1..b....)..q.A..U4.a.8...W...4..zL..n.v.u37...@D....L8....Z.....yT..G..=O...L".).....i.....X..%H.....J.L....G....dDX.!.'....!.C. .av..b..)..<.,:6.9.C.\.&..%Oe.E..;3x......O...jf2........Z%.m.....K...4t._.......5.QG....D.`....j...Yn./.....Uk'..;.=W...W.C..E=.a....6L..9T...8d..7y.vx0.$1.P.m....X...B...z...+...ID....)...>.\|O[o.f..S.w\|.`~...k'~T..A....a."..-..72..=#j.........t..d......q.t>..]..?.....wjD...}.F.[..w.)..dR....L..+.SF.A(~.....WD+..)....8.F..~....G.<..L..oQ..<.%.......#..zy`5..).EB..B..`....M.......)Z.."......._..J."].a..2.:....9...].R..W....$C.YY.8?>..

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.9942693849831254
Encrypted:	true
SSDEEP:	24576:SJ+F1PoIhwzw/NgonrK2wVzzIBWrPy+K9gkDW12MSxNp:n1vhwzw/GWk0+PEgkDWYp/
MD5:	2F6A5666E785C40A366AD093C21E9061
SHA1:	C9DB6908B30A6FAB38E46058BBC5336724655ACB
SHA-256:	4714745DF4AFC1F9280D335928832D0FFEA6BFFF6FEBFE5163D81217BE423181
SHA-512:	3FC0D67D8085D7EF692DA5D797155721BAD5B2629D0DBC36ACCF71BE36F0B9C825500D337A6F50748169F921EC99B60BC08D8AD8AB03FAB9CE1719696D015BB4
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:c
Preview:	...!...n.....6+;~..3^C...e...n..b.b. ...{...!......R..\|M.r...p,d.0B........1..>..s......'x...W<.sa<h.{..1......3......-..8.Y.p....>...s\=\|..(:.9YKF..Qq-...W..$..i..q.)aiJp.:.&...E.h}.'._(.q$.S..."....i......c.D...%..b....l\|1...k[....].(;=3f..;8-f.=.`.........Zw..+.s....".('.=...}=%..o3..b9.i4.T4...R..}....Q..=....I.1.._.P..56........%.g.}.!.1..}.Mt6..n...V;oZ.'..s..g+Pgg.{.%...Z..<.&.^.Uh.z........K.42.-4..l/.'......+U.1......I #05.@.)..>%........W.....{.....e.DP..5QO.W....C.l.Q...0D..s1...."F.....1w.e.Ty...9.R..]..w....3.I.W......&.-'.".l..1IVp......N...t .7.j......^.^5Q.....;......A......+..d9<...^.......Zi.&.B.....D.....ni:...j....9,m...)..#i..w.4..~.v..3..ph.oi..j.....a.....H.\...RY.\..,.$.."q.h..o.`]..Ha..DG../..=v..E...M0..;..1..J<..[L).K....5.. .a..B@.>..8..MmF=+GQ.;.9.o......f...y...x...,.....o......+,.i.U.FJ_9.k.-....n...g":...vA......Js"........u..@`..W..a...._\|.V...\...>....6..V.....9...?he..6y.9..tam.:.7.P.v.4.^P

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.98828048356362
Encrypted:	false
SSDEEP:	12288:QNB+RMC89GdbY4MkKmwmJEG2w7T33BY7HsdTjUiW4XoSQliRn4Q7+qyi+RzsKkd+:Qrv9YwkbmG2CDOWo3k4bhzsKkVgnfIY
MD5:	7C1A7A3AF1049E54AA7F580FD6CDB465
SHA1:	DB8F3B7FD9B32B09903B50BBF8601F9AEB4D137D
SHA-256:	8919DA774FC363DA318181662F80E43DD166DF5A700896707A70A39ACF759558
SHA-512:	91487F08771581D6E0721806D07A6105B78B8B053B6397A7E073A99EBDEF013F54D6857BDA5872A953BD557419586CF56E980079478398536F332304214BF120
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0:2f8280a041b4fa:8
Preview:	n....o......U(^.L..Dqz...8.V.[(.._Z.....3.......E...r.U.)F..r.I.... f...>..!^.1..k.\.{.x.?.f....&LM....k...A..-.2..[.p=.j.^..V$5.7..0.Z....O.....)m.K,.w....zN.&..~i!..@......p..t...=.v...vQ.(.VK..+..aJ.Bqk..Bt@..5..sq.G...2q.Dz...p.:HB.Ia.D....`.0...%..{. ..A.....1V.^......X..l.vN.a.Xd..].1...H.......TH.^3.....8.._.8O.1.B6.I;.F..........W..^..W5.T.O8h7.i..@.....`...c.c.W.O...K..Q.G{....DmV._._.....C@.....,....NUGE.7.J.b..]..ST..`..P.......V..k.~.Wl.i.2,......Ul...../.t..S%.!.&@...u;..u.,H+..(....F..H.+.{.b........9.l13_$Pg$F..;....!4.n..y..%.....V...H...;.6.c@K~.$.?dk.C....^#...U.9bc..&.lV.<.-.6...F`:et6).....k.....0;r..^....b8w._....0.%+1....e....Or&ik..`h.$:.F...0.A..Aj..SU...!.$....a..>.P.YD..p..[T.fn.(..V.......?..G.71gm......t5w....U.0...4Z".dV......x.}J..MDG*.......\..#...j.K>b.h.....b?....u.._..2M0Q..s2+t<.wWfN0A.I.xb......Z.F..:.`."..R.r.C.Sl...XU....I.hd3.a.H...>Y....)u...j9....u`C0D.2...u.f.@.`0..^Z......a..7..3..

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.186419411348774
Encrypted:	false
SSDEEP:	3:OgGunSWtiPfWoiCkv1rL:O6SpfWoivh
MD5:	669CEDFFAA39BCD7930B7252678E5265
SHA1:	55268E571A65CBD4989FAF742D5EAE1EA383DE3A
SHA-256:	AE00AB1298738051C0953997BCF72D4A13107A1B9B3CA0C9C8DE3965B46B7FF6
SHA-512:	B9828B986833E331631885E509CE16FA4B0F8DD4655704DC305E48DDBDA77C3248335B896980E3AF24B64102C8D598E7F90EFBC61AFE4A51283D18E1A4E1D443
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQmwSJ0vjj97LhIFDZRU-s8SBQ3UC6FPEgUND6hsDBIFDTE9lDA=?alt=proto
Preview:	CiQKBw2UVPrPGgAKBw3UC6FPGgAKBw0PqGwMGgAKBw0xPZQwGgA=

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	dropped
Size (bytes):	275720
Entropy (8bit):	5.545073912387705
Encrypted:	false
SSDEEP:	3072:KFIp9SXNKW4stdM9C0x/i82uBcO9yyqo5/Aux9SEgpix72Dej7q1i:0IGKladqD2vO5gbcx72Dej7J
MD5:	271326D84F1D1CB5D3577B9046F3A26A
SHA1:	1C0F2E14C6557B91CA9DD36E11A5912ED059C143
SHA-256:	735CA315C67E995CAF1582321806DD9FD91EC50C397B49B07BA32CAAE0CA21EC
SHA-512:	F965FD0E7B484A7052F3CA2223FB418FE0E33273B17589E1BEB427CAF678DE3A187016CC2444F6FAB231FAEC0EE231749F3D2F26B63AD4A1E64175A94A8098F6
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":15,"vtp_instanceDestinationId":"AW-16671369731","tag_id":9},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.985573682297667
Encrypted:	false
SSDEEP:	24576://84vI04xgDVOOgDn3rXOKfHkmrQ7uXpfcApWVaU:1d4x0VOOgfXjftXpfcApWVF
MD5:	3CA4C6B4A317FF7BD396A488BA6CDFA5
SHA1:	17DAC3AF5E0FDFD7654437F51A33D3FDB1A6326C
SHA-256:	4B051E75638D7B9FA6A14D0BF2F8CC415B8626E2E68CCA5DC5BC03C52787FE99
SHA-512:	E0579E7B41B60F456335211CABF599544F842B3E68FA31B6E563A868E15828AB9085489F96D1FDA083E2A86123C637026851FE0C69DF038BC510BE62F9917ABE
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0:2f8280a041b4fa:3
Preview:	Ve.~. .8e......\|.U.<..>.......:.n....)..t..-..-.^y.zQ..Xu..\|U..F.L.2"-......S.Jo...........<i...La.S>7v. .1zBf....VH<.....v...ej...)_.nG..q.=.Q....J...<...8.3..8....}....d..>.......NM.._...T\.]..0E.......}g......0...e...c1....1.%=2.x6y.b..k...[..&.6\|...pK....[...O.\|..J.....].f1........L.._.?.m.78<.....?..ha..9.~..........!l...y.n..........d...l..=....+%.;.P.......{....+../...6.=...............5lc.p.K.W..w.7..-.T49...L".....i..{.c.O....kRY...)..3.?.,+,F?h8n.<_.0.9....CM4.L4.0...L&.a..C..S.o..~zB.s........c..o....26.....Q.s..M..~.n....8...D..?y...!%..#.)mH#62`T.S.T.-2.`......LY.~...Vo......c...(....>b....N.A./..(v.......e....p.V.\...J.a....Q....~..xc%To...[].#u.(...X71.u..8.......j.7.wjY).4`.!....e...:..E..U.PF.hT....M..<kj...IY!H.0.....k....`.S.pH.U.}.L.2....._..G..D....+-....\|.8...q>l..BB.`..<(......4zqGU...v.N.:..g.....g.b....#c.....et.K...-.m......N.j.L..)....T.$.Wl...........g...N.G..L.P.H.f.#p..u.j..z_...a.u...\|.;.....\..`...X.d...aJ[?.

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4848), with no line terminators
Category:	dropped
Size (bytes):	4848
Entropy (8bit):	5.811644641707543
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUCyO0ZDtQ:1DY0hf1bT47OIqWb1Tyz3Q
MD5:	AED5DC520E09EA296A1582257D79F399
SHA1:	DD0F9D44B8FD93D1C9FAEFBB3488C7A69373B326
SHA-256:	8289EDE724B488B78F70DCED6277825257FA47871E40B3ED4FCBB9C07E218102
SHA-512:	64BBBB0648D7376AEB2E02BA090918CD75F78D8519CB0BF3820FC916B17D1EDC4B70BDF864360E18C4A9BC94BD8F68733E8066FB362CF952797A2C5E384247AB
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	dropped
Size (bytes):	841
Entropy (8bit):	6.385904854769975
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3y:NYw9YMnrfuERAM
MD5:	184269A476EF97FA6D670EA2CA4D037D
SHA1:	D8E97E3EFA57589F54C244B905A0B9230E5EAC5D
SHA-256:	B324C78FCEC3E2FBF478690662D85A166D0E0CF3CD460652356E5DF253F96043
SHA-512:	4AFE6AE5466EC5994790006AD23730F9CBE3E0505DEEC2085FB089D10233BE3DA1144BF3DB9745A3ED22E0162E2E8F9945230912D49D2B150C5F47BC68EE576F
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...s.D.JW8..@n)..#5..T.Tba.a..;.o8.EO.'.=.O..

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	742
Entropy (8bit):	7.646729352898657
Encrypted:	false
SSDEEP:	12:6v/7XCGaeoEeO/ZJFARch9G6IUaa/FAWE9fIcl11mAgqyOwsxOsB+ImRKfAUq:9GuEeOR3Ie+WgfplSVJOZOsB+hu0
MD5:	7956E14FA87F2606F951A0797DA1ACAA
SHA1:	80483AAE5DC3608F1B60FFC0FD09E8753E1B456D
SHA-256:	AB110D1D7DC82BC51644D30B5B8979855251F95645C36A559AE0412303243254
SHA-512:	1A0EB5F282FDF3ACF688048987E5B5BD9F15BF211B8060AD71F3F7CF4CE12A04DB8DBF29F9BC71D4615790F36AA67DDBF52E729D8E63049CB27043C64F4FB6F1
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild6634-6437-4332-a261-376332653038/-/resizeb/20x/Apartment_2.png
Preview:	.PNG........IHDR.............b.......pHYs...........~.....IDAT(.E..r.0.Fy..j.'i..Kb......!...I..Lg....A......2.h;.z.Z..../A..a.H..-H.@(.....Bw {.....zk!....f..@.9......-.@.\.#.u.ms..V@Y..S...S.x..........<T.A..:=C...i.U....M.B..@h......Bo.....2..9...u..E...{.^.b.q~.<~.s...\|...5B.....)...-.` ..fw...8".A..+.6_ .........'(.,.P.94.BK.T...+.............7H^.....s.B.=.yq.Y....XB.@v.(.v..v..7Ih.m(.....sH.?a.p......C.nC]..Yh.20N..<(..6}0v.Q/. I...>T.p~.G...d.....^P..} e.(9.F.R.J..w..&.....Q...*.$.z.......{./._...7..e.Y.yAK/..J1....h?.......-.js.P...d../k.%....UG'H..+]'...^K7..5n.......V/...B.......:Yx}\#.dQm.{..z1.....5j...L.Y..]..iy.^...b........l$.. .Zcp..Y.......e4.u...e..4.._.../9.og.^.a....IEND.B`.

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (20670)
Category:	dropped
Size (bytes):	20692
Entropy (8bit):	5.281578187857137
Encrypted:	false
SSDEEP:	384:4n+t+yuz9WCkhrKRUp6o8VYk5qSVnBbMKzkm0oezbllh/RAv4usiyyHhw0t8yzv+:7tduz9Khvp6o8Ck5qSVnBbMKQm0oenll
MD5:	B9B6C7BBFD0941825FF015750ADCA5CB
SHA1:	1FEEC0E4FCEF6CF0F61F0F94CA0029C269652297
SHA-256:	DB4B1532DE361B8AD5DDE84A40AF151051352464D67B75D28F871CB2BE847201
SHA-512:	E23DFB71464FE57768F659956C5FDB5D41B2AC37B89460CDC1DE8D2A383CE706F9EA16508005C8E218543E12EF3FCA0C0C1332FEAA9DCC823F29FB592AC53294
Malicious:	false
Reputation:	low
Preview:	function t_onReady(t){"loading"!=document.readyState?t():document.addEventListener("DOMContentLoaded",t)}function t_addClass(t,e){document.body.classList?t.classList.add(e):t.className+=(t.className?" ":"")+e}function t_removeClass(t,e){document.body.classList?t.classList.remove(e):t.className=t.className.replace(new RegExp("(^\|\\s+)"+e+"(\\s+\|$)")," ").replace(/^\s+/,"").replace(/\s+$/,"")}function t_removeEl(t){t&&t.parentNode&&t.parentNode.removeChild(t)}function t_outerWidth(t){var e=getComputedStyle(t),n=e.width,i=e.marginLeft,o=e.marginRight;return"auto"===n&&(n=0),"auto"===i&&(i=0),"auto"===o&&(o=0),n=parseInt(n)+parseInt(i)+parseInt(o)}var version,version;(window.isSearchBot=!1,/Bot/i.test(navigator.userAgent)&&(window.isSearchBot=!0),window.isMobile=!1,window.$isMobile=!1,/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)&&(window.isMobile=!0,window.$isMobile=!0),window.isTablet=/(ipad\|tablet\|(android(?!.mobile))\|(windows(?!.phone)(.*t

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 10, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	649
Entropy (8bit):	7.612359742132296
Encrypted:	false
SSDEEP:	12:6v/7W0AchQlYw6tACzePG5rhfxekaAgrbDxoAXGb4wSsh74DtetMfntwWbPK3p1:T0AAQGGwhL5pUDxdA4C+t2Cw0PEv
MD5:	F977EEACCC1373CE496DFBFBA6B83D62
SHA1:	872462B246F2044AEBE1D85DF1AF02887997DA42
SHA-256:	CDD3576A15CC68C45D118892E7C248C8ED0AC3E2E8E8ECC367A942D46E0DDC71
SHA-512:	B6366769ACE82DA4DBB6A8B82EB59BC58F7719160D5611F508A9B2222E3F75DB7E170B4B14C8DB895F26D5CC6BC9A2F7B251E2FC89972C65C8ACCB09E37533B5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............U~.....pHYs...........~....;IDAT(...i..H.@...1...3....-^ ...Hq)=?.M..^dfU....>}.^......6...4._\|...].~.X......h0.7..%....9..../...}..i..a.nYD&zl..:.R.3...#.M.\|.z.....`y\1...r....]..E[Gs..M...l0.&Vz..y....9.!.3J..\......%z0a....]..74.:.N..N..f[y.'T.q.p.C.&"{R.I.,V......X.m.Gw:...hA.'..c6#......<..G5!.#.jc...D^.$.$JW.....>....(..C.\|.%_....r..]...{{..F...q.i<..O..e....!x.p..e.;i..IO..I..X..;......q...-\|I..]..D.:I2..}..?......p.>..}n.H....ee..q.D.....ms...E.$MFDQ.?.....V.../o..;J.y9 ......4...m..........E6'....w\|....7Z...SZ.;".'........jMU.d.=.'......dJ..8.:.................IEND.B`.

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	69493
Entropy (8bit):	5.324372164569455
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwNFHM9ZK0BK01QYTZ02LKVsdmpyKcicys:RIT7ss9ZKAKBYj8wKcHys
MD5:	AC965BBE710F1D3773273B8A52E4FFEC
SHA1:	3FFF6787433B4779625B353220B96676843090F7
SHA-256:	D8A16D20D27F3EAD030550D1D23B7EDB99176C3AACB9117EF4B58C669AB9217B
SHA-512:	C0D2CE2D0913016A0BBFC4B52BAB78DCAF14E13E88590CE189639306ADAFF2E697B8C851660E618FD6377D4174BC6D3623914C50892EB6B3B06EE198E4806FC0
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 11, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	657
Entropy (8bit):	7.592638131375676
Encrypted:	false
SSDEEP:	12:6v/7ybVwzFU7Q91h4/dbleOn9KdR8WwuuOimZCCt5/ukwAHSJnqzgxxmLj+0SE4A:bbVSGI4/2Onw1wFOzZhzwAUIgxYP5n4A
MD5:	7BD264E6DC97844626BA62A29A9729BB
SHA1:	A159776F6B5F02630C345F65E2217950AD7B2A11
SHA-256:	50751F9EE09A069354B2BEA6C3F1AB56C70F95ED827F926B847B1BDACC25F479
SHA-512:	2708F6E7929BA55B86127B4715B98C911A86BAE265DD6D5659919F5420AC232FB63AF25AA51D6F26D6BFB4B4E44FD6D0F0BB31283B75A3E5C49A79EF417BAF79
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild3634-6139-4566-a231-383662633464/-/resizeb/20x/image.png
Preview:	.PNG........IHDR................C....pHYs...........~....CIDAT(.....F.E.....#.G.Vn.^...mql.N......}.<u.X....9...h..5>..W.......Ix.+../....M_........(.n.(:.#.0....t...;~~......D..i ..O.......l...l.d#g..D..t......!..q!.7.. ^?.<..;Z..~.....m)~........(..Vc...GL.4&.4...4.i..2}...q1=..P\.@e.U..UK+..k....:....2f.8y.....y.F........$.V4....t..;b......Lr.ch.b.{.Q..&.y...[:[.'..H!......}G.o.n.vD.N.{&.b.g.T1.1.$......V.)...GT....}.........7.v.<...w.. ....,.a.0H..........j..^%Y......L..J.~.-l..-..c.[Y..$..J.]K....;...$.$.......X..uXs./<.(....r...."./X.^.I..+^....K.eg.L.\|..Z@k.N.,.W<.J._$.gF.I..H...g.....Fi...}....IEND.B`.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	dropped
Size (bytes):	663649
Entropy (8bit):	7.978806501666848
Encrypted:	false
SSDEEP:	12288:8OIZPVAY+JvWePUzg2Qwm57tm9dgEs6TPCazvGqrcg31aMkstanFsZlZ:uZPVCeowm57tm9CB6jjv131aMQFsZlZ
MD5:	D908E43936DEC746FE9B34E649E83B74
SHA1:	A888FB6811854EADCA0807090E0BBA40FE5753D1
SHA-256:	A8F054F7B87B9403086BA08BB5AE480C227951CA7AFBB23F6CCFBE53A563BA4A
SHA-512:	C9A40DB416292E5B885DF60F2A12FE8278FC61D7A18001E71EA8DC413060F3DEC36D6F2ED68D094043B08B2646A1FB1D59B82B4E9E5B063B8481E611D406C5DF
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0.............................................[.........................!1.A."Qa.q..2....#B...Rb..$3r..C....%Sc..4s.Ddt.&5T.'6E.7FUe....................................:.....................!..1.AQaq."..2........#B.3R.b$C4Sr.............?..R@4...'@...U..._.(....\|. ..;X......{.....;.v.Kr0.ld.EBi...<{v.k'x.....c)....u6#\|[ .f.F.UKX...-.!..3\...y!7?<72.....E.8e...H........&......@..l7.m@x.Z.+..b&........8+..#n..(.!".o..@..8.Ca.....lK)._.4.. .m..B...{.....BJ..%..d......]..[z\|.w.Ja]H..M...........;.@U...#..o.R..A.......H.i<[.).r0...h.i8SB..w....,B....J..;..........\|..@5)..K....-.JC_....VS...(1...2....R._.F.......r}..K..U...;...,Lp.R}.....r.$.T...?S..f.....8..5..gQ....1...x...y\|...?.b.'..1/]V.!))....<>.}..Y...77.._._.....,.[.9.S.H..,U..ocRu.n...r......Wb\|I.$....uu..s.l..n~H...}O8.f.F....c...X..8...F)......"....

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	downloaded
Size (bytes):	415382
Entropy (8bit):	7.9774887069111795
Encrypted:	false
SSDEEP:	12288:ZS3c04NUSsQsyoveDtN+dTtrE1lgIDyEpv9InckLhjWyEmfKN:XQQIeJN+FWNeSGdLhjWyJm
MD5:	B70B3C330A9C22A65B4CA39EFF8EAF60
SHA1:	3E5792E06B75674242F6DBF8C48C75E055E1A0A7
SHA-256:	ED4C93016D9344AFD024EF03EAC53F7534FD3F3F557B42438BB4B8399538EF35
SHA-512:	8BADD4789F670072D089A9F5F6C95179D725DBC9BECE45C9E9EB800DF4A571F3A189D4ADC565C10542C8194E5AC5672CECEC1ED3FA38FC061B2E2B31068044A4
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.com/tild3435-3763-4564-b634-373233303864/05.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0.............................................e.........................!.1.AQ.."aq2....#B.3Rbr.....$s.......45CSc..%&DTdt.....'6Ueu..E...7....V..................................:.......................!1.AQ."2aq.........#BR..3.$Cb.%S.............?..6..l.1@.8....1..1E....J4.P.. ..4.1..bq#...iR).D{..a.sE..w0.E...XQA..Y...........=C..Rh......D.)5,q$1.SeP..\|..-#LB..i...4j.$m.^.jD8...4.bV.0..jh..pjT>E...c......G....X..P......(V'.<..j.. .....Hv4.4...l..DX.I.(.S...H.<Qa...<...g.i....3J.6\|.XP..1P.qN.Bm...0.h$U....qR48/.X....:.h....^j.....ei......D.9.P...)...DDQa.]....CL9.P.F4[G.I..:6e..Qm..ii..2i.L.@(j..<TQHk.h.#.Y"s.C..I...>U%!J.ZC.G.(.....Q. ..R%.!#.T...qI...pjZ)2h..z.Z.h..1.FjYQ&.T..s@..Qb.0(.).c..,...!.,sUdQ&jl..x...H.......R$;P..Hv......._.......1......8...E.b.`F..hn.P...R.A..c.4.i..b....X...z..

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22513)
Category:	downloaded
Size (bytes):	32486
Entropy (8bit):	4.8913749088134
Encrypted:	false
SSDEEP:	192:zIMrrlxFsWzm0BCRgzsBKVwx9hecxYMD4Gq41olzDDqnOou03oCZyVyVdQgzmboB:3rrds0QNtnCXDaOoJ/8ahRPgArXYLY
MD5:	C7F810CBB69F2B4AC5378BA517E1A23E
SHA1:	CE4C09314771FBF70FFA88AC8205A50BD004AD63
SHA-256:	25DFD729D51F8AF213D89282D53A133D8DA17ECCE921DD41E4408010811336C0
SHA-512:	FAD07DFE5FED8D2B72A9B0E959147CA39363AA6350E388B04DE7875403DACFA4C05B3B1641DD42D4A2EC18E9CC479A658D3883501E8EA600D8CC16B793BE11C3
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/css/tilda-forms-1.0.min.css
Preview:	[data-tilda-mode=edit] .t-input-title{margin-bottom:0}.t-submit{-webkit-appearance:none;background-image:none;background:transparent;border:0;box-sizing:border-box;cursor:pointer;font-size:16px;font-weight:700;height:60px;margin:0;outline:none;padding-left:60px;padding-right:60px;text-align:center;white-space:nowrap}.t-submit_sending{opacity:.5}@media screen and (max-width:640px){.t-submit{padding-left:30px;padding-right:30px;white-space:normal}}.t-form__inputsbox.t-form__inputsbox_flex{-ms-flex-align:start;-webkit-align-items:flex-start;align-items:flex-start;display:-ms-flexbox;display:-webkit-flex;display:flex;-ms-flex-wrap:wrap;-webkit-flex-wrap:wrap;flex-wrap:wrap}.t-form__inputsbox.t-form__inputsbox_flex.t-form__inputsbox_inrow{-webkit-column-gap:15px;column-gap:15px}.t-form__inputsbox.t-form__inputsbox_flex .t-form__screen-wrapper_active{-ms-flex-align:start;-webkit-align-items:flex-start;align-items:flex-start;display:-ms-flexbox!important;display:-webkit-flex!important;display

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	downloaded
Size (bytes):	391909
Entropy (8bit):	7.9784993142612635
Encrypted:	false
SSDEEP:	6144:cdrSC67ghyGhVz2PhfcFIgDCWN7eigOf1Gk8CTM2LQLasZPNwZpTDMKYiO8bU6/i:cdGCUGXadcF9Dx7Rg2ZBMg2qWKYxCU6a
MD5:	F9E4550C57F1E9A223D6217E375BA8A1
SHA1:	91B6C26CDFBDA240B29449E9D5C3F3A0F847CB44
SHA-256:	B786E10F835B77BE00E9BF20FF94449719237E762BA173FC99F92286E19A8054
SHA-512:	4AFC7D32EC71306DC076F03C3838BFDBD441463592A97C7AD84D95211A4FFFB7C66CD5D5621D7EFCA9F77C7E139DE2380E3075D290B4582F107B33B7605B220A
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.com/tild3663-3635-4365-b735-393766313137/01.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0.............................................f.........................!.1."AQ.aq.2...#B...Rbr...$3...%45Cs......&Scdt..6DT....'7EeuUv..........................................:......................!.1A.Q."a.2q........#B...3Rb.$Cr..............?..............-........e[%.1dv..N#..y..0..."q.b"..g.......U.h.drT4......P.5."...P....Vh.8T(.T..)D...EL.Vx.R...z.....Ja..D.c\|Z.I..%8..<J.9..J%.>)A1..R.XC..[..T.c...E@,P..9.F.....".5.3.....]T.N'....g:... .AP....P.e\|...L%...9.V......Z..F(....r...?....Q.B.4 W#4..1....+FG...e.I......\|.4iH..+4j.[..,...y.Q..r)B.J.4.....z.Q.B..j..gaZFB.4a.c.+.:....D...W..2sy=+I.l..5..3.lU.6 ..#.@.7...K..8...Nc.Pj8.H...+.Q.1..T.....U"q..ib.T......@z.}3Qc.5>..-.hT..L.H.B.k.drq8.".f(pSR.B.K-.Pj...d...+........A3.85...?nk6Pxu.3G7.....a....`.h.$.........,A.J...P....AC.Nk6i#....5.8..@f

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	8462
Entropy (8bit):	3.928002989386659
Encrypted:	false
SSDEEP:	192:Lqc+7porEPXy7GyQhmf3rd76ZBr8bS6xFcDmK/:/+RXfa9SBg2RmK/
MD5:	A693859B36771EC847891B56847624D8
SHA1:	EC5C9ED3834F5872E83A159DD268D25D2568BF29
SHA-256:	0F1455C85554D00C0598AD922F44678EC681F11D39E8ECD91959CF87671231AD
SHA-512:	0BCFD19618C841852B7932424DA55D9C2EA28AE1B3B84685AF89BE06BADBF3841642E43BB1ED540774ADE29EF82591E1B5C79051917E97728D63D0256EBBD197
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="1092" height="294" viewBox="0 0 1092 294" fill="none"><path d="M262.4 121.116L236.396 90.228V82.836L262.4 51.948V72.54L248.936 86.532L262.4 100.524V121.116ZM233.888 121.116L207.884 90.228V82.836L233.888 51.948V72.54L220.424 86.532L233.888 100.524V121.116ZM264.945 126L285.141 19.08H312.069L332.001 126H310.221L306.657 103.428H290.949L287.253 126H264.945ZM293.061 89.304H304.413L298.737 47.592L293.061 89.304ZM338.044 86.532V72.804H372.232V86.532H338.044ZM383.55 126V19.08H407.178V62.376H423.678V19.08H447.438V126H423.678V79.272H407.178V126H383.55ZM489.065 127.584C481.057 127.584 474.721 126.176 470.057 123.36C465.393 120.544 462.049 116.496 460.025 111.216C458.001 105.936 456.989 99.644 456.989 92.34V52.608C456.989 45.216 458.001 38.924 460.025 33.732C462.049 28.54 465.393 24.58 470.057 21.852C474.721 19.036 481.057 17.628 489.065 17.628C497.161 17.628 503.541 19.036 508.205 21.852C512.957 24.58 516.345 28.

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21814), with no line terminators
Category:	dropped
Size (bytes):	21814
Entropy (8bit):	5.174646881426465
Encrypted:	false
SSDEEP:	384:SjrO3njSvQ/+EL7z5fyr9vLwD2mTxWCjkB/VVS4ZytCbQike5fny6p6Cj5GgOHGd:P3njSi+EL7lq5bCgDZZytCbmyGgOHGpb
MD5:	CEB2B0DAC4DB47594ADF521051DD14B6
SHA1:	7BDA1F4E5682496C41730F3A536EF37077F64C2F
SHA-256:	935FB0225D2CE45B0550EDC8F5025A7274AF8261A5A2D8FABE57F2219F387112
SHA-512:	6F19B2FB88690BE0256BBCBFB4B636A896EA892F499F1EC7874B1BEA9100851CC595974837D0072BDCA547C3010BE7DBD9D3C89D529766BF6E7179EE7AD8185E
Malicious:	false
Reputation:	low
Preview:	function t_submenublocks__highlightActiveLinks(e){var t=window.location.href,n=window.location.pathname,o=window.location.hash,e=(""===(n="/"===(n="/"===n[n.length-1]?n.slice(0,-1):n)[0]?n.slice(1):n)&&(n="/"),document.querySelectorAll(e));(e=Array.prototype.filter.call(e,function(e){e=e.getAttribute("href");return(e="/"===(e="/"===e[0]&&1<e.length?e.slice(1):e)[e.length-1]&&1<e.length?e.slice(0,-1):e)&&(e===t\|\|e===o\|\|e===n)})).forEach(function(e){e.classList.add("t-active")})}function t_submenublocks__addEventsDesktop(n,e,o,u){var s,t;window.t_submenuBlocks__isMobile\|\|(t=e.filter(function(e){return e!==n}),o=parseInt(o,10)\|\|0,n.addEventListener("mouseleave",function(){t.forEach(function(e){e=e.closest(".t-menusub__menu");e&&t_triggerEvent(e,"submenu:mouseleave")}),s=setTimeout(function(){t_submenublocks__hideSubmenu(n,u)},300)}),n.addEventListener("mouseenter",function(){t.forEach(function(e){e=e.closest(".t-menusub__menu");e&&t_triggerEvent(e,"submenu:mouseenter")}),s&&clearTimeout(s

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Category:	downloaded
Size (bytes):	33092
Entropy (8bit):	7.993894754675653
Encrypted:	true
SSDEEP:	768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5:	057478083C1D55EA0C2182B24F6DD72F
SHA1:	CAF557CD276A76992084EFC4C8857B66791A6B7F
SHA-256:	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
SHA-512:	98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....\|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...\|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..ruM....[.....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..\|..%nEE.....+.x..7\|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......\|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8\|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4889), with no line terminators
Category:	dropped
Size (bytes):	4889
Entropy (8bit):	5.8107634772994645
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRURyOHutH:1DY0hf1bT47OIqWb1EyIs
MD5:	C7579CFB37BF5FA7B90971D6737586EA
SHA1:	EA7463B29B35A537750A38E33D4F37276963D161
SHA-256:	865D172F8CEAB325202E46953E304E4CF31D2FAD7D313B08E926695AD5ADA753
SHA-512:	1559BD9E0602DE212910E8BD6B8806D1F99E75F3C619DB3DE9F1E98F0D3930A6A37244D4B8DF4164BCA2A50D7160F05B57BCBC8701C348CEAA5E0BAA1B9298AC
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2162)
Category:	downloaded
Size (bytes):	2163
Entropy (8bit):	4.94586153192999
Encrypted:	false
SSDEEP:	48:8jC0C+yf/Ix8/xvi5W79xf9mlo8DTifWgiDx/MgN3A++//uCWEi77+//7uTI:kLI/1i5Wpxf9miccWgiNw++//uCWZ77W
MD5:	86E0986A26D38270CAB32F67C7290E71
SHA1:	89910871BB25F5ABD09520338E749DE495A1766E
SHA-256:	6FA30765FAD8BFEA2D395AF7D421841D89BE0C0723FD5893B74AEDBD6EDDBE3F
SHA-512:	E38802324B51DBA72BB45E688645D94E290C37447816D789105FCBFD4BEEEEDC8C7BA21F58B2129B97A2F9A4D21F7EDD75B7D4EB2178DB2F5671509239CA2AC3
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-cards-1.0.min.js
Preview:	function t_cards__moveClickOnCard(t){t_card__moveClickOnCard(t)}function t_cards__addFocusOnTab(t){t_card__addFocusOnTab(t)}function t_card__moveClickOnCard(t){var e=document.getElementById("rec"+t);if(e){var c=e.querySelectorAll(".t-card__col");c&&Array.prototype.forEach.call(c,(function(t){var e,c,a=t.querySelector(".t-card__link");a&&(t.style.cursor="pointer",t.addEventListener("mousedown",(function(){e=Date.now()})),t.addEventListener("mouseup",(function(t){var r=0===t.button,s=1===t.button;if(c=Date.now(),!(t.target.closest(".t-card__link_second")\|\|t.target.closest(".t-card__link")\|\|t.target.closest(".ql-undercut")\|\|c-e>=300))if(r)a.click();else if(s){var n=a.getAttribute("target");a.setAttribute("target","_blank"),a.click(),n?a.setAttribute("target",n):a.removeAttribute("target")}})))}))}}function t_card__addFocusOnTab(t){if(!window.isMobile){var e=document.getElementById("rec"+t),c;if(e)if(e.querySelector(".t-card__container")){var a=document.querySelectorAll(".t-card__link, .t-

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	576
Entropy (8bit):	7.484696282795232
Encrypted:	false
SSDEEP:	12:6v/7XN17F76H80/xbjFSNSs6qiL3IsAwgisEC3bOXW:+Z50lpxsUpATi4OXW
MD5:	FBE854FF9F2D24D91958F82DAF3EBCCE
SHA1:	2C8966D4E68F929E315E06A95F5596F3C13CE1B0
SHA-256:	97DD778793A0F1F5D50B1ADDD8972426EE0F254A703585F18BC44D6665A0A2D0
SHA-512:	DFFC1D546546B8DAD61F7E46BD908F1A1903F507706FB0C87F8940CAB92B3B5B3FA75DF50E8EA92FDC040A98F13DF0B349AD5FFB236CBA3D6ECCB44C04CFB170
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b.......pHYs...........~.....IDAT(.U.Y..0..}.[....%[.L....\|.H@@..3.~\|....xo..........*..p..K.r."...F.6x6!Ll........E..5.V......%.N.s.....[6@.....nJ.~6.o..V.A.BP...-.`8z..iv.X..H.XL4.kXB..G..!Q.....G'9X..,l...(......Z....t...b..u$.l.....N=...k...O.`./~._S.O8....6..y$.Ovg#~..J.Y..........+4.zt....(.^O.+....P.?)_,..}jg.....ZfBBBBB...y.....;...O.@..XHiI.(.V.&O>..9Q...a&L.J4..T@..7....B.5..U."g..Y..S.\2...\O..Y.?..g..L~.&X./...{...b8!;sN'..c.;..I{+.#m....s.C/.<.=.)%..k-...Z..g? =.m=......J.....\'8Z[...c..7....z.(Y....IEND.B`.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	69493
Entropy (8bit):	5.324372164569455
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwNFHM9ZK0BK01QYTZ02LKVsdmpyKcicys:RIT7ss9ZKAKBYj8wKcHys
MD5:	AC965BBE710F1D3773273B8A52E4FFEC
SHA1:	3FFF6787433B4779625B353220B96676843090F7
SHA-256:	D8A16D20D27F3EAD030550D1D23B7EDB99176C3AACB9117EF4B58C669AB9217B
SHA-512:	C0D2CE2D0913016A0BBFC4B52BAB78DCAF14E13E88590CE189639306ADAFF2E697B8C851660E618FD6377D4174BC6D3623914C50892EB6B3B06EE198E4806FC0
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/3778676962456122?v=2.9.170&r=stable&domain=aholding-croatia.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4797)
Category:	downloaded
Size (bytes):	103327
Entropy (8bit):	5.523431433350663
Encrypted:	false
SSDEEP:	1536:saZI9bDGHRCOtBiziXx9oUTr6FWWcK+6GioSGtUn15CYdg7yND4fv7vQbo3mF2rG:BG15CYdg7yND43kboWF2rcvCPldct2Q
MD5:	92E67A35ED3773E4B5FC1751908D4958
SHA1:	9BEC72D54AE56D27AE2BC64EB2465E8556FE47E5
SHA-256:	E78381B8A861864A73BF72D5E56CD8F2EA9FA4897F27CF89014B5DCB14EA0CF5
SHA-512:	AB405A5F021EA198ADA81CCEE35CE64951CC2DF73A1A70F1B32B2F5FCF4EA08BBDFC9D48E89FB139A202399171E76258181BCDD78469BF8FFD9411E1952C993B
Malicious:	false
Reputation:	low
URL:	https://aholding-croatia.com/
Preview:	<!DOCTYPE html><html lang="en"><head><meta charset="utf-8" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0" /> metatextblock--><title>. A-Holding Croatia - Open a new chapter of your life in a premium residential complex in the heart of the Adriatic</title><meta name="description" content="Competitive price . Modern design . Premium-class" /> <meta property="og:url" content="https://aholding-croatia.com" /><meta property="og:title" content=". A-Holding Croatia - Open a new chapter of your life in a premium residential complex in the heart of the Adriatic" /><meta property="og:description" content="Competitive price . Modern design . Premium-class" /><meta property="og:type" content="website" /><meta property="og:image" content="https://static.tildacdn.one/tild3632-3264-4562-a338-656166656465/logologologo_1.svg" /><link rel="canonical" href="https://aholding-croatia.com"> /meta

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.990837041576672
Encrypted:	true
SSDEEP:	12288:O+mJOtW5mtbGPjnaLtSbCqbI1ZUBCjPzMlHeyzjdRfNHtBOjctE6cFn3XfMNqPZ7:TBW5mtbGPUSbCuI0BCPMlHTfBOIc1ivS
MD5:	6584413909C80CEBDECB3DD7A23ADF67
SHA1:	9AE5527695CB660326D44782CFB09CE5BB3487FD
SHA-256:	AE9237AD26F2369CDC127F0770FC32FB546592ABF7C47D6FB349A34D25626A2D
SHA-512:	08106F812274231F12A102546557A6E7F69F79CB7FD6770ACB3D2E50A700D0624276BB8CA9BB1E5FE3BA8C89C6A06201EBC5B1303B22C2919655D249884198CE
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0:2f8280a041b4fa:4
Preview:	+.gp.=.:.rdZ.....{.).<.V.3...Qa.$..F.-..r.).o.Q.}..../]._.=...wj.sD;h.?.._C_..G.A.g.g..f....N..(....F.../..5.V..$X1..A0b.m....h.K/..1M...z....a<....U]..!.. }k...%...O....Z........ .K....r.c.....nI.U.m...S~..#.M..y.....i.d..n.....q..y.U...n.>.A.....B...m.........?w..S.....=.}...&....P.$#+..7w..J.z.[.4P.5...._..[..L..\MRt6.....[O..^.hb...~..'r...V/.X....._.-..e..K.~...@..jC.h.O......q...U.x.8...&:.x......-.mI\|....}e...z.W.d.../..A.....V.F.....q#....9....~?C.C.=.)..@.s........ 6.....Rg..G%Ke..v.......G^...v.>......ak\|...[I.9...aK/...M.6<.E.D\|-o........}n..#..=.=.LX....{.Gcs......ld.{.q ..6..2B3n+g../.....{E.7j...D......j....e.C..`..@.z....kL....[....l.%#...=z.e.!{.%.$..6B..?....f.8...>,g.....k....W..........^l...]A\N../#../....@......Kk.1........(P^'.L?.<..p.z....`z.k...1F.).r.B>'...o....4J....PL..._.....{.M.7.....9..._....Nu..7.F]a.7bnb!.)..j.....W...8n..Ll.;./..U...:BK..{...E......... R<X..B@E.B.S.z5@..7w....,. ...97vJ:..wqO...

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	4.805116777488779
Encrypted:	false
SSDEEP:	3:OSunScocq2dl4NDfLK9GUpYkn:ONSodlULKkC
MD5:	A7D6E6D30E05E16FE5F8179AE139D1D3
SHA1:	E3391AED50BB8183FEC14CEC3C9AB8C76FE9A9E7
SHA-256:	1734C22EDAA44C5BC8F0E02157A3653531A469DD16B65E5993A11A3F05AE8DC3
SHA-512:	979810A3876008A9FEB76CEE7A09CB5D025C4A7BA9F070EB4B1AF841277C88CCEAF5FB96D008A58600F26C2FE71D5265C54EF5EA0F65D3E0F2293ADB67D3EAAA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmrqyFp48hdpxIFDZRU-s8SBQ0SD_xqEiUJsEidL44_ey4SBQ2UVPrPEgUN1AuhTxIFDQ-obAwSBQ0xPZQwEhAJMVWNd1BF7DgSBQ2UkJL6?alt=proto
Preview:	ChIKBw2UVPrPGgAKBw0SD/xqGgAKJAoHDZRU+s8aAAoHDdQLoU8aAAoHDQ+obAwaAAoHDTE9lDAaAAoJCgcNlJCS+hoA

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1031
Entropy (8bit):	5.088584697656694
Encrypted:	false
SSDEEP:	24:2dVh5ATLf3KUI7UwCU1UypT1LS6cr2jYlN0d6a:cVfAvf349C+rg6K2YN0dl
MD5:	87FBE1DB74A2D2EAC711CD7A5351643A
SHA1:	2B52884B3A0F24BE3029BFB25E8759A019F74972
SHA-256:	7F013F9EBA970EA26B35D861398238153EC72ECD2A294A85F50B896CFEB5C1ED
SHA-512:	C8D67AAC0F53ABF2B932AB3BA5838910D2D65B4563D788405496B04AA4CCBA20CA4717FC48F9258A6CC07ACF07D5D083D2D7E9C929A2FD3E28E14D5126020596
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/lib/tildaicon/63316563-3530-4438-b236-386566363465/sn_youtube.svg
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>. Generator: Adobe Illustrator 21.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 98.624 98.624" style="enable-background:new 0 0 98.624 98.624;" xml:space="preserve">.<g>..<polygon points="43.716,56.528 58.987,48.427 43.716,40.49 ."/>..<path d="M49.312,0C22.078,0,0,22.078,0,49.312s22.078,49.312,49.312,49.312s49.312-22.078,49.312-49.312S76.546,0,49.312,0z... M76.845,60.797c-0.657,4.16-2.668,6.419-6.897,6.897c-4.726,0.534-15.352,0.78-20.075,0.78c-4.887,0-14.771-0.205-19.705-0.616...c-4.241-0.353-7.135-2.722-7.718-6.938c-0.424-3.07-0.698-6.719-0.698-12.521c0-6.459,0.233-9.192,0.78-12.11...c0.781-4.164,2.769-6.181,7.307-6.65c4.762-0.493,9.264-0.739,19.336-0.739c4.924,0,15.54,0.255,20.444,0.698...c4.283,0.387,6.696,3.007,7.225,7.184c0.369,2.915,0.698,7.088,0.698,11.577C77.543,56.24,76.845,60.797

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	326948
Entropy (8bit):	5.599738724655522
Encrypted:	false
SSDEEP:	6144:n4eYIGKlqXU1DMvO5K1x72Dej7rsNFVVl2bT+lBf:4eYwUXU1nlgT+lR
MD5:	043C072214E1C21DB18FA0C833B20922
SHA1:	F62009EEE3EF131CD2F74F8F78E1763EFA39D064
SHA-256:	A2D033F7B80C86A7F6B8AAF55A4AD88C16B9D8E3C48DC818519F908CC54F8686
SHA-512:	E028C851771F05D50E94B8028B81E47A71A3544DAEB414A370A196AA3EC0EB976F74B3236E87E431F66108977DB552D086B762B6892BDD8D4E4C551EE47FF54A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-CGEP7SS3WP&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18130), with no line terminators
Category:	dropped
Size (bytes):	18130
Entropy (8bit):	5.106536452087786
Encrypted:	false
SSDEEP:	384:UFeo0Q6FBje1cRYBT56oHmeLYqR3r4r8rmro1sJgKVt22e8PT3gW2kT7U7m727Mo:Yeo0Q6Fxe1cRYBT56oGcYqRr1sJgKVtq
MD5:	B33C3652B63C09E802CEA22EADD1C3CD
SHA1:	48BBC48C018E198A075FE1EFF5D9B73CC2B1FE40
SHA-256:	F28EAFCC73B9C461F0FF0B8DC6C8765E0F21732B177ACC75154ED0722F038CE6
SHA-512:	F344D46F08A2309B21FFCE57004712EEB41523DBE248B6D6AC865216A8728FECC8768F033DB866A738A3C46F1A055786067073C27FD94A713676F3A212057930
Malicious:	false
Reputation:	low
Preview:	window.Tilda=window.Tilda\|\|{},function(){function t_events__initEvent(){var myNav=navigator.userAgent.toLowerCase(),isIE=-1!==myNav.indexOf("msie")&&parseInt(myNav.split("msie")[1]);if(8===isIE\|\|9===isIE){var btns=document.querySelectorAll(".t-btn");Array.prototype.forEach.call(btns,(function(btn){var url=btn.getAttribute("href");btn.querySelector("table")&&url&&-1===url.indexOf("#popup:")&&-1===url.indexOf("#price:")&&btn.addEventListener("click",(function(e){var currentUrl=e.target.getAttribute("href");e.preventDefault(),window.location.href=currentUrl}))}))}try{var allRec=document.getElementById("allrecords"),allRecCookie=allRec?allRec.getAttribute("data-tilda-cookie"):null;allRec&&"no"===allRecCookie\|\|Tilda.saveUTM()}catch(e){}var records=document.querySelectorAll(".r");function linkClickCreateEvent(e){var targetEl=e.target.closest("a.js-click-stat")\|\|e.target.closest(".js-click-zero-stat");if(e.target&&targetEl){var virtPage=targetEl.getAttribute("data-tilda-event-name"),virtTitle

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4461)
Category:	downloaded
Size (bytes):	140210
Entropy (8bit):	5.479632229120358
Encrypted:	false
SSDEEP:	3072:xm15CYdg7yNDBjSC6vljPZTgIcEwY08EMIvljPmdk2c:QsmAad9IgIcEwY08EM5dk2c
MD5:	52014A76E1D9BCCCC78987F7E5E841CA
SHA1:	CCC36989D5851CABBAF54012BA7997A9FCBEA343
SHA-256:	640213AE2C889EEF9EA01EE2F5FD4EB1C6BF96CCB2CE06E195444FABB70C4407
SHA-512:	15F52F53D8847962F9403F6899859AB871CA4D8F697B06774435100F7AB5A8CA59A4AA807CEF59E1CAAABFA9ACB87E51B711499E61B66553BFC3B5B00DA90C7F
Malicious:	false
Reputation:	low
URL:	https://aholding-croatia.com/cases/privlaka-relax-residence
Preview:	<!DOCTYPE html><html lang="en"><head><meta charset="utf-8" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0" /> metatextblock--><title>. Privlaka Relax Residence - Open a new chapter of your life in a premium residential complex in the heart of the Adriatic</title><meta name="description" content="Competitive price . Modern design . Premium-class" /> <meta property="og:url" content="https://aholding-croatia.com/cases/privlaka-relax-residence" /><meta property="og:title" content=". Privlaka Relax Residence - Open a new chapter of your life in a premium residential complex in the heart of the Adriatic" /><meta property="og:description" content="Competitive price . Modern design . Premium-class" /><meta property="og:type" content="website" /><meta property="og:image" content="https://static.tildacdn.one/tild3166-3333-4163-a661-383766393661/6.png" /><link rel="canonical" href="https:/

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	downloaded
Size (bytes):	846
Entropy (8bit):	6.3962662568766655
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3lfa8:NYw9YMnrfuERAba8
MD5:	795A377AB8BF197FC4D1B1E99DCC424D
SHA1:	D83C4DB0FB0C97B5DD910D10E4A221AE4F339C56
SHA-256:	4A8424724A0E0AF6AD7A8A9845D0A33B5225DF06B8483303CEBBC4FA1B6DD955
SHA-512:	4FC2806FA4586CE9C872CBDB8664C393B92A043130EDD98F85C2A1F5B6677FF8F53D910F9DE3ACD327D07A3B4DD4E90FE72BE63F5621EC5C38D5825B2D7F64A3
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild6561-6166-4166-a138-666434396361/-/resizeb/20x/11.jpg
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.[{u`.8.U=6Ff.5.A..c".T.[...9.`zQ].[.....>.{....

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.993959498549324
Encrypted:	true
SSDEEP:	24576:deGI4rocacyLJ+A0GpQmlH5iL8i/+7VXFKaxJMN:LIuocafLJ30yi4i/yNzMN
MD5:	6CDEF242A6B0C16BD3BA4ABE66090962
SHA1:	47D216C0363CD596ECF64EABCD4802D62A0BB4BC
SHA-256:	6954CCB054076D88A1F1380EF07345BF3B2208B83538F7715CC02953F1732F03
SHA-512:	13CAF78716D6F5FA5D8070B2FE125952E77A70A920633CD1DAA4C33E92769C8A66E97FB45E281E4D70A64C886A9123E9CDDD4B335EADC62B592A3E396214C4B4
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:d
Preview:	.^...>...O..BS...Q..~1.#,TzB1..x!b...b.b.RH./X..a...b......e.%G..B...U...-..8.F.!%2..F+.8X.EQ.i[.k..MR6).:.....9W.\7.&3x..t....B$....2u.j.F.}^........M.c...#.n....'..jA..fV.tN.....q..PG.Uc:.v.7....7J\|.....j.....\|.i..xmwZ.;..9q..Qd....Vc.e........a.y.o.3.5. kF4D..b."?...l..P...(...h....1'e...o..(@$.).W..5V1IK.C.....T#x.2v.7..5.-kae.$.....FH..:'...c.+_dI.G....b4x..M...(]/...t.@.@..=.~c.@..(>..Iq1.........~/..^L..wMNV....!44.z.IO.8_.!..b.......xN.4.u.Y...Q..s-.4.(.[...E.4.E1Xk.7..).0..f..NEa.N'-..O^]..pP:.a.y...yXaE~.....uE.E.>s.........\S..o........^3...>..b.<.........N.c5..}.Q..C:5.c..........T.[.o....8..........y..e.p'.:......=Klu...tL...+..%8.J&..E.b...?.q.7j.?.....D.3...k..6f..D......I.W0y.....~u..x..q./..V.8..+......l...~.O"........:.......}..M^.[.OPu.w...Dd>..."..?6l..2...nw8}.l.sb..F.l.......'..Q=..r....X?.A...;=.....eH..D}Ku../H.Re...F4hR^x..[.-.......p.....\..E/.........\|.h...&.uR.b.[NA\.\|$%.S..O.h'q.C..........`.0..u.J@f...._.Erv..Zs...`f.`..

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	downloaded
Size (bytes):	671635
Entropy (8bit):	7.973258752115259
Encrypted:	false
SSDEEP:	12288:KG5Az114HjBx5sdWDd8IPFD9Lyt6koSmvvpzQQAPoUNl:KiAz1AG6dhLyte3vhzlAPog
MD5:	3515CC83E1744E86CBAB80C6D971B213
SHA1:	17DB1871C13D74D02D2872F77D3E82C22A8481AF
SHA-256:	E4EEB9E3058B4109C1AA361994952B73FC52939E7E6F849DE81F886999A35E34
SHA-512:	F513D82B9BAF157FD20EE19406E27DD1BCEC58E045F1DF998243827F28F20F9E45402EF81CD6C727381ACDCC68E0D7B6A25CCDE4242D281EDAAA75511131BDBA
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.com/tild3832-3366-4631-b063-353464373162/07.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0..............................................a.........................!1.A."Qa.2q..#..B...Rb....$3r..C..%45Ss....Tcdt..&'D..6Ueu...7E...V..................................8.......................!1.AQ.a"q..2........#B.3R.$brCS............?...rI.>.#..x...Xa.2.. `..1]...x.I...-....F..hc.I...@##..l..k&.".ac......E.~...8(.k"........0PP..$......I.../..ml..K..>..#f...4;\.......{v.........N.aP..^...V9aqa..*..........?\.8.n,}p..,O8.O.....!.`M...(b.X.6..!....`.H'aa..n?.\|0$....C...1...ks....M....o{ql..%w..0....<``1%x.....c`p..'.v.....~..........k.$}`.n~..VEe.s.8d.#9.\.0P.I..0..p.(b...5.#..!k.......0....n98.1p8.......b..Y....[..c.7....copE..... {`.......~.x....L{_..C.}......)........\|.....L..b.....Ao...G.[.0.]...1\.....d...H....<m...-........6...,p..$..$[.k..7?\.?...w......pPX.~.Z...k.b/.c...8.c..11j.a.C

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	downloaded
Size (bytes):	844
Entropy (8bit):	6.396307717357084
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3m:NYw9YMnrfuERAc
MD5:	98162ECEE43ED9F8F074444AE26357D0
SHA1:	2D89B2EFF8041C8B2420CECAF70D24492CFF284C
SHA-256:	A18FEDEA96D424077C473AEABBF02C299BBDBE31E782BCB3B9CFEFBE880472F7
SHA-512:	403713331E2ED719B97E7BCEF99CC7A45BD48251743594BF019C7832F7AFDAFC195B089F28E466927FDD3136B6B1F15DB11330D2C09D7CD0DDC8622AEAE2EE51
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild6437-3938-4537-a565-646531386230/-/resizeb/20x/Night_02.jpg
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..:.?.T.jK..q.\......2T.&......d...h..X..?..

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (802)
Category:	dropped
Size (bytes):	3308
Entropy (8bit):	5.512922033223059
Encrypted:	false
SSDEEP:	96:f0twGwmYDENtt8rYND1oIPeNrUe7jnCwl6FI1PKt:Vo2ENn8Up5PeNAmjn5lsQPc
MD5:	7951A2085307CD0DA0A5F9C06816A493
SHA1:	765D86DF5A5C7000B8B96345499FFAD77A94E247
SHA-256:	14A551F749D21E8D5DEA1CA07914D30D009E15982EA00B5BA7B44A58D41650E2
SHA-512:	62FE5FF3F1DBD417286F13FA8F88C66B863B349FD729A66451CC9F74C00842BBC6C868FE23E1D8A8918569027CC191BC3A177F8CD38F69F2B804BB5CBD535B9D
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('geometry', function(_){var zsa=function(a,b){return Math.abs(_.gj(b-a,-180,180))},Asa=function(a,b,c,d,e){if(!d){c=zsa(a.lng(),c)/zsa(a.lng(),b.lng());if(!e)return e=Math.sin(_.Ei(a.lat())),e=Math.log((1+e)/(1-e))/2,b=Math.sin(_.Ei(b.lat())),_.Fi(2Math.atan(Math.exp(e+c(Math.log((1+b)/(1-b))/2-e)))-Math.PI/2);a=e.fromLatLngToPoint(a);b=e.fromLatLngToPoint(b);return e.fromPointToLatLng(new _.bl(a.x+c(b.x-a.x),a.y+c(b.y-a.y))).lat()}e=_.Ei(a.lat());a=_.Ei(a.lng());d=_.Ei(b.lat());b=_.Ei(b.lng());c=_.Ei(c);return _.gj(_.Fi(Math.atan2(Math.sin(e).Math.cos(d)Math.sin(c-b)-Math.sin(d)Math.cos(e)Math.sin(c-a),Math.cos(e)Math.cos(d)Math.sin(a-b))),-90,90)},Bsa=function(a,b){a=new _.Nj(a,!1);b=new _.Nj(b,!1);return a.equals(b)},Csa=function(a,b){const c=[];let d=[0,0],e;for(let f=0,g=_.Zi(a);f<g;++f)e=b?b(a[f]):a[f],rA.xE(e[0]-d[0],c),rA.xE(e[1]-d[1],c),d=e;return c.join("")},sA={containsLocation:function(a,b){a=_.Sj(a);const c=_.gj(a.lng(),-180,180),d=!!b.get

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	downloaded
Size (bytes):	841
Entropy (8bit):	6.404733871373563
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3W0g8:NYw9YMnrfuERADp
MD5:	977CEC0F456094CC210F315698EB0B0A
SHA1:	F6EF468C3D697C207E310B46445E433F5FB23B25
SHA-256:	830BDD004D02362AF15152BA77BBC4F1FE5F12D5F61BC016161A9AF4FAD88833
SHA-512:	605E6C255A3567BA7E994811A1BEE7A9CFEFD2D3C2237FA2934F2AA566A8F9330DA7B6D46F34B93999E0F80C9885647A899BDC7FDEF5E1A625C948D590DFA652
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild6564-6166-4662-b430-623864636138/-/resizeb/20x/03.jpg
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..UF<56+..p.]....)]..U.O":..EgF.`.>. .H..

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 11, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	743
Entropy (8bit):	7.696191054852349
Encrypted:	false
SSDEEP:	12:6v/7ybGimmSyNqTtgXcexJwGnCUq00CO+HcGFyx5mlMvS5sL8CbTkyPKw:bbXmkNqTWcT2Lq00CRHc3E5TZw
MD5:	6B1508BF9E806C46A2B7865CED199E41
SHA1:	E00DCEFF6AC34F65B1982B7B582EC51B04D58936
SHA-256:	85CC1DB267CB24FDFF3C1FD1BBD2569EAA6397DB6C2746F841610525CF8CE6A0
SHA-512:	61EBED2567EBE5A07546EF85C30E92BB3E7FCACBF43FE88E342207DA43920CE07DCE071DC6175A1F3DB971656C0B65E81654EAB8A4EEC42CE278188C8D607C91
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild6331-6166-4535-b233-663033316636/-/resizeb/20x/image.png
Preview:	.PNG........IHDR................C....pHYs...........~.....IDAT(...Yo.F......%@...E..h.X..D.l'...$J\....X...E.....>\|.3.g.9..?.K}..../..W..'....{..=....4..X....}......8\| ....8..P.....7..H..y'9.on)..T.#........=...g.?.l....'.0..#.Q..,d.l{G.~K..I....R4;...z..f...JRl.f.!.*\.aF..g3..(.^.l.....l..JR.JDYQ.......j.7.I)..+r..&.F.PQ.$,r....A....q.....H)....T...3.....Uda..h..}...a...<V...:.....xr....}.z.".,$e@Qx2.!..8..l.22.y5<...)..L.V:KW..`.:.c.......DbQd6....i2#.4lGe:.2..r.{.y.....1_J.=L....c-.........pJ.M.t&.N.M..>.u.1=C..A..gN_\|.b.^..K....`ftY....x.J..I.1".P...xD...+.Y..3T.1...<?}..iO.&'.LZ..L.sL..5.Z\...$+...(..y....Wm............w(..c.....p3z.1n1........uE.F.=JiVD.m.hu..<a....#....N.....j$.`s{....IEND.B`.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	576
Entropy (8bit):	7.484696282795232
Encrypted:	false
SSDEEP:	12:6v/7XN17F76H80/xbjFSNSs6qiL3IsAwgisEC3bOXW:+Z50lpxsUpATi4OXW
MD5:	FBE854FF9F2D24D91958F82DAF3EBCCE
SHA1:	2C8966D4E68F929E315E06A95F5596F3C13CE1B0
SHA-256:	97DD778793A0F1F5D50B1ADDD8972426EE0F254A703585F18BC44D6665A0A2D0
SHA-512:	DFFC1D546546B8DAD61F7E46BD908F1A1903F507706FB0C87F8940CAB92B3B5B3FA75DF50E8EA92FDC040A98F13DF0B349AD5FFB236CBA3D6ECCB44C04CFB170
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild3934-3836-4036-a433-333232646436/-/resizeb/20x/Apartment_4.png
Preview:	.PNG........IHDR.............b.......pHYs...........~.....IDAT(.U.Y..0..}.[....%[.L....\|.H@@..3.~\|....xo..........*..p..K.r."...F.6x6!Ll........E..5.V......%.N.s.....[6@.....nJ.~6.o..V.A.BP...-.`8z..iv.X..H.XL4.kXB..G..!Q.....G'9X..,l...(......Z....t...b..u$.l.....N=...k...O.`./~._S.O8....6..y$.Ovg#~..J.Y..........+4.zt....(.^O.+....P.?)_,..}jg.....ZfBBBBB...y.....;...O.@..XHiI.(.V.&O>..9Q...a&L.J4..T@..7....B.5..U."g..Y..S.\2...\O..Y.?..g..L~.&X./...{...b8!;sN'..c.;..I{+.#m....s.C/.<.=.)%..k-...Z..g? =.m=......J.....\'8Z[...c..7....z.(Y....IEND.B`.

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (802)
Category:	downloaded
Size (bytes):	3308
Entropy (8bit):	5.512922033223059
Encrypted:	false
SSDEEP:	96:f0twGwmYDENtt8rYND1oIPeNrUe7jnCwl6FI1PKt:Vo2ENn8Up5PeNAmjn5lsQPc
MD5:	7951A2085307CD0DA0A5F9C06816A493
SHA1:	765D86DF5A5C7000B8B96345499FFAD77A94E247
SHA-256:	14A551F749D21E8D5DEA1CA07914D30D009E15982EA00B5BA7B44A58D41650E2
SHA-512:	62FE5FF3F1DBD417286F13FA8F88C66B863B349FD729A66451CC9F74C00842BBC6C868FE23E1D8A8918569027CC191BC3A177F8CD38F69F2B804BB5CBD535B9D
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/7/intl/uk_ALL/geometry.js
Preview:	google.maps.__gjsload__('geometry', function(_){var zsa=function(a,b){return Math.abs(_.gj(b-a,-180,180))},Asa=function(a,b,c,d,e){if(!d){c=zsa(a.lng(),c)/zsa(a.lng(),b.lng());if(!e)return e=Math.sin(_.Ei(a.lat())),e=Math.log((1+e)/(1-e))/2,b=Math.sin(_.Ei(b.lat())),_.Fi(2Math.atan(Math.exp(e+c(Math.log((1+b)/(1-b))/2-e)))-Math.PI/2);a=e.fromLatLngToPoint(a);b=e.fromLatLngToPoint(b);return e.fromPointToLatLng(new _.bl(a.x+c(b.x-a.x),a.y+c(b.y-a.y))).lat()}e=_.Ei(a.lat());a=_.Ei(a.lng());d=_.Ei(b.lat());b=_.Ei(b.lng());c=_.Ei(c);return _.gj(_.Fi(Math.atan2(Math.sin(e).Math.cos(d)Math.sin(c-b)-Math.sin(d)Math.cos(e)Math.sin(c-a),Math.cos(e)Math.cos(d)Math.sin(a-b))),-90,90)},Bsa=function(a,b){a=new _.Nj(a,!1);b=new _.Nj(b,!1);return a.equals(b)},Csa=function(a,b){const c=[];let d=[0,0],e;for(let f=0,g=_.Zi(a);f<g;++f)e=b?b(a[f]):a[f],rA.xE(e[0]-d[0],c),rA.xE(e[1]-d[1],c),d=e;return c.join("")},sA={containsLocation:function(a,b){a=_.Sj(a);const c=_.gj(a.lng(),-180,180),d=!!b.get

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 934x500, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	151202
Entropy (8bit):	7.998741560096956
Encrypted:	true
SSDEEP:	3072:xPWU3h3La8pGwkPb1u6NNbxEBlRu3GYUDtviiGy7eZTY:fh3RF6NNbxEBTl9VCpY
MD5:	E3A394004AEC9C1A8511CBBCC10FD110
SHA1:	30658E34DCCC0F42440643BE1CACB65537A6D955
SHA-256:	5C145737D9F916D55C832E36F719B1F848A11BCBBC9C201113BC9C9A5432EF2C
SHA-512:	773194DB73973E06A10D52C58DDFCB1761C8861B54D62824CD30007DB7D03AEFDBA3214331B2D3338BE7C7E5AA9D1220B7D0FF064637FCC9D021752A62B87DD9
Malicious:	false
Reputation:	low
URL:	https://optim.tildacdn.one/tild3039-3739-4331-b732-363433636164/-/resize/600x500/-/format/webp/image.png
Preview:	RIFF.N..WEBPVP8 .N..0....*....>I..D"..$...H...cl8.<...e........W.o..YW...7.f....bl.........1.........?...n.C.....k.3....._...}......A.........>..............'...o...........~.{.~........i.....o......m........\|......M......p...;......\|&t......=..c..........M.7.O._.)}...._._.....\|..E...7.o.....~.}.\|...................K...?..............#........[...>..._.........o...3................_.?.}3.i......._i.Q...U.......o......................?......^.........Vj......<..Cs.%.8C.D..\|..gy..D.3)#1...f.;.@...t.y.h..w..I...CU..7.u...a9$..h.n.k..S.?.8V....4.r...Vq.!\|.....y......&.{>...a....2.Fh. o`.LX?.6.YO.>T#a_.w5.6y..e.....M.e...pZ...WG.N....M.YsCQ%......(....C.......{{.y.W+..o5.Tz$....d.x.'...Zry...e....3G.e/.io.(.:$...&-#..4...\oz....TK.}J.f....bC.-)..C..........<...}...&.^<............\|...uV.$...+{ . ....x.8.u..m..O..i...&&..P............T.Y..G5.j..I..>tm;....`5.`......A.s....vEP..Z.U.pwu.......qZb.....+.m..!...@N.\vJ......~.5F...(s.2{..3..U`...^.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1680x1072, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	341400
Entropy (8bit):	7.999342994278222
Encrypted:	true
SSDEEP:	6144:AEjuVTtVhLBzOVrYUor5uFIYgVibh4xFopHzUCQDw3GiY8tNiDJTopceW:AEjuVTdLBz2wIIYRmjGHzfQDKNiDJopE
MD5:	2E038C46573F4742FCB0EC993A8F2B00
SHA1:	C3F1A4FA9ECB33E2F778FD606A23CC4D6218E3F4
SHA-256:	0E568B692B77795E9AD9A3E6C83A1B720A17F555E7B4D67230FF05458F59FEE2
SHA-512:	8055D9008083AACB7B69D1E2A9DC9283D0F16035058C053959F28686DC39E0ED8E301A44038138F1FFF771323ED2425DD587D6C80652B36757E0124A0FD14FB0
Malicious:	false
Reputation:	low
Preview:	RIFF.5..WEBPVP8 .5..0....*..0.>Q".E#.!%(.J....em..?...:..J..J.......~..Ux...../...W8..\|..o..t...............-zG.....>.?..m.a..............36.......O.?..Y.....5.}...q..{p......w.._.......<...m}..^.Y.g...3._./.......................W..D..........................~....l.........O.........................g._...q.................uo........a.s........E...c..........W.o.....?i>B?+............>.........d...o.?.=....'.O.?...../.....}g.c....._............G.....?..............~.?~.M...../................/.......o........?.~....<........._.......y.......?.?......'......_......8..`h....6..Y~..T.L..y.q.......2.{b,.h..H....P..9q_..x.pA.M..:...$H.=..C....i.C.C..MB.......X...R........9 ..Uu..F.(NboM.._..l'..i.f.(..W...TV.1.<...)p.{.Y.~0lm>...q;Q....i..09...5.:..[Tb.aW......p...Y../x..}6.Q.Y...44..'....... Z.r..g}..........T-..#pz...9......Q/...(&..'V.)O.......lA5....Qy.....j}0.eM..{..i....x.u...e>S>.mO\|2.J.i....wY5.....t6.d_m..Z?[Uo.!..Q....G.<...8..\|Je......6.l.u..(..

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11579)
Category:	dropped
Size (bytes):	11580
Entropy (8bit):	5.2213394140527
Encrypted:	false
SSDEEP:	192:w06RNd6acxLpItdN5uCn9goRQ0QJnEWc9eryukKu5n5tVd+8Tyq4/hAgYnxYG6M:0NIpLitp99goRQ0ynEWc9eWukKsTd+oN
MD5:	3BBD00CAB7C5025CAF3ACFCFE9399D0C
SHA1:	D0454ECB7C808EE78E46B580B53F95DCBE7711A8
SHA-256:	C0BF953F634EE3EE3D4737EF22B1C85EEBC147E1A3F96BD4CB519646128F088E
SHA-512:	D9659A4FC3588E700958502DA768B18DE90C7251B6D3FE7D198E5A3413779440DE535AC261005471DA7501EDA69BCF9BD487BB525A812E7E3511106C7A47DF82
Malicious:	false
Reputation:	low
Preview:	function t_menu__highlightActiveLinks(e){var t=window.location.href,n,r=window.location.pathname;"/"===t[t.length-1]&&(n=t.slice(0,-1)),"/"===r[r.length-1]&&(r=r.slice(0,-1)),"/"===r[0]&&(r=r.slice(1)),""===r&&(r="/");var i=document.querySelectorAll(e);Array.prototype.forEach.call(i,(function(e){var i=e.getAttribute("href");if(i){var o=e.href,a="/"===i[0]?i.slice(1):i,l;-1!==r.indexOf("tpost")&&(l="/"+r.slice(0,r.indexOf("tpost"))),o!==t&&o!==r&&i!==t&&i!==r&&a!==r&&n!==t&&n!==r&&i!==l\|\|e.classList.add("t-active")}}))}function t_menu__findAnchorLinks(e,t){var n=document.getElementById("rec"+e);if(n&&t_menu__isBlockVisible(n)){var r=t+'[href*="#"]:not(.tooltipstered)',i=n?n.querySelectorAll(r):[];i.length&&t_menu__updateActiveLinks(i,t)}}function t_menu__updateActiveLinks(e,t){var n=t.slice(2);n=".t"+(n=parseInt(n,10)),e=Array.prototype.slice.call(e);var r=null,i=[],o={};(e=e.reverse()).forEach((function(e){var t=t_menu__getSectionByHref(e);t&&t.id&&(i.push(t),o[t.id]=e)})),t_menu__upda

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.991378886607354
Encrypted:	true
SSDEEP:	24576:2as1JSzGeGSuwI+xXYf9ZeMAbBgNjtShYPqGM8Zn2:gSqeGmIumZSdKt7h2
MD5:	C0D1C370F14A732BC7D254B1E8162C1F
SHA1:	EE9747ADCDBB42EFD9F0B714F2F6C18F274AED4F
SHA-256:	9DC2BB2DBAFF6A0FC6AA51782C2FF5FF77558C6DBE3EA612CEE8498C3FDB1ECE
SHA-512:	0DC8D522617C40329FA3F470D241EC1A5D5C2B14E709B4B08C2528DDAB74A3B11387D088C3615182D513D77FCAC127BEAC9CDBE462C9C9290F3DE9473E771A81
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0:2f8280a041b4fa:5
Preview:	4.............n.....~.8h......p1..Wp..C9B..K.NH.Qt..n ..xD..........w'1OIT.\.:Y...A..y..5`f..d......s.z1b.q<.....]t.;..+.AB...w@.....fe..r{.vB...V....w......k..L.\|.'...cpz..&.J..q..b..5..)..$l.Ch..~..'..l.Y.,...MT10..e.W.C...K>.K....9-(..^.....R.PmFHb@x.H.Vv..M.V.X....j.{.S...5f.L....R..'._...(.DL)..U......Wy8..o.R..4.!X_...y0....+xe!t...,..S...B..M...f..A....#T.....e..>...O.....E.\|..i.5.....M1.....#{.oL.J.k...n.#......hq..G..y.>o.L.H..d.......8UPE..R&cS..%........T..;......:cT\L.p.NS..B.6q.0.....f.liP.\|..3'..R?.....peVD..a).bE.~...8.....H..bEh.t..k..}i.z..r....b...].E.T..M!.P....#..\1VR%.!.rc...._.....7........F....J.......P...X..>.C....(z....-.J7wA)8.n..aN.L.....K.;.5m.r\.c......z@.Z43. ..y....f...... [...D5..)....O{.......O....M.s...L...O.T..k....d...(>u.<4..`.b.u...".k..pl.K......Sj.%...>..1-.=..M0...._.H(-.`cc&%+....b...#yC91A>..........J..M...@6.......6....?. ....r.V..i...J.va..-^.5.a.......04...E(.Sq..=....D..;E.....Ae..pB.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14872), with no line terminators
Category:	downloaded
Size (bytes):	14872
Entropy (8bit):	5.1395903569137396
Encrypted:	false
SSDEEP:	384:XxshurrSmRSS/lpN91CW4siVsA/Q6fWwNPQvYnc5M0i+JWU5Oo:XahurrSmRp/lpN9vA/LWwNOYnc5M0i+v
MD5:	CB1FB0F3D59A568605F978B96D4D5BEA
SHA1:	EF357F187E807F62690B111C2C492A424BA2A2FE
SHA-256:	85FB9529A24098AF140928CFEAE8BE952FDABC885D7DEF896865385A8EF149B1
SHA-512:	FD5ED2949EF5E8272A12ED8A10F9F3D397826EB0E27681E03316F2BE4909D83C6B6C1B2400B7D7D27F7DBEBFF5DDB9FAD148CCAF729BC45DF035E717E236E4ED
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-video-processor-1.0.min.js
Preview:	function processYoutubeVideo(i,r){var e;document.getElementById("youtube-api")\|\|((e=document.createElement("script")).id="youtube-api",e.src="https://www.youtube.com/iframe_api",document.head.insertAdjacentElement("beforeend",e)),t_videoprocessor__onFuncLoad("YT",function(){var e,t={"url-youtube":"",nomute:"",noloop:"",nocover:""};for(e in t){var o=i.getAttribute("data-content-video-"+e);o&&(t[e]=o)}"yes"!==t.nocover&&(t.nomute=""),t.mute="yes"!==t.nomute,t.loop="yes"!==t.noloop,t.cover="yes"!==t.nocover,t_videoprocessor__setYoutubePlayer(i,t),t_videoprocessor__updateVideoHeight(i,r,"youtube"),/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)\|\|"ontouchend"in document\|\|(window.addEventListener("resize",function(){t.cover&&t_videoprocessor__updateVideoHeight(i,r,"youtube")}),i.addEventListener("coverHeightUpdated",function(){t_videoprocessor__updateVideoHeight(i,r,"youtube")},{once:!0}))})}function t_videoprocessor__updateVideoHeight(e,t,o){var i=

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	downloaded
Size (bytes):	841
Entropy (8bit):	6.385904854769975
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3y:NYw9YMnrfuERAM
MD5:	184269A476EF97FA6D670EA2CA4D037D
SHA1:	D8E97E3EFA57589F54C244B905A0B9230E5EAC5D
SHA-256:	B324C78FCEC3E2FBF478690662D85A166D0E0CF3CD460652356E5DF253F96043
SHA-512:	4AFE6AE5466EC5994790006AD23730F9CBE3E0505DEEC2085FB089D10233BE3DA1144BF3DB9745A3ED22E0162E2E8F9945230912D49D2B150C5F47BC68EE576F
Malicious:	false
Reputation:	low
URL:	https://thb.tildacdn.one/tild3832-3366-4631-b063-353464373162/-/resizeb/20x/07.jpg
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...s.D.JW8..@n)..#5..T.Tba.a..;.o8.EO.'.=.O..

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4889), with no line terminators
Category:	downloaded
Size (bytes):	4889
Entropy (8bit):	5.807833915583926
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRURyOHui:1DY0hf1bT47OIqWb1EyIv
MD5:	1106F39557EDAF223DF667320A77E70E
SHA1:	46FD8CD4CF7F98E1C3992A1CFDA6082EAD78F244
SHA-256:	AC640374DFE68604254A701C970D4EF002E263B951EF116FB66620567B0D9640
SHA-512:	47139932385BC7152A90EB18ECF585121DBC6CA2CDC9F68BEE4464F35C6F2A3F1B566C115F0947E731F06D173F064A74742F2BDBF3AEE0AC2987299BAAA6E30B
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/16671369731/?random=1728339298228&cv=11&fst=1728339298228&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2Fcases%2Fprivlaka-relax-residence&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20Privlaka%20Relax%20Residence%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.990608421019668
Encrypted:	true
SSDEEP:	24576:aZgSr0yelio4jf7AbTq0IWYIobYRT0C27I0hbvvXT1/q:jSr0yI6YSDWxZT0CqI0ZL1i
MD5:	0E4F15917F1353F8695F68D49E79A231
SHA1:	0E36D788B8B125C367C3870E8047F5DD6AED01C5
SHA-256:	E21E705F72CAB730D3DEE30CAB1A1EAB8CDFA69AF33E6C6FDE24E85F57CE26C6
SHA-512:	5AEAB455B8EEF019A47BB1FFAC67A5571D28AF5DD085DA5200873235A14664AD923B62D33B759E05F01853B2120C737EBD9257598A040C40074F532C20D2AE8A
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0:2f8280a041b4fa:6
Preview:	d..<.....)O.@.BZ....@....(.......U....Ld...l$_>).}..#..U............3f...........jQ]b...i......N.....f..%...A.&.[0l.....[{....`....@%^...[. ...&.`...)-.w..T.f.E6_.c[..1..8...R1....Y...L..QC.)3b.f.1..f.I.N......b..KrLp_%........5......VD`Z.U....[_......Bk..e.6.Nv1.t..5v.$[..v....R.HjIQ]d..+%;...9Hp.p.K..bH[.O.......X......sS:.,0..U...*.V'............g.../..,...L.........^."-..v+.W...o.c.3..a.4.....R...I..>5f...DQ..\S.;........>.GO...';..\n..Q.Q......j......j....6.m.d.h.,.6...o...z.,.#X....:.aRw..j..$...}.a.Zt..w.e.o.......R.TH.h.N7hY'p...>a.......PK.0..lZb..(.....h.....u.....d5...%.".H"/..T"N...:2A.z...L.P`.!.j.....HE.x.."F.6.3.....DGt2O..>\C.U..k..2..%#Z,6a.....3...F...:..s..c....z..Q.T.J. 3.g..".'iEB..k.1..E"e.\|.{P...O'.0e1{..E...b/.Wy....u..$s....y.jw......a.!.....a...\.]..[..P.n......i....~..q>..r.c...wu.[...R.R.@.B.P....d.$b..RF$........}.f....`.J..`.tX...+.(.nZ..5SR-....J.{N.....H..+.S..3....G.T..Q.CW..p.!...m.......1..o.

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29166), with no line terminators
Category:	downloaded
Size (bytes):	29166
Entropy (8bit):	5.261558456733808
Encrypted:	false
SSDEEP:	768:xpnFKonRx86rNEeAMAt8xb+U6aaQUTIN+atBroJh6ABS67o0N+3r9k9xgatfhDB0:HFPRGM1hbs6oRfc
MD5:	3219F72E19BF2BD476FD7A36BCC53646
SHA1:	AB4CA6CE67B1EBBDD9633083B7EA2E44BAB50D1E
SHA-256:	7BB452D091DE4C4E4997E69B6F28B50C9E7C304AB881903D9FD492D946C8492E
SHA-512:	61C7441B9F35932E35248DC132CAB631EE1E11BF139EC79BF80A39CCAA3A6CCDB93AD0619669B69E46C0593DAE5EEC7B74BD467A54F329FE2A335548E521D44E
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-zoom-2.0.min.js
Preview:	var version;function t_initZoom(){var t,e,o,r,n;document.querySelector(".t-zoomer__wrapper")\|\|(window.tzoominited=!0,window.tzoomopenonce=!1,window.isDoubletapScaleAdded=!1,t=document.querySelectorAll("[data-zoomable]"),t=Array.prototype.slice.call(t).filter(function(t){return"yes"===t.getAttribute("data-zoomable")&&!t.classList.contains("t-slds__thumbs_gallery")&&""!==t.getAttribute("data-img-zoom-url")}),Array.prototype.forEach.call(t,function(t){t.classList.add("t-zoomable")}),(t=document.createElement("div")).classList.add("t-zoomer__wrapper"),(e=document.createElement("div")).classList.add("t-zoomer__container"),(o=document.createElement("div")).classList.add("t-zoomer__bg"),r=t_zoom__createCloseBtn(),n=t_zoom__createScaleBtn(),t.appendChild(e),t.appendChild(o),t.appendChild(r),t.appendChild(n),document.body&&document.body.insertAdjacentElement("beforeend",t),t_zoom__initFullScreenImgOnClick(),t_zoom__closeAndSlideCarousel())}function t_zoom__createCloseBtn(){var t=document.create

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4830), with no line terminators
Category:	downloaded
Size (bytes):	4830
Entropy (8bit):	5.805708073000197
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU9yO2Za:1DY0hf1bT47OIqWb1syFM
MD5:	77C0BC83418F15B1E34385E29D36DB74
SHA1:	8F94BDF715FB0D181A207F714F32CF42326554A1
SHA-256:	EE3689A72E0141DFB73CDC08A7F5D63439F44D7920200AF3F716E1DDA6AE845A
SHA-512:	2DAFA2A9BFA8844E79C43460874E59D347CDA03875BE389B155CDFFB9373BF866D1E1078D7A558C392FFB36408FE9FF57088C0F1FF34FC07AC8CBCF32A388122
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/16671369731/?random=1728339263492&cv=11&fst=1728339263492&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11579)
Category:	downloaded
Size (bytes):	11580
Entropy (8bit):	5.2213394140527
Encrypted:	false
SSDEEP:	192:w06RNd6acxLpItdN5uCn9goRQ0QJnEWc9eryukKu5n5tVd+8Tyq4/hAgYnxYG6M:0NIpLitp99goRQ0ynEWc9eWukKsTd+oN
MD5:	3BBD00CAB7C5025CAF3ACFCFE9399D0C
SHA1:	D0454ECB7C808EE78E46B580B53F95DCBE7711A8
SHA-256:	C0BF953F634EE3EE3D4737EF22B1C85EEBC147E1A3F96BD4CB519646128F088E
SHA-512:	D9659A4FC3588E700958502DA768B18DE90C7251B6D3FE7D198E5A3413779440DE535AC261005471DA7501EDA69BCF9BD487BB525A812E7E3511106C7A47DF82
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-menu-1.0.min.js
Preview:	function t_menu__highlightActiveLinks(e){var t=window.location.href,n,r=window.location.pathname;"/"===t[t.length-1]&&(n=t.slice(0,-1)),"/"===r[r.length-1]&&(r=r.slice(0,-1)),"/"===r[0]&&(r=r.slice(1)),""===r&&(r="/");var i=document.querySelectorAll(e);Array.prototype.forEach.call(i,(function(e){var i=e.getAttribute("href");if(i){var o=e.href,a="/"===i[0]?i.slice(1):i,l;-1!==r.indexOf("tpost")&&(l="/"+r.slice(0,r.indexOf("tpost"))),o!==t&&o!==r&&i!==t&&i!==r&&a!==r&&n!==t&&n!==r&&i!==l\|\|e.classList.add("t-active")}}))}function t_menu__findAnchorLinks(e,t){var n=document.getElementById("rec"+e);if(n&&t_menu__isBlockVisible(n)){var r=t+'[href*="#"]:not(.tooltipstered)',i=n?n.querySelectorAll(r):[];i.length&&t_menu__updateActiveLinks(i,t)}}function t_menu__updateActiveLinks(e,t){var n=t.slice(2);n=".t"+(n=parseInt(n,10)),e=Array.prototype.slice.call(e);var r=null,i=[],o={};(e=e.reverse()).forEach((function(e){var t=t_menu__getSectionByHref(e);t&&t.id&&(i.push(t),o[t.id]=e)})),t_menu__upda

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26847), with no line terminators
Category:	downloaded
Size (bytes):	26847
Entropy (8bit):	5.247573960021826
Encrypted:	false
SSDEEP:	768:nnDb2HWtwgBhwFlU18oilKk5yUrsRpFhEOmHYzqlbVlC1pvuYeME1GnzNzDKEcUa:nnsWWgBSg8nodhm1rYJ/cUOL
MD5:	A37B0F2C48534911150736861C27CCB4
SHA1:	83204E3C372F714CF81D856E48FC15E3C0DA6009
SHA-256:	FBCE4CF91174BC909024140E485E0BBA070CEF92C0733112A9D93C54A0C58B40
SHA-512:	C993AAF927293263937DB527600E0F6B571A6881EBE0D2FDA9C1998A7B90C386846CBE33BFE9208D9DCB03A5F01F7228B04DFF7E07641D91F0A1C961E0BF0796
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-zero-1.1.min.js
Preview:	function t396_init(e){var i,t,n,o,r,a=document.getElementById("rec"+e),l=a?a.querySelector(".t396"):null,d=a?a.querySelector(".t396__artboard"):null;d&&(t396_initTNobj(e,d),t396__initOnlyScalable(),r=t396_detectResolution(e),i=document.getElementById("allrecords"),t396_switchResolution(e,r),t="window"===t396_ab__getFieldValue(d,"upscale"),t396__setGlobalScaleVariables(e,r,t),t396_updateTNobj(e),t396_artboard_build("",e),n="ontouchend"in document,window.addEventListener("resize",function(){d.classList.add("t396_resizechange"),t396_waitForFinalEvent(function(){window.t396__isMobile\|\|n?document.documentElement.clientWidth!==window.tn_window_width&&a&&t396_isBlockVisible(a)&&(t396_doResize(e),d.classList.remove("t396_resizechange")):a&&t396_isBlockVisible(a)&&(t396_doResize(e),d.classList.remove("t396_resizechange"))},500,"resizeruniqueid"+e)}),window.addEventListener("orientationchange",function(){t396_waitForFinalEvent(function(){a&&t396_isBlockVisible(a)&&t396_doResize(e)},600,"orientat

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 896x500, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	74084
Entropy (8bit):	7.997425283807231
Encrypted:	true
SSDEEP:	1536:UeHMP2soyZTeHGxWzWBfD3RnSYY2IndLUi46WuEVjfD0ldYC:1siYm2fdn2dLUmkDQH
MD5:	763ACF33415CED77574B5189D1D7405E
SHA1:	C00E411BE45EAED0824CEDF8FC0FB79DA8EE7E66
SHA-256:	9EDA9C8BA8C6503AD920390EC63BD138F2414392B45671699D6EF3DEDBC38E61
SHA-512:	6C206003435F080B3B29435893D4F7BAA3962071D2DB8561025E3F94146ACDB72A3E4E0DCAD9F57E7977E48C8E4B919151AB10A9162A7507EC090F621256FE37
Malicious:	false
Reputation:	low
URL:	https://optim.tildacdn.one/tild3634-6139-4566-a231-383662633464/-/resize/600x500/-/format/webp/image.png
Preview:	RIFF\!..WEBPVP8 P!...q.......>Q".E#.#.K..8.....V.P..i..gj..V^...]{...>......g.i...}.........tGs....'.?3.r..3......?.<..\|.{.........w.N..}B?..d.....W....=...o.._.I..~.zR.....?.~@z?...............=g..............G.............'~B?(............3.../.>.....O.^...}..O.?.?.?..+.....................".........c.o......?3=.~....g........?....U...G....~....\|R.....Q....R..~.s...%..>...f.X..\B^.i.)U.....F;I..+?....E--.`..z.%.../.<...z.........c).........3.X}x..h..[...d.3..ZDhe.-m.srk.....59...U..%4C,pY.%kT.~.....'.@.&.GF.....iP...R....%..b..-..8.ON..q.i.!....b..a.....W...&1..94.^Y.)......,.R+......(.P!....!.........r..f#..2...e.KX.... te.r.[.}$?..9.7w..q.......P%.)..............F......S...rRag{p.L..F.06..;V..l.e......h.}.T...y.........k.M9D.A.q.......s..gM.s'e`......_r.7cT....l<W:.k0JzN8.da...j._.g;..w....t....}.M,,.P.....GXu.k....O.}.M.[.\|`.69......=.xM.kF......8..T7u:&..)...t.t--....3..8.+...T...E.L.................G..!....w../.C..P5...a.60..Q P.

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1842)
Category:	dropped
Size (bytes):	1879
Entropy (8bit):	5.444499858116836
Encrypted:	false
SSDEEP:	48:kot8we2wBcdh3wrzGggBWMOH4xBs3ZUoeoc32Tg:L8MdhIahEGKc320
MD5:	EA12DEC71E029EBA297D483C7A123962
SHA1:	E07887A24D4DBA4E2E3BA5AABE2CA68DADEA86AE
SHA-256:	E30BE28D85F8DB5566078029D843D227687FD73CCFD6757D37B69B2FC06BF48D
SHA-512:	F71E32C78FE244B32640012F18B54B8CDC19F3D43402DBD814D105133D3D0ED229EC3EC57097CEE96FCB87FC248EAB4EC9E054C097E45186F291D8E3552D8979
Malicious:	false
Reputation:	low
Preview:	function t_skiplink__addButton(){var e,t=document.getElementById("allrecords");t&&t.querySelector("#t-header")&&(e='<noindex><a href="#t-main-content" class="t-skiplink" rel="nofollow" aria-label="'+t_skiplink__dict("skiplinkAriaLabel")+'" style="opacity:0;">'+t_skiplink__dict("skiplink")+"</a></noindex>",document.head.insertAdjacentHTML("beforeend",'<style>.t-skiplink{position:absolute;top:0;left:20px;z-index:99999;padding:8px 10px;font-family:"Arial",sans-serif;font-size:18px;text-align:center;text-decoration:none;background-color:#c7d2e9;border:1px solid #c7d2e9;border-radius:8px;transform:translateY(-200px);transition:transform .3s ease;}.t-skiplink:focus{transform:translateY(20px);opacity:1 !important;}#allrecords a.t-skiplink{color:#000000;}</style>'),t.insertAdjacentHTML("afterbegin",e),t_skiplink__addAnchor())}function t_skiplink__addAnchor(){var e=document.querySelectorAll('[data-menu="yes"]'),t=document.getElementById("t-header"),n='<div id="t-main-content"></div>';if(t&&t.in

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	dropped
Size (bytes):	480029
Entropy (8bit):	7.977997805693447
Encrypted:	false
SSDEEP:	12288:jN4yhA9Ii4v25T9m4gVA9xGOnLAPbAjF91yD:JfC9R4vwhmHVwxGOnSbIkD
MD5:	6F9ACBC5187F7A4DBF7CD93526060701
SHA1:	2772E1AEF07FB3934071E60BF27A42BB14B47F15
SHA-256:	501F2CE1CE59E366A42D23BE63E25B4169C460B9F933A810474AC490F4C36643
SHA-512:	77155F47C98A1A9DA739C4D50C4569E7E24B7074D594D296CFC8EC408718D4331DA68B2215554003B0EB1F465562215C0181FB41F5E806C5F6C23D2027C202B5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0.............................................b................!........!1A.."Q.aq..2..#B..R....$3br..C.....S...%4Dcs..'5Ed...&7Tt..6Ueu...F...................................;.....................!..1AQ..a."q..2........#B3R.bCr$................?..M.W..`..,.o.E.KM.p.z.T...E.j.#.@..:.1...Y-..d...,U.,T.......EL.\T.V;p.B..J.H.TA.~UH4.P7e,..A@..`k%i2...[ .R.-.P. P.)T...".A`P!.1.B.i.. ....... ..qYh.a-...#.. .=..@. .U .u.....B....,...r...i1..Y44..L....A@..YeY...j.i!.J.K... .M..!.;R...@.,.1..Q...T@..R22..`[.Ab..()....iHz..O.6........*.,...ZF^H.C.......J.......fhAG...m.R...Q...T"...=C.h.i$.Plh.@.".B..\..8.R%.f...iEB.@.P.QB..T....;u.X7f...(.....j...(QWi7Pc....FD.@{.F..x9...\b.Fl.,...[.L9.;..+.9.U .k..!.E(......mL.&.W7.jD..;.v.R'YW..6..eS..w"/0....D.kH...........vh.([....T8.....H...6..z..m...j.).`q....5......U.;

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1325), with no line terminators
Category:	downloaded
Size (bytes):	1325
Entropy (8bit):	4.909067614690144
Encrypted:	false
SSDEEP:	24:5rF/0UZe5EdpEdkSBaSRkAXuZW5gZhQ2pAN0iD7uzc:YOpAB1jXuI4Ugc
MD5:	8F06F7E42E9C86CB92EDCF8A36B29C0A
SHA1:	E3CD814AD8AB89B97D4FDDCB28CFE62EE08F22EC
SHA-256:	07A23B618075104849D8DC806499FAF025761532347D5C244E488142DE01E106
SHA-512:	EE9B8598127CEC717EC30AFF9913BFAA0D8104087D2E53B86C5DB8525BBBFD9F97EF2312B14855F498B66500C13294B3843E07CF59F4C1416AE94D99E99E5F90
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/css/highlight.min.css
Preview:	.hljs{display:block;overflow-x:auto;padding:0.5em;color:#333;background:#f8f8f8;-webkit-text-size-adjust:none}.hljs-comment,.diff .hljs-header{color:#998;font-style:italic}.hljs-keyword,.css .rule .hljs-keyword,.hljs-winutils,.nginx .hljs-title,.hljs-subst,.hljs-request,.hljs-status{color:#333;font-weight:bold}.hljs-number,.hljs-hexcolor,.ruby .hljs-constant{color:#008080}.hljs-string,.hljs-tag .hljs-value,.hljs-doctag,.tex .hljs-formula{color:#d14}.hljs-title,.hljs-id,.scss .hljs-preprocessor{color:#900;font-weight:bold}.hljs-list .hljs-keyword,.hljs-subst{font-weight:normal}.hljs-class .hljs-title,.hljs-type,.vhdl .hljs-literal,.tex .hljs-command{color:#458;font-weight:bold}.hljs-tag,.hljs-tag .hljs-title,.hljs-rule .hljs-property,.django .hljs-tag .hljs-keyword{color:#000080;font-weight:normal}.hljs-attribute,.hljs-variable,.lisp .hljs-body,.hljs-name{color:#008080}.hljs-regexp{color:#009926}.hljs-symbol,.ruby .hljs-symbol .hljs-string,.lisp .hljs-keyword,.clojure .hljs-keyword,.sch

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10738)
Category:	downloaded
Size (bytes):	11924
Entropy (8bit):	5.986117138720877
Encrypted:	false
SSDEEP:	192:2IGIsmhP1TGV1rzNFa22upS4UJN8bQIlN1osBO6hGMvEtPqceAKEF+DeB2DqiWWA:lVsmW1fNFa22upS4Uv8bQIlN1osg6hGb
MD5:	0FDE69358341AA075DCD0DFAEAE3FB04
SHA1:	19EBF90F9C2EB151FA24400B4E80F98B1ACA9199
SHA-256:	61DB950DF7D896D1FD48532C38396C83B7BB53E7CE298FBED58681D583F4F24C
SHA-512:	2BD4287FC58B6B32F99722902276A6F906835C025F0639E73AD620C6F54677AA85D67193536B31014B8D4942F37A785C45B84CDEC67163F95868D7FEFF453EBE
Malicious:	false
Reputation:	low
URL:	"https://maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=weekly&loading=async&language=uk&region=ua&callback=onApiLoad"
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. var rules = {. createHTML: function(src) {. return src;. },. createScriptURL: function(src) {. return src;. }. };. var ttPolicy;. . try {. ttPolicy = window.trustedTypes.createPolicy('google-maps-api-loader', rules);. } catch(e) {. ttPolicy = rules;. }. . function getScript(src) {. var a, nonce = ((a = document.querySelector("script[nonce]")) == null ? void 0 : a.nonce) \|\| "";. var s = document.createElement('script');. . s.src = ttPolicy.createScriptURL(src);. s.nonce = nonce;. document.head.appendChild(s);. }. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=988\u0026hl=uk\u0026gl=UA\u0026","https://khms1.googleapis.com/k

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	212370
Entropy (8bit):	5.9828385759015825
Encrypted:	false
SSDEEP:	3072:HBTy3461yM+rwhj0gPvM5T6E3RdfYIJ1fqoanTIzZiIYt9DGM4cr390eXKr:HBKRjEUg9qoan88kGtnW
MD5:	E287FCF0628CFC4ADCEECDD5149F2014
SHA1:	9CCC7D39FCA35F22253CD461179D5BC4DECACEE7
SHA-256:	65BD546C183C5C4A5743110F682243E1D76180FBDF82896412CB415D44187D6B
SHA-512:	555E4354B4D93F501A230A59E632B491459D17F6BB96E44E152FEAE089334E3D7F7AC730BB226A325D4A1AA525EF5F36DCB7D534E44AD44726561C22A0EC389A
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/tild3938-6466-4465-b630-313637633536/image_179.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="103" height="109" viewBox="0 0 103 109" fill="none"> <rect width="103" height="109" fill="url(#pattern0)"></rect> <defs> <pattern id="pattern0" patternContentUnits="objectBoundingBox" width="1" height="1"> <use xlink:href="#image0_596_357" transform="matrix(0.001 0 0 0.000944954 0 -0.000353211)"></use> </pattern> <image id="image0_596_357" width="1000" height="1059" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAA+gAAAQjCAYAAADzKwQdAAAKrmlDQ1BJQ0MgUHJvZmlsZQAASImVlwdUU9kWhs+9N52ElhABKaE3QToBpITQAghIBxshCRBKiIEgYlcGR3BEURFBRdFBioJjAWSsiGIbFJRiHZBBQRkHCzZU3gUWwZm33nvr7bXO2t/d2WeffW7OWeu/AFAUuWJxCqwIQKooQxLi48GIio5h4AcBBAhAHpgBey4vXcwKDg4AqE37v9v7LjQbtbvmE7X+/ff/akp8QToPACgY5Th+Oi8V5VPoeMETSzIAQA6gcb3lGeIJbkGZJkEbRLlnghOmeHiC4yYZAyZzwkLYKNMAIJC5XEkCAGQGGmdk8hLQOmR3lC1FfKEIZTHKrqmpaXyUj6NsjOagMfJEfWbcd3US/lYzTlaTy02Q8dReJo3gKUwXp3BX/J+v439baop0eg1DdJAT

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	dropped
Size (bytes):	187527
Entropy (8bit):	5.653416184606529
Encrypted:	false
SSDEEP:	3072:DxJytW8fIqgeSwAX03dHFaBvOd43FK9+e5aUFD/98xh43KlH0XaCwleuiFFF0Env:dJylfIqgnwAk3eBvOd4VKR5ak98xhQKY
MD5:	B658B57F5811B1942D5CE93E9CB51D5B
SHA1:	3B6B3540A823A940AA76EA0149348035666D057C
SHA-256:	DDB0612E8C5BD7D49FCAEC37E2F32A1379B4268127B4BFA8AA8156539692FBCA
SHA-512:	C226DC92AB8AA2D1723B50A356E447EA00F9FE30B074F74B7A5BAE59E64D7B1748D01DF50CB34A8C3381C46B55A9B7AC86F3EA366E1C12D7A379AA13D22B4FAC
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Vya,Xya,Zya,$ya,aza,bza,dza,OC,QC,RC,fza,hza,UC,jza,VC,lza,WC,nza,mza,oza,pza,qza,rza,sza,tza,uza,vza,wza,xza,yza,zza,Aza,Bza,Cza,Dza,Eza,Fza,Gza,$C,Jza,bD,Kza,Lza,Mza,Nza,Oza,Pza,Qza,Rza,Sza,Tza,Uza,Wza,Yza,$za,bAa,dAa,fAa,hAa,jAa,lAa,nAa,oAa,pAa,qAa,rAa,sAa,tAa,uAa,cD,vAa,wAa,xAa,yAa,zAa,AAa,CAa,eD,fD,DAa,EAa,FAa,GAa,HAa,IAa,JAa,KAa,LAa,MAa,NAa,gD,OAa,hD,PAa,QAa,RAa,SAa,TAa,UAa,VAa,iD,WAa,jD,XAa,YAa,ZAa,$Aa,aBa,bBa,cBa,dBa,eBa,fBa,gBa,hBa,iBa,jBa,kBa,lBa,mBa,nBa,oBa,qBa,rBa,sBa,uBa,lD,vBa,wBa,.xBa,yBa,zBa,ABa,CBa,FBa,GBa,IBa,LBa,MBa,NBa,ED,FD,GD,PBa,ID,JD,KD,LD,ND,RBa,OD,SBa,TBa,UBa,PD,QD,RD,SD,TD,VBa,WBa,XBa,ZBa,$Ba,UD,aCa,YBa,dCa,eCa,$D,iCa,mCa,nCa,oCa,cE,pCa,rCa,sCa,tCa,uCa,fE,wCa,DCa,qE,GCa,FCa,sE,HCa,uE,JCa,KCa,LCa,NCa,OCa,TE,QCa,UE,RCa,SCa,TCa,UCa,WE,WCa,VCa,XCa,ZCa,aDa,cDa,gDa,eDa,hDa,fDa,XE,YE,kDa,lDa,ZE,$E,aF,cF,dF,eF,nDa,gF,hF,oDa,iF,pDa,jF,kF,qDa,lF,mF,rDa,nF,xD

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1680x1072, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	341400
Entropy (8bit):	7.999342994278222
Encrypted:	true
SSDEEP:	6144:AEjuVTtVhLBzOVrYUor5uFIYgVibh4xFopHzUCQDw3GiY8tNiDJTopceW:AEjuVTdLBz2wIIYRmjGHzfQDKNiDJopE
MD5:	2E038C46573F4742FCB0EC993A8F2B00
SHA1:	C3F1A4FA9ECB33E2F778FD606A23CC4D6218E3F4
SHA-256:	0E568B692B77795E9AD9A3E6C83A1B720A17F555E7B4D67230FF05458F59FEE2
SHA-512:	8055D9008083AACB7B69D1E2A9DC9283D0F16035058C053959F28686DC39E0ED8E301A44038138F1FFF771323ED2425DD587D6C80652B36757E0124A0FD14FB0
Malicious:	false
Reputation:	low
URL:	https://optim.tildacdn.one/tild3663-3635-4365-b735-393766313137/-/format/webp/01.jpg
Preview:	RIFF.5..WEBPVP8 .5..0....*..0.>Q".E#.!%(.J....em..?...:..J..J.......~..Ux...../...W8..\|..o..t...............-zG.....>.?..m.a..............36.......O.?..Y.....5.}...q..{p......w.._.......<...m}..^.Y.g...3._./.......................W..D..........................~....l.........O.........................g._...q.................uo........a.s........E...c..........W.o.....?i>B?+............>.........d...o.?.=....'.O.?...../.....}g.c....._............G.....?..............~.?~.M...../................/.......o........?.~....<........._.......y.......?.?......'......_......8..`h....6..Y~..T.L..y.q.......2.{b,.h..H....P..9q_..x.pA.M..:...$H.=..C....i.C.C..MB.......X...R........9 ..Uu..F.(NboM.._..l'..i.f.(..W...TV.1.<...)p.{.Y.~0lm>...q;Q....i..09...5.:..[Tb.aW......p...Y../x..}6.Q.Y...44..'....... Z.r..g}..........T-..#pz...9......Q/...(&..'V.)O.......lA5....Qy.....j}0.eM..{..i....x.u...e>S>.mO\|2.J.i....wY5.....t6.d_m..Z?[Uo.!..Q....G.<...8..\|Je......6.l.u..(..

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8721), with no line terminators
Category:	downloaded
Size (bytes):	8721
Entropy (8bit):	5.265716002748674
Encrypted:	false
SSDEEP:	192:u42r4BABJ3tqyMzf0b61AubcbNc+24vt9rJkSWinvOAnmKd:u4s4AbM7d1Au4bNc+24vt9rJbWQNmKd
MD5:	DBD89BAB9890F6E886E4917526035F4A
SHA1:	B46AA11B961C5D65F7F5ADC1C5E875A5178BCCF4
SHA-256:	0565DE9B4919BF1CBC345D8218425E4951D97C7E8C36263BEE72E2D72038C73F
SHA-512:	8D3ED4B434D3A04F65E897C09CB38A4B057594B7CF250EE966DA47E7BC633D439492083360FFB7626F4493199795DE653E92C992984B46B06AC0D501A4282E82
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-stat-1.0.min.js
Preview:	!function(){var r=document.getElementById("allrecords");function e(){var e=Math.floor(899999Math.random())+1e5;return(new Date).getTime()+"."+e}function n(e){e=e.replace(/([\.$?\|{}\[\]\\\/\+^])/g,"\\$1"),e=new RegExp("(?:^\|; )"+e+"=([^;])"),e=document.cookie.match(e);if(e)return decodeURIComponent(e[1])}function o(e,t,n){if(i=n.expires){"number"==typeof i&&(o=(new Date).getTime()+1e3i,(i=new Date(o)).toUTCString&&(n.expires=i.toUTCString()));var o,i,a,r=e+"="+(t=encodeURIComponent(t));for(a in n)r+="; "+a,!0!==n[a]&&(r+="="+n[a]);document.cookie=r}}function a(){var e=window.pageYOffset,t=window.innerHeight,n=Math.max(document.body.scrollHeight,document.documentElement.scrollHeight,document.body.offsetHeight,document.documentElement.offsetHeight,document.body.clientHeight,document.documentElement.clientHeight),o=0,i=0,a=(m=!0,document.getElementById("t-header")),r=document.getElementById("t-footer"),d=document.getElementById("tildacopy"),c=(a&&(o=a.offsetHeight),r&&(i=r.offsetHe

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	742
Entropy (8bit):	7.646729352898657
Encrypted:	false
SSDEEP:	12:6v/7XCGaeoEeO/ZJFARch9G6IUaa/FAWE9fIcl11mAgqyOwsxOsB+ImRKfAUq:9GuEeOR3Ie+WgfplSVJOZOsB+hu0
MD5:	7956E14FA87F2606F951A0797DA1ACAA
SHA1:	80483AAE5DC3608F1B60FFC0FD09E8753E1B456D
SHA-256:	AB110D1D7DC82BC51644D30B5B8979855251F95645C36A559AE0412303243254
SHA-512:	1A0EB5F282FDF3ACF688048987E5B5BD9F15BF211B8060AD71F3F7CF4CE12A04DB8DBF29F9BC71D4615790F36AA67DDBF52E729D8E63049CB27043C64F4FB6F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b.......pHYs...........~.....IDAT(.E..r.0.Fy..j.'i..Kb......!...I..Lg....A......2.h;.z.Z..../A..a.H..-H.@(.....Bw {.....zk!....f..@.9......-.@.\.#.u.ms..V@Y..S...S.x..........<T.A..:=C...i.U....M.B..@h......Bo.....2..9...u..E...{.^.b.q~.<~.s...\|...5B.....)...-.` ..fw...8".A..+.6_ .........'(.,.P.94.BK.T...+.............7H^.....s.B.=.yq.Y....XB.@v.(.v..v..7Ih.m(.....sH.?a.p......C.nC]..Yh.20N..<(..6}0v.Q/. I...>T.p~.G...d.....^P..} e.(9.F.R.J..w..&.....Q...*.$.z.......{./._...7..e.Y.yAK/..J1....h?.......-.js.P...d../k.%....UG'H..+]'...^K7..5n.......V/...B.......:Yx}\#.dQm.{..z1.....5j...L.Y..]..iy.^...b........l$.. .Zcp..Y.......e4.u...e..4.._.../9.og.^.a....IEND.B`.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20581)
Category:	dropped
Size (bytes):	20726
Entropy (8bit):	5.292935072690145
Encrypted:	false
SSDEEP:	384:mb5vj+l3jfaksTAAvNWUwLATFqACns+CSHDJDLrO:i5vj+5jfSTtrTFqACs+CSHtDm
MD5:	DEB120E036463F68A4CCF8C797BDCB2E
SHA1:	9063EC8FBE51FD80A857758E24B267F041761F21
SHA-256:	090A7068A2209545279F858C6F41FF7AE42815E11C3D69463A2A2EA835282BD9
SHA-512:	CEBE96684560909D47CFE1071C13EF34DAB5D341E49963792A9823C767748AF5658C601785FA786C1332E8AEB6F5862D44197BD6F65C7CCD3E037250D390BCFE
Malicious:	false
Reputation:	low
Preview:	/! Hammer.JS - v2.0.8 - 2016-04-23. http://hammerjs.github.io/. . Copyright (c) 2016 Jorik Tangelder;. * Licensed under the MIT license /.!function(a,b,c,d){"use strict";function e(a,b,c){return setTimeout(j(a,c),b)}function f(a,b,c){return Array.isArray(a)?(g(a,c[b],c),!0):!1}function g(a,b,c){var e;if(a)if(a.forEach)a.forEach(b,c);else if(a.length!==d)for(e=0;e<a.length;)b.call(c,a[e],e,a),e++;else for(e in a)a.hasOwnProperty(e)&&b.call(c,a[e],e,a)}function h(b,c,d){var e="DEPRECATED METHOD: "+c+"\n"+d+" AT \n";return function(){var c=new Error("get-stack-trace"),d=c&&c.stack?c.stack.replace(/^[^\(]+?[\n$]/gm,"").replace(/^\s+at\s+/gm,"").replace(/^Object.<anonymous>\s\(/gm,"{anonymous}()@"):"Unknown Stack Trace",f=a.console&&(a.console.warn\|\|a.console.log);return f&&f.call(a.console,e,d),b.apply(this,arguments)}}function i(a,b,c){var d,e=b.prototype;d=a.prototype=Object.create(e),d.constructor=a,d._super=e,c&&la(d,c)}function j(a,b){return function(){return a.apply(b,argumen

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24231)
Category:	dropped
Size (bytes):	24232
Entropy (8bit):	5.441382722827938
Encrypted:	false
SSDEEP:	384:y5S8l6UVWBicX6ZNzQYvZKHgSffCeUrhdFkJdJJiDSt7CYhA4l1JA9WLr6OAUuPj:y5S8l6UVqicX6ZNlwHUTrLFktgDSXhAB
MD5:	0EDCD6C3ED612C54F1F4EAC5C612D841
SHA1:	BC84AF354F47B3D11AD84762A7713E0E853C91BE
SHA-256:	68DE40611264822B9A752F4E79ADC4EEA3D1E2BD168A93C888C1789225B08A8A
SHA-512:	DEB83B7E029F2563216BAD9F888C9328A72B0CB76A12CDC6BBBA36D2CCCB1A1AC6C7FD93C1B89572839E2573B53C0D837B888302186425E5F842229CE3A677BF
Malicious:	false
Reputation:	low
Preview:	function t_lazyload__init(){t_lazyload__detectwebp();var elAllRecs=document.querySelector("#allrecords");elAllRecs&&"yes"===elAllRecs.getAttribute("data-tilda-imgoptimoff")?window.lazy_imgoptimoff="yes":window.lazy_imgoptimoff="";for(var elstoSkip=document.querySelectorAll(".t156 .t-img"),i=0;i<elstoSkip.length;i++)elstoSkip[i].setAttribute("data-lazy-rule","skip");var elstoRound=document.querySelectorAll(".t492,.t552,.t251,.t603,.t660,.t661,.t662,.t680,.t827,.t909,.t218,.t740,.t132,.t694,.t762,.t786,.t546");Array.prototype.forEach.call(elstoRound,(function(el){var bars=el.querySelectorAll(".t-bgimg");Array.prototype.forEach.call(bars,(function(bar){bar.setAttribute("data-lazy-rule","comm:resize,round:100")}))})),setTimeout((function(){window.lazyload_cover=new window.LazyLoad({elements_selector:".t-cover__carrier",show_while_loading:!1,data_src:"content-cover-bg",placeholder:"",threshold:700})}),100),setTimeout((function(){var $;if(window.lazyload_img=new window.LazyLoad({elements_sel

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18130), with no line terminators
Category:	downloaded
Size (bytes):	18130
Entropy (8bit):	5.106536452087786
Encrypted:	false
SSDEEP:	384:UFeo0Q6FBje1cRYBT56oHmeLYqR3r4r8rmro1sJgKVt22e8PT3gW2kT7U7m727Mo:Yeo0Q6Fxe1cRYBT56oGcYqRr1sJgKVtq
MD5:	B33C3652B63C09E802CEA22EADD1C3CD
SHA1:	48BBC48C018E198A075FE1EFF5D9B73CC2B1FE40
SHA-256:	F28EAFCC73B9C461F0FF0B8DC6C8765E0F21732B177ACC75154ED0722F038CE6
SHA-512:	F344D46F08A2309B21FFCE57004712EEB41523DBE248B6D6AC865216A8728FECC8768F033DB866A738A3C46F1A055786067073C27FD94A713676F3A212057930
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-events-1.0.min.js
Preview:	window.Tilda=window.Tilda\|\|{},function(){function t_events__initEvent(){var myNav=navigator.userAgent.toLowerCase(),isIE=-1!==myNav.indexOf("msie")&&parseInt(myNav.split("msie")[1]);if(8===isIE\|\|9===isIE){var btns=document.querySelectorAll(".t-btn");Array.prototype.forEach.call(btns,(function(btn){var url=btn.getAttribute("href");btn.querySelector("table")&&url&&-1===url.indexOf("#popup:")&&-1===url.indexOf("#price:")&&btn.addEventListener("click",(function(e){var currentUrl=e.target.getAttribute("href");e.preventDefault(),window.location.href=currentUrl}))}))}try{var allRec=document.getElementById("allrecords"),allRecCookie=allRec?allRec.getAttribute("data-tilda-cookie"):null;allRec&&"no"===allRecCookie\|\|Tilda.saveUTM()}catch(e){}var records=document.querySelectorAll(".r");function linkClickCreateEvent(e){var targetEl=e.target.closest("a.js-click-stat")\|\|e.target.closest(".js-click-zero-stat");if(e.target&&targetEl){var virtPage=targetEl.getAttribute("data-tilda-event-name"),virtTitle

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33380)
Category:	downloaded
Size (bytes):	33381
Entropy (8bit):	5.147679076390747
Encrypted:	false
SSDEEP:	768:meFhXRntkiePwcq5FQo1+uNPTk4fZow5BiiSdO9s0TuqsfuGhNGi+fJtXxIJoIGx:vAlCQcYrl1u
MD5:	8A5B43232E2A5B4D259627815FC7B81B
SHA1:	CE200C2FAA3C6C872AE3B3790779F9FD06D993D6
SHA-256:	B7517363B9C2F5BD6921F03A9A26A4D466762E9EB27BBDFD75F03315E525312D
SHA-512:	8933C805C3282B248340E34C0EED4BBC136528BE85C19DED3A9AA999743BC06D2D9A85174EE09EC2CCF52A9CD55DA1977FA2F6632610B5AABC4674AC74A5BFE5
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/js/tilda-slds-1.4.min.js
Preview:	function t_sldsInit(t,e){var s="object"==typeof t?t[0]:document.querySelector("#rec"+t);if(s){var i=s.querySelector(".t-slds__items-wrapper"),r;if(i)if(!i.getAttribute("data-slider-initialized")){var a=i.classList.contains("js-feed-container"),d=s.querySelectorAll(".t-slds__item:not(.t-slds__item_dummy)");if(d){e&&e.randomSort&&(d=t_slds_randomSortElements(d));var l=d.length,o=d[0],n=d[d.length-1],c=window.innerWidth,u=parseInt(i.getAttribute("data-slider-items-in-row"),10)\|\|0,_=i.getAttribute("data-slider-with-cycle"),p=parseFloat(i.getAttribute("data-slider-transition")),f;if(Array.prototype.forEach.call(d,(function(t,e){t.setAttribute("data-slide-index",e+1),window.t_slds__isiOS&&(t.style.transform="translateZ(0)")})),"true"!==i.getAttribute("data-slider-stop")){p\|\|0===p\|\|(p=300),isNaN(p)&&i.setAttribute("data-slider-transition","300"),i.classList.contains("t-slds_animated-fast")\|\|i.classList.contains("t-slds_animated-slow")\|\|i.classList.contains("t-slds_animated-none")\|\|i.classList

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	231864
Entropy (8bit):	5.458039173946496
Encrypted:	false
SSDEEP:	3072:nfLeYH8At6JK37OeR8NteGvQ+AMPpgArl0xYu5s713TW:nfLeYc+6JaH8N7QQGArHu5s713K
MD5:	40283CFC473AFBE1D4ABBA7E6C809885
SHA1:	8A32CB88D9F537B02582DF17A5BB11C2087937F6
SHA-256:	48BA1993011DB4834882D81B2153753437607292F704A6543D4466C0F6D1372A
SHA-512:	DABD9FD4CC3FB4FF3EBC2C3529E602E91939DDB1F42C2D7E70188DFC3262548922EA45C96691D567F2C777D393B5CE7162B5BD4C2054B33A03856BBEA1C1A0E3
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10738)
Category:	dropped
Size (bytes):	11924
Entropy (8bit):	5.986117138720877
Encrypted:	false
SSDEEP:	192:2IGIsmhP1TGV1rzNFa22upS4UJN8bQIlN1osBO6hGMvEtPqceAKEF+DeB2DqiWWA:lVsmW1fNFa22upS4Uv8bQIlN1osg6hGb
MD5:	0FDE69358341AA075DCD0DFAEAE3FB04
SHA1:	19EBF90F9C2EB151FA24400B4E80F98B1ACA9199
SHA-256:	61DB950DF7D896D1FD48532C38396C83B7BB53E7CE298FBED58681D583F4F24C
SHA-512:	2BD4287FC58B6B32F99722902276A6F906835C025F0639E73AD620C6F54677AA85D67193536B31014B8D4942F37A785C45B84CDEC67163F95868D7FEFF453EBE
Malicious:	false
Reputation:	low
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. var rules = {. createHTML: function(src) {. return src;. },. createScriptURL: function(src) {. return src;. }. };. var ttPolicy;. . try {. ttPolicy = window.trustedTypes.createPolicy('google-maps-api-loader', rules);. } catch(e) {. ttPolicy = rules;. }. . function getScript(src) {. var a, nonce = ((a = document.querySelector("script[nonce]")) == null ? void 0 : a.nonce) \|\| "";. var s = document.createElement('script');. . s.src = ttPolicy.createScriptURL(src);. s.nonce = nonce;. document.head.appendChild(s);. }. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=988\u0026hl=uk\u0026gl=UA\u0026","https://khms1.googleapis.com/k

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/16671369731?random=1728339285300&cv=11&fst=1728339285300&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x12, components 3
Category:	dropped
Size (bytes):	841
Entropy (8bit):	6.394489017610487
Encrypted:	false
SSDEEP:	24:NYVa9YMW+rGo0XxDuLHeOWXG4OZ7DAJuLHenX3ts9fd:NYw9YMnrfuERA09fd
MD5:	A00F598CA311FDD775CB5F8B7837D3AF
SHA1:	91446BE7AE4C458A0D9535AABEF9B14AD6EF4FB6
SHA-256:	B5F803ACF6C2C846C1211E85CA6CBF50B1176A959FC61A88437ADE696FB7DBE3
SHA-512:	4DC202F3CD9CAECCD24017534B4168F40DAAE28F6B7A321C04EBE1A6B4486D8142A6CF4AF3833EC394A5D56D24F11CC4A91D4C7D695DE6E6172D63CB216656B6
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...c....d..IpH..&H.46m`$.n....]74R..."?..

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1680x1072, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	576888
Entropy (8bit):	7.9995698792343575
Encrypted:	true
SSDEEP:	12288:DiljUdPPb3r6FtKAfj5vBxkB9KNCjufwSqRg5coqN78PEg:DiGPb3ejnxkONrDqRgCH8h
MD5:	2EADCE8357239E2B559F7D4321190183
SHA1:	69B6C847DB59E7AEDF154E9D2AA8CDCC9C7CF2C0
SHA-256:	97FA11B70D80B9DCB360E8E3D1C0E185F9512D17B4B190E39033107B415D0817
SHA-512:	9D983BF4B99045AC30A61825FCCABC3364FE950ABE898D362C118E47434FF932E198AA940E4A8F3A875F42A0C9D580E82117AE5307C7976295F64B8CFE2C3FA3
Malicious:	false
Reputation:	low
Preview:	RIFFp...WEBPVP8 d...0......0.>M..D".....T(...S.S=.~..;...._.>.9..vR.f....5/Y...#...#..^.Q7..qKg...........7._..5.7.7.#......?a....+..!.......=.....'.........._.>......>B...........<......M......./.O._.^........./.......?u...~.{..3.....O...^................7.....oyO......U.........7..........................O...;......W...2\|...._..x./.7....?...x........_..._......w...O......1......E.2...?.?.... ...=.U........._O.....?._..c....._..?.....1._._......I............_._.................._.?....K........i.............k.A...o.........?......W..._./......q......./.?....E...C....._...?....Y.............?..............?.............._....\|c."..'....\|..`P..xZa...v..\|M.&7&;"....$m.W.24.y....F.9"....,..#XW;...IH&$`B.h.%o[;.....Y.\|....5..!:3S..w.?Lc.w....x.D:..M._(5..... ...0..V:L..g..QA.(..}.YrsFQml..H.......r\|..Tty..\|....'`.]....P..UOW.u....6..\...b^.-.!9....IE..R..w ..\..h<..9C:..r.Stn7.y@..W..6...}h....XnP....K.Z.Z.ChsUN.`..k.l............zS.$r..-6O..o.8.\g.j.2..u

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1680x1072, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	398690
Entropy (8bit):	7.999498525935328
Encrypted:	true
SSDEEP:	12288:P5zYaKUqAxM/G2E2IyjYSu2CzUKVqdjzj:Ca+wM/G2CfS7KVyr
MD5:	87E80C61420AF33B3411CFCB7E510996
SHA1:	F6E5C7E4AB68A7E848E1FDA7E7F61E440A191A97
SHA-256:	0D70B3EAF8D10DB79BE1B4D2278E012DAD81B947049B8038E8FFE8A63190139F
SHA-512:	A7FEAD0C8958FE977F059E06053653E730AFDC91AC263C412FB2D1305D00F5F0D9517F0B9DD81711E53C98530B7B5F91E68DF362B5F853EE54786FF8556FF1FC
Malicious:	false
Reputation:	low
Preview:	RIFFZ...WEBPVP8 N..........0.>Q".D..!#.\).p..el..^?-......<K1........x......6...).(..w:....0...?...<......_.....?.w,...~...?.zo.I_..........G.o...z......~.....Y.o.7._.;.....q_%..'.7...............w./...._..z....../....../P_._..m....\|........7......_.._-...~.{..................?..k.....o...=...............?..\|.......a....._...{.....?....................O..........[..._.o._...\|&.7./._..l<.6/...?.{..1._........G.K.?...z.............o.../........................a..........K.Y.........?.............?...~..}.o.g.?....a_.?................?.................../...E...w......U~c..2.9/...f.y........+M.K..l....?.,.0.S......._L.(.\|2.G.r.c;.D0..s"!E.A..e.>+.f..g....nv..Z.Pu.(.w%.#6.H.!..#...H.$.{...G..?.F.o.k!....v.hv._0..a.Q.Y.%...;jpO.'.^.Y.l.o.......@..k{..:.M......#.[.....@.B........;..g.;..)._..l....A.._I.....F..<...kf.).M .0S..{...r..~.n....jp.@p\3....F.Ns....@...M....=i.<.....R..S7dQ.<.....^..4.C....=XS.3sz.R........:.T.@.C..o6y..vLg....l..v....}

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1680x1072, components 3
Category:	dropped
Size (bytes):	415382
Entropy (8bit):	7.9774887069111795
Encrypted:	false
SSDEEP:	12288:ZS3c04NUSsQsyoveDtN+dTtrE1lgIDyEpv9InckLhjWyEmfKN:XQQIeJN+FWNeSGdLhjWyJm
MD5:	B70B3C330A9C22A65B4CA39EFF8EAF60
SHA1:	3E5792E06B75674242F6DBF8C48C75E055E1A0A7
SHA-256:	ED4C93016D9344AFD024EF03EAC53F7534FD3F3F557B42438BB4B8399538EF35
SHA-512:	8BADD4789F670072D089A9F5F6C95179D725DBC9BECE45C9E9EB800DF4A571F3A189D4ADC565C10542C8194E5AC5672CECEC1ED3FA38FC061B2E2B31068044A4
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0.............................................e.........................!.1.AQ.."aq2....#B.3Rbr.....$s.......45CSc..%&DTdt.....'6Ueu..E...7....V..................................:.......................!1.AQ."2aq.........#BR..3.$Cb.%S.............?..6..l.1@.8....1..1E....J4.P.. ..4.1..bq#...iR).D{..a.sE..w0.E...XQA..Y...........=C..Rh......D.)5,q$1.SeP..\|..-#LB..i...4j.$m.^.jD8...4.bV.0..jh..pjT>E...c......G....X..P......(V'.<..j.. .....Hv4.4...l..DX.I.(.S...H.<Qa...<...g.i....3J.6\|.XP..1P.qN.Bm...0.h$U....qR48/.X....:.h....^j.....ei......D.9.P...)...DDQa.]....CL9.P.F4[G.I..:6e..Qm..ii..2i.L.@(j..<TQHk.h.#.Y"s.C..I...>U%!J.ZC.G.(.....Q. ..R%.!#.T...qI...pjZ)2h..z.Z.h..1.FjYQ&.T..s@..Qb.0(.).c..,...!.,sUdQ&jl..x...H.......R$;P..Hv......._.......1......8...E.b.`F..hn.P...R.A..c.4.i..b....X...z..

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.994159757941516
Encrypted:	true
SSDEEP:	24576:NHLt2uk+5bs05hqGzeV7skkTmIleYUU3UA6G39tWiCppYxMT3:itEs0fqXtsBTjzUwZ3opU43
MD5:	B7E132FF4E590E0360F0601C38D298C1
SHA1:	E4EFB3F952F201437FD7677D0A512C555B508CF5
SHA-256:	39A7C3E9D1158944D4261018D3D2D1CEAE4AC1C87C664830C48DD5959DA53AE8
SHA-512:	AB405DE2FF3DA78F5C7DA36F713A308A291CD74184978E8DFEE09CB2E9E4C89D6E6BE3CAFFAC371AC6463AA8E2B2CFCCD1F025BB0B29C8D5E6921D8F31F567C3
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:a
Preview:	n!.o....k.....ou...../.Ju.)=...cR....z...^eo.....h..t...[.?.8u.c.....5....).dJ...........?.........=W.`+}t........o...M..W.xS..........).....X..........7D.QDg...~.s..Z.....-...I..l.HTA.&.m.G.........o-.(..'>.8U.Q....;.t.%..3...3.3..?..-+.-.%...nA...Psf........?\#!wu........Lb...;.\|...-.3l........(.`..&..-...N.eR...[.H..M....S..cu3z..>...V..D.4..N._J....[..n,@.+.&..z`..\L.%...........>VX.W.Z.m....&...o..E..<kVU.....}y$......)....~:...f..D..5....U5h..p.iRY..\|..:f.[,w.+Y.&....l1....c..Ev....\=&...YP..Gj......3....X...O"L.\.YJ.k....O.U\.7.0N....Fhv.u.1..`..&.4........R..4.b(^a)..r. y..]...O5....}'wE....R{.}.5.)...J..Z.H.......p}..m,.${..'.{}.G....'.].....V..V....c...6&/....]}.!......)...>..1.IB.HJ....}:~..}f(.1.L..F....b.K...A....4M....x....oo.3q..@ v..$..~....3.2.B...j\|j:....:F4.!....;.T{..YWY.5..c_RN..b....K.e!...QV..,sZ....}n......;j......+b.y..,.2.......y2.......].=...6.A..V:..`.A.........bv..s\|.G..v.H.)..fB.BJ.....9........OH._-....`H..

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8600
Entropy (8bit):	5.435462770866419
Encrypted:	false
SSDEEP:	192:XlHQYrtNSGlaQh2tsS5l9QuptXS0l4QnkteSflDQ8PtRST:Vwqp2mOXqsf
MD5:	E4218BFC646457EE2999CAA4F078B9B7
SHA1:	0A9F25CBB89963234994A3E34F732562B15AEB6B
SHA-256:	ACD8905FE971BAF49475990716CD2BAE599A94FE8B3836D781F35D2224042BB2
SHA-512:	CE037EA8D92DE43DCF74FB9BFBF90F2622B3FF9470832C7BC896A3BC9ADA81DAD80C166EB8013DAB8FE0D8FF15EDA791625ED666BB1D84B47F6EAF0163714E13
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700&subset=latin,cyrillic"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {. font-f

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.947800823716867
Encrypted:	false
SSDEEP:	3:mSgGunScoRKuiJ2dl4NDfLKsXjEskCGUpYkn:mS6SrKcdlULK2jEskFC
MD5:	BF25CA5E79042C6CC12AF467A9F82C81
SHA1:	98E3658D4B92832F1A66324F899A53B5FC8BD08B
SHA-256:	4481DEB7F5FE5A1CE226BD694A37DC813E493022AECDE3746112E03E4C1DE8F3
SHA-512:	21015B34C8A9DA6EDD8EBF5A2EA3C4126308D7CB575B2DB10934E9CD648CF965E66CB1EA39DA51C6D7A9B970E56D9DA826346F75E706570590F3E378BCCE88DB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgkE_gpRjTxByxIFDZRU-s8SBQ0SD_xqEgUNrisVohIsCfCwdrqM-6lBEgUNlFT6zxIFDdQLoU8SBQ0PqGwMEgUNMT2UMBIFDa4rFaISEAkxVY13UEXsOBIFDZSQkvo=?alt=proto
Preview:	ChsKBw2UVPrPGgAKBw0SD/xqGgAKBw2uKxWiGgAKLQoHDZRU+s8aAAoHDdQLoU8aAAoHDQ+obAwaAAoHDTE9lDAaAAoHDa4rFaIaAAoJCgcNlJCS+hoA

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.986043068735975
Encrypted:	false
SSDEEP:	24576:u9QP2/H6XLOCtZ/ozv/tGHZwO7rciB6uVlbfenTCfr:u1aXSMZ/E/t+7rP6gbwCfr
MD5:	ED1844766341416144128AC3B2006DA3
SHA1:	397BCC7E2DF78FE65725A19BBDB3D6304F1F5EDA
SHA-256:	CDA292C34151E6CF551A3B1F61643375EF3E3069EEE7AFD712481A54CADFA9B5
SHA-512:	4718E7A5CB1889D4579691C3BFBEA1426E5E443C9B98A1D57560F6FCF7D61E174D9D41EEC4E477BCF6C8D35EA64664AA5E4E044CCFC7FE6ADBFB205F74C15B0D
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:7
Preview:	...S.ygk&$.....?.u.}.;:......K._.F{.s.X..F.G.@.........x......k-..m.9.......k.Ra..3....).7...m.>..o...5.!D,..?...c......G......35"U)..On/.d..B.ce...w......w3K..U.I..S.N..4..'.S??..t.QWC.:}....1.R.z..8.S{...B.U#.q~.p3.....}......F..<'...0G.^....ISf..fX.tt.6..a...]>,...1...........%]:..........Pj..{%-..1..j....o..A.&)...,_b...0y:%.... @........v3..x.i"~w..+......Z.$}... .7..c.B(r\|..zIr0n./..O?.......g....$..}.U...i.pZ.w.^.+>..u....e..}uJt..e.0..h}L..>y2.F.d@.f.?.cQh.~+.J/..r.w..._?.8......%!....R.{S..$...d.s..$.M.......D-A.k...x.g..w.P....>....mT!...]2.....0.mg...>..6mI.?6c.V..^.{...x....@h.......%\|;pw.......Bni+hz.z.g.F....pU...F=j.6....?.y..S8.........U.GgA.a.@K.`..r.........t....i.....T.[P.-..u..)j..P.;"".E..E.:.0...b.....u..E.9......k$..cyjD..o....J....K..e..;....Z.=...W..k.L.W.R..?...}(s./.:.V._._...L.F$...3.0...p..g...t...c..N.+...5.1*..J...6...f....!..0)....U-.u.t..!..).'....(5.^....IQo...3~......F....J.i...l....!...$..i....'o .....T....

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4847), with no line terminators
Category:	dropped
Size (bytes):	4847
Entropy (8bit):	5.809897510343593
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUnyO5ZJap:1DY0hf1bT47OIqWb1WyGqp
MD5:	FD1AD3CD57716D01B8CE554F6AD000CD
SHA1:	D14B4AF7B4371A494A30922022A29231695AD412
SHA-256:	358E9F7D172D18D59579390EC32229CC0B976C9BEBAC3FDA728C2592EB8ED5EA
SHA-512:	CF94CEF146AA20D7B6F7992E21C80B0D02846D05A2E8C622E49C48D32C5CD2940FC20FAC811B28F2BA81E5E42A77CF9129933DADDF23DF2027A08E77521398AB
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.911256651904886
Encrypted:	false
SSDEEP:	24576:Iup7d5iGNpEKRC3l5Zet2kbwXqYklQWhsn96HySJYjJJXMm:jZ5i6CEC15ZOiWGnoyS2jJJXMm
MD5:	C807D1EDE06C2DBA562EE4BB6AD1D933
SHA1:	94C133433DAAB61946A3A8A725D1B70E222F437F
SHA-256:	C078BEB7482EBE217087BF273FAF79F6453A49890CB55B9CBE1154573BD11F5B
SHA-512:	1A0F46FE639CBF6FFAD0D59C3389E4F81ABC9DBA17F1E1DA442A41A24BC95E427253C3D8CE7DECC470229F6E9891209EFEA141DC0AAC28C0E5FA0BA25179F73F
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0:2f8280a041b4fa:c
Preview:	..\|..6..>...]'.F....IZ..._Q.#..{.20.....0...qN..\x....3f?....5u...>....g..G...gT.].8>..S....+.-..y.U....%H...e.....91..}R.Z.C$@Y.........@.Xv.2.U........"...w....m..C.TV_...(..9.;.6.KH....&...H..2.f.(....i+^..\|....^.1t..1P...y}.`..t.&....kx.^@x.#..7s.(...B.....1.g..$..-I.p.b.w........&\VN+_z.r ..."...\|..../..]yT. .Lo._p..Y....k..i......&.0v..[+..vzO../N..q..4.^:..y..34..1..(....9.v.0....cQV.....g7.#../ldB.....v...j..'.)..E.....\|Z.$Uu[.N....R.q... b..S..<\.......>@..s.....W}....F.1.....v.......3f..x.$.2....\.L.ZJ(c+........o..x.....+.)....4.......Nl....\...#4V[.>...>...........'...\|S7yu\..Y>M....y..VRghQ.1V%....0)......'.p...v.+..<....J..x...U.\|/{.2dV...+..o...f..#...eU..(....U\|f...Ue.'...K.CF..C.GBG..6Ki."b.EU7/T..fw..qE.H..!.0..aF...H.&... .....e.kj.WW.IW..wpu{r.=X.....F...o.da.v...J..w...Q.\|.8...\|1..c..%.]...H.NQ...D.Q..>1>...8.C.l..zu."i.......2f.r3.$..\|..h.D`.\...F......,#.K.Y....lo*+&...w]..X.....1.<...G..9x.....c..-.e.J.b.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	478470
Entropy (8bit):	7.8983451208514275
Encrypted:	false
SSDEEP:	6144:/wzQtxfUkOwSE9GczWVg7SJScevRw+grVAO5yY6sbRaQ4GnZ5xLcSm9Y9kNiyL33:UCJpOwSEYjUcevi9DJj1hNSPzR
MD5:	F9C0B52BFC9ABD22DD574775BAAAABF9
SHA1:	8191C89ACD9F29CAC3A54EDE20798310AB67A797
SHA-256:	39141C32F3BF9C6C80C3F81A784F886FDE2FA9F24584C52D7E3521A02101FEB0
SHA-512:	8FCB0E3CD9F64E110E8C2074CB59247BC333710669380DED3BE7B17B2903B0C9524BF75E7B21CEC9D9DA9E6E33A31D56F73080F192FBCE6AE1DC846BBD86A77B
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:10
Preview:	G.].T....g=...0?.a..z..r..<@@...S..W.H.s7<.x.T.....v...5....]...:...f....]....#..7B...va.....g6.'I......!...o.>c..Z...%....x....u...f..b.uR.^/.\....W..\|.,."...2D....4.e...(.4T.F.8td...Q..\x.X u..H.(K.&..XB....I...G)..dI...U.[..w.I.\...:......G..X<n...l..i[.b..g.".1.3.ERu..1d{..F2.Z..C.k..$.r..a...-.$!@>uOn.`.MBR..e`......(...y.......CW........'(..jL.co............P..ZX....?F....i.....m..(.....A....D.w1/0u.GrI..B0.I......H.q....?.0..A...%.L.j......E...mv..E6f..#f.1.0......p...o.Z.1.$s....\je.......&\|....A.L.hW../...".w..W...5.S.....Nd.E.o...6.....E.k./...EN.!n.......u....E.\..~r...!!...s..s8g...;<%.7.M ...o.Z\|.M......R.;..+.=....))......."..t....Ly[.....g.Eb#..'{. P.,[D.7..Y=.(. ..Ml.;\|..%...-... ..j&K....&9...e..EV[.S.pv+...q..;]..!....W.....[w.%..vBI.!...=]\|RH.5_........k:...emE...i.].k3..zq>.......M..^30.....u._.E.(..?...$.r.p.c7d.%....W..8.&....}.[Z..,.:....Q.=.{.#..1s..w\|.N'.;...Z.0.Ww...A.....}j.d.f.o..E.,D.LP..

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	DOS executable (COM, 0x8C-variant)
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.991799366007693
Encrypted:	true
SSDEEP:	24576:XuFCwp2XefoTj4jdA27CD3MYZ0IkT47Th6Pk358J:XuF50e24xL7CxeIt3u
MD5:	1B53881B673A7F168C088EC8AE6C4DC6
SHA1:	07F1743726B05A09D9FC0CF209F3B002698BA386
SHA-256:	7715563736757DD5DFD24F05D83D1538004A74C1B31E9DC51B1153D2D0ECAF1A
SHA-512:	CD6D1CED486D79FE133A398311739C66E3291583F13E550B3BD13DB75B9F7742E2EF1D6784A8F0EC8618BE30EF04E5F7310F52890B54BA9353BFDFF81E230812
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0:2f8280a041b4fa:7
Preview:	.mU..d\|...\|.`.El..........q....~.Ba...Q...i1..{+t.FwL.`....X..Fxa-.[.].J4P...tF!M.I.....U..H%`..<....+p\q......H....A./.RM.O.1.7jU.....a....&.K.iAZY....m..l..q...s...4a..!....>EX.r,.....f...;..&b..&..Ao.R.kh....&I_.]`.C.$mr.;....c.o.D.f..x.6A..fvAW....`C..!DK.k...\.zf.......+yfh....!E.RW.&.........ST..H..E.u,.._t"G....>.Wcc.#{.c\|)..ig..A.T<8]......_./H.\|.4..OB.....a\hQ.+.I.qV....oO....k.=sGf..d.RF^...1%.H...%..("....2..ti..,<.n..~MT...T...\|Q%.A.#;....c.J..r...J..e} .X=......k.....T.!...F]..\.t.8..\|..........~....2...Ez3}.+M....s.q...eO..b..Yn.U.x.Stq#C..1$a.r\|...(..f.......j4.\oR...I.CX^..+.@3..9...N.Z.P}AA\|.8..1.. .c;.[..;...-...._...M..4........&.3.....Z.s......i. ......../.!x..,....h.(...v.'TD\..P.9.e.?[......!b.<.)KA..\...3....-.x.C.bw..B./...y.&Vk.1f.+.y%!.t."v(9:...\..2...l..0.m..}.R.nZ....?.....pQXM....q0.Q.._.\..er\..g..:E..r......~h...o..I...nA".~..v.B.m.....oR..n.`.....n....7..N+..N.........[..>..n....L?...?.....8y.z.:...u[....jo.?I.

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	231864
Entropy (8bit):	5.458039173946496
Encrypted:	false
SSDEEP:	3072:nfLeYH8At6JK37OeR8NteGvQ+AMPpgArl0xYu5s713TW:nfLeYc+6JaH8N7QQGArHu5s713K
MD5:	40283CFC473AFBE1D4ABBA7E6C809885
SHA1:	8A32CB88D9F537B02582DF17A5BB11C2087937F6
SHA-256:	48BA1993011DB4834882D81B2153753437607292F704A6543D4466C0F6D1372A
SHA-512:	DABD9FD4CC3FB4FF3EBC2C3529E602E91939DDB1F42C2D7E70188DFC3262548922EA45C96691D567F2C777D393B5CE7162B5BD4C2054B33A03856BBEA1C1A0E3
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.9885176063532635
Encrypted:	false
SSDEEP:	24576:67dUy+4DVG7EcCJvjY/aCJ9Ux7teZvB8sdcM:wx+wk7ERpjZCQsvmM
MD5:	263D06EE65F9BFD11E791AA1A933F403
SHA1:	D7441C17A092E96E22D182CA84413C603ADA2DC8
SHA-256:	F430114E1C579A9D9F8EC3A675EC6417ABF05A03707CF6123E7FEFB9788BE0E4
SHA-512:	57F0C1F36407347A2AA0B4A375C52A6E7095D137AB1C98C3D7A765FA405A430125E1207DE25E09A5C70FA5F6170D76A5457DAC8F8A1DBFDA222D33FA33653E95
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0:2f8280a03cfa6e:4
Preview:	J.%.. .,.o$.tmf".>o\|....=....W.@.h...~.1..8.o....d....%...M..)...-....k.....f.......<4...\T.dJ.....R..e....2.....+./B...Xpu..^...3m....(......"...2...9xX?H...{...CW.wdq..IY`../b.hh.m..K.J... .a5Q#%...GI(..J$.ww>k-l......}...q.......`%m.#..L...(g'.b....I..=.,...r;.....Wi..w>......eC.M..6"....xcc..L.......K..Ay..t..}<....i....<.0M..)...........#.p..F..:X{.1.S..H.xF..'..%.A....1%.u.a...P/8..+..V.&e.g.u..B"&..X.p.KS...~Q..n.d@.3]...'.%Y.?D..V..9\|..6.D..h.....m.ig..W.W..<#!..l.n.@....jV.....X~g.4..^%.....EM?..%..i.o..&._...T.(.R...._.....'..2..><...9p.CW+..CvS..l.~.HITJ=.Ce"...g...#...o.S.2.u..W0.@...^..Q..Y)! ..Q.N....8q....O....j1..L..)....e..z...E....>....EI..).......?.Jji.......E.).........o......7.eW3..iC.+.@8....C. Dq.}z...h...........P.s.4Z..fA.....:B.,6bL.....SmCT.Mj.%7.....mc..a.C)@.I.X..[.P.7.5..$..biq$Q.ZB.#C......l....08.`..z. ....^_...\.i..<N....4.i...@.<Q.P.QB......p.\.u...mf..'...+...............p ...E.Y.[....VdG8H.Y..q......u.+.X..

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	42445
Entropy (8bit):	5.385506041773314
Encrypted:	false
SSDEEP:	768:NDIfA5SonihN2nLEAsGHcSyl7ujzTCzkfz2pkpJvDy87EZ3yT:lIo5SonSknLx2Syl+zTCmty8vT
MD5:	D87F71A78EA32C4321E6FD1E59927464
SHA1:	F72AE6FC1E2E654536299911979CBCE8C2328E93
SHA-256:	5AD5171287C6D8CD3F604DF3559129C28C5AAEA6CC67CCDEF3D0A509DBDD7A64
SHA-512:	9DA75C60B23AD862452EB27C51519655B7F16D944107C9A6187C3A03C3CDCFA9B1975E698DF668BA0B29189676F0A27804738CFCA6811A52CB265340F11E4D0F
Malicious:	false
Reputation:	low
Preview:	!function(e){"undefined"!=typeof exports?e(exports):(window.hljs=e({}),"function"==typeof define&&define.amd&&define("hljs",[],function(){return window.hljs}))}(function(e){function t(e){return e.replace(/&/gm,"&").replace(/</gm,"<").replace(/>/gm,">")}function r(e){return e.nodeName.toLowerCase()}function a(e,t){var r=e&&e.exec(t);return r&&0==r.index}function n(e){return/^(no-?highlight\|plain\|text)$/i.test(e)}function i(e){var t,r,a,i=e.className+" ";if(i+=e.parentNode?e.parentNode.className:"",r=/\blang(?:uage)?-([\w-]+)\b/i.exec(i))return y(r[1])?r[1]:"no-highlight";for(i=i.split(/\s+/),t=0,a=i.length;a>t;t++)if(y(i[t])\|\|n(i[t]))return i[t]}function s(e,t){var r,a={};for(r in e)a[r]=e[r];if(t)for(r in t)a[r]=t[r];return a}function c(e){var t=[];return function a(e,n){for(var i=e.firstChild;i;i=i.nextSibling)3==i.nodeType?n+=i.nodeValue.length:1==i.nodeType&&(t.push({event:"start",offset:n,node:i}),n=a(i,n),r(i).match(/br\|hr\|img\|input/)\|\|t.push({event:"stop",offset:n,node:

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.993276383173224
Encrypted:	true
SSDEEP:	24576:UWXUmlFw7+SjCPmoy25OFd5RsMNLWpKyOtB3zYpB+IS:LHFw7++oXgFpLWpPeBwgIS
MD5:	0469AF998E702B64A1AFAA52E21FE8D0
SHA1:	CDA1107810586ECDA82931E3C132BD8CA6399AF6
SHA-256:	5978103C163287B3706C272412762B3B783D3D073A8A942283C44CC78D84E76F
SHA-512:	A655F81D8EEE6E3136D7633B594C9D3A875D6930ED1C313970CFA8F241A920DB512D97ADB6A2DEB785FA5939063800A3579D10A21EBDF34087962C847D22ECEE
Malicious:	false
Reputation:	low
URL:	https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0:2f8280a041b4fa:a
Preview:	q....9.'1.. .`......6<..dK..0=....HX....%....(.:...6...p..)...B..qj...../2%..Y..l.Wh.....x...).BxX1.c. pg....... ..E..0....D..S.9.kgY..~#.f..X.....u.KA...J.....\|C5@#...........O....'....$..J.a...>x.%.........d..p.7c..P.P....I.y]W.j.P...L.......H3.....x.`u..'4_..s.(.\|..........3[@.J.4i.F...J..._t..A'..H..6.]..K.0b.&.DI8v......Y.Y.X.T..G98.H4..<.WSh....h.u..b.L...cb..h..L...U.].......!...P.Z..T=...C..r.Xn(.......f.4<.}...nZ5G..]D7!..^97{.K..1..m...[[..eB.!%..Z....g......S.;:.o......k. .=a..V.{.....s`.i..e..........(.....+U8.....n.t...W]=n..n../.fk.'......I ..=^#.K..^....h)...L.."b.....U(..[.z...HKD....j.....#.-.\|.}0.c.....04=.e0.".....%..U T..d.5..._.w+..../{w..6..`..\|.!....;l..3 ZG...>.%.h...R..G.....P...PZ.&4...~0... ..d...>Lb..A%A...2X.T]2'.$2.6E..{.$J...)...L;..~_gi.R0 %_.a)._G..KAV.%=......2...MEmc0..3..h,.\|{..q.....A.,,..:Bq..].?..!....p.T.q..T<.....x...B.K.....j...'../....]..WKa.... .,t..*...\|5....jgx..F..h9.Oq....Q.0.f..]P:.,aA.&...k.

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3643), with no line terminators
Category:	downloaded
Size (bytes):	3643
Entropy (8bit):	4.9800792795539115
Encrypted:	false
SSDEEP:	48:ceYaVE0jbwNJqDdhYr0gmnXHIW3q3ZMA5sPcGd9+iqcQB:pYGE0MYJhYjmnXoW3qxKc64c4
MD5:	EF294111F089902601785AF4DC4BE56C
SHA1:	0464489F145AD728EF6834699346D30E7CE4C09F
SHA-256:	ABFC4E5F6B0197FE63F956D5DDD44539EA723C24F31E08DD52EF6861D8B7290E
SHA-512:	9F4997B6B8C4CE22AC9C04EACDDFE6279F608328E9DC8BA51F1F6D28659DEC8EC66126D814C23E34D94BE44EF2E89A0FD72594DC570391DE4B52F6882C834BEC
Malicious:	false
Reputation:	low
URL:	https://static.tildacdn.one/css/tilda-menusub-1.0.min.css
Preview:	.t-menusub__menu{position:absolute;display:none;opacity:0;z-index:6000000;width:100%;max-width:150px;background-color:#fff;text-align:center;-webkit-box-shadow:0 0 7px 0 rgba(0,0,0,.2);box-shadow:0 0 7px 0 rgba(0,0,0,.2);border-radius:0;-webkit-font-smoothing:antialiased;-o-transition:opacity .2s cubic-bezier(.895,.03,.685,.22);transition:opacity .2s cubic-bezier(.895,.03,.685,.22);-webkit-transition:opacity .2s cubic-bezier(.895,.03,.685,.22)}.t-menusub__menu_show{opacity:1}.t-menusub__menu:after,.t-menusub__menu:before{content:'';position:absolute;width:0;height:0;border:solid transparent;border-width:10px;right:50%;-webkit-transform:translateX(50%);-ms-transform:translateX(50%);transform:translateX(50%)}.t-menusub__menu_bottom{margin-bottom:30px}.t-menusub__menu_bottom:after,.t-menusub__menu_bottom:before{top:-20px;border-bottom-color:#fff}.t-menusub__menu_top:after,.t-menusub__menu_top:before{bottom:-20px;border-top-color:#fff}.t-menusub__content{padding:18px 20px;overflow:auto;box

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 11, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	743
Entropy (8bit):	7.696191054852349
Encrypted:	false
SSDEEP:	12:6v/7ybGimmSyNqTtgXcexJwGnCUq00CO+HcGFyx5mlMvS5sL8CbTkyPKw:bbXmkNqTWcT2Lq00CRHc3E5TZw
MD5:	6B1508BF9E806C46A2B7865CED199E41
SHA1:	E00DCEFF6AC34F65B1982B7B582EC51B04D58936
SHA-256:	85CC1DB267CB24FDFF3C1FD1BBD2569EAA6397DB6C2746F841610525CF8CE6A0
SHA-512:	61EBED2567EBE5A07546EF85C30E92BB3E7FCACBF43FE88E342207DA43920CE07DCE071DC6175A1F3DB971656C0B65E81654EAB8A4EEC42CE278188C8D607C91
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................C....pHYs...........~.....IDAT(...Yo.F......%@...E..h.X..D.l'...$J\....X...E.....>\|.3.g.9..?.K}..../..W..'....{..=....4..X....}......8\| ....8..P.....7..H..y'9.on)..T.#........=...g.?.l....'.0..#.Q..,d.l{G.~K..I....R4;...z..f...JRl.f.!.*\.aF..g3..(.^.l.....l..JR.JDYQ.......j.7.I)..+r..&.F.PQ.$,r....A....q.....H)....T...3.....Uda..h..}...a...<V...:.....xr....}.z.".,$e@Qx2.!..8..l.22.y5<...)..L.V:KW..`.:.c.......DbQd6....i2#.4lGe:.2..r.{.y.....1_J.=L....c-.........pJ.M.t&.N.M..>.u.1=C..A..gN_\|.b.^..K....`ftY....x.J..I.1".P...xD...+.Y..3T.1...<?}..iO.&'.LZ..L.sL..5.Z\...$+...(..y....Wm............w(..c.....p3z.1n1........uE.F.=JiVD.m.hu..<a....#....N.....j$.`s{....IEND.B`.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2966)
Category:	dropped
Size (bytes):	266494
Entropy (8bit):	5.542928397102729
Encrypted:	false
SSDEEP:	3072:FdIp9SXNKW40ODM9C0xHK82uBcO9yyqo5/Aux9SEgpnDF2Dej7E1k:jIGKl3DUb2vO5gbZDF2Dej71
MD5:	13B4C36DF7AF72CD33B552CB1470E59E
SHA1:	FDB6FCE172E317AF577FA903AB6EA3E6009CDE8E
SHA-256:	1454B337AFB5EF867718E3AB9767D1ADD69095296F7F5C9FE05F1D210FC0518B
SHA-512:	A363595256B3BC9453FB0022C5E07964A15C9D2A565819CC2344CB27349F9290D407B1AC715B74354B9C80F45D76DFBFB1F8817DBC4FA69A788DF67F29C2D52D
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__e"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__googtag","metadata":["map"],"once_per_event":true,"vtp_tagId":"G-CGEP7SS3WP","tag_id":3},{"function":"__gclidw","metadata":["map"],"once_per

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 8, 2024 00:14:15.084005117 CEST	192.168.2.5	1.1.1.1	0x80d2	Standard query (0)	aholding-croatia.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:15.084439993 CEST	192.168.2.5	1.1.1.1	0x8254	Standard query (0)	aholding-croatia.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:15.678217888 CEST	192.168.2.5	1.1.1.1	0xb8bd	Standard query (0)	aholding-croatia.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:15.678395987 CEST	192.168.2.5	1.1.1.1	0x3422	Standard query (0)	aholding-croatia.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:16.726032972 CEST	192.168.2.5	1.1.1.1	0xff42	Standard query (0)	ws.tildacdn.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:16.726510048 CEST	192.168.2.5	1.1.1.1	0x7a1c	Standard query (0)	ws.tildacdn.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:16.727469921 CEST	192.168.2.5	1.1.1.1	0xa7f6	Standard query (0)	static.tildacdn.one	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:16.728132963 CEST	192.168.2.5	1.1.1.1	0xc523	Standard query (0)	static.tildacdn.one	65	IN (0x0001)	false
Oct 8, 2024 00:14:16.748188972 CEST	192.168.2.5	1.1.1.1	0xa47f	Standard query (0)	neo.tildacdn.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:16.748807907 CEST	192.168.2.5	1.1.1.1	0x7	Standard query (0)	neo.tildacdn.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:17.081253052 CEST	192.168.2.5	1.1.1.1	0xcb68	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:17.085493088 CEST	192.168.2.5	1.1.1.1	0x64d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:18.784403086 CEST	192.168.2.5	1.1.1.1	0xeebb	Standard query (0)	thb.tildacdn.one	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:18.784754992 CEST	192.168.2.5	1.1.1.1	0x6be7	Standard query (0)	thb.tildacdn.one	65	IN (0x0001)	false
Oct 8, 2024 00:14:18.850954056 CEST	192.168.2.5	1.1.1.1	0x554d	Standard query (0)	dl.dropbox.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:18.851527929 CEST	192.168.2.5	1.1.1.1	0xc8e2	Standard query (0)	dl.dropbox.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:20.028451920 CEST	192.168.2.5	1.1.1.1	0xaa	Standard query (0)	neo.tildacdn.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:20.028552055 CEST	192.168.2.5	1.1.1.1	0x25fd	Standard query (0)	neo.tildacdn.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:20.458481073 CEST	192.168.2.5	1.1.1.1	0x6807	Standard query (0)	dl.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:20.458758116 CEST	192.168.2.5	1.1.1.1	0xeb16	Standard query (0)	dl.dropboxusercontent.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:21.505502939 CEST	192.168.2.5	1.1.1.1	0xf3e0	Standard query (0)	static.tildacdn.one	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:21.505867958 CEST	192.168.2.5	1.1.1.1	0x4307	Standard query (0)	static.tildacdn.one	65	IN (0x0001)	false
Oct 8, 2024 00:14:21.558814049 CEST	192.168.2.5	1.1.1.1	0x123a	Standard query (0)	thb.tildacdn.one	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:21.559226990 CEST	192.168.2.5	1.1.1.1	0x1f90	Standard query (0)	thb.tildacdn.one	65	IN (0x0001)	false
Oct 8, 2024 00:14:22.577980995 CEST	192.168.2.5	1.1.1.1	0x575b	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:22.578375101 CEST	192.168.2.5	1.1.1.1	0xc380	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 8, 2024 00:14:22.605643034 CEST	192.168.2.5	1.1.1.1	0xee07	Standard query (0)	optim.tildacdn.one	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:22.605972052 CEST	192.168.2.5	1.1.1.1	0x348e	Standard query (0)	optim.tildacdn.one	65	IN (0x0001)	false
Oct 8, 2024 00:14:22.718100071 CEST	192.168.2.5	1.1.1.1	0x3332	Standard query (0)	geo.tildacdn.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:22.718381882 CEST	192.168.2.5	1.1.1.1	0xadc7	Standard query (0)	geo.tildacdn.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:24.362472057 CEST	192.168.2.5	1.1.1.1	0x9a7f	Standard query (0)	static.tildacdn.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:24.362829924 CEST	192.168.2.5	1.1.1.1	0xbfdc	Standard query (0)	static.tildacdn.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:24.461484909 CEST	192.168.2.5	1.1.1.1	0xaa86	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:24.461728096 CEST	192.168.2.5	1.1.1.1	0xd523	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 8, 2024 00:14:25.155198097 CEST	192.168.2.5	1.1.1.1	0x41cc	Standard query (0)	geo.tildacdn.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.155487061 CEST	192.168.2.5	1.1.1.1	0x49b7	Standard query (0)	geo.tildacdn.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:25.156569958 CEST	192.168.2.5	1.1.1.1	0x3a8b	Standard query (0)	optim.tildacdn.one	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.156708002 CEST	192.168.2.5	1.1.1.1	0x984b	Standard query (0)	optim.tildacdn.one	65	IN (0x0001)	false
Oct 8, 2024 00:14:25.165131092 CEST	192.168.2.5	1.1.1.1	0x8c82	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.165539026 CEST	192.168.2.5	1.1.1.1	0x9a47	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 8, 2024 00:14:25.379071951 CEST	192.168.2.5	1.1.1.1	0x3223	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.379503012 CEST	192.168.2.5	1.1.1.1	0x1d4d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 8, 2024 00:14:25.602042913 CEST	192.168.2.5	1.1.1.1	0x36a6	Standard query (0)	static.tildacdn.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.602302074 CEST	192.168.2.5	1.1.1.1	0x13d6	Standard query (0)	static.tildacdn.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:25.787906885 CEST	192.168.2.5	1.1.1.1	0xcf6b	Standard query (0)	stat.tildacdn.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.787906885 CEST	192.168.2.5	1.1.1.1	0xa580	Standard query (0)	stat.tildacdn.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:28.607724905 CEST	192.168.2.5	1.1.1.1	0x7352	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:28.607924938 CEST	192.168.2.5	1.1.1.1	0x89de	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:28.608422041 CEST	192.168.2.5	1.1.1.1	0x578	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:28.608551979 CEST	192.168.2.5	1.1.1.1	0x4bd8	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:33.789282084 CEST	192.168.2.5	1.1.1.1	0xaa0	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:33.789658070 CEST	192.168.2.5	1.1.1.1	0x1806	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 8, 2024 00:14:33.796036005 CEST	192.168.2.5	1.1.1.1	0xde5	Standard query (0)	stat.tildacdn.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:33.797075033 CEST	192.168.2.5	1.1.1.1	0x29a3	Standard query (0)	stat.tildacdn.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:35.288886070 CEST	192.168.2.5	1.1.1.1	0x40d7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:35.289118052 CEST	192.168.2.5	1.1.1.1	0xb50b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:35.392730951 CEST	192.168.2.5	1.1.1.1	0xc230	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:35.393043995 CEST	192.168.2.5	1.1.1.1	0x1434	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 8, 2024 00:14:55.859901905 CEST	192.168.2.5	1.1.1.1	0xf5cf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:55.861618996 CEST	192.168.2.5	1.1.1.1	0xf04e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 00:15:17.089721918 CEST	192.168.2.5	1.1.1.1	0x9592	Standard query (0)	static.tildacdn.one	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:15:17.089721918 CEST	192.168.2.5	1.1.1.1	0x8fe1	Standard query (0)	static.tildacdn.one	65	IN (0x0001)	false
Oct 8, 2024 00:15:17.171376944 CEST	192.168.2.5	1.1.1.1	0x2b81	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:15:17.179116011 CEST	192.168.2.5	1.1.1.1	0xbb95	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 00:15:21.789747000 CEST	192.168.2.5	1.1.1.1	0xd3eb	Standard query (0)	static.tildacdn.one	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:15:21.789747000 CEST	192.168.2.5	1.1.1.1	0x7d50	Standard query (0)	static.tildacdn.one	65	IN (0x0001)	false
Oct 8, 2024 00:15:22.807727098 CEST	192.168.2.5	1.1.1.1	0x13cb	Standard query (0)	static.tildacdn.one	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:15:22.808130026 CEST	192.168.2.5	1.1.1.1	0xd8b9	Standard query (0)	static.tildacdn.one	65	IN (0x0001)	false
Oct 8, 2024 00:15:38.159096003 CEST	192.168.2.5	1.1.1.1	0x9f58	Standard query (0)	stat.tildacdn.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:15:38.159096003 CEST	192.168.2.5	1.1.1.1	0x77d5	Standard query (0)	stat.tildacdn.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 8, 2024 00:14:15.117865086 CEST	1.1.1.1	192.168.2.5	0x80d2	No error (0)	aholding-croatia.com		5.181.161.19	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:15.686181068 CEST	1.1.1.1	192.168.2.5	0xb8bd	No error (0)	aholding-croatia.com		5.181.161.19	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:16.733613968 CEST	1.1.1.1	192.168.2.5	0xff42	No error (0)	ws.tildacdn.com		178.248.236.28	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:16.737140894 CEST	1.1.1.1	192.168.2.5	0xa7f6	No error (0)	static.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:16.737140894 CEST	1.1.1.1	192.168.2.5	0xa7f6	No error (0)	cl-1707279c.gcdn.co		92.223.124.62	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:16.750340939 CEST	1.1.1.1	192.168.2.5	0xc523	No error (0)	static.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:16.755431890 CEST	1.1.1.1	192.168.2.5	0xa47f	No error (0)	neo.tildacdn.com		5.181.161.181	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:17.089606047 CEST	1.1.1.1	192.168.2.5	0xcb68	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:17.093662024 CEST	1.1.1.1	192.168.2.5	0x64d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 00:14:18.797467947 CEST	1.1.1.1	192.168.2.5	0xeebb	No error (0)	thb.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:18.797467947 CEST	1.1.1.1	192.168.2.5	0xeebb	No error (0)	cl-1707279c.gcdn.co		92.223.124.62	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:18.813771963 CEST	1.1.1.1	192.168.2.5	0x6be7	No error (0)	thb.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:18.874619007 CEST	1.1.1.1	192.168.2.5	0x554d	No error (0)	dl.dropbox.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:18.874619007 CEST	1.1.1.1	192.168.2.5	0x554d	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.66.15	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:18.876578093 CEST	1.1.1.1	192.168.2.5	0xc8e2	No error (0)	dl.dropbox.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:20.038408041 CEST	1.1.1.1	192.168.2.5	0xaa	No error (0)	neo.tildacdn.com		5.181.161.181	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:20.581072092 CEST	1.1.1.1	192.168.2.5	0x6807	No error (0)	dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:20.581072092 CEST	1.1.1.1	192.168.2.5	0x6807	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.66.15	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:20.595248938 CEST	1.1.1.1	192.168.2.5	0xeb16	No error (0)	dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:21.516773939 CEST	1.1.1.1	192.168.2.5	0x4307	No error (0)	static.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:21.532664061 CEST	1.1.1.1	192.168.2.5	0xf3e0	No error (0)	static.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:21.532664061 CEST	1.1.1.1	192.168.2.5	0xf3e0	No error (0)	cl-1707279c.gcdn.co		92.223.124.62	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:21.575175047 CEST	1.1.1.1	192.168.2.5	0x1f90	No error (0)	thb.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:21.581926107 CEST	1.1.1.1	192.168.2.5	0x123a	No error (0)	thb.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:21.581926107 CEST	1.1.1.1	192.168.2.5	0x123a	No error (0)	cl-1707279c.gcdn.co		92.223.124.62	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:22.587765932 CEST	1.1.1.1	192.168.2.5	0xc380	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:22.587765932 CEST	1.1.1.1	192.168.2.5	0xc380	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 8, 2024 00:14:22.587765932 CEST	1.1.1.1	192.168.2.5	0xc380	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 8, 2024 00:14:22.588067055 CEST	1.1.1.1	192.168.2.5	0x575b	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:22.588067055 CEST	1.1.1.1	192.168.2.5	0x575b	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:22.615835905 CEST	1.1.1.1	192.168.2.5	0x348e	No error (0)	optim.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:22.631628036 CEST	1.1.1.1	192.168.2.5	0xee07	No error (0)	optim.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:22.631628036 CEST	1.1.1.1	192.168.2.5	0xee07	No error (0)	cl-1707279c.gcdn.co		92.223.124.62	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:22.726849079 CEST	1.1.1.1	192.168.2.5	0x3332	No error (0)	geo.tildacdn.com		5.181.161.195	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:24.371730089 CEST	1.1.1.1	192.168.2.5	0x9a7f	No error (0)	static.tildacdn.com	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:24.371730089 CEST	1.1.1.1	192.168.2.5	0x9a7f	No error (0)	cl-1707279c.gcdn.co		92.223.124.62	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:24.373567104 CEST	1.1.1.1	192.168.2.5	0xbfdc	No error (0)	static.tildacdn.com	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:24.469808102 CEST	1.1.1.1	192.168.2.5	0xaa86	No error (0)	td.doubleclick.net		142.250.186.98	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.174006939 CEST	1.1.1.1	192.168.2.5	0x8c82	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:25.174006939 CEST	1.1.1.1	192.168.2.5	0x8c82	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.176991940 CEST	1.1.1.1	192.168.2.5	0x9a47	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:25.176991940 CEST	1.1.1.1	192.168.2.5	0x9a47	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 8, 2024 00:14:25.176991940 CEST	1.1.1.1	192.168.2.5	0x9a47	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 8, 2024 00:14:25.177998066 CEST	1.1.1.1	192.168.2.5	0x41cc	No error (0)	geo.tildacdn.com		5.181.161.195	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.187457085 CEST	1.1.1.1	192.168.2.5	0x3a8b	No error (0)	optim.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:25.187457085 CEST	1.1.1.1	192.168.2.5	0x3a8b	No error (0)	cl-1707279c.gcdn.co		92.223.124.62	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.188072920 CEST	1.1.1.1	192.168.2.5	0x984b	No error (0)	optim.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:25.387901068 CEST	1.1.1.1	192.168.2.5	0x1d4d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 8, 2024 00:14:25.387919903 CEST	1.1.1.1	192.168.2.5	0x3223	No error (0)	googleads.g.doubleclick.net		142.250.186.66	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.610666990 CEST	1.1.1.1	192.168.2.5	0x36a6	No error (0)	static.tildacdn.com	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:25.610666990 CEST	1.1.1.1	192.168.2.5	0x36a6	No error (0)	cl-1707279c.gcdn.co		92.223.124.62	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.610846043 CEST	1.1.1.1	192.168.2.5	0x13d6	No error (0)	static.tildacdn.com	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:25.797317028 CEST	1.1.1.1	192.168.2.5	0xcf6b	No error (0)	stat.tildacdn.com		193.3.17.197	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.797317028 CEST	1.1.1.1	192.168.2.5	0xcf6b	No error (0)	stat.tildacdn.com		193.3.17.198	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.797317028 CEST	1.1.1.1	192.168.2.5	0xcf6b	No error (0)	stat.tildacdn.com		193.3.17.199	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:25.797317028 CEST	1.1.1.1	192.168.2.5	0xcf6b	No error (0)	stat.tildacdn.com		5.181.161.197	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:26.054227114 CEST	1.1.1.1	192.168.2.5	0xd1fb	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:26.054227114 CEST	1.1.1.1	192.168.2.5	0xd1fb	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:28.329628944 CEST	1.1.1.1	192.168.2.5	0xa219	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:28.329628944 CEST	1.1.1.1	192.168.2.5	0xa219	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:28.614588022 CEST	1.1.1.1	192.168.2.5	0x7352	No error (0)	www.google.com		172.217.23.100	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:28.615195036 CEST	1.1.1.1	192.168.2.5	0x89de	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 00:14:28.615470886 CEST	1.1.1.1	192.168.2.5	0x4bd8	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:28.615595102 CEST	1.1.1.1	192.168.2.5	0x578	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:28.615595102 CEST	1.1.1.1	192.168.2.5	0x578	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:28.822043896 CEST	1.1.1.1	192.168.2.5	0x757c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:28.822043896 CEST	1.1.1.1	192.168.2.5	0x757c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:33.796346903 CEST	1.1.1.1	192.168.2.5	0x1806	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 8, 2024 00:14:33.796443939 CEST	1.1.1.1	192.168.2.5	0xaa0	No error (0)	googleads.g.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:33.803097963 CEST	1.1.1.1	192.168.2.5	0xde5	No error (0)	stat.tildacdn.com		5.181.161.197	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:33.803097963 CEST	1.1.1.1	192.168.2.5	0xde5	No error (0)	stat.tildacdn.com		193.3.17.197	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:33.803097963 CEST	1.1.1.1	192.168.2.5	0xde5	No error (0)	stat.tildacdn.com		193.3.17.199	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:33.803097963 CEST	1.1.1.1	192.168.2.5	0xde5	No error (0)	stat.tildacdn.com		193.3.17.198	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:35.367803097 CEST	1.1.1.1	192.168.2.5	0xb50b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 00:14:35.372208118 CEST	1.1.1.1	192.168.2.5	0x40d7	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:35.401969910 CEST	1.1.1.1	192.168.2.5	0xc230	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:35.401969910 CEST	1.1.1.1	192.168.2.5	0xc230	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:35.402040958 CEST	1.1.1.1	192.168.2.5	0x1434	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:45.786997080 CEST	1.1.1.1	192.168.2.5	0xcad6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:14:45.786997080 CEST	1.1.1.1	192.168.2.5	0xcad6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:55.868540049 CEST	1.1.1.1	192.168.2.5	0xf5cf	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:14:55.870206118 CEST	1.1.1.1	192.168.2.5	0xf04e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 00:15:10.147413969 CEST	1.1.1.1	192.168.2.5	0x9c27	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:15:10.147413969 CEST	1.1.1.1	192.168.2.5	0x9c27	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:15:17.100821018 CEST	1.1.1.1	192.168.2.5	0x9592	No error (0)	static.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:15:17.100821018 CEST	1.1.1.1	192.168.2.5	0x9592	No error (0)	cl-1707279c.gcdn.co		92.223.124.62	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:15:17.114227057 CEST	1.1.1.1	192.168.2.5	0x8fe1	No error (0)	static.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:15:17.183325052 CEST	1.1.1.1	192.168.2.5	0x2b81	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:15:17.190742016 CEST	1.1.1.1	192.168.2.5	0xbb95	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 00:15:22.960546970 CEST	1.1.1.1	192.168.2.5	0x7d50	No error (0)	static.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:15:22.960581064 CEST	1.1.1.1	192.168.2.5	0xd3eb	No error (0)	static.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:15:22.960581064 CEST	1.1.1.1	192.168.2.5	0xd3eb	No error (0)	cl-1707279c.gcdn.co		92.223.124.62	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:15:22.977999926 CEST	1.1.1.1	192.168.2.5	0x13cb	No error (0)	static.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:15:22.977999926 CEST	1.1.1.1	192.168.2.5	0x13cb	No error (0)	cl-1707279c.gcdn.co		92.223.124.62	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:15:22.989994049 CEST	1.1.1.1	192.168.2.5	0xd8b9	No error (0)	static.tildacdn.one	cl-1707279c.gcdn.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:15:26.615844965 CEST	1.1.1.1	192.168.2.5	0x2535	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:15:26.615844965 CEST	1.1.1.1	192.168.2.5	0x2535	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:15:38.169123888 CEST	1.1.1.1	192.168.2.5	0x9f58	No error (0)	stat.tildacdn.com		5.181.161.197	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:15:38.169123888 CEST	1.1.1.1	192.168.2.5	0x9f58	No error (0)	stat.tildacdn.com		193.3.17.199	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:15:38.169123888 CEST	1.1.1.1	192.168.2.5	0x9f58	No error (0)	stat.tildacdn.com		193.3.17.197	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:15:38.169123888 CEST	1.1.1.1	192.168.2.5	0x9f58	No error (0)	stat.tildacdn.com		193.3.17.198	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	5.181.161.19	80	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 00:14:15.124866009 CEST	435	OUT	GET / HTTP/1.1 Host: aholding-croatia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 8, 2024 00:14:15.673073053 CEST	465	IN	HTTP/1.1 301 Moved Permanently date: Mon, 07 Oct 2024 22:14:15 GMT content-type: text/html; charset=iso-8859-1 content-length: 237 location: https://aholding-croatia.com/ x-host: aholding-croatia.com x-tilda-server: 18 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 68 6f 6c 64 69 6e 67 2d 63 72 6f 61 74 69 61 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://aholding-croatia.com/">here</a>.</p></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	5.181.161.19	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:16 UTC	663	OUT	GET / HTTP/1.1 Host: aholding-croatia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:16 UTC	304	IN	HTTP/1.1 200 OK date: Mon, 07 Oct 2024 22:14:16 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked last-modified: Fri, 30 Aug 2024 07:44:14 GMT etag: W/"1939f-620e1c1fea17d-gzip" x-frame-options: SAMEORIGIN x-host: aholding-croatia.com x-tilda-server: 12 connection: close
2024-10-07 22:14:16 UTC	1741	IN	Data Raw: 36 43 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 20 3c 21 2d 2d 6d 65 74 61 74 65 78 74 62 6c 6f 63 6b 2d 2d 3e 3c 74 69 74 6c 65 3e e1 90 88 20 41 2d 48 6f 6c 64 69 6e 67 20 43 72 6f 61 74 69 Data Ascii: 6C6<!DOCTYPE html><html lang="en"><head><meta charset="utf-8" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0" /> ...metatextblock--><title> A-Holding Croati
2024-10-07 22:14:16 UTC	2055	IN	Data Raw: 38 30 30 0d 0a 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 74 69 6c 64 61 63 64 6e 2e 6f 6e 65 2f 74 69 6c 64 33 30 33 30 2d 36 36 33 36 2d 34 37 36 34 2d 61 36 33 33 2d 36 33 33 31 36 32 36 31 33 32 33 34 2f 36 2e 70 6e 67 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 39 32 78 31 39 32 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 74 69 6c 64 61 63 64 6e 2e 6f 6e 65 2f 74 69 6c 64 33 30 33 30 2d 36 36 33 36 2d 34 37 36 34 2d 61 36 33 33 2d 36 33 33 31 36 32 36 31 33 32 33 34 2f 36 2e 70 6e 67 22 3e 3c 21 2d 2d 20 41 73 73 65 74 73 20 2d 2d 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 Data Ascii: 800pe="image/png" href="https://static.tildacdn.one/tild3030-6636-4764-a633-633162613234/6.png"><link rel="icon" type="image/png" sizes="192x192" href="https://static.tildacdn.one/tild3030-6636-4764-a633-633162613234/6.png">... Assets --><script src="h
2024-10-07 22:14:16 UTC	16384	IN	Data Raw: 46 46 42 38 0d 0a 28 74 69 6d 65 20 7c 7c 20 31 30 30 29 29 3b 0a 7d 0a 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 74 68 72 6f 74 74 6c 65 28 66 6e 2c 20 74 68 72 65 73 68 68 6f 6c 64 2c 20 73 63 6f 70 65 29 20 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 66 6e 2e 61 70 70 6c 79 28 73 63 6f 70 65 20 7c 7c 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 7d 3b 7d 66 75 6e 63 74 69 6f 6e 20 74 33 39 36 5f 69 6e 69 74 69 61 6c 53 63 61 6c 65 28 74 29 7b 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 63 22 2b 74 29 3b 69 66 28 74 29 7b 74 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 33 39 36 5f 5f 61 72 74 62 6f 61 72 64 22 29 3b 69 66 28 74 29 7b 76 61 72 20 65 2c 72 3d 64 6f 63 75 6d 65 Data Ascii: FFB8(time \|\| 100));}}function t_throttle(fn, threshhold, scope) {return function () {fn.apply(scope \|\| this, arguments);};}function t396_initialScale(t){t=document.getElementById("rec"+t);if(t){t=t.querySelector(".t396__artboard");if(t){var e,r=docume
2024-10-07 22:14:16 UTC	16384	IN	Data Raw: 67 62 61 28 34 35 2c 38 34 2c 38 37 2c 30 2e 39 30 29 22 20 64 61 74 61 2d 6d 65 6e 75 3d 22 79 65 73 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 34 35 34 5f 5f 6d 61 69 6e 63 6f 6e 74 61 69 6e 65 72 20 22 20 73 74 79 6c 65 3d 22 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 34 35 34 5f 5f 6c 6f 67 6f 77 72 61 70 70 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 34 35 34 5f 5f 6c 6f 67 6f 77 72 61 70 70 65 72 32 22 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 3c 61 20 68 72 65 66 3d 22 2f 22 20 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 74 34 35 34 5f 5f 69 6d 67 6c 6f 67 6f 20 74 34 35 34 5f 5f 69 6d 67 6c 6f 67 6f 6d 6f 62 69 6c 65 22 20 0a 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 74 69 6c Data Ascii: gba(45,84,87,0.90)" data-menu="yes"><div class="t454__maincontainer " style=""><div class="t454__logowrapper"><div class="t454__logowrapper2"><div style="display: block;"><a href="/" ><img class="t454__imglogo t454__imglogomobile" src="https://static.til
2024-10-07 22:14:16 UTC	16384	IN	Data Raw: 63 6c 61 73 73 3d 22 74 37 39 34 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 68 6f 6f 6b 3d 22 23 73 75 62 6d 65 6e 75 3a 6c 61 6e 67 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 6d 61 72 67 69 6e 3d 22 31 30 70 78 22 20 64 61 74 61 2d 61 64 64 2d 61 72 72 6f 77 3d 22 6f 6e 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 37 39 34 5f 5f 74 6f 6f 6c 74 69 70 2d 6d 65 6e 75 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 37 39 34 5f 5f 74 6f 6f 6c 74 69 70 2d 6d 65 6e 75 2d 63 6f 72 6e 65 72 22 20 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 37 39 34 5f 5f 63 6f 6e 74 65 6e 74 22 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 74 37 39 34 5f 5f 6c 69 73 74 22 20 72 6f 6c 65 3d 22 6d 65 6e 75 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 22 3e 3c 6c 69 20 63 6c 61 Data Ascii: class="t794" data-tooltip-hook="#submenu:lang" data-tooltip-margin="10px" data-add-arrow="on"><div class="t794__tooltip-menu"><div class="t794__tooltip-menu-corner" ></div><div class="t794__content"><ul class="t794__list" role="menu" aria-label=""><li cla
2024-10-07 22:14:16 UTC	16320	IN	Data Raw: 22 70 78 22 20 64 61 74 61 2d 66 69 65 6c 64 2d 6c 65 66 74 75 6e 69 74 73 2d 76 61 6c 75 65 3d 22 70 78 22 20 64 61 74 61 2d 66 69 65 6c 64 2d 68 65 69 67 68 74 75 6e 69 74 73 2d 76 61 6c 75 65 3d 22 25 22 20 64 61 74 61 2d 66 69 65 6c 64 2d 77 69 64 74 68 75 6e 69 74 73 2d 76 61 6c 75 65 3d 22 25 22 20 64 61 74 61 2d 66 69 65 6c 64 2d 74 6f 70 2d 72 65 73 2d 33 32 30 2d 76 61 6c 75 65 3d 22 30 22 20 64 61 74 61 2d 66 69 65 6c 64 2d 68 65 69 67 68 74 2d 72 65 73 2d 33 32 30 2d 76 61 6c 75 65 3d 22 31 30 30 22 20 64 61 74 61 2d 66 69 65 6c 64 2d 77 69 64 74 68 2d 72 65 73 2d 33 32 30 2d 76 61 6c 75 65 3d 22 31 30 30 22 20 64 61 74 61 2d 66 69 65 6c 64 2d 68 65 69 67 68 74 75 6e 69 74 73 2d 72 65 73 2d 33 32 30 2d 76 61 6c 75 65 3d 22 25 22 20 0a 3e 3c 64 Data Ascii: "px" data-field-leftunits-value="px" data-field-heightunits-value="%" data-field-widthunits-value="%" data-field-top-res-320-value="0" data-field-height-res-320-value="100" data-field-width-res-320-value="100" data-field-heightunits-res-320-value="%" ><d
2024-10-07 22:14:16 UTC	5566	IN	Data Raw: 31 35 42 36 0d 0a 36 30 2e 36 30 38 32 20 37 35 2e 31 39 34 36 48 33 39 2e 33 39 31 38 43 33 31 2e 34 35 35 38 20 37 35 2e 31 39 34 36 20 32 35 20 36 38 2e 37 33 38 20 32 35 20 36 30 2e 38 30 32 38 56 33 39 2e 33 39 31 38 5a 4d 33 36 2e 39 38 38 33 20 35 30 2e 30 30 35 34 43 33 36 2e 39 38 38 33 20 34 32 2e 38 38 34 37 20 34 32 2e 38 34 33 38 20 33 37 2e 30 39 32 32 20 35 30 2e 30 33 39 37 20 33 37 2e 30 39 32 32 43 35 37 2e 32 33 35 36 20 33 37 2e 30 39 32 32 20 36 33 2e 30 39 31 31 20 34 32 2e 38 38 34 37 20 36 33 2e 30 39 31 31 20 35 30 2e 30 30 35 34 43 36 33 2e 30 39 31 31 20 35 37 2e 31 32 35 32 20 35 37 2e 32 33 35 36 20 36 32 2e 39 31 37 37 20 35 30 2e 30 33 39 37 20 36 32 2e 39 31 37 37 43 34 32 2e 38 34 33 20 36 32 2e 39 31 37 37 20 33 36 2e 39 Data Ascii: 15B660.6082 75.1946H39.3918C31.4558 75.1946 25 68.738 25 60.8028V39.3918ZM36.9883 50.0054C36.9883 42.8847 42.8438 37.0922 50.0397 37.0922C57.2356 37.0922 63.0911 42.8847 63.0911 50.0054C63.0911 57.1252 57.2356 62.9177 50.0397 62.9177C42.843 62.9177 36.9
2024-10-07 22:14:16 UTC	16384	IN	Data Raw: 36 46 36 42 0d 0a 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 72 65 63 27 20 2b 20 72 65 63 69 64 29 3b 0a 69 66 20 28 21 72 65 63 29 20 72 65 74 75 72 6e 3b 0a 76 61 72 20 69 6e 70 75 74 57 72 61 70 70 65 72 20 3d 20 72 65 63 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 5b 64 61 74 61 2d 69 6e 70 75 74 2d 6c 69 64 3d 22 27 20 2b 20 6c 69 64 20 2b 20 27 22 5d 27 29 3b 0a 69 66 20 28 21 69 6e 70 75 74 57 72 61 70 70 65 72 29 20 72 65 74 75 72 6e 3b 0a 76 61 72 20 69 6e 70 75 74 48 69 64 64 65 6e 20 3d 20 69 6e 70 75 74 57 72 61 70 70 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 74 2d 63 68 65 63 6b 62 6f 78 65 73 5f 5f 68 69 64 64 65 6e 69 6e 70 75 74 27 29 3b 0a 69 6e 70 75 74 48 69 64 64 65 6e 2e 76 61 6c Data Ascii: 6F6B document.getElementById('rec' + recid);if (!rec) return;var inputWrapper = rec.querySelector('[data-input-lid="' + lid + '"]');if (!inputWrapper) return;var inputHidden = inputWrapper.querySelector('.t-checkboxes__hiddeninput');inputHidden.val
2024-10-07 22:14:16 UTC	12147	IN	Data Raw: 38 39 38 5f 5f 69 63 6f 6e 5f 6c 69 6e 6b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 20 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 38 39 38 5f 5f 62 74 6e 2d 74 65 78 74 20 74 2d 6e 61 6d 65 20 74 2d 6e 61 6d 65 5f 78 73 22 3e 59 6f 75 54 75 62 65 3c 2f 73 70 61 6e 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 38 39 38 5f 5f 73 76 67 5f 5f 77 72 61 70 70 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 38 39 38 5f 5f 73 76 67 5f 5f 62 67 22 3e 3c 2f 64 69 76 3e 3c 69 6d 67 20 73 72 63 3d 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 74 69 6c 64 61 63 64 6e 2e 6f 6e 65 2f 6c 69 62 2f 74 69 6c 64 61 69 63 6f 6e 2f 36 33 33 31 36 35 36 33 2d 33 35 33 Data Ascii: 898__icon_link" target="_blank" rel="nofollow noopener noreferrer"><span class="t898__btn-text t-name t-name_xs">YouTube</span><div class="t898__svg__wrapper"><div class="t898__svg__bg"></div><img src=https://static.tildacdn.one/lib/tildaicon/63316563-353
2024-10-07 22:14:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49718	5.181.161.181	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:17 UTC	548	OUT	GET /js/tilda-fallback-1.0.min.js HTTP/1.1 Host: neo.tildacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:17 UTC	298	IN	HTTP/1.1 200 OK date: Mon, 07 Oct 2024 22:14:17 GMT content-type: application/javascript transfer-encoding: chunked last-modified: Tue, 24 Sep 2024 13:18:37 GMT etag: W/"66f2bc2d-77e" access-control-allow-origin: * access-control-allow-methods: GET x-tilda-server: 24 connection: close
2024-10-07 22:14:17 UTC	1732	IN	Data Raw: 36 42 44 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 5f 66 61 6c 6c 62 61 63 6b 5f 5f 69 6e 69 74 28 29 7b 74 5f 66 61 6c 6c 62 61 63 6b 5f 5f 69 6e 69 74 54 61 67 73 28 22 4c 49 4e 4b 22 29 2c 74 5f 66 61 6c 6c 62 61 63 6b 5f 5f 69 6e 69 74 54 61 67 73 28 22 53 43 52 49 50 54 22 29 2c 22 6c 6f 61 64 69 6e 67 22 21 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 74 5f 66 61 6c 6c 62 61 63 6b 5f 5f 69 6e 69 74 54 61 67 73 28 22 49 4d 47 22 29 3a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 5f 66 61 6c 6c 62 61 63 6b 5f 5f 69 6e 69 74 54 61 67 73 28 22 49 4d 47 22 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 66 61 6c 6c Data Ascii: 6BDfunction t_fallback__init(){t_fallback__initTags("LINK"),t_fallback__initTags("SCRIPT"),"loading"!=document.readyState?t_fallback__initTags("IMG"):document.addEventListener("DOMContentLoaded",(function(){t_fallback__initTags("IMG")}))}function t_fall
2024-10-07 22:14:17 UTC	204	IN	Data Raw: 43 31 0d 0a 6f 6e 74 61 69 6e 73 28 22 74 2d 72 65 63 6f 72 64 73 5f 61 6e 69 6d 61 74 65 64 22 29 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2c 61 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 64 69 76 2e 74 2d 72 65 63 6f 72 64 73 20 7b 6f 70 61 63 69 74 79 3a 20 31 3b 7d 22 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 2c 35 65 33 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: C1ontains("t-records_animated")){var a=document.createElement("style");a.type="text/css",a.innerHTML="div.t-records {opacity: 1;}",document.getElementsByTagName("head")[0].appendChild(a)}}),5e3);0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:17 UTC	563	OUT	GET /css/tilda-grid-3.0.min.css HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:17 UTC	519	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:17 GMT Content-Type: text/css Content-Length: 4514 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 21 Feb 2023 12:52:41 GMT ETag: "63f4be99-11a2" T-Server: or-10 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-399d81012c1a986b10f62b06d7390fac-ebaa17ec8e50db5e-01 X-ID: fr5-hw-edge-gc61 Age: 373878 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-03T14:22:59+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:17 UTC	3847	IN	Data Raw: 2a 2c 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 64 69 76 2c 73 70 61 6e 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 70 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 70 72 65 2c 61 2c 63 6f 64 65 2c 69 6d 67 2c 62 2c 75 2c 69 2c 63 65 6e 74 65 72 2c 74 61 62 6c 65 2c 74 72 2c 74 68 2c 74 64 2c 76 69 64 65 6f 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 73 75 70 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 73 6d 61 6c 6c 65 72 3b 76 Data Ascii: ,:before,*:after{-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box}div,span,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,code,img,b,u,i,center,table,tr,th,td,video{margin:0;padding:0;border:0}sup{line-height:0;font-size:smaller;v
2024-10-07 22:14:17 UTC	667	IN	Data Raw: 64 74 68 5f 31 30 7b 6d 61 78 2d 77 69 64 74 68 3a 37 38 30 70 78 7d 2e 74 2d 77 69 64 74 68 5f 31 31 7b 6d 61 78 2d 77 69 64 74 68 3a 38 36 30 70 78 7d 2e 74 2d 77 69 64 74 68 5f 31 32 7b 6d 61 78 2d 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 74 2d 77 69 64 74 68 5f 31 30 30 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 36 34 30 70 78 7d 2e 74 2d 63 6f 6e 74 61 69 6e 65 72 2e 66 6c 65 78 78 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 74 2d 63 6f 6e 74 61 69 6e 65 72 5f 66 6c 65 78 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 74 2d 63 6f 6c 7b 64 69 73 70 6c 61 79 3a 62 6c Data Ascii: dth_10{max-width:780px}.t-width_11{max-width:860px}.t-width_12{max-width:940px}.t-width_100{max-width:100%}}@media screen and (max-width:960px){.t-container{max-width:640px}.t-container.flexx{display:block}.t-container_flex{display:block}.t-col{display:bl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:17 UTC	602	OUT	GET /ws/project10309827/tilda-blocks-page53186309.min.css?t=1725003854 HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:17 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:17 GMT Content-Type: text/css Content-Length: 58112 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 30 Aug 2024 07:44:14 GMT X-Host: tilda.ws T-Server: or-10 X-ID-SHIELD: am3-hw-edge-gc93 Cache: MISS traceparent: 00-079b87aed3569348804e2bf1dfd965f5-fd9a518291feff4e-01 X-ID: fr5-hw-edge-gc29 Access-Control-Allow-Origin: * Cache: MISS Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:17 UTC	15911	IN	Data Raw: 2e 63 73 73 73 69 7a 65 7b 68 65 69 67 68 74 3a 36 38 32 38 70 78 7d 2e 74 2d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 23 61 6c 6c 72 65 63 6f 72 64 73 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 6e 6f 6e 65 7d 23 61 6c 6c 72 65 63 6f 72 64 73 20 61 7b 63 6f 6c 6f 72 3a 23 66 66 38 35 36 32 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 23 61 6c 6c 72 65 63 6f 72 64 73 20 61 2c 23 61 6c 6c 72 65 63 6f 72 64 73 20 62 75 74 74 6f 6e 2c 23 61 6c 6c 72 65 63 6f 72 64 73 20 2e 74 2d 72 61 64 69 6f 2c 23 61 6c 6c 72 65 63 6f 72 64 73 20 2e 74 2d 63 68 65 63 6b 62 6f 78 2c 23 61 6c 6c 72 65 63 6f 72 64 73 20 2e 74 2d 69 6d 67 2d Data Ascii: .csssize{height:6828px}.t-body{margin:0}#allrecords{-webkit-font-smoothing:antialiased;background-color:none}#allrecords a{color:#ff8562;text-decoration:none}#allrecords a,#allrecords button,#allrecords .t-radio,#allrecords .t-checkbox,#allrecords .t-img-
2024-10-07 22:14:17 UTC	15494	IN	Data Raw: 5f 5f 72 69 67 68 74 5f 62 75 74 74 6f 6e 73 5f 62 75 74 20 2e 74 2d 62 74 6e 5f 73 6d 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 34 70 78 7d 2e 74 34 35 30 5f 5f 72 69 67 68 74 5f 6c 61 6e 67 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 35 70 78 7d 2e 74 34 35 30 5f 5f 72 69 67 68 74 5f 6c 61 6e 67 73 5f 6c 61 6e 67 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 70 78 7d 2e 74 34 35 30 5f 5f 63 6c 6f 73 65 5f 69 63 6f 6e 7b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 Data Ascii: __right_buttons_but .t-btn_sm{padding-left:24px;padding-right:24px}.t450__right_langs{margin-top:25px}.t450__right_langs_lang{display:inline-block;margin-right:2px}.t450__close_icon{width:24px;height:20px;-webkit-transform:rotate(0deg);-moz-transform:rota
2024-10-07 22:14:17 UTC	8648	IN	Data Raw: 62 65 66 6f 72 65 7b 62 6f 74 74 6f 6d 3a 2d 32 30 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 37 39 34 5f 5f 74 6f 6f 6c 74 69 70 2d 6d 65 6e 75 2d 63 6f 72 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 30 70 78 3b 77 69 64 74 68 3a 31 35 70 78 3b 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 70 61 64 64 69 6e 67 2d 62 6f 78 7d 2e 74 37 39 34 5f 5f 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f Data Ascii: before{bottom:-20px;border-top-color:#fff}.t794__tooltip-menu-corner{position:absolute;border:solid transparent;border-width:10px;width:15px;aspect-ratio:1;transform:rotate(45deg);border-color:transparent;background-clip:padding-box}.t794__content{positio
2024-10-07 22:14:17 UTC	16384	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 72 69 67 68 74 3a 30 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 2e 74 33 34 35 2d 73 6f 63 69 61 6c 73 5f 62 6c 6f 63 6b 20 2e 74 33 34 35 2d 73 6f 63 69 61 6c 73 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 61 75 74 6f 3b 72 69 67 68 74 Data Ascii: position:absolute;top:50%;right:0;-moz-transform:translateY(-50%);-ms-transform:translateY(-50%);-webkit-transform:translateY(-50%);-o-transform:translateY(-50%);transform:translateY(-50%)}.t345-socials_block .t345-socials{position:relative;top:auto;right
2024-10-07 22:14:17 UTC	1032	IN	Data Raw: 6c 69 6e 6b 20 2e 74 38 39 38 5f 5f 62 74 6e 2d 74 65 78 74 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 74 38 39 38 5f 5f 69 63 6f 6e 5f 6c 69 6e 6b 3a 68 6f 76 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 32 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 29 7d 2e 74 38 39 38 5f 5f 69 63 6f 6e 5f 6c 69 6e 6b 3a 68 6f 76 65 72 20 2e 74 38 39 38 5f 5f 62 74 6e 2d 74 65 78 74 7b 6f 70 61 63 69 74 79 3a 2e 38 35 7d 2e 74 38 39 38 5f 70 6f 73 5f 6c 65 66 74 20 2e 74 38 39 38 5f 5f 62 74 6e 2d 74 65 78 74 7b 6c 65 66 74 3a 38 30 70 78 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 74 38 39 38 5f 70 6f 73 5f 6c 65 66 74 20 2e 74 38 39 38 5f 5f 62 74 6e 2d 74 65 78 74 3a 3a 61 66 74 65 72 7b 6c 65 66 74 3a 2d 32 30 70 78 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 Data Ascii: link .t898__btn-text{opacity:0}.t898__icon_link:hover{box-shadow:0 0 20px 0 rgba(0,0,0,.4)}.t898__icon_link:hover .t898__btn-text{opacity:.85}.t898_pos_left .t898__btn-text{left:80px;right:auto}.t898_pos_left .t898__btn-text::after{left:-20px;border-right
2024-10-07 22:14:17 UTC	643	IN	Data Raw: 67 68 74 2d 6d 6f 62 69 6c 65 20 2e 74 38 39 38 5f 5f 62 74 6e 2d 74 65 78 74 7b 72 69 67 68 74 3a 38 30 70 78 3b 6c 65 66 74 3a 61 75 74 6f 7d 2e 74 38 39 38 5f 70 6f 73 5f 6c 65 66 74 2d 6d 6f 62 69 6c 65 20 2e 74 38 39 38 5f 5f 62 74 6e 2d 74 65 78 74 7b 6c 65 66 74 3a 38 30 70 78 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 74 38 39 38 5f 70 6f 73 5f 6c 65 66 74 20 2e 74 38 39 38 5f 5f 62 74 6e 2d 74 65 78 74 3a 3a 61 66 74 65 72 2c 2e 74 38 39 38 5f 70 6f 73 5f 6c 65 66 74 2d 6d 6f 62 69 6c 65 20 2e 74 38 39 38 5f 5f 62 74 6e 2d 74 65 78 74 3a 3a 61 66 74 65 72 7b 6c 65 66 74 3a 2d 31 36 70 78 3b 72 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d Data Ascii: ght-mobile .t898__btn-text{right:80px;left:auto}.t898_pos_left-mobile .t898__btn-text{left:80px;right:auto}.t898_pos_left .t898__btn-text::after,.t898_pos_left-mobile .t898__btn-text::after{left:-16px;right:auto;border-left-color:transparent;border-right-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:17 UTC	568	OUT	GET /css/tilda-animation-2.0.min.css HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:17 UTC	513	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:17 GMT Content-Type: text/css Content-Length: 2776 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 14 Feb 2024 13:19:53 GMT ETag: "65ccbdf9-ad8" tserver: 11 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-b88e6cbd1ea64a4f52ec5048f42ef694-8c0c70a80a630019-01 X-ID: fr5-hw-edge-gc8 Age: 141889 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-06T06:49:28+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:17 UTC	1981	IN	Data Raw: 2e 74 33 39 36 20 2e 74 2d 61 6e 69 6d 61 74 65 5b 64 61 74 61 2d 61 6e 69 6d 61 74 65 2d 73 74 79 6c 65 3d 66 61 64 65 69 6e 5d 2c 2e 74 33 39 36 20 2e 74 2d 61 6e 69 6d 61 74 65 5b 64 61 74 61 2d 61 6e 69 6d 61 74 65 2d 73 74 79 6c 65 3d 66 61 64 65 69 6e 64 6f 77 6e 5d 2c 2e 74 33 39 36 20 2e 74 2d 61 6e 69 6d 61 74 65 5b 64 61 74 61 2d 61 6e 69 6d 61 74 65 2d 73 74 79 6c 65 3d 66 61 64 65 69 6e 6c 65 66 74 5d 2c 2e 74 33 39 36 20 2e 74 2d 61 6e 69 6d 61 74 65 5b 64 61 74 61 2d 61 6e 69 6d 61 74 65 2d 73 74 79 6c 65 3d 66 61 64 65 69 6e 72 69 67 68 74 5d 2c 2e 74 33 39 36 20 2e 74 2d 61 6e 69 6d 61 74 65 5b 64 61 74 61 2d 61 6e 69 6d 61 74 65 2d 73 74 79 6c 65 3d 66 61 64 65 69 6e 75 70 5d 2c 2e 74 33 39 36 20 2e 74 2d 61 6e 69 6d 61 74 65 5b 64 61 74 Data Ascii: .t396 .t-animate[data-animate-style=fadein],.t396 .t-animate[data-animate-style=fadeindown],.t396 .t-animate[data-animate-style=fadeinleft],.t396 .t-animate[data-animate-style=fadeinright],.t396 .t-animate[data-animate-style=fadeinup],.t396 .t-animate[dat
2024-10-07 22:14:17 UTC	795	IN	Data Raw: 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 30 70 78 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 30 70 78 2c 30 29 7d 2e 74 2d 61 6e 69 6d 61 74 65 5f 73 74 61 72 74 65 64 5b 64 61 74 61 2d 61 6e 69 6d 61 74 65 2d 73 74 79 6c 65 3d 66 61 64 65 69 6e 72 69 67 68 74 5d 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 74 2d 61 6e 69 6d 61 74 65 5b 64 61 74 61 2d 61 6e 69 6d 61 74 65 2d 73 74 79 6c 65 3d 7a 6f 6f 6d 69 6e 5d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 39 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 39 29 7d 2e 74 2d 61 6e Data Ascii: bkit-transform:translate(-100px,0);transform:translate(-100px,0)}.t-animate_started[data-animate-style=fadeinright]{opacity:1;-webkit-transform:none;transform:none}.t-animate[data-animate-style=zoomin]{-webkit-transform:scale(.9);transform:scale(.9)}.t-an

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49720	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:17 UTC	564	OUT	GET /css/tilda-cards-1.0.min.css HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:17 UTC	512	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:17 GMT Content-Type: text/css Content-Length: 758 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 11 May 2023 15:16:55 GMT ETag: "645d06e7-2f6" tserver: 9 X-ID-SHIELD: am3-hw-edge-gc88 traceparent: 00-5f7de1127803629047cec8d9afb56dd6-451ef050d80ba7a5-01 X-ID: fr5-hw-edge-gc15 Age: 132733 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-06T09:22:04+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:17 UTC	758	IN	Data Raw: 23 61 6c 6c 72 65 63 6f 72 64 73 20 75 6c 2e 74 2d 63 61 72 64 73 5f 5f 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 74 2d 63 61 72 64 73 5f 5f 63 6f 6c 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 20 2e 74 2d 63 61 72 64 73 5f 5f 6c 69 6e 6b 3a 66 6f 63 75 73 2c 23 61 6c 6c 72 65 63 6f 72 64 73 20 2e 74 2d 63 61 72 64 73 5f 5f 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 74 2d 63 61 72 64 73 5f 5f 63 6f 6e 74 61 69 6e 65 72 5f 66 6f 63 75 73 29 20 2e 74 2d 63 61 72 64 73 5f 5f 6c 69 6e 6b 2c 23 61 6c 6c 72 65 63 6f 72 64 73 20 2e 74 2d 63 61 72 64 73 5f 5f 6c 69 6e 6b 5f 73 65 63 6f 6e 64 2c 2e 74 2d 63 61 72 64 73 5f 5f 63 6f 6e 74 Data Ascii: #allrecords ul.t-cards__container{margin-bottom:0;padding-left:0;list-style:none}.t-cards__col:focus-within .t-cards__link:focus,#allrecords .t-cards__container:not(.t-cards__container_focus) .t-cards__link,#allrecords .t-cards__link_second,.t-cards__cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:17 UTC	564	OUT	GET /css/tilda-forms-1.0.min.css HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:17 UTC	517	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:17 GMT Content-Type: text/css Content-Length: 32486 Connection: close Vary: Accept-Encoding last-modified: Thu, 19 Sep 2024 08:34:14 GMT etag: "66ebe206-7ee6" tserver: 11 X-ID-SHIELD: am3-hw-edge-gc88 Age: 1603873 traceparent: 00-4b67405b452f7c9fa01bc774d1be07c5-53a3d5a74c248a82-01 X-ID: fr5-hw-edge-gc62 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-19T09:52:13+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:17 UTC	15433	IN	Data Raw: 5b 64 61 74 61 2d 74 69 6c 64 61 2d 6d 6f 64 65 3d 65 64 69 74 5d 20 2e 74 2d 69 6e 70 75 74 2d 74 69 74 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 2d 73 75 62 6d 69 74 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 68 65 69 67 68 74 3a 36 30 70 78 3b 6d 61 72 67 69 6e 3a 30 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 6c 65 66 Data Ascii: [data-tilda-mode=edit] .t-input-title{margin-bottom:0}.t-submit{-webkit-appearance:none;background-image:none;background:transparent;border:0;box-sizing:border-box;cursor:pointer;font-size:16px;font-weight:700;height:60px;margin:0;outline:none;padding-lef
2024-10-07 22:14:17 UTC	15928	IN	Data Raw: 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6d 6f 76 65 2d 75 70 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 31 35 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 31 35 70 78 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6d 6f 76 65 2d 64 6f 77 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 Data Ascii: -transform:translateY(0);transform:translateY(0)}}@keyframes move-up{0%{-webkit-transform:translateY(15px);transform:translateY(15px)}to{-webkit-transform:translateY(0);transform:translateY(0)}}@-webkit-keyframes move-down{0%{-webkit-transform:translateY(
2024-10-07 22:14:17 UTC	1125	IN	Data Raw: 61 74 61 2d 68 69 64 64 65 6e 2d 62 79 2d 63 6f 6e 64 69 74 69 6f 6e 3d 74 72 75 65 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 37 39 70 78 29 7b 2e 74 2d 69 6e 70 75 74 2d 62 6c 6f 63 6b 5f 72 64 2d 77 69 64 74 68 32 35 0a 09 09 2e 74 2d 6f 77 6e 76 61 72 69 61 6e 74 2d 77 72 61 70 70 65 72 5f 66 6c 65 78 2e 74 2d 63 68 65 63 6b 62 6f 78 65 73 5f 5f 6f 77 6e 76 61 72 69 61 6e 74 5f 77 69 74 68 6c 61 62 65 6c 0a 09 09 2e 74 2d 63 68 65 63 6b 62 6f 78 5f 5f 6f 77 6e 76 61 72 69 61 6e 74 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 2c 2e 74 2d 69 6e 70 75 74 2d 62 6c 6f 63 6b 5f 72 64 2d 77 69 64 74 68 32 35 0a 09 09 2e 74 2d 6f 77 6e 76 61 Data Ascii: ata-hidden-by-condition=true]{display:none!important}@media screen and (max-width:479px){.t-input-block_rd-width25.t-ownvariant-wrapper_flex.t-checkboxes__ownvariant_withlabel.t-checkbox__ownvariant-input-wrapper,.t-input-block_rd-width25.t-ownva

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49722	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:17 UTC	638	OUT	GET /tild3632-3264-4562-a338-656166656465/logologologo_1.svg HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:17 UTC	943	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:17 GMT Content-Type: image/svg+xml Content-Length: 4530 Connection: close Vary: Accept-Encoding access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control cache-control: max-age=5184000 etag: "f4de2d8e4ac649e7aa3af1dd0a3036b7" last-modified: Thu, 18 Jul 2024 14:47:01 GMT x-container-storage-policy-index: 0 x-container-storage-policy-name: Policy-0 x-timestamp: 1721314020.37880 x-trans-id: 17e355fb4b6ecb7b Age: 0 expires: Fri, 06 Dec 2024 22:14:17 GMT tserver: JWhHVWak X-ID-SHIELD: am3-hw-edge-gc93 Cache: MISS traceparent: 00-a2e1658716eb187b766153d40e1afc2b-dfd6c18330541dc5-01 X-ID: fr5-hw-edge-gc8 Access-Control-Allow-Origin: * Cache: MISS Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:17 UTC	3423	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 36 34 22 20 68 65 69 67 68 74 3d 22 36 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 31 5f 36 37 29 22 3e 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 31 5f 36 37 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 6c 75 6d 69 6e 61 6e 63 65 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64" fill="none"><g clip-path="url(#clip0_21_67)"><mask id="mask0_21_67" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0
2024-10-07 22:14:17 UTC	1107	IN	Data Raw: 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 3c 2f 73 74 6f 70 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 38 38 35 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 45 39 42 33 34 41 22 3e 3c 2f 73 74 6f 70 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 36 5f 6c 69 6e 65 61 72 5f 32 31 5f 36 37 22 20 78 31 3d 22 38 33 2e 38 37 37 39 22 20 79 31 3d 22 32 30 2e 31 37 32 37 22 20 78 32 3d 22 32 30 2e 38 37 37 39 22 20 79 32 3d 22 38 34 2e 31 37 32 36 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 Data Ascii: its="userSpaceOnUse"><stop stop-color="white"></stop><stop offset="0.885" stop-color="#E9B34A"></stop></linearGradient><linearGradient id="paint6_linear_21_67" x1="83.8779" y1="20.1727" x2="20.8779" y2="84.1726" gradientUnits="userSpaceOnUse"><stop stop-c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49724	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:18 UTC	648	OUT	GET /lib/tildaicon/63316563-3530-4438-b236-386566363465/sn_youtube.svg HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:18 UTC	914	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:18 GMT Content-Type: image/svg+xml Content-Length: 1031 Connection: close Vary: Accept-Encoding access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control cache-control: max-age=5184000 etag: "87fbe1db74a2d2eac711cd7a5351643a" last-modified: Tue, 27 Dec 2016 15:55:43 GMT x-container-storage-policy-index: 0 x-container-storage-policy-name: Policy-0 x-timestamp: 1482854142.35481 Age: 0 expires: Fri, 06 Dec 2024 22:14:18 GMT tserver: 5GiJX0mZ X-ID-SHIELD: am3-hw-edge-gc89 Cache: MISS traceparent: 00-c5ffd6f45f946de15c8bdb694383edd7-d551bf5127299bb9-01 X-ID: fr5-hw-edge-gc33 Access-Control-Allow-Origin: * Cache: MISS Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:18 UTC	1031	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 21.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49725	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:18 UTC	650	OUT	GET /lib/tildaicon/62623164-6334-4465-b161-343730373230/sn_instagram.svg HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:19 UTC	945	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:18 GMT Content-Type: image/svg+xml Content-Length: 1396 Connection: close Vary: Accept-Encoding Access-Control-Expose-Headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control Cache-Control: max-age=5184000 Etag: "576a1e5d4cfe0025f5b7d4e472e029a0" Last-Modified: Tue, 27 Dec 2016 15:35:26 GMT x-container-storage-policy-index: 0 x-container-storage-policy-name: Policy-0 X-Timestamp: 1482852925.49937 Age: 26087 Expires: Fri, 06 Dec 2024 14:59:31 GMT T-Server: or-10 X-ID-SHIELD: am3-hw-edge-gc93 traceparent: 00-a670ed9d69af410c06b9426e893216fd-193e25c391fd9ae5-01 X-ID: fr5-hw-edge-gc22 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-07T14:59:31+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:19 UTC	1396	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 21.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49727	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:19 UTC	550	OUT	GET /js/tilda-scripts-3.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:19 UTC	546	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 20692 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 11 Sep 2024 13:28:14 GMT ETag: "66e19aee-50d4" tserver: 13 X-ID-SHIELD: am3-hw-edge-gc89 Age: 2276026 traceparent: 00-fad19b171247192ae7715fcd2bb93ded-e6571cdf5c62cb88-01 X-ID: fr5-hw-edge-gc32 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-11T14:00:53+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:19 UTC	15404	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 6f 6e 52 65 61 64 79 28 74 29 7b 22 6c 6f 61 64 69 6e 67 22 21 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 74 28 29 3a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 61 64 64 43 6c 61 73 73 28 74 2c 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 3f 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 65 29 3a 74 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 28 74 2e 63 6c 61 73 73 4e 61 6d 65 3f 22 20 22 3a 22 22 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 2c 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 Data Ascii: function t_onReady(t){"loading"!=document.readyState?t():document.addEventListener("DOMContentLoaded",t)}function t_addClass(t,e){document.body.classList?t.classList.add(e):t.className+=(t.className?" ":"")+e}function t_removeClass(t,e){document.body.clas
2024-10-07 22:14:19 UTC	5288	IN	Data Raw: 6f 64 75 63 74 2d 63 6f 6e 74 72 6f 6c 73 2d 77 72 61 70 70 65 72 29 3a 6e 6f 74 28 2e 6a 73 2d 70 72 6f 64 75 63 74 2d 65 64 69 74 69 6f 6e 2d 6f 70 74 69 6f 6e 29 3a 6e 6f 74 28 2e 74 2d 70 72 6f 64 75 63 74 5f 5f 6f 70 74 69 6f 6e 2d 76 61 72 69 61 6e 74 73 29 27 29 2c 63 3d 30 3b 63 3c 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 75 3d 73 5b 63 5d 3b 64 2e 73 74 79 6c 65 2e 77 6f 72 64 42 72 65 61 6b 3d 22 22 3b 76 61 72 20 68 3d 74 5f 6f 75 74 65 72 57 69 64 74 68 28 75 29 3b 69 66 28 68 3e 65 29 7b 69 66 28 22 79 65 73 22 3d 3d 3d 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 5b 64 61 74 61 2d 63 75 73 74 6f 6d 73 74 79 6c 65 5d 22 29 26 26 22 66 61 6c 73 65 22 3d 3d 3d 75 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 67 65 74 41 74 74 72 69 62 75 Data Ascii: oduct-controls-wrapper):not(.js-product-edition-option):not(.t-product__option-variants)'),c=0;c<s.length;c++){var u=s[c];d.style.wordBreak="";var h=t_outerWidth(u);if(h>e){if("yes"===u.getAttribute("[data-customstyle]")&&"false"===u.parentNode.getAttribu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49729	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:19 UTC	587	OUT	GET /ws/project10309827/tilda-blocks-page53186309.min.js?t=1725003854 HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:19 UTC	545	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 22042 Connection: close Vary: Accept-Encoding last-modified: Fri, 30 Aug 2024 07:44:15 GMT x-host: tilda.ws tserver: 5GiJX0mZ X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-e694a353d09c4638ab2f1a68103dd374-56092bd91140f43b-01 X-ID: fr5-hw-edge-gc22 Age: 41742 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-07T10:38:37+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:19 UTC	15405	IN	Data Raw: 77 69 6e 64 6f 77 2e 69 73 4d 6f 62 69 6c 65 3d 21 31 3b 69 66 28 2f 41 6e 64 72 6f 69 64 7c 77 65 62 4f 53 7c 69 50 68 6f 6e 65 7c 69 50 61 64 7c 69 50 6f 64 7c 42 6c 61 63 6b 42 65 72 72 79 7c 49 45 4d 6f 62 69 6c 65 7c 4f 70 65 72 61 20 4d 69 6e 69 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 29 7b 77 69 6e 64 6f 77 2e 69 73 4d 6f 62 69 6c 65 3d 21 30 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 5f 74 68 72 6f 74 74 6c 65 28 66 6e 2c 74 68 72 65 73 68 68 6f 6c 64 2c 73 63 6f 70 65 29 7b 76 61 72 20 6c 61 73 74 3b 76 61 72 20 64 65 66 65 72 54 69 6d 65 72 3b 74 68 72 65 73 68 68 6f 6c 64 7c 7c 28 74 68 72 65 73 68 68 6f 6c 64 3d 32 35 30 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6f 6e 74 65 Data Ascii: window.isMobile=!1;if(/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)){window.isMobile=!0}function t_throttle(fn,threshhold,scope){var last;var deferTimer;threshhold\|\|(threshhold=250);return function(){var conte
2024-10-07 22:14:19 UTC	6637	IN	Data Raw: 72 28 27 2e 74 2d 74 69 6c 64 61 6c 61 62 65 6c 27 29 3b 69 66 28 21 74 69 6c 64 61 4c 61 62 65 6c 29 72 65 74 75 72 6e 3b 74 37 31 38 5f 5f 66 61 64 65 4f 75 74 28 74 69 6c 64 61 4c 61 62 65 6c 29 7d 2c 35 30 29 7d 7d 2c 33 30 30 29 7d 65 6c 73 65 7b 74 37 31 38 5f 73 63 72 6f 6c 6c 54 6f 54 6f 70 28 74 61 72 67 65 74 29 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 6e 70 75 74 73 57 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 74 37 31 38 5f 5f 69 6e 70 75 74 73 62 6f 78 5f 68 69 64 64 65 6e 27 29 7d 2c 34 30 30 29 7d 0a 76 61 72 20 73 75 63 63 65 73 73 55 72 6c 3d 66 6f 72 6d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 73 75 63 63 65 73 73 2d 75 72 6c 27 29 3b 69 66 28 73 75 63 63 65 73 73 Data Ascii: r('.t-tildalabel');if(!tildaLabel)return;t718__fadeOut(tildaLabel)},50)}},300)}else{t718_scrollToTop(target);setTimeout(function(){inputsWrapper.classList.add('t718__inputsbox_hidden')},400)}var successUrl=form.getAttribute('data-success-url');if(success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49728	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:19 UTC	551	OUT	GET /js/tilda-lazyload-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:19 UTC	544	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 24232 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 09 Feb 2024 13:58:04 GMT ETag: "65c62f6c-5ea8" tserver: 8 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-a51ad0a2a649ca4b6cc72114cda0f6a2-312bc9b00c7faa52-01 X-ID: fr5-hw-edge-gc12 Age: 993722 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-26T10:12:17+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:19 UTC	15406	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 6c 61 7a 79 6c 6f 61 64 5f 5f 69 6e 69 74 28 29 7b 74 5f 6c 61 7a 79 6c 6f 61 64 5f 5f 64 65 74 65 63 74 77 65 62 70 28 29 3b 76 61 72 20 65 6c 41 6c 6c 52 65 63 73 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 61 6c 6c 72 65 63 6f 72 64 73 22 29 3b 65 6c 41 6c 6c 52 65 63 73 26 26 22 79 65 73 22 3d 3d 3d 65 6c 41 6c 6c 52 65 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 69 6c 64 61 2d 69 6d 67 6f 70 74 69 6d 6f 66 66 22 29 3f 77 69 6e 64 6f 77 2e 6c 61 7a 79 5f 69 6d 67 6f 70 74 69 6d 6f 66 66 3d 22 79 65 73 22 3a 77 69 6e 64 6f 77 2e 6c 61 7a 79 5f 69 6d 67 6f 70 74 69 6d 6f 66 66 3d 22 22 3b 66 6f 72 28 76 61 72 20 65 6c 73 74 6f 53 6b 69 70 3d 64 6f 63 75 6d 65 6e Data Ascii: function t_lazyload__init(){t_lazyload__detectwebp();var elAllRecs=document.querySelector("#allrecords");elAllRecs&&"yes"===elAllRecs.getAttribute("data-tilda-imgoptimoff")?window.lazy_imgoptimoff="yes":window.lazy_imgoptimoff="";for(var elstoSkip=documen
2024-10-07 22:14:19 UTC	8826	IN	Data Raw: 6e 64 65 78 4f 66 28 22 2f 2d 2f 22 29 3e 2d 31 29 72 65 74 75 72 6e 20 73 74 72 3b 69 66 28 73 74 72 2e 69 6e 64 65 78 4f 66 28 22 6c 69 62 22 29 3e 2d 31 29 72 65 74 75 72 6e 20 73 74 72 3b 69 66 28 22 79 22 21 3d 3d 77 69 6e 64 6f 77 2e 6c 61 7a 79 5f 77 65 62 70 29 72 65 74 75 72 6e 20 73 74 72 3b 69 66 28 22 79 22 3d 3d 3d 77 69 6e 64 6f 77 2e 6c 61 7a 79 5f 65 72 72 5f 74 68 75 6d 62 29 72 65 74 75 72 6e 20 73 74 72 3b 76 61 72 20 61 72 72 72 3d 73 74 72 2e 73 70 6c 69 74 28 22 2f 22 29 2c 6e 65 77 73 74 72 3b 72 65 74 75 72 6e 20 61 72 72 72 2e 73 70 6c 69 63 65 28 73 74 72 2e 73 70 6c 69 74 28 22 2f 22 29 2e 6c 65 6e 67 74 68 2d 31 2c 30 2c 22 2d 2f 66 6f 72 6d 61 74 2f 77 65 62 70 22 29 2c 5f 67 65 74 54 68 75 6d 62 55 72 6c 28 61 72 72 72 2e 6a Data Ascii: ndexOf("/-/")>-1)return str;if(str.indexOf("lib")>-1)return str;if("y"!==window.lazy_webp)return str;if("y"===window.lazy_err_thumb)return str;var arrr=str.split("/"),newstr;return arrr.splice(str.split("/").length-1,0,"-/format/webp"),_getThumbUrl(arrr.j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49730	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:19 UTC	552	OUT	GET /js/tilda-animation-2.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:19 UTC	546	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 34334 Connection: close Vary: Accept-Encoding last-modified: Thu, 12 Sep 2024 09:13:02 GMT etag: "66e2b09e-861e" tserver: 11 X-ID-SHIELD: am3-hw-edge-gc89 Age: 2206082 traceparent: 00-e48db78aa362e2f2b75377bb2750fe6d-5d57c49ac4fc155c-01 X-ID: fr5-hw-edge-gc27 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-12T11:03:24+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:19 UTC	15838	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 61 6e 69 6d 61 74 65 5f 5f 69 6e 69 74 28 29 7b 74 5f 61 6e 69 6d 61 74 65 5f 5f 63 68 65 63 6b 41 6e 69 6d 61 74 69 6f 6e 41 76 61 69 6c 61 62 69 6c 69 74 79 28 29 26 26 28 74 5f 61 6e 69 6d 61 74 65 5f 5f 67 65 6e 65 72 61 74 65 53 74 79 6c 65 73 28 29 2c 74 5f 61 6e 69 6d 61 74 65 5f 5f 77 72 61 70 54 65 78 74 57 69 74 68 4f 70 61 63 69 74 79 28 29 2c 74 5f 61 6e 69 6d 61 74 65 5f 5f 61 64 64 4e 6f 48 6f 76 65 72 43 6c 61 73 73 54 6f 42 74 6e 73 28 29 2c 74 5f 61 6e 69 6d 61 74 65 5f 5f 70 72 65 76 65 6e 74 48 6f 72 69 7a 6f 6e 74 61 6c 53 63 72 6f 6c 6c 28 29 2c 31 32 30 30 3c 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 26 26 74 5f 61 6e 69 6d 61 74 65 5f 5f 70 61 72 73 65 4e 75 6d 62 65 72 54 65 78 74 28 29 Data Ascii: function t_animate__init(){t_animate__checkAnimationAvailability()&&(t_animate__generateStyles(),t_animate__wrapTextWithOpacity(),t_animate__addNoHoverClassToBtns(),t_animate__preventHorizontalScroll(),1200<=window.innerWidth&&t_animate__parseNumberText()
2024-10-07 22:14:19 UTC	16384	IN	Data Raw: 61 6c 6c 28 61 29 2c 6e 3d 30 2c 69 3d 30 2c 72 3d 74 2e 69 74 65 6d 73 4f 66 66 73 65 74 73 5b 30 5d 2c 6f 3d 74 5f 61 6e 69 6d 61 74 65 5f 5f 67 65 74 44 65 6c 61 79 46 72 6f 6d 50 72 65 76 69 6f 75 73 53 63 72 6f 6c 6c 45 76 65 6e 74 28 74 2c 2e 31 36 29 2c 73 3d 74 5f 61 6e 69 6d 61 74 65 5f 5f 67 65 74 53 65 63 74 69 6f 6e 48 65 61 64 44 65 61 6c 79 28 74 29 3b 61 2e 6c 65 6e 67 74 68 26 26 61 5b 30 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 74 2d 61 6e 69 6d 61 74 65 5f 5f 63 68 61 69 6e 5f 66 69 72 73 74 2d 69 6e 2d 72 6f 77 22 29 3b 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 61 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 6d 3d 61 5b 6c 5d 2c 63 3d 74 2e 69 74 65 6d 73 4f 66 66 73 65 74 73 5b 6c 5d 3b 69 66 28 21 28 63 3c 65 29 29 62 Data Ascii: all(a),n=0,i=0,r=t.itemsOffsets[0],o=t_animate__getDelayFromPreviousScrollEvent(t,.16),s=t_animate__getSectionHeadDealy(t);a.length&&a[0].classList.add("t-animate__chain_first-in-row");for(var l=0;l<a.length;l++){var m=a[l],c=t.itemsOffsets[l];if(!(c<e))b
2024-10-07 22:14:19 UTC	22	IN	Data Raw: 63 75 72 54 6f 70 4f 66 66 73 65 74 3d 65 2e 67 65 74 42 6f 75 6e Data Ascii: curTopOffset=e.getBoun
2024-10-07 22:14:19 UTC	2090	IN	Data Raw: 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 74 6f 70 2b 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 2c 65 3d 74 5f 61 6e 69 6d 61 74 69 6f 6e 5f 5f 67 65 74 5a 6f 6f 6d 28 74 29 2c 77 69 6e 64 6f 77 2e 69 73 4f 6e 6c 79 53 63 61 6c 61 62 6c 65 7c 7c 28 74 2e 63 75 72 54 6f 70 4f 66 66 73 65 74 2a 3d 65 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 61 6e 69 6d 61 74 69 6f 6e 5f 5f 67 65 74 5a 6f 6f 6d 28 74 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 2e 73 63 61 6c 65 46 61 63 74 6f 72 29 72 65 74 75 72 6e 20 74 2e 73 63 61 6c 65 46 61 63 74 6f 72 3b 74 3d 74 2e 63 6c 6f 73 65 73 74 28 22 2e 74 33 39 36 5f 5f 61 72 74 62 6f 61 72 64 22 29 3b 69 66 28 21 74 29 72 65 74 75 72 6e 20 31 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 Data Ascii: dingClientRect().top+window.pageYOffset,e=t_animation__getZoom(t),window.isOnlyScalable\|\|(t.curTopOffset*=e))})}function t_animation__getZoom(t){if(void 0!==t.scaleFactor)return t.scaleFactor;t=t.closest(".t396__artboard");if(!t)return 1;var e=document.qu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49733	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:19 UTC	640	OUT	GET /tild3634-6139-4566-a231-383662633464/-/resizeb/20x/image.png HTTP/1.1 Host: thb.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:19 UTC	452	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:19 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close cache-control: public expires: Wed, 06 Nov 2024 23:59:59 GMT x-resize-server: 3 T-Server: or-7 X-ID-SHIELD: am3-hw-edge-gc93 Cache: MISS traceparent: 00-06075da5e89ff337aaab86cc02469a31-1aad3c7483958b9a-01 X-ID: fr5-hw-edge-gc62 Access-Control-Allow-Origin: * Cache: MISS X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:19 UTC	664	IN	Data Raw: 32 39 31 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 0b 08 06 00 00 00 7f 09 ad 43 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 02 43 49 44 41 54 28 91 1d 91 d9 8e db 46 10 45 f9 bb 01 12 c4 86 23 0d 47 d2 8c 56 6e cd 5e d8 1b 17 6d 71 6c 03 4e be f2 a4 c6 0f 17 d5 7d d1 3c 75 ab 58 bc d9 89 bd 9b 39 f9 85 2a dc 68 d2 1d 35 3e d1 f3 57 ec f2 8d e1 f6 03 ff f8 49 78 fe 2b fa 0f 2f d5 c9 dd 88 df 4d 5f a9 d2 8d e3 90 d9 f5 8e b2 ee 28 f6 6e e4 28 3a 0f 23 d5 30 d1 86 09 15 17 74 be e2 c6 3b 7e 7e 12 ae ff 10 ef df 44 df 89 0f 69 20 d5 89 d7 4f 0f 09 b0 c8 b7 89 bd b6 6c 1b 01 1e 6c e6 64 23 67 1b a8 44 8d f3 74 2e d0 fb 88 0d 89 21 8d 84 71 21 ce 37 d2 f2 20 5e 3f 1a 3c 19 e6 3b 5a fc 2e 7e 04 09 1c b5 Data Ascii: 291PNGIHDRCpHYs~CIDAT(FE#GVn^mqlN}<uX9*h5>WIx+/M_(n(:#0t;~~Di Olld#gDt.!q!7 ^?<;Z.~
2024-10-07 22:14:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49732	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:19 UTC	640	OUT	GET /tild3039-3739-4331-b732-363433636164/-/resizeb/20x/image.png HTTP/1.1 Host: thb.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:19 UTC	453	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:19 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close cache-control: public expires: Thu, 07 Nov 2024 23:59:59 GMT x-resize-server: 1 T-Server: or-10 X-ID-SHIELD: am3-hw-edge-gc88 Cache: MISS traceparent: 00-7df8d698c76e04eb653034a1cd0e81e6-e53c747735451be1-01 X-ID: fr5-hw-edge-gc61 Access-Control-Allow-Origin: * Cache: MISS X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:19 UTC	656	IN	Data Raw: 32 38 39 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 0a 08 06 00 00 00 b4 55 7e e6 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 02 3b 49 44 41 54 28 91 1d 90 69 93 a2 48 10 40 f9 97 bb 31 1b b3 bd 33 dd b6 dd 1e e3 2d 5e 20 c8 a5 08 0a 48 71 29 3d 3f f5 4d ba 1f 5e 64 66 55 d4 cb cc d2 3e 7d 93 5e b0 a7 7f b4 18 86 36 a3 b3 c3 34 f2 98 5f 7c 96 d7 00 5d a2 7e f1 58 c6 2e 8b b3 cd f4 68 30 f2 37 f4 9d 25 1f f6 8c 8e 39 e6 e7 ee 17 2f db 01 df b7 7d b4 c9 69 cd e4 b4 61 16 6e 59 44 26 7a 6c b1 be 3a ec 52 1f 33 0b b0 b2 23 d6 4d 90 7c 9f 7a 18 17 9b cd d9 60 79 5c 31 f5 e7 fc 72 c6 f4 ad 01 5d f3 93 8e d1 45 5b 47 73 d6 d1 82 4d ac b3 bb 6c 30 af 26 56 7a c0 b9 79 f8 ea c8 b1 08 39 95 21 e1 33 4a 1d dc Data Ascii: 289PNGIHDRU~pHYs~;IDAT(iH@13-^ Hq)=?M^dfU>}^64_\|]~X.h07%9/}ianYD&zl:R3#M\|z`y\1r]E[GsMl0&Vzy9!3J
2024-10-07 22:14:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49734	162.125.66.15	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:19 UTC	630	OUT	GET /scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0 HTTP/1.1 Host: dl.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://aholding-croatia.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-10-07 22:14:20 UTC	597	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf8 Cache-Control: no-cache Content-Security-Policy: sandbox Location: https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0 Date: Mon, 07 Oct 2024 22:14:19 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Robots-Tag: noindex, nofollow, noimageindex Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1de9a8878ea9478d9ae5a7ab4a0a3651 Connection: close Transfer-Encoding: chunked
2024-10-07 22:14:20 UTC	219	IN	Data Raw: 64 35 0d 0a 33 30 32 20 46 6f 75 6e 64 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 77 61 73 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 73 3a 2f 2f 64 6c 2e 64 72 6f 70 62 6f 78 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 6b 7a 65 6b 62 36 77 34 35 33 64 38 63 38 75 69 67 6e 32 79 37 2f 49 4d 47 5f 34 31 33 38 2d 31 2d 31 2e 6d 70 34 3f 72 6c 6b 65 79 3d 6e 31 61 38 75 76 30 30 77 34 6d 62 33 74 6b 38 32 72 73 65 63 70 73 78 31 26 73 74 3d 37 38 73 30 64 73 78 6c 26 64 6c 3d 30 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a 0d 0a Data Ascii: d5302 FoundThe resource was found at https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0;you should be redirected automatically.
2024-10-07 22:14:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49735	162.125.66.15	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:19 UTC	628	OUT	GET /scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0 HTTP/1.1 Host: dl.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://aholding-croatia.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-10-07 22:14:20 UTC	595	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf8 Cache-Control: no-cache Content-Security-Policy: sandbox Location: https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0 Date: Mon, 07 Oct 2024 22:14:19 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Robots-Tag: noindex, nofollow, noimageindex Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a7b549c491094f2a99ab7cee0ad29424 Connection: close Transfer-Encoding: chunked
2024-10-07 22:14:20 UTC	217	IN	Data Raw: 64 33 0d 0a 33 30 32 20 46 6f 75 6e 64 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 77 61 73 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 73 3a 2f 2f 64 6c 2e 64 72 6f 70 62 6f 78 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 34 70 6e 6f 65 6d 39 39 75 78 61 34 6d 73 66 37 75 65 63 73 30 2f 49 4d 47 5f 34 31 33 38 2d 32 2e 6d 70 34 3f 72 6c 6b 65 79 3d 34 33 70 6b 79 31 74 30 73 72 7a 65 69 66 62 6c 74 31 31 67 75 78 73 30 33 26 73 74 3d 78 74 6f 39 68 37 62 73 26 64 6c 3d 30 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a 0d 0a Data Ascii: d3302 FoundThe resource was found at https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0;you should be redirected automatically.
2024-10-07 22:14:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49736	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:19 UTC	550	OUT	GET /js/tilda-menusub-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:20 UTC	548	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 21012 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 07 May 2024 09:29:55 GMT ETag: "6639f493-5214" T-Server: or-7 X-ID-SHIELD: am3-hw-edge-gc88 traceparent: 00-7301faad8aeaf3db07e612036796a81a-8526e67ddf0a56f7-01 X-ID: fr5-hw-edge-gc62 Age: 414538 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-03T03:05:21+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:20 UTC	15402	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 6d 65 6e 75 73 75 62 5f 69 6e 69 74 28 72 65 63 69 64 29 7b 76 61 72 20 72 65 63 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 63 22 2b 72 65 63 69 64 29 3b 69 66 28 72 65 63 29 69 66 28 74 5f 6d 65 6e 75 73 75 62 5f 5f 69 73 42 6c 6f 63 6b 56 69 73 69 62 6c 65 28 72 65 63 29 29 74 5f 6d 65 6e 75 73 75 62 5f 5f 6c 61 7a 79 49 6e 69 74 28 72 65 63 69 64 29 3b 65 6c 73 65 7b 76 61 72 20 6d 65 6e 75 49 73 49 6e 69 74 65 64 3d 21 31 2c 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 6d 65 6e 75 49 73 49 6e 69 74 65 64 26 26 74 5f 6d 65 6e 75 73 75 62 5f 5f 69 73 42 6c 6f 63 6b 56 69 73 69 62 6c 65 28 72 65 63 29 26 26 28 6d 65 6e 75 Data Ascii: function t_menusub_init(recid){var rec=document.getElementById("rec"+recid);if(rec)if(t_menusub__isBlockVisible(rec))t_menusub__lazyInit(recid);else{var menuIsInited=!1,orientationchangeEvent=function(){!menuIsInited&&t_menusub__isBlockVisible(rec)&&(menu
2024-10-07 22:14:20 UTC	5610	IN	Data Raw: 65 6e 75 73 75 62 5f 5f 69 73 4d 6f 62 69 6c 65 4d 45 34 30 31 28 77 72 61 70 4d 45 34 30 31 29 7b 76 61 72 20 77 72 61 70 4d 45 34 30 31 4d 65 6e 75 3d 77 72 61 70 4d 45 34 30 31 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 32 38 30 5f 5f 6d 65 6e 75 22 29 2c 77 72 61 70 4d 45 34 30 31 42 6f 74 74 6f 6d 3d 77 72 61 70 4d 45 34 30 31 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 32 38 30 5f 5f 62 6f 74 74 6f 6d 22 29 2c 77 72 61 70 4d 45 34 30 31 43 6f 6e 74 61 69 6e 65 72 3d 77 72 61 70 4d 45 34 30 31 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 32 38 30 5f 5f 63 6f 6e 74 61 69 6e 65 72 22 29 2c 6d 65 6e 75 48 65 69 67 68 74 3d 77 72 61 70 4d 45 34 30 31 4d 65 6e 75 3f 77 72 61 70 4d 45 34 30 31 4d 65 6e 75 2e 6f 66 66 73 65 74 Data Ascii: enusub__isMobileME401(wrapME401){var wrapME401Menu=wrapME401.querySelector(".t280__menu"),wrapME401Bottom=wrapME401.querySelector(".t280__bottom"),wrapME401Container=wrapME401.querySelector(".t280__container"),menuHeight=wrapME401Menu?wrapME401Menu.offset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49740	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:20 UTC	547	OUT	GET /js/tilda-menu-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:20 UTC	549	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 11580 Connection: close Vary: Accept-Encoding last-modified: Tue, 27 Aug 2024 11:12:21 GMT etag: "66cdb495-2d3c" t-server: or-7 X-ID-SHIELD: am3-hw-edge-gc93 Age: 3581647 traceparent: 00-21fa5a8d9fb943cc86d637e5cec209e4-acd12c6c9335f080-01 X-ID: fr5-hw-edge-gc62 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-08-27T12:54:58+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:20 UTC	11057	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 6d 65 6e 75 5f 5f 68 69 67 68 6c 69 67 68 74 41 63 74 69 76 65 4c 69 6e 6b 73 28 65 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 6e 2c 72 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 3b 22 2f 22 3d 3d 3d 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 28 6e 3d 74 2e 73 6c 69 63 65 28 30 2c 2d 31 29 29 2c 22 2f 22 3d 3d 3d 72 5b 72 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 28 72 3d 72 2e 73 6c 69 63 65 28 30 2c 2d 31 29 29 2c 22 2f 22 3d 3d 3d 72 5b 30 5d 26 26 28 72 3d 72 2e 73 6c 69 63 65 28 31 29 29 2c 22 22 3d 3d 3d 72 26 26 28 72 3d 22 2f 22 29 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 41 72 Data Ascii: function t_menu__highlightActiveLinks(e){var t=window.location.href,n,r=window.location.pathname;"/"===t[t.length-1]&&(n=t.slice(0,-1)),"/"===r[r.length-1]&&(r=r.slice(0,-1)),"/"===r[0]&&(r=r.slice(1)),""===r&&(r="/");var i=document.querySelectorAll(e);Ar
2024-10-07 22:14:20 UTC	523	IN	Data Raw: 6e 28 29 29 7d 29 29 7d 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 74 5f 6d 65 6e 75 5f 5f 66 6f 63 75 73 4f 6e 4d 65 6e 75 49 74 65 6d 28 65 29 2c 74 5f 6d 65 6e 75 5f 5f 69 6e 74 65 72 61 63 74 57 69 74 68 4d 65 6e 75 46 72 6f 6d 4b 65 79 62 6f 61 72 64 28 65 29 2c 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 2d 6d 65 6e 75 73 75 62 5f 5f 6d 65 6e 75 22 29 7c 7c 77 69 6e 64 6f 77 2e 69 73 4d 6f 62 69 6c 65 7c 7c 22 6f 6e 74 6f 75 63 68 65 6e 64 22 69 6e 20 64 6f 63 75 6d 65 6e 74 7c 7c 74 5f 6d 65 6e 75 5f 5f 63 6c 69 63 6b 4f 6e 4d 65 6e 75 49 74 65 6d 28 65 29 7d 29 29 2c 41 72 72 61 79 2e 70 72 Data Ascii: n())}))};Array.prototype.forEach.call(n,(function(e){var t;t_menu__focusOnMenuItem(e),t_menu__interactWithMenuFromKeyboard(e),!e.parentNode.querySelector(".t-menusub__menu")\|\|window.isMobile\|\|"ontouchend"in document\|\|t_menu__clickOnMenuItem(e)})),Array.pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49739	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:20 UTC	547	OUT	GET /js/tilda-zero-1.1.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:20 UTC	545	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 26847 Connection: close Vary: Accept-Encoding last-modified: Tue, 10 Sep 2024 10:38:20 GMT etag: "66e0219c-68df" tserver: 9 X-ID-SHIELD: am3-hw-edge-gc88 Age: 2373447 traceparent: 00-50166071f67d40b1468d5d02ebf95156-987c984952790bf0-01 X-ID: fr5-hw-edge-gc22 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-10T13:51:41+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:20 UTC	15405	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 33 39 36 5f 69 6e 69 74 28 65 29 7b 76 61 72 20 69 2c 74 2c 6e 2c 6f 2c 72 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 63 22 2b 65 29 2c 6c 3d 61 3f 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 33 39 36 22 29 3a 6e 75 6c 6c 2c 64 3d 61 3f 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 33 39 36 5f 5f 61 72 74 62 6f 61 72 64 22 29 3a 6e 75 6c 6c 3b 64 26 26 28 74 33 39 36 5f 69 6e 69 74 54 4e 6f 62 6a 28 65 2c 64 29 2c 74 33 39 36 5f 5f 69 6e 69 74 4f 6e 6c 79 53 63 61 6c 61 62 6c 65 28 29 2c 72 3d 74 33 39 36 5f 64 65 74 65 63 74 52 65 73 6f 6c 75 74 69 6f 6e 28 65 29 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 6c 6c Data Ascii: function t396_init(e){var i,t,n,o,r,a=document.getElementById("rec"+e),l=a?a.querySelector(".t396"):null,d=a?a.querySelector(".t396__artboard"):null;d&&(t396_initTNobj(e,d),t396__initOnlyScalable(),r=t396_detectResolution(e),i=document.getElementById("all
2024-10-07 22:14:20 UTC	11442	IN	Data Raw: 6d 28 74 2c 65 2c 69 29 7b 76 61 72 20 6e 2c 6f 2c 72 3b 28 65 3d 74 33 39 36 5f 67 65 74 45 6c 28 65 29 29 26 26 28 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 69 65 6c 64 73 22 2c 22 77 69 64 74 68 2c 74 6f 70 2c 6c 65 66 74 2c 69 6e 70 75 74 73 2c 63 6f 6e 74 61 69 6e 65 72 2c 61 78 69 73 78 2c 61 78 69 73 79 2c 77 69 64 74 68 75 6e 69 74 73 2c 6c 65 66 74 75 6e 69 74 73 2c 74 6f 70 75 6e 69 74 73 22 29 2c 6f 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 65 6c 65 6d 2d 69 64 22 29 2c 28 72 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 6e 2d 61 74 6f 6d 5f 5f 69 6e 70 75 74 73 2d 74 65 78 74 61 72 65 61 22 29 29 26 26 28 6e 3d 72 2e 76 61 6c 75 65 29 2c 74 5f 6f 6e 46 75 6e 63 4c 6f 61 64 28 22 74 Data Ascii: m(t,e,i){var n,o,r;(e=t396_getEl(e))&&(e.setAttribute("data-fields","width,top,left,inputs,container,axisx,axisy,widthunits,leftunits,topunits"),o=e.getAttribute("data-elem-id"),(r=e.querySelector(".tn-atom__inputs-textarea"))&&(n=r.value),t_onFuncLoad("t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49742	5.181.161.181	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:20 UTC	368	OUT	GET /js/tilda-fallback-1.0.min.js HTTP/1.1 Host: neo.tildacdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:20 UTC	298	IN	HTTP/1.1 200 OK date: Mon, 07 Oct 2024 22:14:20 GMT content-type: application/javascript transfer-encoding: chunked last-modified: Tue, 24 Sep 2024 13:18:37 GMT etag: W/"66f2bc2d-77e" access-control-allow-origin: * access-control-allow-methods: GET x-tilda-server: 12 connection: close
2024-10-07 22:14:20 UTC	1728	IN	Data Raw: 36 42 39 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 5f 66 61 6c 6c 62 61 63 6b 5f 5f 69 6e 69 74 28 29 7b 74 5f 66 61 6c 6c 62 61 63 6b 5f 5f 69 6e 69 74 54 61 67 73 28 22 4c 49 4e 4b 22 29 2c 74 5f 66 61 6c 6c 62 61 63 6b 5f 5f 69 6e 69 74 54 61 67 73 28 22 53 43 52 49 50 54 22 29 2c 22 6c 6f 61 64 69 6e 67 22 21 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 74 5f 66 61 6c 6c 62 61 63 6b 5f 5f 69 6e 69 74 54 61 67 73 28 22 49 4d 47 22 29 3a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 5f 66 61 6c 6c 62 61 63 6b 5f 5f 69 6e 69 74 54 61 67 73 28 22 49 4d 47 22 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 66 61 6c 6c Data Ascii: 6B9function t_fallback__init(){t_fallback__initTags("LINK"),t_fallback__initTags("SCRIPT"),"loading"!=document.readyState?t_fallback__initTags("IMG"):document.addEventListener("DOMContentLoaded",(function(){t_fallback__initTags("IMG")}))}function t_fall
2024-10-07 22:14:20 UTC	208	IN	Data Raw: 43 35 0d 0a 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 74 2d 72 65 63 6f 72 64 73 5f 61 6e 69 6d 61 74 65 64 22 29 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2c 61 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 64 69 76 2e 74 2d 72 65 63 6f 72 64 73 20 7b 6f 70 61 63 69 74 79 3a 20 31 3b 7d 22 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 2c 35 65 33 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: C5st.contains("t-records_animated")){var a=document.createElement("style");a.type="text/css",a.innerHTML="div.t-records {opacity: 1;}",document.getElementsByTagName("head")[0].appendChild(a)}}),5e3);0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49738	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:20 UTC	556	OUT	GET /js/tilda-submenublocks-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:20 UTC	545	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 21814 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 04 Sep 2024 12:04:10 GMT ETag: "66d84cba-5536" tserver: 9 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-690c192a06700dfc43c08efce89c59a7-0f0a569783cd25f5-01 X-ID: fr5-hw-edge-gc37 Age: 2886821 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-04T12:20:39+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:20 UTC	15405	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 73 75 62 6d 65 6e 75 62 6c 6f 63 6b 73 5f 5f 68 69 67 68 6c 69 67 68 74 41 63 74 69 76 65 4c 69 6e 6b 73 28 65 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2c 6f 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2c 65 3d 28 22 22 3d 3d 3d 28 6e 3d 22 2f 22 3d 3d 3d 28 6e 3d 22 2f 22 3d 3d 3d 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 3f 6e 2e 73 6c 69 63 65 28 30 2c 2d 31 29 3a 6e 29 5b 30 5d 3f 6e 2e 73 6c 69 63 65 28 31 29 3a 6e 29 26 26 28 6e 3d 22 2f 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 29 3b 28 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 Data Ascii: function t_submenublocks__highlightActiveLinks(e){var t=window.location.href,n=window.location.pathname,o=window.location.hash,e=(""===(n="/"===(n="/"===n[n.length-1]?n.slice(0,-1):n)[0]?n.slice(1):n)&&(n="/"),document.querySelectorAll(e));(e=Array.protot
2024-10-07 22:14:20 UTC	6409	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 75 2d 3d 6f 2c 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 75 2b 22 70 78 22 2c 75 3c 3d 30 26 26 28 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 22 2c 65 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 22 2c 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 28 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 73 29 29 7d 2c 31 30 29 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 73 75 62 6d 65 6e 75 62 6c 6f 63 6b 73 5f 5f 73 6c 69 64 65 44 6f 77 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 2c 75 2c 73 2c 6c 2c 63 3b 65 26 26 28 74 3d 74 7c 7c 33 30 30 2c 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 22 2c 6f 3d 22 6e 6f 6e 65 22 3d 3d Data Ascii: function(){u-=o,e.style.height=u+"px",u<=0&&(e.style.height="",e.style.overflow="",e.style.display="none","function"==typeof n&&n(),clearInterval(s))},10))}function t_submenublocks__slideDown(e,t,n){var o,u,s,l,c;e&&(t=t\|\|300,e.style.display="",o="none"==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49741	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:21 UTC	548	OUT	GET /js/tilda-cards-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:21 UTC	547	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:21 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2163 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 10 Sep 2024 12:07:15 GMT ETag: "66e03673-873" T-Server: or-7 X-ID-SHIELD: am3-hw-edge-gc88 Age: 2368665 traceparent: 00-e4a7090b810fcf7b0698e2e6f19b9077-f7ff0d7befa5c23b-01 X-ID: fr5-hw-edge-gc27 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-10T13:14:10+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:21 UTC	2163	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 63 61 72 64 73 5f 5f 6d 6f 76 65 43 6c 69 63 6b 4f 6e 43 61 72 64 28 74 29 7b 74 5f 63 61 72 64 5f 5f 6d 6f 76 65 43 6c 69 63 6b 4f 6e 43 61 72 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 63 61 72 64 73 5f 5f 61 64 64 46 6f 63 75 73 4f 6e 54 61 62 28 74 29 7b 74 5f 63 61 72 64 5f 5f 61 64 64 46 6f 63 75 73 4f 6e 54 61 62 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 63 61 72 64 5f 5f 6d 6f 76 65 43 6c 69 63 6b 4f 6e 43 61 72 64 28 74 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 63 22 2b 74 29 3b 69 66 28 65 29 7b 76 61 72 20 63 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 74 2d 63 61 72 64 5f 5f 63 6f 6c 22 29 3b 63 26 26 41 72 72 61 79 2e Data Ascii: function t_cards__moveClickOnCard(t){t_card__moveClickOnCard(t)}function t_cards__addFocusOnTab(t){t_card__addFocusOnTab(t)}function t_card__moveClickOnCard(t){var e=document.getElementById("rec"+t);if(e){var c=e.querySelectorAll(".t-card__col");c&&Array.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49749	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:21 UTC	548	OUT	GET /js/tilda-forms-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:21 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:21 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 58750 Connection: close Vary: Accept-Encoding last-modified: Tue, 01 Oct 2024 12:08:10 GMT etag: "66fbe62a-e57e" t-server: JWhHVWak X-ID-SHIELD: am3-hw-edge-gc93 Age: 554156 traceparent: 00-1cba104645068866340e67fec6279ad8-6c57fadf59a95652-01 X-ID: fr5-hw-edge-gc38 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-01T14:18:56+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:21 UTC	15832	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 66 6f 72 6d 73 5f 5f 69 6e 69 74 46 6f 72 6d 73 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 72 3a 6e 6f 74 28 5b 64 61 74 61 2d 72 65 63 6f 72 64 2d 74 79 70 65 3d 22 31 30 39 33 22 5d 29 27 29 3b 77 69 6e 64 6f 77 2e 74 5f 66 6f 72 6d 73 5f 5f 69 6e 70 75 74 44 61 74 61 3d 7b 7d 2c 74 5f 66 6f 72 6d 73 5f 5f 61 64 64 52 65 63 61 70 74 63 68 61 28 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 69 64 3b 77 69 6e 64 6f 77 2e 69 6e 69 74 46 6f 72 6d 73 5b 65 5d 7c 7c 28 74 5f 66 6f 72 6d 73 5f 5f 69 6e 69 74 45 76 65 6e 74 50 6c 61 63 65 68 6f 6c Data Ascii: function t_forms__initForms(){var t=document.querySelectorAll('.r:not([data-record-type="1093"])');window.t_forms__inputData={},t_forms__addRecaptcha(),Array.prototype.forEach.call(t,(function(t){var e=t.id;window.initForms[e]\|\|(t_forms__initEventPlacehol
2024-10-07 22:14:21 UTC	16384	IN	Data Raw: 69 6c 64 28 72 2c 65 29 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 6e 2e 73 72 63 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2e 73 72 63 2e 76 61 6c 75 65 2c 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 2c 74 5f 72 65 6d 6f 76 65 45 6c 28 65 29 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 66 6f 72 6d 73 5f 5f 6f 6e 53 75 63 63 65 73 73 28 74 29 7b 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 7c 7c 28 74 3d 74 5b 30 5d 29 3b 76 61 72 20 65 3d 74 2e 63 6c 6f 73 65 73 74 28 22 2e 72 22 29 2c 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 72 65 63 6f 72 64 2d 74 79 70 65 22 29 2c 6f 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 Data Ascii: ild(r,e);else{var n=document.createElement("script");n.src=e.attributes.src.value,t.appendChild(n),t_removeEl(e)}}))}function t_forms__onSuccess(t){t instanceof Element\|\|(t=t[0]);var e=t.closest(".r"),r=e.getAttribute("data-record-type"),o=t.querySelector
2024-10-07 22:14:21 UTC	22	IN	Data Raw: 31 30 39 33 20 5b 64 61 74 61 2d 65 6c 65 6d 2d 74 79 70 65 3d 22 Data Ascii: 1093 [data-elem-type="
2024-10-07 22:14:21 UTC	16384	IN	Data Raw: 66 6f 72 6d 22 5d 27 29 29 7b 76 61 72 20 68 3d 77 69 6e 64 6f 77 2e 74 50 6f 70 75 70 4f 62 6a 26 26 77 69 6e 64 6f 77 2e 74 50 6f 70 75 70 4f 62 6a 2e 6f 70 65 6e 50 6f 70 55 70 4c 69 73 74 3b 69 66 28 68 26 26 68 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 67 2c 76 3d 27 2e 74 31 30 39 33 20 2e 74 2d 70 6f 70 75 70 5b 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 68 6f 6f 6b 3d 22 27 2b 68 5b 68 2e 6c 65 6e 67 74 68 2d 31 5d 2b 27 22 5d 27 2c 62 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 76 29 2c 45 3d 62 3f 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 62 29 2e 7a 49 6e 64 65 78 3a 30 2c 78 3b 45 3e 31 65 34 26 26 28 75 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 45 2b 31 29 7d 65 6c 73 65 20 75 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 Data Ascii: form"]')){var h=window.tPopupObj&&window.tPopupObj.openPopUpList;if(h&&h.length){var g,v='.t1093 .t-popup[data-tooltip-hook="'+h[h.length-1]+'"]',b=document.querySelector(v),E=b?getComputedStyle(b).zIndex:0,x;E>1e4&&(u.style.zIndex=E+1)}else u.style.zInde
2024-10-07 22:14:21 UTC	10128	IN	Data Raw: 72 6d 52 65 73 75 6c 74 2e 6f 72 64 65 72 49 64 3b 76 61 72 20 64 61 74 61 45 76 65 6e 74 4e 61 6d 65 3d 66 6f 72 6d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 69 6c 64 61 2d 65 76 65 6e 74 2d 6e 61 6d 65 22 29 7c 7c 22 22 3b 64 61 74 61 45 76 65 6e 74 4e 61 6d 65 7c 7c 28 64 61 74 61 45 76 65 6e 74 4e 61 6d 65 3d 22 79 22 3d 3d 3d 64 61 74 61 46 6f 72 6d 43 61 72 74 26 26 6f 62 6a 44 61 74 61 26 26 28 6f 62 6a 44 61 74 61 2e 6e 65 78 74 26 26 6f 62 6a 44 61 74 61 2e 6e 65 78 74 2e 74 79 70 65 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 6f 62 6a 44 61 74 61 2e 6e 65 78 74 2e 74 79 70 65 7c 7c 6f 62 6a 44 61 74 61 2e 6e 65 78 74 2e 76 61 6c 75 65 26 26 28 22 73 74 72 69 70 65 76 33 22 3d 3d 3d 6f 62 6a 44 61 74 61 2e 6e 65 78 74 2e Data Ascii: rmResult.orderId;var dataEventName=form.getAttribute("data-tilda-event-name")\|\|"";dataEventName\|\|(dataEventName="y"===dataFormCart&&objData&&(objData.next&&objData.next.type&&("function"!==objData.next.type\|\|objData.next.value&&("stripev3"===objData.next.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49750	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:21 UTC	553	OUT	GET /js/tilda-zero-scale-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:21 UTC	544	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:21 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4480 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 10 Sep 2024 10:38:20 GMT ETag: "66e0219c-1180" tserver: 9 X-ID-SHIELD: am3-hw-edge-gc89 Age: 2373448 traceparent: 00-53cfd7570eda78326b2eef8e006572e5-964ba89863412394-01 X-ID: fr5-hw-edge-gc31 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-10T13:51:42+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:21 UTC	3822	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 33 39 36 5f 73 63 61 6c 65 42 6c 6f 63 6b 28 74 29 7b 76 61 72 20 65 2c 64 2c 61 2c 6c 2c 75 3d 74 33 39 36 5f 69 73 4f 6e 6c 79 53 63 61 6c 61 62 6c 65 42 72 6f 77 73 65 72 28 29 2c 70 3d 74 33 39 36 5f 64 65 74 65 63 74 52 65 73 6f 6c 75 74 69 6f 6e 28 74 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 63 22 2b 74 29 3b 6f 26 26 28 65 3d 74 33 39 36 5f 73 63 61 6c 65 5f 5f 67 65 74 45 6c 65 6d 65 6e 74 73 54 6f 53 63 61 6c 65 28 6f 3d 6f 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 33 39 36 5f 5f 61 72 74 62 6f 61 72 64 22 29 29 2c 6f 26 26 30 21 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 74 Data Ascii: function t396_scaleBlock(t){var e,d,a,l,u=t396_isOnlyScalableBrowser(),p=t396_detectResolution(t),o=document.getElementById("rec"+t);o&&(e=t396_scale__getElementsToScale(o=o.querySelector(".t396__artboard")),o&&0!==e.length&&(d="function"==typeof window.t
2024-10-07 22:14:21 UTC	658	IN	Data Raw: 75 65 28 74 2c 22 68 65 69 67 68 74 22 29 2c 61 3d 74 33 39 36 5f 65 6c 65 6d 5f 5f 67 65 74 48 65 69 67 68 74 28 74 2c 61 29 2c 61 3d 74 33 39 36 5f 65 6c 65 6d 5f 5f 63 6f 6e 76 65 72 74 50 6f 73 69 74 69 6f 6e 5f 5f 4c 6f 63 61 6c 5f 5f 74 6f 41 62 73 6f 6c 75 74 65 28 74 2c 22 68 65 69 67 68 74 22 2c 61 29 2c 65 3d 74 33 39 36 5f 65 6c 65 6d 5f 5f 67 65 74 46 69 65 6c 64 56 61 6c 75 65 28 74 2c 22 77 69 64 74 68 22 29 2c 65 3d 74 33 39 36 5f 65 6c 65 6d 5f 5f 67 65 74 57 69 64 74 68 28 74 2c 65 29 2c 65 3d 74 33 39 36 5f 65 6c 65 6d 5f 5f 63 6f 6e 76 65 72 74 50 6f 73 69 74 69 6f 6e 5f 5f 4c 6f 63 61 6c 5f 5f 74 6f 41 62 73 6f 6c 75 74 65 28 74 2c 22 77 69 64 74 68 22 2c 65 29 2c 6f 3d 70 61 72 73 65 46 6c 6f 61 74 28 74 33 39 36 5f 65 6c 65 6d 5f 5f Data Ascii: ue(t,"height"),a=t396_elem__getHeight(t,a),a=t396_elem__convertPosition__Local__toAbsolute(t,"height",a),e=t396_elem__getFieldValue(t,"width"),e=t396_elem__getWidth(t,e),e=t396_elem__convertPosition__Local__toAbsolute(t,"width",e),o=parseFloat(t396_elem__

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49751	162.125.66.15	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:21 UTC	639	OUT	GET /scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0 HTTP/1.1 Host: dl.dropboxusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://aholding-croatia.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-10-07 22:14:22 UTC	1113	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Accept-Ranges: bytes Cache-Control: max-age=60 Content-Disposition: inline; filename="IMG_4138 (2).mp4"; filename*=UTF-8''IMG_4138%20%282%29.mp4 Content-Range: bytes 0-14441862/14441863 Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups Content-Security-Policy: form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none' Etag: 1723460180182744n Pragma: public Set-Cookie: uc_session=wL8yegLwKwd8XuDYE3o7P7lw18mW4GwwGlou39UCmCGpbizgPGIaDDfJXWWwCsOZ; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff Date: Mon, 07 Oct 2024 22:14:22 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Robots-Tag: noindex, nofollow, noimageindex Content-Length: 14441863 X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 80bcce4e273c40f1adb5471f43b736a9 Connection: close
2024-10-07 22:14:22 UTC	15271	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 24 e6 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e8 00 00 1d 8f 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 0f ff 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 1d 8f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 04 38 00 00 07 80 00 00 00 00 00 24 65 64 74 Data Ascii: ftypisomisomiso2avc1mp41$moovlmvhd@trak\tkhd@8$edt
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: 34 c5 75 fd 38 ae ff d3 8a e2 d8 2d 3f 6d b4 b1 48 5d 32 fc 7a 5a e9 62 a2 29 47 fa db 4b 4b 4b 14 b4 05 3e 58 66 32 24 99 4b 15 24 c2 77 a6 9b cb d3 14 f5 f5 e2 99 69 3e b5 ae ba 9e b8 b9 a9 bf 2c 25 81 91 63 83 52 09 06 94 cf 8c 10 56 f6 f5 0a df 5d 75 fc 24 0f 44 0a 41 27 a3 c5 a1 11 c3 5e ff 4f 15 ce 07 05 ab 6b b6 2e 6a 51 fd b6 f8 e8 3c 34 42 c3 42 8c 56 d6 d6 96 29 9a 99 7e db 69 ff 08 7c 63 ae a1 3b eb ae ba 26 ba e2 98 8e bd bf 4f 51 75 d7 5d 75 ff 82 11 42 8e aa a6 0c bc a1 1a e9 69 69 69 69 69 69 69 69 62 90 80 c7 66 bf 7f e2 82 a4 15 d7 d0 5c 2c 88 29 16 bf e9 a6 2b af e9 d4 4c 54 d4 04 7f a6 96 2b a0 0b fa 75 3c 53 15 4a bf a6 29 63 0a 74 d3 f1 48 50 69 96 4e bf b6 d6 99 6a 3e 2a 6a 65 fb 6d 8a 7a 65 fb 6d 99 e3 69 6c f1 53 56 f7 ff 83 05 87 Data Ascii: 4u8-?mH]2zZb)GKKK>Xf2$K$wi>,%cRV]u$DA'^Ok.jQ<4BBV)~i\|c;&OQu]uBiiiiiiiibf\,)+LT+u<SJ)ctHPiNj>*jemzemilSV
2024-10-07 22:14:22 UTC	1113	IN	Data Raw: 1a b6 c1 80 40 57 41 c4 36 74 7d 22 73 5d 69 5b e0 53 1f 62 39 00 3c e1 93 62 95 76 51 32 62 71 55 6f ba 82 3c d9 20 33 3e 0a a0 26 d3 a0 f8 17 98 62 7d 81 44 2e 8a 62 93 60 6a a1 7d e4 14 1a cb 00 05 c0 9d 5a 00 02 2a 31 a2 08 0c 6a 27 77 68 a7 94 00 fb 81 b1 6b 1f 1a d8 00 10 f9 a9 e0 85 0d e4 d6 01 f9 4d 75 d8 64 54 81 9e 11 00 17 34 45 22 9e ad 96 8f db c8 02 d9 7a 1f 6b f2 fe cb 3a 08 40 7f 5a 4c 00 fd 49 9b a4 c4 c2 b3 95 63 15 4e a9 30 51 24 40 01 d8 79 78 de bb 43 09 6c 70 60 68 47 e8 0b a4 15 cd 50 7c 71 a3 a3 c2 50 3d 2a 94 a2 a9 25 e3 d6 cd 18 85 68 b5 f9 5a 39 0d 93 be f0 f5 26 3a dd 6a a7 00 54 04 b2 57 60 e2 62 4b d6 93 2c 95 12 88 5d c3 55 4a 9e 82 fb 95 69 21 40 5a a0 62 4a 5d 73 64 40 81 da a7 03 4a a6 a0 d9 c4 b3 04 c0 a1 75 c2 a4 d2 c4 Data Ascii: @WA6t}"s]i[Sb9<bvQ2bqUo< 3>&b}D.b`j}Z1j'whkMudT4E"zk:@ZLIcN0Q$@yxClp`hGP\|qP=%hZ9&:jTW`bK,]UJi!@ZbJ]sd@Ju
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: a0 3b 80 e6 91 88 5c 28 d3 29 57 07 49 04 3a af 58 ae be a9 40 b9 b5 ad 7c aa 44 26 03 e2 31 46 f8 7a 0b 2f 26 28 03 52 4b 60 30 d3 13 a2 f8 2a 70 3a 62 19 aa 30 d0 a9 45 02 dd e8 75 65 10 2d 58 1b a8 76 22 b0 2a a8 aa 83 d1 d5 2e 91 52 ff 6e 37 d0 34 cf d0 b7 16 eb 1c 57 ff c3 ea 05 56 74 35 80 da 58 68 05 4d 35 86 a0 ca 67 49 78 77 68 09 16 87 16 72 63 8f 70 76 6c 63 a6 d1 d3 8d 6f 60 5a 73 d8 9e 55 87 55 e4 42 ac 71 2a 00 c1 57 96 15 c1 0a 89 42 97 46 fd 39 09 83 07 b0 ee 24 1f 52 cb 2c 2f a6 9d bb c7 c5 dd f7 52 16 89 9a e5 71 c2 d6 c2 a3 d8 96 46 d8 78 0a 36 0e 4c 9e 12 30 53 07 bf 88 68 10 8f 9e 96 00 ea 52 46 f2 5f 95 2f f4 ea c0 8c 15 5d 14 47 4a 89 9e b0 47 51 2d 48 18 2d 46 7d b9 03 8c d8 57 71 1c 28 80 f8 06 57 45 90 1a 37 8f c0 5e 60 00 83 bd Data Ascii: ;\()WI:X@\|D&1Fz/&(RK`0p:b0Eue-Xv".Rn74WVt5XhM5gIxwhrcpvlco`ZsUUBq*WBF9$R,/RqFx6L0ShRF_/]GJGQ-H-F}Wq(WE7^`
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: fb 04 90 65 0e ac 80 aa a2 0d 98 b0 28 6f b9 da 80 14 b4 36 7c 71 ca 7c c6 f8 c4 e6 55 5a 8a dc 41 2a 8d 10 e8 a7 18 d4 2f 6d 78 d4 95 c3 18 a5 7f 1d c2 03 d1 1f c1 b8 3c a4 81 a7 2e 74 92 c7 d9 52 c4 42 83 1a c1 16 8e 06 3b 0a c7 23 e9 f5 d0 da 22 60 b3 53 f9 85 74 18 a9 9b 42 e0 73 b8 88 d4 6b 28 10 a6 e6 1f 7e 33 40 4a de e7 1a 03 31 f0 b1 3d 34 81 65 a3 67 58 01 5a 12 c1 50 e8 b9 d9 b0 b8 7f 29 b9 1b 2a 55 06 f4 fd a0 e8 a0 e0 cc e4 31 a4 54 49 4d 34 38 fa 07 22 cc 49 ac bf b2 82 4c 4e 03 ae c3 b9 b8 11 e5 8e 2c 66 8d 41 7f 88 9e ec 6d c3 35 f9 30 cb 93 2b f8 11 48 15 e7 89 54 d4 07 33 55 00 5e a4 76 96 90 18 c5 1f 5b 08 9a 8c ba 2b 01 99 58 5f 4c 03 4a e2 9c 27 26 d9 ea fb d9 74 88 6e ec 16 9e 25 88 53 57 84 73 01 41 d3 5a 06 25 50 43 c7 44 2e 00 6c Data Ascii: e(o6\|q\|UZA/mx<.tRB;#"`StBsk(~3@J1=4egXZP)U1TIM48"ILN,fAm50+HT3U^v[+X_LJ'&tn%SWsAZ%PCD.l
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: 27 b2 60 a9 28 bf 90 11 9a e3 90 4c 24 67 08 d5 67 31 f5 ae 69 04 4c 44 1c 10 6d ca d8 39 85 83 68 42 02 59 24 a8 38 dd 48 09 d3 13 59 a1 cc 69 a6 04 5d bc 83 3f ce c9 cc 87 f4 1f 44 47 7c f7 27 c6 6a c2 e4 12 a2 07 4a 4a f9 66 88 89 2f b6 db 72 b9 8a 9f c3 79 15 37 fc 6b 01 39 0d f8 2a ce a6 59 92 c7 d4 a8 32 a6 2c 56 26 42 5a a8 47 72 2e 0f 09 b4 de cd 26 a0 3c 66 02 be 84 26 06 35 95 00 00 89 2c af 98 07 98 97 b8 41 38 b7 81 3e 13 05 8f 60 f8 ec e6 d0 07 82 45 06 1a 22 47 a6 6a 05 31 2d 63 65 85 e9 0b 45 85 bc 7d 3d 75 a4 00 87 92 37 73 2c 94 b2 a4 b0 75 61 e3 c2 fd 09 5d 17 1e 9e 2e ae 82 6a cd 8d a9 a8 b2 83 e6 4d a6 18 44 dd 40 3d b8 a8 8a 1d 1a 83 13 da 26 0e 39 83 58 c3 71 95 6a 15 be dc b1 2c a8 ba 1e f1 54 84 b4 a0 00 10 63 a0 d9 cd ad b3 70 8e Data Ascii: '`(L$gg1iLDm9hBY$8HYi]?DG\|'jJJf/ry7k9*Y2,V&BZGr.&<f&5,A8>`E"Gj1-ceE}=u7s,ua].jMD@=&9Xqj,Tcp
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: db f4 74 37 60 17 bc 48 0c 26 f2 44 64 a9 12 f1 a4 14 00 c3 5a 61 a1 ea 32 19 d6 c5 7b c0 c7 88 7d ca 3b 1b fa 6e 60 56 e6 60 57 11 0a 29 b8 3d d2 c9 f0 2d 4b 14 71 ab 47 98 6d a0 7b ba 33 52 79 5e 1b 69 02 40 7f b6 6c d1 94 01 84 a7 31 0a dd a2 df 8d 5a 45 85 35 3e 7c 07 f7 f2 d1 5a 65 51 9a 6d 89 a8 b8 ab 55 a2 c6 08 e0 0d 3d 9b 81 c2 08 d6 ca 9e 81 06 94 21 80 9e ea 4b ef 86 85 2d 11 7c 02 ca 95 40 1d cd 20 66 0d 72 ab c7 0d ce 65 5d 9e 9e 65 4c f0 18 32 ca 55 31 3b c4 b7 8b 88 d6 a9 c0 fe 85 5d cb ae 54 41 bb e5 e4 49 6b d3 b8 15 1b 10 4b 69 51 14 a0 76 c3 88 0b c0 02 41 93 87 7c ec 3b 32 e6 c0 b1 6a 19 99 cd ff fa 25 a9 b6 2f 5f 37 ab f1 4b d9 b0 84 ae 6a 5f ed c1 82 cb 82 d8 1d 43 13 e1 50 f8 96 2c 5d 65 88 9b e6 fc 02 fa 71 ae 86 62 d4 2b c5 d9 7e Data Ascii: t7`H&DdZa2{};n`V`W)=-KqGm{3Ry^i@l1ZE5>\|ZeQmU=!K-\|@ fre]eL2U1;]TAIkKiQvA\|;2j%/_7Kj_CP,]eqb+~
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: 03 ae ec 17 1d f4 75 71 21 4d e4 65 01 0c 15 05 79 2a de b0 3b a1 b8 2d 50 5f 42 72 1b 51 2b 43 01 fa a7 c0 6a 94 7d 71 8b 2a a3 5c ba 87 b2 58 06 60 08 39 72 d5 92 40 70 36 0e be 9a 07 fa 7a 63 d4 c6 82 e0 ee 09 d4 ae 83 b1 a1 53 08 8b 0b dd 45 d7 72 3d 80 1d 0c 01 e8 4a 98 f9 99 d4 a8 6e 1f 0a 94 0d 28 0e b9 ad 37 53 62 d2 f9 86 a0 b6 6b 50 5f cf 6e a8 15 8f 4d 31 ba dc 63 e7 77 37 75 87 20 9d 33 b9 36 ce 08 bb c8 ca ca 6c 94 01 e3 7c 34 12 d6 68 a1 d5 22 03 27 30 9c a0 32 8d 10 bc d0 1a 49 03 b5 44 b6 fb 34 82 73 00 08 36 69 22 55 74 99 12 90 78 07 fa 44 00 18 a2 4a fe fc f5 76 65 8b 91 3a 92 d1 2d 87 4b 6a 0b 6e 93 59 15 4c 09 61 8a ad 30 4a b5 b3 69 11 de 87 4b 90 5e 48 00 a9 b1 22 90 84 c8 7e b4 57 e3 d8 5b e0 80 16 0a 0a 18 e0 74 b6 c0 26 cf 73 8c Data Ascii: uq!Mey;-P_BrQ+Cj}q\X`9r@p6zcSEr=Jn(7SbkP_nM1cw7u 36l\|4h"'02ID4s6i"UtxDJve:-KjnYLa0JiK^H"~W[t&s
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: b3 23 07 8d 49 c6 fd 82 b3 20 a0 2b cf f9 bc b2 11 93 ee 2c 2a a4 91 45 0e 83 74 ba c5 30 02 85 76 9c f8 39 b7 12 81 40 eb 3a 63 55 ba 7f b9 61 d6 a9 0d 53 93 b9 55 25 17 59 26 63 5d c6 aa 36 75 20 f2 c0 5b e4 a1 0b 02 f6 fa 07 f7 b6 7f 19 77 3a 88 d6 a6 37 3b b2 d3 e1 50 99 c2 a7 4d c7 42 97 cb 9a 47 87 a1 60 96 51 0a b3 8c 56 ed 8d 41 a4 d9 f6 f0 c2 a2 87 44 99 a0 e8 d9 74 00 18 45 7f b0 14 d1 c1 30 2b 31 68 0c 0a 48 0d 5b ed 81 87 60 df b6 da 64 f5 95 06 ef bb d0 54 14 99 b5 c7 89 c0 45 9b 4e 1d de 60 d3 81 91 a1 5b 88 ec 5e 9b 04 d4 7f 04 d3 00 24 8d 49 e5 70 ba 00 98 3d 90 8e 94 39 24 dc 34 10 51 a3 c1 d3 0e f4 82 07 af 92 60 83 53 7d 49 41 d0 8a 7e be a0 9a 32 aa ad 15 5c c8 ad 40 3f 98 81 ba 80 27 e6 87 c9 5b a7 77 b7 5f 62 a9 93 e4 23 62 1e 3e 43 Data Ascii: #I +,*Et0v9@:cUaSU%Y&c]6u [w:7;PMBG`QVADtE0+1hH[`dTEN`[^$Ip=9$4Q`S}IA~2\@?'[w_b#b>C
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: 77 8e fd 52 01 8a 16 e1 7a ef 92 05 75 12 90 fd 0e c3 db 65 c1 53 04 58 90 03 cc 70 dd 3e c3 78 d1 21 10 24 5c 92 8a 49 86 20 a2 d0 00 18 16 ec 7b e1 32 20 7e bc 5b 07 3f ee 86 e8 00 7c 34 86 2a 2c 94 6d 85 79 64 18 96 9c 80 b0 fe 30 af 2d 56 0c 95 fd 50 c1 d3 82 48 10 70 48 aa 2d cc 80 49 a9 00 42 da 47 43 49 45 c5 20 1f dc 2e b2 ab 1b b8 21 b1 9a a9 8e 25 c3 41 55 1b 30 d4 68 2f a5 8b 87 ad f8 d8 9e 52 00 94 25 6c 12 43 40 3d e0 5f 59 06 bc 1e a6 08 66 ea 5e 44 29 f8 5f 0c 72 95 ab 97 0c bc 33 18 d1 d1 f9 42 7f f2 74 fb 59 85 e0 e0 a2 fa 24 fc 1d 12 4b a9 ad 00 ad 6d da 85 40 be 7a 70 40 cb 7c d4 86 4c 64 01 4e f4 10 0c ef 9e aa d7 e5 27 50 62 d2 f5 85 dd 9b 00 14 70 15 8a f4 12 c2 80 3d d9 e3 ec 6e 8e 2e f2 15 25 9e 8b 2c 00 74 ec ec 26 b0 86 d1 84 6d Data Ascii: wRzueSXp>x!$\I {2 ~[?\|4*,myd0-VPHpH-IBGCIE .!%AU0h/R%lC@=_Yf^D)_r3BtY$Km@zp@\|LdN'Pbp=n.%,t&m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49752	162.125.66.15	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:21 UTC	641	OUT	GET /scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0 HTTP/1.1 Host: dl.dropboxusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://aholding-croatia.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-10-07 22:14:22 UTC	1127	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Accept-Ranges: bytes Cache-Control: max-age=60 Content-Disposition: inline; filename="IMG_4138 (1) (1).mp4"; filename*=UTF-8''IMG_4138%20%281%29%20%281%29.mp4 Content-Range: bytes 0-17255685/17255686 Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups Content-Security-Policy: form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none' Etag: 1723460181928551n Pragma: public Set-Cookie: uc_session=4M5LUwnjWyEnE0hl1R8K7NYrvPuGGIEd5YLKfAEkxYidv8x1jA8QoUkwyjF7lJOH; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff Date: Mon, 07 Oct 2024 22:14:21 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Robots-Tag: noindex, nofollow, noimageindex Content-Length: 17255686 X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5f6eec7c704a4bd6a4ac014374a73f7e Connection: close
2024-10-07 22:14:22 UTC	15257	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 24 ee 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e8 00 00 1d 8f 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 10 07 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 1d 8f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 07 80 00 00 04 38 00 00 00 00 00 24 65 64 74 Data Ascii: ftypisomisomiso2avc1mp41$moovlmvhd@trak\tkhd@8$edt
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: d3 2c ba 67 8a e9 97 e5 d2 ea 5a e3 e6 fd 3f ff 1f 20 e4 7a ff ff 5c 76 18 ce ff ff a6 f8 5e 60 94 bd 67 d3 5f f6 ce 07 04 fb a7 b9 3a 7f c2 08 08 f5 a6 3e 16 62 03 4c b7 ff 4f 4d 34 4b ff 6c b2 02 aa 9d 8f 94 3e cb 26 9e 9f ff a8 ba ea 30 04 3e f7 e2 8d 8e 98 04 8f 5b f3 ff f2 69 35 7f d8 26 14 2b ad eb 7d f0 84 f5 ff fe ba 9e ba e9 0a 01 23 d6 fc 6a 02 5f 5a 0e a0 c2 28 08 35 4f ca ff fe 91 7a 69 ff 14 0b 62 b6 35 75 fb 78 be 5b 4f ff b4 8a 20 34 cb 28 fa ff 04 1f 30 ac 9d 71 f8 7d 96 4d 3d 3f ff f1 60 82 2b 63 57 c3 04 0b 4c f5 af d3 f8 00 20 59 15 93 e9 17 b0 98 58 a8 da f8 c7 7d 7f 6c 24 3a b8 ae b0 83 86 27 dd ff d3 f7 1b 4c 50 65 ee 01 41 29 58 27 5c ac 56 46 50 10 6a 9f 8a 7a eb 8e 8c ff d6 be 9c 34 a6 28 9f c6 08 0c f5 be ba 8d ae 9e 74 32 9a 39 Data Ascii: ,gZ? z\v^`g_:>bLOM4Kl>&0>[i5&+}#j_Z(5Ozib5ux[O 4(0q}M=?`+cWL YX}l$:'LPeA)X'\VFPjz4(t29
2024-10-07 22:14:22 UTC	1127	IN	Data Raw: 49 ed 4a a0 7d 03 a8 ff 51 ba 8b a9 15 87 eb c5 aa 45 18 58 6c 79 78 5b 62 b6 61 ef 4a a0 00 b9 6b f7 a6 52 d2 21 fe 5e c8 a4 1a 6e 94 4c a4 d8 e7 98 57 8f 48 9f bb a9 ab 4c ab 27 6a 59 5b b2 05 46 6e 6c 69 8b 7f 4e c6 2a 49 b6 b0 f6 d5 27 71 f6 3b 65 28 da 15 af e9 e0 cb ae fe 7a 0a a6 18 97 92 df 87 4c 77 1d 2c 1d ed a7 2f 0a 3e bd c2 8d 8f 74 eb 1e 9c 46 9c 7b fc fe d0 b9 7a 74 b3 e7 e8 fb f9 83 c6 c1 b7 52 31 a9 38 a1 35 06 36 e2 f8 bd bb be ff 4e f4 da 6e 8e f8 8d 2f 2b aa a6 6a 38 3d db 74 21 9a b9 2d 46 82 36 8f e4 b7 f4 e7 c7 e2 ff 7e 08 e5 cf 8d 67 b9 31 38 0f 53 1e da 8d 75 f7 35 c7 f8 d7 27 4e 9c 6d 9f ef 58 ab 4d 38 5f f0 01 97 4b 0f ce da 3e 30 cd fb 74 1f 2a a6 0b d9 b0 fe cf ba bd 88 68 fe 75 1b fc 01 fe 91 ad 65 87 cd 3e f7 6f ba a6 cf ee Data Ascii: IJ}QEXlyx[baJkR!^nLWHL'jY[FnliNI'q;e(zLw,/>tF{ztR1856Nn/+j8=t!-F6~g18Su5'NmXM8_K>0thue>o
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: 41 ae 5b 9a 40 06 cc 8b 08 df 1a 0d 52 96 21 4f c7 86 85 ae dd b0 2f 38 76 a5 d3 d5 04 24 e4 bf da 25 ae 9f 14 15 8a 64 fd 5f 32 c0 19 52 37 27 3d a1 77 af 1e 21 69 48 1d b9 60 00 24 c6 36 21 51 f7 24 42 3c 5f 11 e7 6d 70 c9 46 ee ec f3 44 61 15 79 ba 58 38 d8 a2 00 af a7 9f c5 b1 81 5e 41 17 32 10 1c 92 ac 1a a5 3b 2d cc 3e 53 56 2c 03 34 d0 5a b6 9e 16 0d c0 91 ed 9c 94 1a 54 0c da e8 a8 f7 5c b9 d9 1d 28 15 5e ae e2 39 1e 94 9a 10 3c 22 42 26 1d c7 c5 0b 80 5f fa 9c 9e 65 dd 3f 17 7f 7d 4d ca ab 1f 1b 9a 92 47 ac b4 c9 78 ce 47 ce fe 55 1b 0d 22 ec 78 f0 5a ce 3a 68 81 e2 b2 c1 b7 70 f2 d2 29 9b 66 1d 90 3b 2c 0c 8e 2b aa 9f 65 49 e0 16 6e 64 97 dd 69 c3 3e c4 b5 ed dd 72 3f d7 6e 5d c9 3b e4 b7 b7 77 6e 1a 0e f6 34 d1 ad bd e0 7a a4 b5 12 aa a0 82 ca Data Ascii: A[@R!O/8v$%d_2R7'=w!iH`$6!Q$B<_mpFDayX8^A2;->SV,4ZT\(^9<"B&_e?}MGxGU"xZ:hp)f;,+eIndi>r?n];wn4z
2024-10-07 22:14:22 UTC	15814	IN	Data Raw: a3 32 20 52 c6 84 e9 ea 17 4a 4b 98 6c f0 ba 00 66 bf ee 18 0f cd b4 71 6c 5e ea 82 a9 64 0a f7 51 1b c2 e4 20 00 62 5f 30 e6 38 90 18 70 d0 73 83 98 86 64 3a 92 31 6b c1 38 2a 2b 04 4d f5 39 28 a8 45 84 77 8a 55 a2 23 0d e3 29 7a 79 93 00 cc 1f bb c1 e3 ee e1 07 4a d1 40 59 b9 cc 9f 56 f0 1e e2 b0 18 9d 0a ac 36 73 66 05 28 c1 89 28 ee 15 85 fb 4a e6 68 00 82 8d 00 24 39 9d 06 3f 67 20 1d 64 51 cc 89 6e 0c 40 00 4e 59 03 72 7f 11 fa ef fa 2a 46 a4 10 19 e2 68 1f 38 23 5d c8 42 54 58 00 e7 49 86 8e 14 34 e2 19 ff a4 b7 db 29 82 07 42 78 03 48 24 6f cd c4 02 da 33 21 c1 c0 92 f9 cf 8c 4c 69 da c8 30 5b 1b 0f 93 db c4 e5 4f 8f da 23 a3 db c7 f0 2c 70 c1 4b 19 9f 70 cb 14 25 60 05 2c 6d 62 17 f4 cd 85 30 bb c9 ff 0b 84 6b cf 74 68 66 84 9f 13 ec 2e 3e c0 3a Data Ascii: 2 RJKlfql^dQ b_08psd:1k8+M9(EwU#)zyJ@YV6sf((Jh$9?g dQn@NYrFh8#]BTXI4)BxH$o3!Li0[O#,pKp%`,mb0kthf.>:
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: 4a 3d d0 39 08 4c a9 a8 bd 3f a8 c0 68 2d 33 75 77 45 b5 0a 36 5a 65 80 7f 08 c2 68 d0 00 11 9d 38 6f 86 5b 7f 37 87 32 c7 78 6a be c4 f3 83 5e cc 5d fa 9f 33 31 f9 15 a3 4c 17 a1 80 d8 d3 c2 c4 8e 14 d0 ee 9f 06 ff bb e6 89 db 6e 92 0a 76 21 27 70 7a 69 b6 df c4 22 ca ed 77 d0 49 d2 2c 75 58 09 96 46 ec 57 5b 92 a0 71 3c d4 53 dd e3 2f d2 00 cd 39 b4 1f 1f 53 9b ca 28 60 fb b0 31 da 0b d7 51 84 5a 4d 89 97 10 3f 8c 90 1b 36 d6 b2 4f 53 86 35 33 a6 f8 95 bc 01 4c f4 da 5b 76 66 dd 5c d2 a7 71 0b ad 22 8d 32 03 e0 13 4c 73 f0 7d 2a 7e 2c 67 ac 24 30 14 ba 3d c3 84 49 df bd 9a 69 00 4e d0 dc 50 3b c3 a4 ab 09 e6 84 b9 66 2b 22 60 19 0c 59 05 5c 5e 5a 26 09 cb 73 9a 19 ba 41 d7 42 4a 52 01 9f e9 a7 c3 98 3b 89 44 c8 90 14 81 b3 a7 c0 c6 04 e9 93 8f ba f7 1a Data Ascii: J=9L?h-3uwE6Zeh8o[72xj^]31Lnv!'pzi"wI,uXFW[q<S/9S(`1QZM?6OS53L[vf\q"2Ls}*~,g$0=IiNP;f+"`Y\^Z&sABJR;D
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: 54 17 a9 0b 4b ae 44 b4 28 1f a3 71 f0 2e 22 0f 25 4e a4 0b c9 bc 95 59 52 4f 84 82 61 8c ad bd 70 1a d4 d6 29 17 76 b7 29 f1 1e 6d 89 4e 55 b1 96 b8 97 1f f4 94 f5 dc 86 82 78 42 3f ca ec 0e 3b 04 d6 a1 8f ad aa f1 83 92 15 64 87 d5 ef cc 34 fe d8 77 ed 80 bc 82 01 4d 52 23 90 07 55 3c 48 4a b5 fb 55 b6 a0 7b 52 d0 63 42 b7 12 33 5f 16 66 c8 d0 90 1d 6b 17 00 00 47 a7 18 e1 06 8a 2e 08 b6 2a 07 2b e4 18 60 74 14 56 60 1e 0a d8 71 40 af ef 94 c0 c0 0f ce 19 c6 9b a3 a8 bc d6 86 99 c7 54 d1 85 45 47 91 b5 54 13 6d de 6e 30 48 ff 7a b5 b1 ac 03 11 29 ba 2e 6b 50 44 01 ba eb 03 8d 18 e0 28 00 e5 9d 72 98 6e c0 d5 4e a2 85 24 86 70 3f 4f ac c6 bc 45 47 42 e6 d9 6f f5 75 3e 00 07 c8 33 02 00 2e ae e6 09 ed 49 8c 6e ca 74 2b 95 70 e5 1b c6 2b 32 78 1f ef 83 c8 Data Ascii: TKD(q."%NYROap)v)mNUxB?;d4wMR#U<HJU{RcB3_fkG.*+`tV`q@TEGTmn0Hz).kPD(rnN$p?OEGBou>3.Int+p+2x
2024-10-07 22:14:22 UTC	570	IN	Data Raw: 9e b7 7c 0d 54 af 62 c0 ae c6 b0 0b 97 8d 8a 6e e2 e6 80 22 26 42 36 73 0e 5d ce 88 03 de 5d 3d cb 0c 10 6d 8a db 86 91 8f 7b 7f 52 08 ff 8d 4a 8a cb 79 32 40 0e 1c 21 ca 8c 67 dd 6c e4 78 a5 e6 19 0e b1 fa 7d a1 27 19 11 80 08 7b d1 58 89 92 e6 62 43 d4 56 c7 85 77 c9 71 96 dd 4d 22 ae 4f 76 06 e8 92 e2 5e 53 91 dc a9 d3 a2 d4 eb 02 36 ed 47 31 c2 74 9c 33 30 97 89 aa 1a 98 5d 1a 6c 1c 9c 19 ec cd 4a 01 0e 28 20 35 be 6e 92 50 19 50 18 6b 6f 5e 15 48 2b ad 41 df 3b b5 41 b6 5b 4c e0 39 37 cf d1 bc 70 72 f2 86 96 62 8f ff 77 74 b2 15 c6 c7 e4 ce b0 d1 4c 86 84 8a 08 0f 54 e7 b2 c2 fc 7d 9a 4c e8 0b cf f6 68 03 64 ee 0b 97 ba 63 3c d6 4a 16 16 ef 4c 06 5d b9 ec bd aa 10 de 08 08 06 6e 18 54 8e 1a 0f 42 ab d4 00 b1 6a d0 1e 64 86 e0 fc 26 f7 96 1e d0 3d 20 Data Ascii: \|Tbn"&B6s]]=m{RJy2@!glx}'{XbCVwqM"Ov^S6G1t30]lJ( 5nPPko^H+A;A[L97prbwtLT}Lhdc<JL]nTBjd&=
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: a9 e1 14 89 db e9 00 04 55 fa e4 8c 15 98 ac fc b7 ee 52 12 aa 19 58 18 8c 00 2e ae 9e 9f 02 a0 48 37 ee 11 e8 3f 20 51 3e 20 0a 6e 30 80 4b 0b 68 11 ec 00 3a d4 4d 1a 23 ca 29 33 02 4a 38 e1 47 8d a4 25 ce 78 a9 70 a5 3e 27 20 78 f6 20 b3 a6 07 fa 12 61 c3 11 39 78 e8 94 18 e7 74 de f4 e6 07 44 18 4b bd 48 ca cc 45 c2 1d 31 92 63 b0 77 60 66 80 85 f6 2a 74 c7 67 07 db aa 20 a0 d1 a4 04 0a b9 6e 1d 69 ee 0e 85 74 8c 22 df e7 45 06 a7 eb 39 fc aa 46 0e ce 0d fa 87 3e c6 2c 3e 66 16 62 ac d9 dc e5 fe 6a a4 3f 95 02 38 82 bb bf fa a9 fc 73 74 45 e3 bb 91 d3 0b 3b 14 bc 50 58 aa c3 d8 15 23 4e 18 64 68 1a 80 c0 70 68 55 81 aa e3 68 e6 81 d6 be e4 2c 33 bc a9 a6 02 43 a0 eb 09 ed cf 3b 21 a9 26 48 9e 73 eb 0f 87 74 d8 c8 ff 45 6a 1f 67 e6 6c 37 de ee ee 20 80 Data Ascii: URX.H7? Q> n0Kh:M#)3J8G%xp>' x a9xtDKHE1cw`f*tg nit"E9F>,>fbj?8stE;PX#NdhphUh,3C;!&HstEjgl7
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: 66 84 e6 ad 54 7c c1 95 10 b1 ce 80 c4 39 8d fa d1 91 02 ea 0e e1 c1 de 4d 48 d8 4b 17 48 2a 81 c1 c0 05 2f d2 d1 b4 8a ca a8 88 28 3c d3 8c a1 f8 36 d0 e0 fb e0 05 b8 82 5f ed 83 bf 8c 99 95 50 1c 4c dd dc 49 24 70 13 d6 20 23 6a 0f e7 f5 c1 fe e4 9a 8e d2 6e 44 f7 07 81 b6 6d 0e 6f 42 1d 85 26 9a 60 d1 04 2a 6b 83 fe b3 43 19 01 d7 8f 3d 8d 48 d3 ef b1 a9 c7 66 78 eb ec 99 3a e1 eb 22 fa 48 d5 cf 44 75 fb 6d dc 8d 1c 59 6a 2f 14 ca a9 ad 77 40 71 b4 ba 48 97 4e 25 1d 4e 14 23 a7 18 2f c6 9d bc 83 60 e8 27 a4 ad 05 13 10 15 57 b4 38 e8 83 63 bf 07 a9 75 46 d1 96 41 62 bc 4b 47 c0 6e 0f ac 6e a0 31 e1 34 4a 11 45 db c0 46 a3 a6 04 48 09 89 b8 b8 eb 79 21 dd a0 53 fc 8a 33 76 fa 93 31 b4 a0 18 19 30 31 16 1a 64 0a 40 f7 a2 db 0c 82 2d 5b 4d 69 80 dc 44 7d Data Ascii: fT\|9MHKH/(<6_PLI$p #jnDmoB&`kC=Hfx:"HDumYj/w@qHN%N#/`'W8cuFAbKGnn14JEFHy!S3v101d@-[MiD}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49753	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:21 UTC	632	OUT	GET /tild3636-6139-4435-a266-393363346437/Group_15.svg HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:22 UTC	942	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:22 GMT Content-Type: image/svg+xml Content-Length: 8462 Connection: close Vary: Accept-Encoding access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control cache-control: max-age=5184000 etag: "a693859b36771ec847891b56847624d8" last-modified: Sat, 10 Aug 2024 21:04:05 GMT x-container-storage-policy-index: 0 x-container-storage-policy-name: Policy-0 x-timestamp: 1723323844.54871 x-trans-id: 17ea79e7f317d027 Age: 0 expires: Fri, 06 Dec 2024 22:14:22 GMT t-server: or-10 X-ID-SHIELD: am3-hw-edge-gc93 Cache: MISS traceparent: 00-34457c8a03f06208cceff0ed7e0b93be-675468c2e12e792c-01 X-ID: fr5-hw-edge-gc38 Access-Control-Allow-Origin: * Cache: MISS Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:22 UTC	8462	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 39 32 22 20 68 65 69 67 68 74 3d 22 32 39 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 39 32 20 32 39 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 36 32 2e 34 20 31 32 31 2e 31 31 36 4c 32 33 36 2e 33 39 36 20 39 30 2e 32 32 38 56 38 32 2e 38 33 36 4c 32 36 32 2e 34 20 35 31 2e 39 34 38 56 37 32 2e 35 34 4c 32 34 38 2e 39 33 36 20 38 36 2e 35 33 32 4c 32 36 32 2e 34 20 31 30 30 2e 35 32 34 56 31 32 31 2e 31 31 36 5a 4d 32 33 33 2e 38 38 38 20 31 32 31 2e Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="1092" height="294" viewBox="0 0 1092 294" fill="none"><path d="M262.4 121.116L236.396 90.228V82.836L262.4 51.948V72.54L248.936 86.532L262.4 100.524V121.116ZM233.888 121.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49754	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:22 UTC	551	OUT	GET /js/tilda-skiplink-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:22 UTC	544	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:22 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1879 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 19 Oct 2023 07:35:23 GMT ETag: "6530dc3b-757" tserver: 11 X-ID-SHIELD: am3-hw-edge-gc88 traceparent: 00-74c88a6618807cbd78058a1e111854c8-7019456d7e4f113d-01 X-ID: fr5-hw-edge-gc12 Age: 4116610 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-08-21T06:44:12+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:22 UTC	1526	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 73 6b 69 70 6c 69 6e 6b 5f 5f 61 64 64 42 75 74 74 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 6c 6c 72 65 63 6f 72 64 73 22 29 3b 74 26 26 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 74 2d 68 65 61 64 65 72 22 29 26 26 28 65 3d 27 3c 6e 6f 69 6e 64 65 78 3e 3c 61 20 68 72 65 66 3d 22 23 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 22 20 63 6c 61 73 73 3d 22 74 2d 73 6b 69 70 6c 69 6e 6b 22 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 27 2b 74 5f 73 6b 69 70 6c 69 6e 6b 5f 5f 64 69 63 74 28 22 73 6b 69 70 6c 69 6e 6b 41 72 69 61 4c 61 62 65 6c 22 29 2b 27 22 20 73 74 79 6c 65 3d 22 6f 70 61 63 69 74 79 3a Data Ascii: function t_skiplink__addButton(){var e,t=document.getElementById("allrecords");t&&t.querySelector("#t-header")&&(e='<noindex><a href="#t-main-content" class="t-skiplink" rel="nofollow" aria-label="'+t_skiplink__dict("skiplinkAriaLabel")+'" style="opacity:
2024-10-07 22:14:22 UTC	353	IN	Data Raw: 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 68 74 6d 6c 22 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 2c 6e 3d 6e 3f 6e 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 77 69 6e 64 6f 77 2e 62 72 6f 77 73 65 72 4c 61 6e 67 3b 72 65 74 75 72 6e 20 74 5b 65 5d 3f 74 5b 65 5d 5b 6e 5d 7c 7c 74 5b 65 5d 2e 45 4e 3a 22 54 65 78 74 20 6e 6f 74 20 66 6f 75 6e 64 20 23 22 2b 65 7d 74 5f 73 6b 69 70 6c 69 6e 6b 5f 5f 61 64 64 42 75 74 74 6f 6e 28 29 2c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 7c 7c 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 3b 74 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 Data Ascii: .querySelector("html").getAttribute("lang"),n=n?n.toUpperCase():window.browserLang;return t[e]?t[e][n]\|\|t[e].EN:"Text not found #"+e}t_skiplink__addButton(),Element.prototype.closest\|\|(Element.prototype.closest=function(e){for(var t=this;t&&1===t.nodeType

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49755	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:22 UTC	549	OUT	GET /js/tilda-events-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:22 UTC	544	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:22 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 18130 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 06 Feb 2024 12:50:32 GMT ETag: "65c22b18-46d2" tserver: 9 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-8694c5532ebbd905cc73d5c6ee3a0da4-48a777e99d8f2dfc-01 X-ID: fr5-hw-edge-gc51 Age: 993710 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-26T10:12:32+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:22 UTC	15406	IN	Data Raw: 77 69 6e 64 6f 77 2e 54 69 6c 64 61 3d 77 69 6e 64 6f 77 2e 54 69 6c 64 61 7c 7c 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 5f 65 76 65 6e 74 73 5f 5f 69 6e 69 74 45 76 65 6e 74 28 29 7b 76 61 72 20 6d 79 4e 61 76 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 69 73 49 45 3d 2d 31 21 3d 3d 6d 79 4e 61 76 2e 69 6e 64 65 78 4f 66 28 22 6d 73 69 65 22 29 26 26 70 61 72 73 65 49 6e 74 28 6d 79 4e 61 76 2e 73 70 6c 69 74 28 22 6d 73 69 65 22 29 5b 31 5d 29 3b 69 66 28 38 3d 3d 3d 69 73 49 45 7c 7c 39 3d 3d 3d 69 73 49 45 29 7b 76 61 72 20 62 74 6e 73 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 74 2d 62 74 6e 22 29 3b 41 72 72 61 79 Data Ascii: window.Tilda=window.Tilda\|\|{},function(){function t_events__initEvent(){var myNav=navigator.userAgent.toLowerCase(),isIE=-1!==myNav.indexOf("msie")&&parseInt(myNav.split("msie")[1]);if(8===isIE\|\|9===isIE){var btns=document.querySelectorAll(".t-btn");Array
2024-10-07 22:14:22 UTC	2724	IN	Data Raw: 74 6d 70 3d 28 74 6d 70 3d 28 74 6d 70 3d 76 69 72 74 50 61 67 65 2e 72 65 70 6c 61 63 65 28 22 2f 74 69 6c 64 61 2f 22 2c 22 22 29 29 2e 72 65 70 6c 61 63 65 28 22 74 69 6c 64 61 2f 22 2c 22 22 29 29 2e 72 65 70 6c 61 63 65 28 22 2f 73 75 62 6d 69 74 74 65 64 2f 22 2c 22 22 29 29 3b 65 6c 73 65 20 69 66 28 2d 31 21 3d 3d 76 69 72 74 50 61 67 65 2e 69 6e 64 65 78 4f 66 28 22 74 69 6c 64 61 2f 70 6f 70 75 70 22 29 29 65 76 65 6e 74 4e 61 6d 65 3d 22 74 2d 22 2b 28 74 6d 70 3d 28 74 6d 70 3d 76 69 72 74 50 61 67 65 2e 72 65 70 6c 61 63 65 28 22 2f 74 69 6c 64 61 2f 22 2c 22 22 29 29 2e 72 65 70 6c 61 63 65 28 22 2f 22 2c 22 2d 22 29 29 3b 65 6c 73 65 20 69 66 28 2d 31 21 3d 3d 76 69 72 74 50 61 67 65 2e 69 6e 64 65 78 4f 66 28 22 74 69 6c 64 61 2f 63 6c 69 Data Ascii: tmp=(tmp=(tmp=virtPage.replace("/tilda/","")).replace("tilda/","")).replace("/submitted/",""));else if(-1!==virtPage.indexOf("tilda/popup"))eventName="t-"+(tmp=(tmp=virtPage.replace("/tilda/","")).replace("/","-"));else if(-1!==virtPage.indexOf("tilda/cli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49761	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:22 UTC	398	OUT	GET /tild3632-3264-4562-a338-656166656465/logologologo_1.svg HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:22 UTC	972	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:22 GMT Content-Type: image/svg+xml Content-Length: 4530 Connection: close Vary: Accept-Encoding access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control cache-control: max-age=5184000 etag: "f4de2d8e4ac649e7aa3af1dd0a3036b7" last-modified: Thu, 18 Jul 2024 14:47:01 GMT x-container-storage-policy-index: 0 x-container-storage-policy-name: Policy-0 x-timestamp: 1721314020.37880 x-trans-id: 17e355fb4b6ecb7b Age: 5 expires: Fri, 06 Dec 2024 22:14:17 GMT tserver: JWhHVWak X-ID-SHIELD: am3-hw-edge-gc93 traceparent: 00-2b4fdfc9b032b31b8a2b55fe124da4f9-02c1d5dd8c914ad9-01 X-ID: fr5-hw-edge-gc8 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-07T22:14:17+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:22 UTC	3394	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 36 34 22 20 68 65 69 67 68 74 3d 22 36 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 31 5f 36 37 29 22 3e 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 31 5f 36 37 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 6c 75 6d 69 6e 61 6e 63 65 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64" fill="none"><g clip-path="url(#clip0_21_67)"><mask id="mask0_21_67" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0
2024-10-07 22:14:22 UTC	1136	IN	Data Raw: 31 39 30 37 22 20 79 32 3d 22 37 37 2e 35 38 39 35 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 3c 2f 73 74 6f 70 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 38 38 35 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 45 39 42 33 34 41 22 3e 3c 2f 73 74 6f 70 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 36 5f 6c 69 6e 65 61 72 5f 32 31 5f 36 37 22 20 78 31 3d 22 38 33 2e 38 37 37 39 22 20 79 31 3d 22 32 30 2e 31 37 32 37 22 20 78 32 3d 22 32 30 2e 38 37 37 39 22 20 79 32 3d 22 38 34 2e 31 37 32 36 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d Data Ascii: 1907" y2="77.5895" gradientUnits="userSpaceOnUse"><stop stop-color="white"></stop><stop offset="0.885" stop-color="#E9B34A"></stop></linearGradient><linearGradient id="paint6_linear_21_67" x1="83.8779" y1="20.1727" x2="20.8779" y2="84.1726" gradientUnits=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49759	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:22 UTC	408	OUT	GET /lib/tildaicon/63316563-3530-4438-b236-386566363465/sn_youtube.svg HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:22 UTC	943	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:22 GMT Content-Type: image/svg+xml Content-Length: 1031 Connection: close Vary: Accept-Encoding access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control cache-control: max-age=5184000 etag: "87fbe1db74a2d2eac711cd7a5351643a" last-modified: Tue, 27 Dec 2016 15:55:43 GMT x-container-storage-policy-index: 0 x-container-storage-policy-name: Policy-0 x-timestamp: 1482854142.35481 Age: 4 expires: Fri, 06 Dec 2024 22:14:18 GMT tserver: 5GiJX0mZ X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-acc5687b5d7adffd10158390b28fe7e6-e3e58e440b85c48c-01 X-ID: fr5-hw-edge-gc33 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-07T22:14:18+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:22 UTC	1031	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 21.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49757	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:22 UTC	410	OUT	GET /lib/tildaicon/62623164-6334-4465-b161-343730373230/sn_instagram.svg HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:22 UTC	945	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:22 GMT Content-Type: image/svg+xml Content-Length: 1396 Connection: close Vary: Accept-Encoding Access-Control-Expose-Headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control Cache-Control: max-age=5184000 Etag: "576a1e5d4cfe0025f5b7d4e472e029a0" Last-Modified: Tue, 27 Dec 2016 15:35:26 GMT x-container-storage-policy-index: 0 x-container-storage-policy-name: Policy-0 X-Timestamp: 1482852925.49937 Age: 26091 Expires: Fri, 06 Dec 2024 14:59:31 GMT T-Server: or-10 X-ID-SHIELD: am3-hw-edge-gc93 traceparent: 00-4ad98aa0f932964a9c08c3dcda213f41-7b2a36a188e1c776-01 X-ID: fr5-hw-edge-gc22 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-07T14:59:31+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:22 UTC	1396	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 21.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49760	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:22 UTC	370	OUT	GET /js/tilda-scripts-3.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:22 UTC	546	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:22 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 20692 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 11 Sep 2024 13:28:14 GMT ETag: "66e19aee-50d4" tserver: 13 X-ID-SHIELD: am3-hw-edge-gc89 Age: 2276029 traceparent: 00-4fb8b8088b03bb49cc1af3833a223b1f-f1623b53a2cab10f-01 X-ID: fr5-hw-edge-gc32 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-11T14:00:53+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:22 UTC	15404	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 6f 6e 52 65 61 64 79 28 74 29 7b 22 6c 6f 61 64 69 6e 67 22 21 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 74 28 29 3a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 61 64 64 43 6c 61 73 73 28 74 2c 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 3f 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 65 29 3a 74 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 28 74 2e 63 6c 61 73 73 4e 61 6d 65 3f 22 20 22 3a 22 22 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 2c 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 Data Ascii: function t_onReady(t){"loading"!=document.readyState?t():document.addEventListener("DOMContentLoaded",t)}function t_addClass(t,e){document.body.classList?t.classList.add(e):t.className+=(t.className?" ":"")+e}function t_removeClass(t,e){document.body.clas
2024-10-07 22:14:22 UTC	5288	IN	Data Raw: 6f 64 75 63 74 2d 63 6f 6e 74 72 6f 6c 73 2d 77 72 61 70 70 65 72 29 3a 6e 6f 74 28 2e 6a 73 2d 70 72 6f 64 75 63 74 2d 65 64 69 74 69 6f 6e 2d 6f 70 74 69 6f 6e 29 3a 6e 6f 74 28 2e 74 2d 70 72 6f 64 75 63 74 5f 5f 6f 70 74 69 6f 6e 2d 76 61 72 69 61 6e 74 73 29 27 29 2c 63 3d 30 3b 63 3c 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 75 3d 73 5b 63 5d 3b 64 2e 73 74 79 6c 65 2e 77 6f 72 64 42 72 65 61 6b 3d 22 22 3b 76 61 72 20 68 3d 74 5f 6f 75 74 65 72 57 69 64 74 68 28 75 29 3b 69 66 28 68 3e 65 29 7b 69 66 28 22 79 65 73 22 3d 3d 3d 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 5b 64 61 74 61 2d 63 75 73 74 6f 6d 73 74 79 6c 65 5d 22 29 26 26 22 66 61 6c 73 65 22 3d 3d 3d 75 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 67 65 74 41 74 74 72 69 62 75 Data Ascii: oduct-controls-wrapper):not(.js-product-edition-option):not(.t-product__option-variants)'),c=0;c<s.length;c++){var u=s[c];d.style.wordBreak="";var h=t_outerWidth(u);if(h>e){if("yes"===u.getAttribute("[data-customstyle]")&&"false"===u.parentNode.getAttribu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49756	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:22 UTC	371	OUT	GET /js/tilda-lazyload-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:22 UTC	544	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:22 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 24232 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 09 Feb 2024 13:58:04 GMT ETag: "65c62f6c-5ea8" tserver: 8 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-3281503344157cd18512a7bb27fb76c0-c894af30ad092972-01 X-ID: fr5-hw-edge-gc12 Age: 993725 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-26T10:12:17+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:22 UTC	15406	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 6c 61 7a 79 6c 6f 61 64 5f 5f 69 6e 69 74 28 29 7b 74 5f 6c 61 7a 79 6c 6f 61 64 5f 5f 64 65 74 65 63 74 77 65 62 70 28 29 3b 76 61 72 20 65 6c 41 6c 6c 52 65 63 73 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 61 6c 6c 72 65 63 6f 72 64 73 22 29 3b 65 6c 41 6c 6c 52 65 63 73 26 26 22 79 65 73 22 3d 3d 3d 65 6c 41 6c 6c 52 65 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 69 6c 64 61 2d 69 6d 67 6f 70 74 69 6d 6f 66 66 22 29 3f 77 69 6e 64 6f 77 2e 6c 61 7a 79 5f 69 6d 67 6f 70 74 69 6d 6f 66 66 3d 22 79 65 73 22 3a 77 69 6e 64 6f 77 2e 6c 61 7a 79 5f 69 6d 67 6f 70 74 69 6d 6f 66 66 3d 22 22 3b 66 6f 72 28 76 61 72 20 65 6c 73 74 6f 53 6b 69 70 3d 64 6f 63 75 6d 65 6e Data Ascii: function t_lazyload__init(){t_lazyload__detectwebp();var elAllRecs=document.querySelector("#allrecords");elAllRecs&&"yes"===elAllRecs.getAttribute("data-tilda-imgoptimoff")?window.lazy_imgoptimoff="yes":window.lazy_imgoptimoff="";for(var elstoSkip=documen
2024-10-07 22:14:22 UTC	8826	IN	Data Raw: 6e 64 65 78 4f 66 28 22 2f 2d 2f 22 29 3e 2d 31 29 72 65 74 75 72 6e 20 73 74 72 3b 69 66 28 73 74 72 2e 69 6e 64 65 78 4f 66 28 22 6c 69 62 22 29 3e 2d 31 29 72 65 74 75 72 6e 20 73 74 72 3b 69 66 28 22 79 22 21 3d 3d 77 69 6e 64 6f 77 2e 6c 61 7a 79 5f 77 65 62 70 29 72 65 74 75 72 6e 20 73 74 72 3b 69 66 28 22 79 22 3d 3d 3d 77 69 6e 64 6f 77 2e 6c 61 7a 79 5f 65 72 72 5f 74 68 75 6d 62 29 72 65 74 75 72 6e 20 73 74 72 3b 76 61 72 20 61 72 72 72 3d 73 74 72 2e 73 70 6c 69 74 28 22 2f 22 29 2c 6e 65 77 73 74 72 3b 72 65 74 75 72 6e 20 61 72 72 72 2e 73 70 6c 69 63 65 28 73 74 72 2e 73 70 6c 69 74 28 22 2f 22 29 2e 6c 65 6e 67 74 68 2d 31 2c 30 2c 22 2d 2f 66 6f 72 6d 61 74 2f 77 65 62 70 22 29 2c 5f 67 65 74 54 68 75 6d 62 55 72 6c 28 61 72 72 72 2e 6a Data Ascii: ndexOf("/-/")>-1)return str;if(str.indexOf("lib")>-1)return str;if("y"!==window.lazy_webp)return str;if("y"===window.lazy_err_thumb)return str;var arrr=str.split("/"),newstr;return arrr.splice(str.split("/").length-1,0,"-/format/webp"),_getThumbUrl(arrr.j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49758	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:22 UTC	372	OUT	GET /js/tilda-animation-2.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:22 UTC	546	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:22 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 34334 Connection: close Vary: Accept-Encoding last-modified: Thu, 12 Sep 2024 09:13:02 GMT etag: "66e2b09e-861e" tserver: 11 X-ID-SHIELD: am3-hw-edge-gc89 Age: 2206085 traceparent: 00-2bf3156da9701ec7f0720c0e7e3a3c5b-808a39006a6e537d-01 X-ID: fr5-hw-edge-gc27 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-12T11:03:24+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:22 UTC	15838	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 61 6e 69 6d 61 74 65 5f 5f 69 6e 69 74 28 29 7b 74 5f 61 6e 69 6d 61 74 65 5f 5f 63 68 65 63 6b 41 6e 69 6d 61 74 69 6f 6e 41 76 61 69 6c 61 62 69 6c 69 74 79 28 29 26 26 28 74 5f 61 6e 69 6d 61 74 65 5f 5f 67 65 6e 65 72 61 74 65 53 74 79 6c 65 73 28 29 2c 74 5f 61 6e 69 6d 61 74 65 5f 5f 77 72 61 70 54 65 78 74 57 69 74 68 4f 70 61 63 69 74 79 28 29 2c 74 5f 61 6e 69 6d 61 74 65 5f 5f 61 64 64 4e 6f 48 6f 76 65 72 43 6c 61 73 73 54 6f 42 74 6e 73 28 29 2c 74 5f 61 6e 69 6d 61 74 65 5f 5f 70 72 65 76 65 6e 74 48 6f 72 69 7a 6f 6e 74 61 6c 53 63 72 6f 6c 6c 28 29 2c 31 32 30 30 3c 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 26 26 74 5f 61 6e 69 6d 61 74 65 5f 5f 70 61 72 73 65 4e 75 6d 62 65 72 54 65 78 74 28 29 Data Ascii: function t_animate__init(){t_animate__checkAnimationAvailability()&&(t_animate__generateStyles(),t_animate__wrapTextWithOpacity(),t_animate__addNoHoverClassToBtns(),t_animate__preventHorizontalScroll(),1200<=window.innerWidth&&t_animate__parseNumberText()
2024-10-07 22:14:22 UTC	16384	IN	Data Raw: 61 6c 6c 28 61 29 2c 6e 3d 30 2c 69 3d 30 2c 72 3d 74 2e 69 74 65 6d 73 4f 66 66 73 65 74 73 5b 30 5d 2c 6f 3d 74 5f 61 6e 69 6d 61 74 65 5f 5f 67 65 74 44 65 6c 61 79 46 72 6f 6d 50 72 65 76 69 6f 75 73 53 63 72 6f 6c 6c 45 76 65 6e 74 28 74 2c 2e 31 36 29 2c 73 3d 74 5f 61 6e 69 6d 61 74 65 5f 5f 67 65 74 53 65 63 74 69 6f 6e 48 65 61 64 44 65 61 6c 79 28 74 29 3b 61 2e 6c 65 6e 67 74 68 26 26 61 5b 30 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 74 2d 61 6e 69 6d 61 74 65 5f 5f 63 68 61 69 6e 5f 66 69 72 73 74 2d 69 6e 2d 72 6f 77 22 29 3b 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 61 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 6d 3d 61 5b 6c 5d 2c 63 3d 74 2e 69 74 65 6d 73 4f 66 66 73 65 74 73 5b 6c 5d 3b 69 66 28 21 28 63 3c 65 29 29 62 Data Ascii: all(a),n=0,i=0,r=t.itemsOffsets[0],o=t_animate__getDelayFromPreviousScrollEvent(t,.16),s=t_animate__getSectionHeadDealy(t);a.length&&a[0].classList.add("t-animate__chain_first-in-row");for(var l=0;l<a.length;l++){var m=a[l],c=t.itemsOffsets[l];if(!(c<e))b
2024-10-07 22:14:22 UTC	22	IN	Data Raw: 63 75 72 54 6f 70 4f 66 66 73 65 74 3d 65 2e 67 65 74 42 6f 75 6e Data Ascii: curTopOffset=e.getBoun
2024-10-07 22:14:22 UTC	2090	IN	Data Raw: 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 74 6f 70 2b 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 2c 65 3d 74 5f 61 6e 69 6d 61 74 69 6f 6e 5f 5f 67 65 74 5a 6f 6f 6d 28 74 29 2c 77 69 6e 64 6f 77 2e 69 73 4f 6e 6c 79 53 63 61 6c 61 62 6c 65 7c 7c 28 74 2e 63 75 72 54 6f 70 4f 66 66 73 65 74 2a 3d 65 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 61 6e 69 6d 61 74 69 6f 6e 5f 5f 67 65 74 5a 6f 6f 6d 28 74 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 2e 73 63 61 6c 65 46 61 63 74 6f 72 29 72 65 74 75 72 6e 20 74 2e 73 63 61 6c 65 46 61 63 74 6f 72 3b 74 3d 74 2e 63 6c 6f 73 65 73 74 28 22 2e 74 33 39 36 5f 5f 61 72 74 62 6f 61 72 64 22 29 3b 69 66 28 21 74 29 72 65 74 75 72 6e 20 31 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 Data Ascii: dingClientRect().top+window.pageYOffset,e=t_animation__getZoom(t),window.isOnlyScalable\|\|(t.curTopOffset*=e))})}function t_animation__getZoom(t){if(void 0!==t.scaleFactor)return t.scaleFactor;t=t.closest(".t396__artboard");if(!t)return 1;var e=document.qu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49764	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:22 UTC	400	OUT	GET /tild3634-6139-4566-a231-383662633464/-/resizeb/20x/image.png HTTP/1.1 Host: thb.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:22 UTC	489	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:22 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close cache-control: public expires: Wed, 06 Nov 2024 23:59:59 GMT x-resize-server: 3 T-Server: or-7 X-ID-SHIELD: am3-hw-edge-gc93 traceparent: 00-c007370e22ca07e2dc8d7f6e3b3711a3-dc34be1e4539ce7e-01 X-ID: fr5-hw-edge-gc62 Age: 3 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-07T22:14:19+00:00 X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:22 UTC	664	IN	Data Raw: 32 39 31 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 0b 08 06 00 00 00 7f 09 ad 43 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 02 43 49 44 41 54 28 91 1d 91 d9 8e db 46 10 45 f9 bb 01 12 c4 86 23 0d 47 d2 8c 56 6e cd 5e d8 1b 17 6d 71 6c 03 4e be f2 a4 c6 0f 17 d5 7d d1 3c 75 ab 58 bc d9 89 bd 9b 39 f9 85 2a dc 68 d2 1d 35 3e d1 f3 57 ec f2 8d e1 f6 03 ff f8 49 78 fe 2b fa 0f 2f d5 c9 dd 88 df 4d 5f a9 d2 8d e3 90 d9 f5 8e b2 ee 28 f6 6e e4 28 3a 0f 23 d5 30 d1 86 09 15 17 74 be e2 c6 3b 7e 7e 12 ae ff 10 ef df 44 df 89 0f 69 20 d5 89 d7 4f 0f 09 b0 c8 b7 89 bd b6 6c 1b 01 1e 6c e6 64 23 67 1b a8 44 8d f3 74 2e d0 fb 88 0d 89 21 8d 84 71 21 ce 37 d2 f2 20 5e 3f 1a 3c 19 e6 3b 5a fc 2e 7e 04 09 1c b5 Data Ascii: 291PNGIHDRCpHYs~CIDAT(FE#GVn^mqlN}<uX9*h5>WIx+/M_(n(:#0t;~~Di Olld#gDt.!q!7 ^?<;Z.~
2024-10-07 22:14:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49763	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:22 UTC	400	OUT	GET /tild3039-3739-4331-b732-363433636164/-/resizeb/20x/image.png HTTP/1.1 Host: thb.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:22 UTC	490	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:22 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close cache-control: public expires: Thu, 07 Nov 2024 23:59:59 GMT x-resize-server: 1 T-Server: or-10 X-ID-SHIELD: am3-hw-edge-gc88 traceparent: 00-01bcd6e60ba1c1dbd0a35a8999561031-880f385b2197d454-01 X-ID: fr5-hw-edge-gc61 Age: 3 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-07T22:14:19+00:00 X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:22 UTC	656	IN	Data Raw: 32 38 39 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 0a 08 06 00 00 00 b4 55 7e e6 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 02 3b 49 44 41 54 28 91 1d 90 69 93 a2 48 10 40 f9 97 bb 31 1b b3 bd 33 dd b6 dd 1e e3 2d 5e 20 c8 a5 08 0a 48 71 29 3d 3f f5 4d ba 1f 5e 64 66 55 d4 cb cc d2 3e 7d 93 5e b0 a7 7f b4 18 86 36 a3 b3 c3 34 f2 98 5f 7c 96 d7 00 5d a2 7e f1 58 c6 2e 8b b3 cd f4 68 30 f2 37 f4 9d 25 1f f6 8c 8e 39 e6 e7 ee 17 2f db 01 df b7 7d b4 c9 69 cd e4 b4 61 16 6e 59 44 26 7a 6c b1 be 3a ec 52 1f 33 0b b0 b2 23 d6 4d 90 7c 9f 7a 18 17 9b cd d9 60 79 5c 31 f5 e7 fc 72 c6 f4 ad 01 5d f3 93 8e d1 45 5b 47 73 d6 d1 82 4d ac b3 bb 6c 30 af 26 56 7a c0 b9 79 f8 ea c8 b1 08 39 95 21 e1 33 4a 1d dc Data Ascii: 289PNGIHDRU~pHYs~;IDAT(iH@13-^ Hq)=?M^dfU>}^64_\|]~X.h07%9/}ianYD&zl:R3#M\|z`y\1r]E[GsMl0&Vzy9!3J
2024-10-07 22:14:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49766	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:22 UTC	553	OUT	GET /js/tilda-phone-mask-1.1.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:22 UTC	545	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:22 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 31021 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 29 Aug 2024 08:01:16 GMT ETag: "66d02acc-792d" tserver: 8 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-ffc16c39889adf5664c68b26ed57db90-63bddf1d2e7fd7cf-01 X-ID: fr5-hw-edge-gc28 Age: 3061966 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-02T11:41:36+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:22 UTC	15405	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 72 65 61 64 79 28 65 29 7b 22 6c 6f 61 64 69 6e 67 22 21 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 65 28 29 3a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 73 69 62 6c 69 6e 67 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 63 68 69 6c 64 72 65 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 74 29 7d 29 29 3a 5b 5d 7d 66 75 6e 63 74 69 6f Data Ascii: function t_ready(e){"loading"!=document.readyState?e():document.addEventListener("DOMContentLoaded",e)}function t_siblings(e,t){return e.parentNode?Array.prototype.filter.call(e.parentNode.children,(function(e){return e.classList.contains(t)})):[]}functio
2024-10-07 22:14:22 UTC	15616	IN	Data Raw: 20 2d 39 37 70 78 22 2c 64 6f 3a 22 2d 33 33 70 78 20 2d 39 37 70 78 22 2c 64 7a 3a 22 2d 36 31 70 78 20 2d 39 37 70 78 22 2c 65 63 3a 22 2d 38 39 70 78 20 2d 39 37 70 78 22 2c 65 65 3a 22 2d 31 31 37 70 78 20 2d 39 37 70 78 22 2c 65 67 3a 22 2d 31 34 35 70 78 20 2d 39 37 70 78 22 2c 65 68 3a 22 2d 31 37 33 70 78 20 2d 39 37 70 78 22 2c 65 72 3a 22 2d 32 30 31 70 78 20 2d 39 37 70 78 22 2c 65 73 3a 22 2d 32 32 39 70 78 20 2d 39 37 70 78 22 2c 65 74 3a 22 2d 32 35 37 70 78 20 2d 39 37 70 78 22 2c 66 69 3a 22 2d 32 38 35 70 78 20 2d 39 37 70 78 22 2c 66 6a 3a 22 2d 33 31 33 70 78 20 2d 39 37 70 78 22 2c 66 6d 3a 22 2d 35 70 78 20 2d 31 32 30 70 78 22 2c 66 72 3a 22 2d 33 33 70 78 20 2d 31 32 30 70 78 22 2c 67 61 3a 22 2d 36 31 70 78 20 2d 31 32 30 70 78 22 Data Ascii: -97px",do:"-33px -97px",dz:"-61px -97px",ec:"-89px -97px",ee:"-117px -97px",eg:"-145px -97px",eh:"-173px -97px",er:"-201px -97px",es:"-229px -97px",et:"-257px -97px",fi:"-285px -97px",fj:"-313px -97px",fm:"-5px -120px",fr:"-33px -120px",ga:"-61px -120px"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49776	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:23 UTC	407	OUT	GET /ws/project10309827/tilda-blocks-page53186309.min.js?t=1725003854 HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:23 UTC	545	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:23 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 22042 Connection: close Vary: Accept-Encoding last-modified: Fri, 30 Aug 2024 07:44:15 GMT x-host: tilda.ws tserver: 5GiJX0mZ X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-8f47313ae9cdc5d96c8fa4fe8f503a35-b6a3bf3d726400f8-01 X-ID: fr5-hw-edge-gc22 Age: 41746 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-07T10:38:37+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:23 UTC	15839	IN	Data Raw: 77 69 6e 64 6f 77 2e 69 73 4d 6f 62 69 6c 65 3d 21 31 3b 69 66 28 2f 41 6e 64 72 6f 69 64 7c 77 65 62 4f 53 7c 69 50 68 6f 6e 65 7c 69 50 61 64 7c 69 50 6f 64 7c 42 6c 61 63 6b 42 65 72 72 79 7c 49 45 4d 6f 62 69 6c 65 7c 4f 70 65 72 61 20 4d 69 6e 69 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 29 7b 77 69 6e 64 6f 77 2e 69 73 4d 6f 62 69 6c 65 3d 21 30 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 5f 74 68 72 6f 74 74 6c 65 28 66 6e 2c 74 68 72 65 73 68 68 6f 6c 64 2c 73 63 6f 70 65 29 7b 76 61 72 20 6c 61 73 74 3b 76 61 72 20 64 65 66 65 72 54 69 6d 65 72 3b 74 68 72 65 73 68 68 6f 6c 64 7c 7c 28 74 68 72 65 73 68 68 6f 6c 64 3d 32 35 30 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6f 6e 74 65 Data Ascii: window.isMobile=!1;if(/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)){window.isMobile=!0}function t_throttle(fn,threshhold,scope){var last;var deferTimer;threshhold\|\|(threshhold=250);return function(){var conte
2024-10-07 22:14:23 UTC	6166	IN	Data Raw: 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 3b 76 61 72 20 63 61 73 68 65 64 44 69 66 66 3d 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 3b 76 61 72 20 73 74 65 70 3d 28 4d 61 74 68 2e 61 62 73 28 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 2d 74 61 72 67 65 74 29 2a 31 30 29 2f 64 75 72 61 74 69 6f 6e 3b 76 61 72 20 73 63 72 6f 6c 6c 49 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 63 61 73 68 65 64 44 69 66 66 3e 74 61 72 67 65 74 29 7b 64 69 66 66 65 72 65 6e 63 65 2d 3d 73 74 65 70 7d 65 6c 73 65 7b 64 69 66 66 65 72 65 6e 63 65 2b 3d 73 74 65 70 7d 0a 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 30 2c 64 69 66 66 65 72 65 6e 63 65 29 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 Data Ascii: ow.pageYOffset;var cashedDiff=window.pageYOffset;var step=(Math.abs(window.pageYOffset-target)*10)/duration;var scrollInterval=setInterval(function(){if(cashedDiff>target){difference-=step}else{difference+=step}window.scrollTo(0,difference);document.body
2024-10-07 22:14:23 UTC	37	IN	Data Raw: 67 65 74 3d 4d 61 74 68 2e 6d 61 78 28 74 61 72 67 65 74 2c 30 29 3b 72 65 74 75 72 6e 20 74 61 72 67 65 74 7d Data Ascii: get=Math.max(target,0);return target}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49768	157.240.0.6	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:23 UTC	541	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:23 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-07 22:14:23 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-07 22:14:23 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-07 22:14:23 UTC	1500	IN	Data Raw: 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 67 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 Data Ascii: ");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=function(){function a(a,b){var c=[],d=!0,e=!1,f=void 0;try{for(var g=a[typeof Symbol==="function"?Symbol.iter
2024-10-07 22:14:23 UTC	1500	IN	Data Raw: 22 2b 74 79 70 65 6f 66 20 62 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 61 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 3b 62 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 2c 63 29 7b 62 20 69 6e 20 61 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 Data Ascii: "+typeof b);a.prototype=Object.create(b&&b.prototype,{constructor:{value:a,enumerable:!1,writable:!0,configurable:!0}});b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b,c){b in a?Object.defineProperty(a,b,{value:c,enumera
2024-10-07 22:14:23 UTC	1500	IN	Data Raw: 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 61 21 3d 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 21 61 28 62 29 3f 6e 75 6c 6c 3a 62 7d 6b 2e 65 78 70 6f 72 74 Data Ascii: ined"?"undefined":i(HTMLElement))==="object")return a instanceof HTMLElement;else return a!==null&&(typeof a==="undefined"?"undefined":i(a))==="object"&&a.nodeType===Node.ELEMENT_NODE&&typeof a.nodeName==="string"}function b(b){return!a(b)?null:b}k.export
2024-10-07 22:14:23 UTC	1500	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 72 65 74 75 72 6e 7b 65 72 72 6f 72 3a 6e 75 6c 6c 2c 77 61 72 6e 69 6e 67 73 3a 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 69 66 28 61 29 7b 61 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 76 61 72 20 62 3d 69 5b 61 5d 3b 69 66 28 62 21 3d 3d 21 30 29 72 65 74 75 72 6e 20 6d 28 7b 6d 65 74 61 64 61 74 61 3a 61 2c 74 79 70 65 3a 22 55 4e 53 55 50 50 4f 52 54 45 44 5f 4d 45 54 41 44 41 54 41 5f 41 52 47 55 4d 45 4e 54 22 7d 29 7d 72 65 74 75 72 6e 20 6c 28 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 69 66 28 Data Ascii: function n(a){return{error:null,warnings:a}}function o(a){if(a){a=a.toLowerCase();var b=i[a];if(b!==!0)return m({metadata:a,type:"UNSUPPORTED_METADATA_ARGUMENT"})}return l()}function p(a){var b=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{};if(
2024-10-07 22:14:23 UTC	1500	IN	Data Raw: 65 66 3a 61 2e 6e 75 6d 62 65 72 28 29 2c 76 61 6c 69 64 61 74 6f 72 73 3a 5b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3e 30 7d 5d 7d 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 Data Ascii: ef:a.number(),validators:[function(a){return a>0}]})});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsBaseEvent",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=f.get
2024-10-07 22:14:23 UTC	1500	IN	Data Raw: 62 61 74 63 68 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 63 21 3d 6e 75 6c 6c 3f 63 2e 62 61 74 63 68 57 61 69 74 54 69 6d 65 4d 73 3a 62 7d 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 62 29 7b 6e 28 74 68 69 73 2c 61 29 2c 74 68 69 73 2e 5f 77 61 69 74 48 61 6e 64 6c 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 64 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 5f 63 62 3d 62 7d 68 28 61 2c 5b 7b 6b 65 79 3a 22 61 64 64 54 6f 42 61 74 63 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 3b 74 68 69 73 2e 5f 77 61 69 74 48 61 6e 64 6c 65 3d 3d 6e 75 6c 6c 26 26 28 74 68 69 73 2e 5f 77 61 69 74 48 61 6e 64 6c 65 3d 67 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 5f Data Ascii: batching");return c!=null?c.batchWaitTimeMs:b}var i=function(){function a(b){n(this,a),this._waitHandle=null,this._data=[],this._cb=b}h(a,[{key:"addToBatch",value:function(a){var b=this;this._waitHandle==null&&(this._waitHandle=g.setTimeout(function(){b._
2024-10-07 22:14:23 UTC	1500	IN	Data Raw: 74 68 46 69 65 6c 64 73 28 7b 64 65 6c 61 79 49 6e 4d 73 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 65 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 6e 61 62 6c 65 4d 75 6c 74 69 45 69 64 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 43 52 75 6c 65 45 76 61 6c 75 61 74 6f 72 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 Data Ascii: thFields({delayInMs:b.number(),experimentName:b.allowNull(b.string()),enableMultiEid:b.allowNull(b["boolean"]())});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsCCRuleEvaluatorConfigTypedef",function(){return func
2024-10-07 22:14:23 UTC	1500	IN	Data Raw: 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 3b 61 2e 63 6f 65 72 63 65 3b 61 3d 61 2e 54 79 70 65 64 3b 61 3d 61 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 66 6f 72 6b 65 64 50 69 78 65 6c 49 64 73 3a 61 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 61 2e 61 72 72 61 79 4f 66 28 61 2e 73 74 72 69 6e 67 28 29 29 29 2c 66 6f 72 6b 65 64 50 69 78 65 6c 49 64 73 49 6e 42 72 6f 77 73 65 72 43 68 61 6e 6e 65 6c 3a 61 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 61 2e 61 72 72 61 79 4f 66 28 61 2e 73 74 72 69 6e 67 28 29 29 29 2c 66 6f 72 6b 65 64 50 69 78 65 6c 49 64 73 49 6e 53 65 72 76 65 72 43 68 61 6e 6e 65 6c 3a 61 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 61 2e 61 72 72 61 79 4f 66 28 61 2e 73 74 72 69 6e 67 28 29 29 29 2c 66 Data Ascii: Modules("SignalsFBEventsTyped");a.coerce;a=a.Typed;a=a.objectWithFields({forkedPixelIds:a.allowNull(a.arrayOf(a.string())),forkedPixelIdsInBrowserChannel:a.allowNull(a.arrayOf(a.string())),forkedPixelIdsInServerChannel:a.allowNull(a.arrayOf(a.string())),f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49775	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:23 UTC	370	OUT	GET /js/tilda-menusub-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:23 UTC	548	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:23 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 21012 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 07 May 2024 09:29:55 GMT ETag: "6639f493-5214" T-Server: or-7 X-ID-SHIELD: am3-hw-edge-gc88 traceparent: 00-3ff819e7e701feb8aa52fda42be51812-15ef60c4c409062b-01 X-ID: fr5-hw-edge-gc62 Age: 414542 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-03T03:05:21+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:23 UTC	15402	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 6d 65 6e 75 73 75 62 5f 69 6e 69 74 28 72 65 63 69 64 29 7b 76 61 72 20 72 65 63 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 63 22 2b 72 65 63 69 64 29 3b 69 66 28 72 65 63 29 69 66 28 74 5f 6d 65 6e 75 73 75 62 5f 5f 69 73 42 6c 6f 63 6b 56 69 73 69 62 6c 65 28 72 65 63 29 29 74 5f 6d 65 6e 75 73 75 62 5f 5f 6c 61 7a 79 49 6e 69 74 28 72 65 63 69 64 29 3b 65 6c 73 65 7b 76 61 72 20 6d 65 6e 75 49 73 49 6e 69 74 65 64 3d 21 31 2c 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 6d 65 6e 75 49 73 49 6e 69 74 65 64 26 26 74 5f 6d 65 6e 75 73 75 62 5f 5f 69 73 42 6c 6f 63 6b 56 69 73 69 62 6c 65 28 72 65 63 29 26 26 28 6d 65 6e 75 Data Ascii: function t_menusub_init(recid){var rec=document.getElementById("rec"+recid);if(rec)if(t_menusub__isBlockVisible(rec))t_menusub__lazyInit(recid);else{var menuIsInited=!1,orientationchangeEvent=function(){!menuIsInited&&t_menusub__isBlockVisible(rec)&&(menu
2024-10-07 22:14:23 UTC	5610	IN	Data Raw: 65 6e 75 73 75 62 5f 5f 69 73 4d 6f 62 69 6c 65 4d 45 34 30 31 28 77 72 61 70 4d 45 34 30 31 29 7b 76 61 72 20 77 72 61 70 4d 45 34 30 31 4d 65 6e 75 3d 77 72 61 70 4d 45 34 30 31 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 32 38 30 5f 5f 6d 65 6e 75 22 29 2c 77 72 61 70 4d 45 34 30 31 42 6f 74 74 6f 6d 3d 77 72 61 70 4d 45 34 30 31 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 32 38 30 5f 5f 62 6f 74 74 6f 6d 22 29 2c 77 72 61 70 4d 45 34 30 31 43 6f 6e 74 61 69 6e 65 72 3d 77 72 61 70 4d 45 34 30 31 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 32 38 30 5f 5f 63 6f 6e 74 61 69 6e 65 72 22 29 2c 6d 65 6e 75 48 65 69 67 68 74 3d 77 72 61 70 4d 45 34 30 31 4d 65 6e 75 3f 77 72 61 70 4d 45 34 30 31 4d 65 6e 75 2e 6f 66 66 73 65 74 Data Ascii: enusub__isMobileME401(wrapME401){var wrapME401Menu=wrapME401.querySelector(".t280__menu"),wrapME401Bottom=wrapME401.querySelector(".t280__bottom"),wrapME401Container=wrapME401.querySelector(".t280__container"),menuHeight=wrapME401Menu?wrapME401Menu.offset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49773	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:23 UTC	659	OUT	GET /tild3634-6139-4566-a231-383662633464/-/resize/600x500/-/format/webp/image.png HTTP/1.1 Host: optim.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:23 UTC	498	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:23 GMT Content-Type: image/png Content-Length: 74084 Connection: close last-modified: Mon, 07 Oct 2024 22:09:33 GMT etag: "67045c1d-12164" x-tilda-server: 3 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-d584771a2cac1a0629debdd5fd027b95-9f6766568e132fcd-01 X-ID: fr5-hw-edge-gc30 Age: 287 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-07T22:09:36+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:23 UTC	15452	IN	Data Raw: 52 49 46 46 5c 21 01 00 57 45 42 50 56 50 38 20 50 21 01 00 b0 71 03 9d 01 2a 80 03 f4 01 3e 51 22 8e 45 23 a2 23 14 4b 05 e8 38 05 04 b2 99 f1 56 98 50 f6 9b 69 8a ef 67 6a f7 85 56 5e f0 8f ab 5d 7b c6 17 8c 3e cf c1 db ce f6 0b 67 1d 69 f3 cc fd 7d 7f f2 ff cb 7f af e7 a3 cc fe 74 47 73 fc 1d db fc 27 fe 3f 33 ff 72 ef 8f ff 33 d6 87 f5 df f5 9e c2 3f df 3c ba fd 7c ff 7b ff cf ea b7 fa 9f fd ef dd cf 77 0f 4e bf de 7d 42 3f b9 fa 64 fa ce 7f 9b f5 57 f3 95 ff eb ed 3d fd d3 ff 6f a6 8f 5f b7 49 7f 95 7e d1 7a 52 f9 c7 f1 df e9 3f c4 7e 40 7a 3f e3 df d8 9f bc 7f a1 ff a9 fd f3 dc db fd bf 13 3d 67 ff 9b fd b7 a8 df cc ff 09 ff 07 fb ef ef 47 c5 8f ea 7f eb ff 94 f1 f7 e3 0f f9 7f e1 bf 27 7e 42 3f 28 fe 85 fe bb fb d7 f9 8f fd 1f e5 fe 33 fe c7 ff 2f Data Ascii: RIFF\!WEBPVP8 P!q*>Q"E##K8VPigjV^]{>gi}tGs'?3r3?<\|{wN}B?dW=o_I~zR?~@z?=gG'~B?(3/
2024-10-07 22:14:23 UTC	15928	IN	Data Raw: 41 d6 ce 41 7c 2a 2b cb cc e8 94 73 52 05 31 59 7a b8 93 89 33 d2 13 93 5f 4e 04 6d d2 9c 6c bf 0a ac b1 19 8a a8 f8 ae 0a 71 ff 17 a8 ea 1e 9e 64 45 be 0f 49 3b 42 42 da dd f9 dd 73 f5 65 48 71 7a c6 d7 54 a5 6b 04 45 a6 5f da 9a dd 10 59 ef ce c5 23 ec 8e 46 ad 39 8d 0a 6b bb ac f5 06 2d a2 e4 83 0d fa 95 0e cd 11 39 7c 41 67 73 2f 77 a4 76 67 aa 4e 8a c6 9e a7 14 1c 15 42 a4 99 9f a2 84 52 b9 9b a0 42 51 0c 2a a3 d3 72 75 68 38 56 48 aa ed 40 be fc be e6 63 ba ec 93 83 1d e7 7a 52 2b 88 e5 42 17 f1 1a 73 90 7b 13 c1 3a f2 d3 e3 5a 03 f5 4e c0 56 c6 4a 18 14 ff e4 9d 7b 3c 6b 77 c0 14 ba da 3b 11 db 07 eb 19 1d c2 2e 78 eb 70 1b db d3 1a 7a 7c b9 95 4b b1 0c 3a 88 8e a3 dc 1e 05 f6 52 57 1a b3 3a da 79 58 3d 53 49 15 ed 25 59 85 34 91 7c 2d 30 e0 47 27 Data Ascii: AA\|+sR1Yz3_NmlqdEI;BBseHqzTkE_Y#F9k-9\|Ags/wvgNBRBQruh8VH@czR+Bs{:ZNVJ{<kw;.xpz\|K:RW:yX=SI%Y4\|-0G'
2024-10-07 22:14:23 UTC	15888	IN	Data Raw: d5 f0 14 07 1b 61 53 82 7b 86 bf a7 22 25 83 94 21 2e 2b bf 09 20 29 43 fa 36 6c e3 7c f1 b0 12 d1 5e 67 e9 3f 48 f1 48 f5 58 60 9c 74 8a ee 8c b1 4e 7f 26 2a 5b 42 47 a5 09 f3 15 fc 25 03 40 79 2e e9 02 86 88 99 04 ec ac 23 55 2d e8 87 12 59 e7 99 87 87 c7 f9 d3 0b c1 21 52 3c aa 0b b8 38 cd 08 e4 af 27 e5 10 d1 a2 34 54 42 b7 1e 3f dc 1d 35 82 ef fd ea 1c f4 25 e9 41 8d a8 65 a0 96 5d 43 b7 8d 1b de 96 85 10 d3 7d 5d 42 52 9a 32 5a 85 95 9d f0 bc a3 ed 25 e2 71 a3 2a b6 3f 56 44 27 ee a8 0d 76 65 ce 46 50 c3 fd 82 cf ea c1 66 ee 5a f9 4b b7 91 7b 25 45 1f 8d 8e 0a a5 5b 4b fc 3f 59 20 6c 74 52 85 67 a4 e3 01 34 56 11 1c 5a e1 72 0e 7f eb 1c 4f c0 29 c0 9b eb b7 d5 b1 ca 3f fe d3 bd cb f8 0d 21 c0 9f 75 86 48 d0 cc 36 95 0a e1 31 1b ad 5d a9 d8 ae 05 2d Data Ascii: aS{"%!.+ )C6l\|^g?HHX`tN&[BG%@y.#U-Y!R<8'4TB?5%Ae]C}]BR2Z%q?VD'veFPfZK{%E[K?Y ltRg4VZrO)?!uH61]-
2024-10-07 22:14:23 UTC	15968	IN	Data Raw: 45 fd ce 91 de b6 66 0c 3c 39 cf 08 fe 51 7c 89 fc 01 5b 24 64 41 95 9a 10 6b 2f 02 91 05 cb 68 d9 40 58 5a de dd 6e 23 a3 30 f3 f5 d0 08 b8 ac 11 d0 5f 65 3d 32 bd 03 5f 78 6b 70 a1 f1 63 20 4c 11 ab 97 93 9b 02 44 d8 fb d8 e3 f7 08 54 c4 72 6b 79 75 6c 2e b0 ea 42 4a d5 75 8d c0 3e cb 16 ff b1 ab 53 cd f3 0c 1d fe 16 e7 b5 7b dc 7c d4 7b ef 64 db 13 2e 9b a4 f1 5f da f6 86 57 6e 9c 5f e2 55 dc cd 98 46 55 e2 b3 09 8a 76 3c f0 a4 34 57 19 a7 a8 0b a7 53 27 0e 21 0d 4d 93 62 83 c6 3f a1 cb 8a 91 46 a9 a4 c5 b9 8f 7c b7 c8 fd 32 0f 44 d4 68 a3 03 07 8a 20 6b 85 58 57 8d 41 49 74 85 76 81 30 76 45 58 80 08 cf a2 6f 09 4c f1 40 4d c3 84 d4 c7 27 84 47 ec 9f ab 73 ea 6f 1e c9 9f 63 40 ba 29 51 c3 6a ac 46 2c c6 4f 77 36 46 94 2a 8a ac 47 f1 73 de fb d7 7d 71 Data Ascii: Ef<9Q\|[$dAk/h@XZn#0_e=2_xkpc LDTrkyul.BJu>S{\|{d._Wn_UFUv<4WS'!Mb?F\|2Dh kXWAItv0vEXoL@M'Gsoc@)QjF,Ow6F*Gs}q
2024-10-07 22:14:23 UTC	10136	IN	Data Raw: 24 50 68 5e 9a 63 95 df 9a 8d fa bd 33 da 30 31 ad cc ec 1d 7b 33 07 3e 6c 1e 61 8c 9a d9 b6 12 32 59 6f 53 9e ae 5b f0 d0 c0 72 c1 08 79 d6 fb e1 ca 2a db 42 0a c7 ea 86 7e 82 a0 4a 2a 17 a0 84 0c 5c 65 f7 22 79 20 b8 08 6e 18 5d 03 49 b7 6b 24 b7 8a 0a a0 e4 c1 a5 93 77 80 73 85 a0 51 93 0f 88 f3 ab d4 8e ec 70 a7 aa b1 7f c4 f8 2b 73 3f 80 c8 88 2a ef 6f 3c 31 15 13 47 1e fb 49 9e b7 f9 5c f9 fa 70 a5 ef cc 88 bc a0 e9 c0 4a 29 6b ce d3 9b 97 ce f2 8a 91 4c 46 73 6e 39 7d 9b 7e 52 79 64 44 89 89 96 18 7e 09 d3 9f ba d1 22 47 c9 6c 6e c9 d0 03 08 fa 5f 81 d9 ad d7 73 b5 04 9b e9 2d 21 4c 09 4f 30 7e ad ad 65 cb 29 d7 a1 69 e2 47 e1 3d 0b 67 e9 0b b5 37 28 72 74 23 87 1b 11 72 f3 d1 99 27 cf 58 f5 17 44 a0 7b 87 bf 6f 23 8f 3c 5e 94 c9 3e 9e 14 68 9f 24 Data Ascii: $Ph^c301{3>la2YoS[ryB~J\e"y n]Ik$wsQp+s?*o<1GI\pJ)kLFsn9}~RydD~"Gln_s-!LO0~e)iG=g7(rt#r'XD{o#<^>h$
2024-10-07 22:14:23 UTC	712	IN	Data Raw: 05 90 45 7c 9e bf 2a 0f 4e 60 82 39 e8 fb 19 bf e3 92 01 82 ba 3c e5 5c 8d d1 3f 4c 8a 0d ae e0 83 5b 27 1f 8e 72 a4 95 0a 69 6c d7 c3 91 a5 5b 6c 21 48 cb 20 66 ad 34 cc e6 98 14 a8 02 9a 42 6b 51 a9 59 99 20 fd 54 fd 5f ec 63 ae a3 7f ac 4f 9a a3 e3 d1 0d af df 64 bd 72 23 d4 09 f5 d1 8d 30 78 cb ad af 9f e2 37 14 57 56 c4 db 09 0b f6 bb e1 41 e2 03 a0 8b 28 b0 df 6f b6 c9 9b aa e9 d4 37 1f 32 72 aa 10 51 12 ff 1f 0f 9d 36 9d f7 0b 1b 45 84 6e ea d1 fa ce 58 36 9b b9 50 1e 8a ff 78 38 38 14 5a 49 d7 de 3a ff 2e a6 7a f1 ac a0 6f 7c bc ef 01 ad 04 b2 66 04 f8 e0 11 44 77 46 8d e7 4e 70 05 fa 06 06 c2 1d 02 ce 38 85 6c 11 55 f8 3d 5c 7e 01 09 b7 64 61 b7 50 d9 3a b5 4c 1a 92 c9 1c 5b e1 10 3b c6 45 06 6f de 36 dc ed 2c de da bb 48 62 a3 eb 91 f1 24 09 06 Data Ascii: E\|*N`9<\?L['ril[l!H f4BkQY T_cOdr#0x7WVA(o72rQ6EnX6Px88ZI:.zo\|fDwFNp8lU=\~daP:L[;Eo6,Hb$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49772	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:23 UTC	367	OUT	GET /js/tilda-zero-1.1.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:23 UTC	545	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:23 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 26847 Connection: close Vary: Accept-Encoding last-modified: Tue, 10 Sep 2024 10:38:20 GMT etag: "66e0219c-68df" tserver: 9 X-ID-SHIELD: am3-hw-edge-gc88 Age: 2373450 traceparent: 00-cd9986d595574a0d15b2485dd1075dfe-7bd16491cbb7c2c8-01 X-ID: fr5-hw-edge-gc22 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-10T13:51:41+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:23 UTC	15405	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 33 39 36 5f 69 6e 69 74 28 65 29 7b 76 61 72 20 69 2c 74 2c 6e 2c 6f 2c 72 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 63 22 2b 65 29 2c 6c 3d 61 3f 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 33 39 36 22 29 3a 6e 75 6c 6c 2c 64 3d 61 3f 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 33 39 36 5f 5f 61 72 74 62 6f 61 72 64 22 29 3a 6e 75 6c 6c 3b 64 26 26 28 74 33 39 36 5f 69 6e 69 74 54 4e 6f 62 6a 28 65 2c 64 29 2c 74 33 39 36 5f 5f 69 6e 69 74 4f 6e 6c 79 53 63 61 6c 61 62 6c 65 28 29 2c 72 3d 74 33 39 36 5f 64 65 74 65 63 74 52 65 73 6f 6c 75 74 69 6f 6e 28 65 29 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 6c 6c Data Ascii: function t396_init(e){var i,t,n,o,r,a=document.getElementById("rec"+e),l=a?a.querySelector(".t396"):null,d=a?a.querySelector(".t396__artboard"):null;d&&(t396_initTNobj(e,d),t396__initOnlyScalable(),r=t396_detectResolution(e),i=document.getElementById("all
2024-10-07 22:14:23 UTC	11442	IN	Data Raw: 6d 28 74 2c 65 2c 69 29 7b 76 61 72 20 6e 2c 6f 2c 72 3b 28 65 3d 74 33 39 36 5f 67 65 74 45 6c 28 65 29 29 26 26 28 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 69 65 6c 64 73 22 2c 22 77 69 64 74 68 2c 74 6f 70 2c 6c 65 66 74 2c 69 6e 70 75 74 73 2c 63 6f 6e 74 61 69 6e 65 72 2c 61 78 69 73 78 2c 61 78 69 73 79 2c 77 69 64 74 68 75 6e 69 74 73 2c 6c 65 66 74 75 6e 69 74 73 2c 74 6f 70 75 6e 69 74 73 22 29 2c 6f 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 65 6c 65 6d 2d 69 64 22 29 2c 28 72 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 6e 2d 61 74 6f 6d 5f 5f 69 6e 70 75 74 73 2d 74 65 78 74 61 72 65 61 22 29 29 26 26 28 6e 3d 72 2e 76 61 6c 75 65 29 2c 74 5f 6f 6e 46 75 6e 63 4c 6f 61 64 28 22 74 Data Ascii: m(t,e,i){var n,o,r;(e=t396_getEl(e))&&(e.setAttribute("data-fields","width,top,left,inputs,container,axisx,axisy,widthunits,leftunits,topunits"),o=e.getAttribute("data-elem-id"),(r=e.querySelector(".tn-atom__inputs-textarea"))&&(n=r.value),t_onFuncLoad("t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49771	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:23 UTC	367	OUT	GET /js/tilda-menu-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:23 UTC	549	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:23 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 11580 Connection: close Vary: Accept-Encoding last-modified: Tue, 27 Aug 2024 11:12:21 GMT etag: "66cdb495-2d3c" t-server: or-7 X-ID-SHIELD: am3-hw-edge-gc93 Age: 3581650 traceparent: 00-1b5e37fe52b78dee2d8406856f0442ae-4e412d4acb754055-01 X-ID: fr5-hw-edge-gc62 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-08-27T12:54:58+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:23 UTC	11057	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 6d 65 6e 75 5f 5f 68 69 67 68 6c 69 67 68 74 41 63 74 69 76 65 4c 69 6e 6b 73 28 65 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 6e 2c 72 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 3b 22 2f 22 3d 3d 3d 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 28 6e 3d 74 2e 73 6c 69 63 65 28 30 2c 2d 31 29 29 2c 22 2f 22 3d 3d 3d 72 5b 72 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 28 72 3d 72 2e 73 6c 69 63 65 28 30 2c 2d 31 29 29 2c 22 2f 22 3d 3d 3d 72 5b 30 5d 26 26 28 72 3d 72 2e 73 6c 69 63 65 28 31 29 29 2c 22 22 3d 3d 3d 72 26 26 28 72 3d 22 2f 22 29 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 41 72 Data Ascii: function t_menu__highlightActiveLinks(e){var t=window.location.href,n,r=window.location.pathname;"/"===t[t.length-1]&&(n=t.slice(0,-1)),"/"===r[r.length-1]&&(r=r.slice(0,-1)),"/"===r[0]&&(r=r.slice(1)),""===r&&(r="/");var i=document.querySelectorAll(e);Ar
2024-10-07 22:14:23 UTC	523	IN	Data Raw: 6e 28 29 29 7d 29 29 7d 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 74 5f 6d 65 6e 75 5f 5f 66 6f 63 75 73 4f 6e 4d 65 6e 75 49 74 65 6d 28 65 29 2c 74 5f 6d 65 6e 75 5f 5f 69 6e 74 65 72 61 63 74 57 69 74 68 4d 65 6e 75 46 72 6f 6d 4b 65 79 62 6f 61 72 64 28 65 29 2c 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 2d 6d 65 6e 75 73 75 62 5f 5f 6d 65 6e 75 22 29 7c 7c 77 69 6e 64 6f 77 2e 69 73 4d 6f 62 69 6c 65 7c 7c 22 6f 6e 74 6f 75 63 68 65 6e 64 22 69 6e 20 64 6f 63 75 6d 65 6e 74 7c 7c 74 5f 6d 65 6e 75 5f 5f 63 6c 69 63 6b 4f 6e 4d 65 6e 75 49 74 65 6d 28 65 29 7d 29 29 2c 41 72 72 61 79 2e 70 72 Data Ascii: n())}))};Array.prototype.forEach.call(n,(function(e){var t;t_menu__focusOnMenuItem(e),t_menu__interactWithMenuFromKeyboard(e),!e.parentNode.querySelector(".t-menusub__menu")\|\|window.isMobile\|\|"ontouchend"in document\|\|t_menu__clickOnMenuItem(e)})),Array.pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49777	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:23 UTC	376	OUT	GET /js/tilda-submenublocks-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:23 UTC	545	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:23 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 21814 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 04 Sep 2024 12:04:10 GMT ETag: "66d84cba-5536" tserver: 9 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-8c60f11ebbf87ed2a477c2a800b88596-6b044db8d1bf1417-01 X-ID: fr5-hw-edge-gc37 Age: 2886824 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-04T12:20:39+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:23 UTC	15839	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 73 75 62 6d 65 6e 75 62 6c 6f 63 6b 73 5f 5f 68 69 67 68 6c 69 67 68 74 41 63 74 69 76 65 4c 69 6e 6b 73 28 65 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2c 6f 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2c 65 3d 28 22 22 3d 3d 3d 28 6e 3d 22 2f 22 3d 3d 3d 28 6e 3d 22 2f 22 3d 3d 3d 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 3f 6e 2e 73 6c 69 63 65 28 30 2c 2d 31 29 3a 6e 29 5b 30 5d 3f 6e 2e 73 6c 69 63 65 28 31 29 3a 6e 29 26 26 28 6e 3d 22 2f 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 29 3b 28 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 Data Ascii: function t_submenublocks__highlightActiveLinks(e){var t=window.location.href,n=window.location.pathname,o=window.location.hash,e=(""===(n="/"===(n="/"===n[n.length-1]?n.slice(0,-1):n)[0]?n.slice(1):n)&&(n="/"),document.querySelectorAll(e));(e=Array.protot
2024-10-07 22:14:23 UTC	5142	IN	Data Raw: 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 6c 2b 22 70 78 22 2c 75 3c 3d 28 6c 2b 3d 73 29 26 26 28 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 22 2c 65 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 22 2c 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 6f 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 28 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 63 29 29 7d 2c 31 30 29 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 73 75 62 6d 65 6e 75 62 6c 6f 63 6b 73 5f 5f 72 65 6d 6f 76 65 45 6c 28 65 29 7b 65 26 26 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 26 26 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 66 75 6e 63 74 69 6f 6e Data Ascii: terval(function(){e.style.height=l+"px",u<=(l+=s)&&(e.style.height="",e.style.overflow="",e.style.display=o,"function"==typeof n&&n(),clearInterval(c))},10))}function t_submenublocks__removeEl(e){e&&e.parentElement&&e.parentElement.removeChild(e)}function
2024-10-07 22:14:23 UTC	833	IN	Data Raw: 29 29 2c 6e 3d 28 75 2e 73 74 79 6c 65 2e 66 6f 6e 74 53 69 7a 65 3d 31 2e 32 2a 6c 2b 22 70 78 22 2c 6f 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 74 79 6c 65 2e 66 6f 6e 74 53 69 7a 65 3d 2e 38 2a 6c 2b 22 70 78 22 7d 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 3b 72 65 74 75 72 6e 20 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 74 2d 73 75 62 6d 65 6e 75 5f 66 75 6c 6c 73 63 72 65 65 6e 5f 5f 6e 61 76 2d 61 72 72 6f 77 22 29 2c 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 73 76 67 20 63 6c 61 73 73 3d 22 74 5f 73 75 62 6d 65 6e 75 5f 5f 63 6c 6f 73 65 2d 69 63 6f 6e 22 20 77 69 64 74 68 3d 22 32 36 70 78 22 20 68 65 69 67 68 74 3d 22 32 36 70 78 22 20 76 69 65 77 42 6f Data Ascii: )),n=(u.style.fontSize=1.2l+"px",o.forEach(function(e){e.style.fontSize=.8l+"px"}),document.createElement("div"));return n.classList.add("t-submenu_fullscreen__nav-arrow"),n.innerHTML='<svg class="t_submenu__close-icon" width="26px" height="26px" viewBo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49774	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:23 UTC	368	OUT	GET /js/tilda-cards-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:23 UTC	547	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:23 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2163 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 10 Sep 2024 12:07:15 GMT ETag: "66e03673-873" T-Server: or-7 X-ID-SHIELD: am3-hw-edge-gc88 Age: 2368667 traceparent: 00-d8b3f3580badfce9c69766b4df1fca35-db95ba121c729238-01 X-ID: fr5-hw-edge-gc27 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-10T13:14:10+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:23 UTC	2163	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 63 61 72 64 73 5f 5f 6d 6f 76 65 43 6c 69 63 6b 4f 6e 43 61 72 64 28 74 29 7b 74 5f 63 61 72 64 5f 5f 6d 6f 76 65 43 6c 69 63 6b 4f 6e 43 61 72 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 63 61 72 64 73 5f 5f 61 64 64 46 6f 63 75 73 4f 6e 54 61 62 28 74 29 7b 74 5f 63 61 72 64 5f 5f 61 64 64 46 6f 63 75 73 4f 6e 54 61 62 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 63 61 72 64 5f 5f 6d 6f 76 65 43 6c 69 63 6b 4f 6e 43 61 72 64 28 74 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 63 22 2b 74 29 3b 69 66 28 65 29 7b 76 61 72 20 63 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 74 2d 63 61 72 64 5f 5f 63 6f 6c 22 29 3b 63 26 26 41 72 72 61 79 2e Data Ascii: function t_cards__moveClickOnCard(t){t_card__moveClickOnCard(t)}function t_cards__addFocusOnTab(t){t_card__addFocusOnTab(t)}function t_card__moveClickOnCard(t){var e=document.getElementById("rec"+t);if(e){var c=e.querySelectorAll(".t-card__col");c&&Array.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49780	5.181.161.195	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:23 UTC	566	OUT	GET /geo/country/ HTTP/1.1 Host: geo.tildacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://aholding-croatia.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:23 UTC	195	IN	HTTP/1.1 200 OK date: Mon, 07 Oct 2024 22:14:23 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked access-control-allow-origin: * x-tilda-server: 12 connection: close
2024-10-07 22:14:23 UTC	12	IN	Data Raw: 32 0d 0a 55 53 0d 0a 30 0d 0a 0d 0a Data Ascii: 2US0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49778	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:23 UTC	659	OUT	GET /tild3039-3739-4331-b732-363433636164/-/resize/600x500/-/format/webp/image.png HTTP/1.1 Host: optim.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:23 UTC	460	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:23 GMT Content-Type: image/png Content-Length: 151202 Connection: close last-modified: Mon, 07 Oct 2024 22:10:27 GMT etag: "67045c53-24ea2" x-tilda-server: 3 X-ID-SHIELD: am3-hw-edge-gc89 Cache: MISS traceparent: 00-4affb0859cf62cfddb89d5e1cbd75198-c0a07b65eef7895c-01 X-ID: fr5-hw-edge-gc29 Access-Control-Allow-Origin: * Cache: MISS Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:23 UTC	15490	IN	Data Raw: 52 49 46 46 9a 4e 02 00 57 45 42 50 56 50 38 20 8e 4e 02 00 30 01 05 9d 01 2a a6 03 f4 01 3e 49 1c 8a 44 22 a1 a1 24 b2 db cc 48 90 09 09 63 6c 38 af 3c 1e cd eb 83 93 65 cf bb 97 cf cd 08 bc e9 fd 57 9d 6f 82 ec 84 59 57 cc 90 91 80 37 1c 66 ae b6 19 da 62 6c db e8 af ab ec ff d8 eb f7 99 fe 31 fd df f4 be 92 bc c7 e1 97 d8 3f 1d eb a7 fe 6e c9 be 43 fe ef 99 0f b8 7f 6b e7 33 fe 8f ee 0f bb 5f ea ff eb 7d 82 7f ac ff 88 f5 41 ff 9b f7 8b de ff f7 bf fd 3e a3 bf b1 ff c7 fd c9 f7 92 ff cd fb b9 ef 27 fc bf a8 6f f8 7f fa be ba 9f fc bf ff fb aa 7e f9 7b 15 7e f4 fa cb 7f f7 fd e5 f8 69 ff 07 ff bf d3 6f ff ff b0 07 ff ff 6d ef e0 1f ff f8 cd fc a0 7c e3 f7 ff f3 9f df fc 4d fc 97 e7 7f c5 ff 70 ff 1d ff 3b fb cf b6 87 fa bf e6 7c 26 74 97 fd cf f3 7f f0 Data Ascii: RIFFNWEBPVP8 N0*>ID"$Hcl8<eWoYW7fbl1?nCk3_}A>'o~{~iom\|Mp;\|&t
2024-10-07 22:14:23 UTC	15928	IN	Data Raw: 5c 75 f3 6d d8 85 e9 df f7 06 5e 56 f4 a2 26 5c 1a a3 89 fc cc 64 e7 e9 4b 64 e9 f2 9f 37 f1 2b e8 02 93 f5 58 fe 85 62 45 ab 31 c6 7a bf 38 e1 d7 82 48 56 93 76 dc 9b 58 51 8e 9b 97 aa a1 cf 83 77 e3 4a a3 50 b1 d9 79 61 fc 84 5c aa 58 64 b7 76 30 ff f6 a2 b0 a1 ac de 67 26 b1 34 e5 b1 17 bc f3 76 50 7b 92 fd c1 f9 f1 da c8 e5 c9 55 01 2c 43 46 1a 2a 2c 0c f3 06 5a f8 7b 4f 63 33 de b2 b7 b4 78 07 6f 9f 13 3d 31 81 68 43 2c a5 63 1c 32 c4 ca 22 55 5d e7 94 66 85 ba 6f bd ab 1e 18 a3 2f 53 18 67 f9 89 09 95 9e b7 75 d2 e5 ef f1 56 87 43 3c 78 5c 58 87 d6 b2 c5 98 82 49 0a 4d 07 23 6a 84 cf e9 71 49 60 55 21 aa 8f e0 12 d5 84 c2 db 23 ea 92 0a 24 ee cc 10 ee 6f aa d1 dd 24 c7 2b 97 ab f0 18 5e 51 ef ac 4d 9e 05 8b b6 f4 ca 79 fe 22 3b e3 98 31 38 bf 1d 58 Data Ascii: \um^V&\dKd7+XbE1z8HVvXQwJPya\Xdv0g&4vP{U,CF*,Z{Oc3xo=1hC,c2"U]fo/SguVC<x\XIM#jqI`U!#$o$+^QMy";18X
2024-10-07 22:14:23 UTC	15928	IN	Data Raw: 3a 57 f9 af d6 05 b9 94 63 99 8e 65 60 2a 19 1f 93 e5 cc 13 b3 43 9c 12 2f 39 93 fb 80 a5 7c 66 73 4a 52 bf b9 f3 d0 82 51 9d ad 5c 6a 5a bc 72 27 79 a6 65 90 fe 46 9b 56 5e 6c a5 18 a9 49 8b 0f a8 10 e3 48 7c e6 4d 33 a9 68 61 08 66 68 6f b6 56 44 85 b6 83 7e a0 16 9a 5e f3 52 6b 52 ae 32 47 a2 42 8b 0e 01 4c d0 e6 e0 52 78 43 70 90 4e a6 d3 2b 84 b7 14 71 41 65 59 8d 20 45 a5 d2 ed 92 cf 3b 4b 49 40 77 d7 5f 97 eb df 38 f8 71 15 93 13 db 0a f9 31 17 24 8c 9f b7 d4 80 a3 72 94 a8 d7 09 29 23 4e 6f b1 2b 28 b1 09 f9 b3 de c8 cd 1a 6f 93 8e 2d de bd 7f 4f da 71 11 f7 77 e2 e6 8b 83 ad 36 56 1a e7 0a 24 d4 ca 27 9f 1e 21 6b 53 21 75 ec ad 50 25 b0 41 29 55 9d 05 69 b7 8c 36 ad 27 e7 4a 37 74 d5 de 3d e4 8a d1 35 03 5f b9 5d ce f6 3d 9f 71 94 8e 5e 07 e7 8e Data Ascii: :Wce`*C/9\|fsJRQ\jZr'yeFV^lIH\|M3hafhoVD~^RkR2GBLRxCpN+qAeY E;KI@w_8q1$r)#No+(o-Oqw6V$'!kS!uP%A)Ui6'J7t=5_]=q^
2024-10-07 22:14:23 UTC	8648	IN	Data Raw: 48 55 ef 2b d4 b7 07 de cb 37 48 2e da 75 c0 8f 49 2c e0 8f c9 b8 c8 6a 66 55 70 cd fc 79 e3 49 5e ec e1 ef 4d 22 5d 4d 8c 6a 19 3d 78 2b 99 bc 3f bc 6d 46 15 fd 7b b4 0b e1 e8 be 74 0d 5c 97 3f 08 ea fb 44 77 39 bc 13 f2 f3 ae b3 3d 90 e9 87 ac 77 ad f1 c9 84 1c ac 74 19 ba ac fa 29 b6 d0 8a 17 78 ec 5a 4d d9 10 dd 60 55 3e a9 a1 62 56 c6 3d a6 0e b2 06 03 ba 12 53 39 8b dc 5c 75 e4 c6 38 43 2c bc 4b b9 9e db 7e bb 01 b0 81 3c d9 ec 5a c5 7d f6 ed cf 8e 93 ae ce db c9 92 a3 83 84 ff 21 7f 46 86 ca 83 48 66 82 84 54 33 0b 1e 26 70 c6 99 9d 09 f0 4f 95 9d 81 0b 23 3b 60 38 28 b6 3e f8 f6 3e 70 35 07 96 bd a0 04 cd a1 59 f7 e6 e5 da 98 9b 44 a6 7f 69 e4 6e 20 fc f3 9f ee c2 d8 7c 35 8d 4a fb a6 d7 37 6b 84 08 6b bd 18 17 c3 f6 52 33 3d a7 0f 71 a3 ea 83 72 Data Ascii: HU+7H.uI,jfUpyI^M"]Mj=x+?mF{t\?Dw9=wt)xZM`U>bV=S9\u8C,K~<Z}!FHfT3&pO#;`8(>>p5YDin \|5J7kkR3=qr
2024-10-07 22:14:24 UTC	8688	IN	Data Raw: b9 a2 c3 ad 7d 92 cb 05 6e b8 ec 75 95 87 e3 31 c0 e4 63 62 70 bf 4e d4 c8 05 f6 e1 4b b6 35 89 a3 25 6b cf 82 cf c9 10 a5 de 35 07 85 cb 17 39 e1 69 7f 49 0b 2d 2a a6 c1 08 df 93 cf 3a 89 20 00 a3 39 5b f8 2c a1 2e fd c5 ab f9 d8 7f 98 f4 71 bb 94 c8 61 4e 18 bc 7f 96 a8 c2 6d 87 6b 65 4f 03 5f e8 bb 4a db 38 e1 bc 2f 1b 9c a2 61 a2 04 3e 6f b4 b3 15 d4 2e 4f 25 94 85 be 83 ed 08 70 00 fd 16 8b c5 6a 9a ac 53 0f 2a 1a 53 37 f2 64 86 75 df da 29 90 1f 48 b7 75 80 7e 4f 6b 80 7d e0 00 3a 3c c4 b6 a5 3e 11 66 42 a1 58 13 a1 c1 ed 5d ba e4 d0 6b f4 9d 17 e1 2f 90 9c 41 87 de 59 6d eb 1e 6c 30 e3 88 ce b8 6e 25 6d 2b b5 a1 e8 3b 4c 0e 54 27 40 e1 05 57 f4 c7 3f 9e 81 00 b5 21 c8 4d 31 30 2c f2 21 a0 c0 0f f3 19 fd 0c 5e 0b 4b f2 18 5e 33 b2 00 4d b8 80 bb 37 Data Ascii: }nu1cbpNK5%k59iI-: 9[,.qaNmkeO_J8/a>o.O%pjSS7du)Hu~Ok}:<>fBX]k/AYml0n%m+;LT'@W?!M10,!^K^3M7
2024-10-07 22:14:24 UTC	16384	IN	Data Raw: df e7 42 b3 a2 31 6a 8f 86 5b f5 85 3c e7 96 5b 78 6f 68 49 9c a5 11 9c e7 4f 05 94 c4 49 8a ff 5f b4 ce 6a ac fb b4 3d 7c f0 a8 ae 8e 49 1a bf f0 11 3c f1 c2 c2 08 ac 55 92 69 63 84 de ec 73 e3 86 a8 44 b5 bc 81 79 4f eb d6 e1 7b 3e c8 84 75 1a c3 42 75 fd 0c ed a3 0d 75 df 7a ff db 86 f2 ef d9 ae 2f 75 0b 15 47 9a a9 58 f8 97 f6 98 6a b9 d1 1c ef 71 d9 83 b1 df 6d da 77 9d 55 2e f1 50 64 65 77 04 e6 c5 94 6c e7 ad 0e 86 76 5b 27 43 a7 6b 39 a6 d0 08 4d 46 cc 78 bd 6c 44 44 63 bb a1 05 00 82 49 1a b1 6d 40 3d b7 01 71 f8 79 75 35 73 90 d3 f1 fb 7d 4f 1d 78 18 cc 3a 8d 03 6c 6c 6d 25 17 a6 83 94 a1 ce 72 49 37 44 f7 4c aa 96 29 9c ee 44 a1 fb 4a 06 ca aa 7d 2b d5 40 79 36 34 23 9d e2 13 c8 69 50 f6 7f bd 17 58 05 58 30 eb 50 31 21 ff 18 85 26 ba 1f 6b 30 Data Ascii: B1j[<[xohIOI_j=\|I<UicsDyO{>uBuuz/uGXjqmwU.Pdewlv['Ck9MFxlDDcIm@=qyu5s}Ox:llm%rI7DL)DJ}+@y64#iPXX0P1!&k0
2024-10-07 22:14:24 UTC	16384	IN	Data Raw: 21 d7 20 76 10 0f 1e 9f 5c da cd cd d0 ef 22 2e 7f 4b 08 a3 4c 94 b3 61 9b af 0f fc 76 2c be af e6 56 3e 0f a4 46 e1 19 16 69 94 f7 3c fd a1 a4 3c 04 85 e8 09 df a7 69 f4 e0 c7 e0 14 ac f5 06 1e 65 2e 3e 0a 5a 65 b4 fe 43 83 4b 8a e1 4d be c3 47 50 02 0a 2a 76 3f 7c 78 c1 d3 75 cf 8f ac 24 ba 14 1b a4 55 56 87 a8 ba b1 3d a5 ed a7 2a db 85 1a 68 f2 78 ca 6a ba 38 1d d3 ca 5e 22 8d 60 30 21 62 34 61 dc 05 24 06 58 f8 0c 48 fa 40 6d 94 7e 31 1e c3 8b 27 a5 ae 5c 55 60 96 85 56 51 3e e8 94 eb 1d 4d 40 fa 0f de a0 86 56 bc ef ca 24 e4 96 ed b4 49 08 f8 b5 9c 83 c8 a3 ce e4 ef 59 a0 72 8e bd ea 38 6e e1 c2 08 9f 56 43 bc 49 5b 52 ed 4f 36 c6 6d 4c 36 30 ba 7c e0 b2 21 11 d7 33 0c eb 7c 8f 13 e5 34 4f 5f 0c 47 0d 4e 65 0e e8 6a bd 85 02 ae aa e0 91 f6 da ab 80 Data Ascii: ! v\".KLav,V>Fi<<ie.>ZeCKMGPv?\|xu$UV=hxj8^"`0!b4a$XH@m~1'\U`VQ>M@V$IYr8nVCI[RO6mL60\|!3\|4O_GNej
2024-10-07 22:14:24 UTC	16384	IN	Data Raw: 33 fe b5 6b 16 6e 5e b8 ca 7c d2 98 6b da 02 3f fb 2d cc f4 f9 09 d1 8d a9 09 47 21 f3 7a 9f c6 08 f5 31 85 d9 d7 f6 b0 5f 9e 51 38 40 cd 4f 89 cf 2c 78 ca b3 72 37 1f ff 52 56 2d f0 17 55 94 55 46 fb ba 80 c7 a2 4a 58 66 96 ad c6 45 28 32 4c ed 2e 11 ca 54 a9 06 b3 7d d2 fa 87 04 95 b6 df 58 dd da 51 18 9d d2 74 4a 5b f3 2d 3b c1 6e df 79 c0 83 c6 26 54 0a 09 b2 db af 99 7f 98 13 e0 1a aa 3e 2f 29 39 1e a7 8a e4 84 0e 0a 77 d2 f5 d9 a0 ec e2 fc b4 ef 16 9e a9 2f 53 a6 33 25 92 e2 e3 fa 55 3d 7a a9 fd 9e 0d 7a 06 4d c1 4a 47 a6 71 29 82 29 22 95 52 84 fa ed b5 89 3a af ee 38 e2 1e 0a 40 4b d0 b5 9c 75 fb 18 90 c6 df f9 17 87 a8 f0 4a f8 81 d2 98 c4 49 96 22 46 f4 3a 65 ca 3e e0 39 3e d9 ce 9d f7 81 a2 d4 65 4a f8 40 ee ec d2 12 8b 58 a7 64 fa 59 cb 41 36 Data Ascii: 3kn^\|k?-G!z1_Q8@O,xr7RV-UUFJXfE(2L.T}XQtJ[-;ny&T>/)9w/S3%U=zzMJGq))"R:8@KuJI"F:e>9>eJ@XdYA6
2024-10-07 22:14:24 UTC	16384	IN	Data Raw: bb 3a 9f 11 d7 b8 f1 f0 62 22 ad c9 96 98 3d 22 c5 64 97 c5 2c 84 5c d2 0c 00 50 04 12 e0 38 a2 9d 2b ba 0a 14 c4 5b a1 6c 01 d8 98 b7 1b 48 db 4c 3d 66 ac e4 e4 e0 09 74 a3 2b f8 80 97 84 4d 9d 0f 39 69 27 54 b1 60 b1 7a 17 bb d3 e8 9c b6 25 2f fd 34 38 12 6a 32 96 31 13 e7 ce 1e a6 30 41 0a 9a 7f fb 6d 0f f6 01 58 2a 4c 6c 29 b6 98 fb 5b f7 ea f6 41 6b bc bc ae 2f 64 b5 02 d5 5c b6 6a 1b 03 ea b8 c8 d9 6b 83 0f c4 d5 6a 2c 58 5e a2 4d aa 2a 04 a9 10 9c a7 8f 81 ef 1a 9e dc 22 37 22 65 dd a2 27 52 7b f7 72 d9 18 a7 e6 ab 3f 14 e0 91 99 de 0f b4 7d 2e 98 f1 b3 3c e4 d7 bf 82 10 30 f2 7f 4b fe 13 af 3f 9a c1 2d c4 7d 10 d1 0d 6d 75 9c cc 62 a1 90 ba bf 06 f4 9b 4a 64 a0 8a 53 f1 b9 26 e6 15 b9 21 55 5b e7 7e 2a de 05 bf 22 ed 4c 3d 36 1d 25 5f 21 53 b2 79 Data Ascii: :b"="d,\P8+[lHL=ft+M9i'T`z%/48j210AmXLl)[Ak/d\jkj,X^M"7"e'R{r?}.<0K?-}mubJdS&!U[~*"L=6%_!Sy
2024-10-07 22:14:24 UTC	16384	IN	Data Raw: 5b 9d af db 5c db 89 d8 cc 9b d4 f1 52 5a 0c be 8b f8 3e f3 46 df 2b c3 eb 57 46 b8 13 12 e2 c1 87 98 77 f6 b5 54 22 99 1b a1 4f 93 24 3f f9 a4 64 51 6f 44 5d 0e b2 4f 8b 57 86 6e cc 34 5c 42 64 22 2b 37 9b 45 a7 40 a4 1e d4 3d 5a b1 88 99 5d fa 8c 88 d9 d4 60 50 8d a4 28 cd 4d 72 96 72 5e 76 7c 4d fb 7e dc a9 1f 83 ff 48 52 ff 29 a3 89 29 b1 71 15 03 64 ca 1e 3e 66 9d 5a 0f 1d 32 5b 29 84 89 8a cf cb 3e 75 45 b4 0b 0d 4e 7b 0b 75 ec 33 66 67 91 bf b5 57 cf d8 9d 5e 9e b4 34 6f 41 e3 2c 69 3e 1d 7e e2 0f d2 c1 58 66 82 8c 2c a5 2b cf e2 21 35 bb 9c 72 36 b3 fe 70 8e f0 3e 84 4d 35 87 50 6c f0 a4 3d f7 ac 33 61 7a 3a 22 92 f4 0e 83 35 f7 8c ed 77 bb f5 6b fa 02 6e a8 4e 28 58 54 e5 17 ff a0 ed 70 e5 b0 4d 02 a6 3b d2 f2 33 a8 e8 dc 3c 17 89 2e 9a d9 2f eb Data Ascii: [\RZ>F+WFwT"O$?dQoD]OWn4\Bd"+7E@=Z]`P(Mrr^v\|M~HR))qd>fZ2[)>uEN{u3fgW^4oA,i>~Xf,+!5r6p>M5Pl=3az:"5wknN(XTpM;3<./

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49782	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:24 UTC	373	OUT	GET /js/tilda-zero-scale-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:25 UTC	544	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:25 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4480 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 10 Sep 2024 10:38:20 GMT ETag: "66e0219c-1180" tserver: 9 X-ID-SHIELD: am3-hw-edge-gc89 Age: 2373452 traceparent: 00-01fcaae64128b4dee13b80b48c8df6ea-16442c0a27350b3d-01 X-ID: fr5-hw-edge-gc31 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-10T13:51:42+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:25 UTC	3822	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 33 39 36 5f 73 63 61 6c 65 42 6c 6f 63 6b 28 74 29 7b 76 61 72 20 65 2c 64 2c 61 2c 6c 2c 75 3d 74 33 39 36 5f 69 73 4f 6e 6c 79 53 63 61 6c 61 62 6c 65 42 72 6f 77 73 65 72 28 29 2c 70 3d 74 33 39 36 5f 64 65 74 65 63 74 52 65 73 6f 6c 75 74 69 6f 6e 28 74 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 63 22 2b 74 29 3b 6f 26 26 28 65 3d 74 33 39 36 5f 73 63 61 6c 65 5f 5f 67 65 74 45 6c 65 6d 65 6e 74 73 54 6f 53 63 61 6c 65 28 6f 3d 6f 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 74 33 39 36 5f 5f 61 72 74 62 6f 61 72 64 22 29 29 2c 6f 26 26 30 21 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 74 Data Ascii: function t396_scaleBlock(t){var e,d,a,l,u=t396_isOnlyScalableBrowser(),p=t396_detectResolution(t),o=document.getElementById("rec"+t);o&&(e=t396_scale__getElementsToScale(o=o.querySelector(".t396__artboard")),o&&0!==e.length&&(d="function"==typeof window.t
2024-10-07 22:14:25 UTC	658	IN	Data Raw: 75 65 28 74 2c 22 68 65 69 67 68 74 22 29 2c 61 3d 74 33 39 36 5f 65 6c 65 6d 5f 5f 67 65 74 48 65 69 67 68 74 28 74 2c 61 29 2c 61 3d 74 33 39 36 5f 65 6c 65 6d 5f 5f 63 6f 6e 76 65 72 74 50 6f 73 69 74 69 6f 6e 5f 5f 4c 6f 63 61 6c 5f 5f 74 6f 41 62 73 6f 6c 75 74 65 28 74 2c 22 68 65 69 67 68 74 22 2c 61 29 2c 65 3d 74 33 39 36 5f 65 6c 65 6d 5f 5f 67 65 74 46 69 65 6c 64 56 61 6c 75 65 28 74 2c 22 77 69 64 74 68 22 29 2c 65 3d 74 33 39 36 5f 65 6c 65 6d 5f 5f 67 65 74 57 69 64 74 68 28 74 2c 65 29 2c 65 3d 74 33 39 36 5f 65 6c 65 6d 5f 5f 63 6f 6e 76 65 72 74 50 6f 73 69 74 69 6f 6e 5f 5f 4c 6f 63 61 6c 5f 5f 74 6f 41 62 73 6f 6c 75 74 65 28 74 2c 22 77 69 64 74 68 22 2c 65 29 2c 6f 3d 70 61 72 73 65 46 6c 6f 61 74 28 74 33 39 36 5f 65 6c 65 6d 5f 5f Data Ascii: ue(t,"height"),a=t396_elem__getHeight(t,a),a=t396_elem__convertPosition__Local__toAbsolute(t,"height",a),e=t396_elem__getFieldValue(t,"width"),e=t396_elem__getWidth(t,e),e=t396_elem__convertPosition__Local__toAbsolute(t,"width",e),o=parseFloat(t396_elem__

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49781	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:24 UTC	368	OUT	GET /js/tilda-forms-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:25 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:25 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 58750 Connection: close Vary: Accept-Encoding last-modified: Tue, 01 Oct 2024 12:08:10 GMT etag: "66fbe62a-e57e" t-server: JWhHVWak X-ID-SHIELD: am3-hw-edge-gc93 Age: 554160 traceparent: 00-a2e807d0d715d9d8bd22ea7c8563b8e6-70c8b96545e21fa8-01 X-ID: fr5-hw-edge-gc38 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-01T14:18:56+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:25 UTC	15398	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 66 6f 72 6d 73 5f 5f 69 6e 69 74 46 6f 72 6d 73 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 72 3a 6e 6f 74 28 5b 64 61 74 61 2d 72 65 63 6f 72 64 2d 74 79 70 65 3d 22 31 30 39 33 22 5d 29 27 29 3b 77 69 6e 64 6f 77 2e 74 5f 66 6f 72 6d 73 5f 5f 69 6e 70 75 74 44 61 74 61 3d 7b 7d 2c 74 5f 66 6f 72 6d 73 5f 5f 61 64 64 52 65 63 61 70 74 63 68 61 28 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 69 64 3b 77 69 6e 64 6f 77 2e 69 6e 69 74 46 6f 72 6d 73 5b 65 5d 7c 7c 28 74 5f 66 6f 72 6d 73 5f 5f 69 6e 69 74 45 76 65 6e 74 50 6c 61 63 65 68 6f 6c Data Ascii: function t_forms__initForms(){var t=document.querySelectorAll('.r:not([data-record-type="1093"])');window.t_forms__inputData={},t_forms__addRecaptcha(),Array.prototype.forEach.call(t,(function(t){var e=t.id;window.initForms[e]\|\|(t_forms__initEventPlacehol
2024-10-07 22:14:25 UTC	15928	IN	Data Raw: 6e 65 6e 6f 3a 30 2c 63 6f 6c 6e 6f 3a 30 7d 29 29 2c 65 29 7b 65 2e 76 61 6c 75 65 3d 6f 2c 72 26 26 74 5f 72 65 6d 6f 76 65 45 6c 28 72 29 3b 76 61 72 20 61 3d 65 2e 63 6c 6f 73 65 73 74 28 22 66 6f 72 6d 22 29 3b 61 26 26 74 5f 66 6f 72 6d 73 5f 5f 73 75 62 6d 69 74 45 76 65 6e 74 28 61 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 70 61 72 73 65 53 63 72 69 70 74 73 28 74 2c 65 29 7b 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 2b 22 73 63 72 69 70 74 22 29 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 72 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 6f Data Ascii: neno:0,colno:0})),e){e.value=o,r&&t_removeEl(r);var a=e.closest("form");a&&t_forms__submitEvent(a)}}}function t_parseScripts(t,e){var r=t.querySelectorAll(e+"script");Array.prototype.forEach.call(r,(function(e){for(var r=document.createElement("script"),o
2024-10-07 22:14:25 UTC	7240	IN	Data Raw: 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 74 2d 69 6e 70 75 74 2d 65 72 72 6f 72 22 29 2c 74 5f 61 64 64 43 6c 61 73 73 28 61 2c 22 6a 73 2d 65 72 72 6f 72 2d 63 6f 6e 74 72 6f 6c 2d 62 6f 78 22 29 2c 6c 2e 6c 65 6e 67 74 68 26 26 28 6e 3d 21 30 29 29 3b 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 65 5b 6d 5d 2e 74 79 70 65 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 76 61 72 20 5f 3d 65 5b 6d 5d 2e 74 79 70 65 5b 66 5d 2c 77 3d 74 5f 66 6f 72 6d 73 5f 5f 67 65 74 4d 73 67 28 5f 29 3b 63 3d 22 22 2c 28 73 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6a 73 2d 72 75 6c 65 2d 65 72 72 6f 72 2d 22 2b 5f 29 29 3f 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 26 26 73 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 21 77 7c 7c 2d 31 21 3d 3d 64 2e 69 6e 64 65 78 Data Ascii: uerySelectorAll(".t-input-error"),t_addClass(a,"js-error-control-box"),l.length&&(n=!0));for(var f=0;f<e[m].type.length;f++){var _=e[m].type[f],w=t_forms__getMsg(_);c="",(s=t.querySelector(".js-rule-error-"+_))?s.textContent&&s.innerText\|\|!w\|\|-1!==d.index
2024-10-07 22:14:25 UTC	2578	IN	Data Raw: 77 69 6e 64 6f 77 20 7b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 35 30 25 3b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 20 6c 65 66 74 3a 20 30 70 78 3b 20 72 69 67 68 74 3a 20 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 7d 20 2e 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 70 6f 70 75 70 5f 5f 77 72 61 70 70 65 72 20 7b 20 62 61 63 6b 67 72 Data Ascii: window { width: 100%; max-width: 400px; position: absolute; top: 50%; -webkit-transform: translateY(-50%); transform: translateY(-50%); left: 0px; right: 0px; margin: 0 auto; padding: 20px; box-sizing: border-box; } .t-form-success-popup__wrapper { backgr
2024-10-07 22:14:25 UTC	6110	IN	Data Raw: 63 65 6f 66 20 45 6c 65 6d 65 6e 74 7c 7c 28 66 6f 72 6d 3d 66 6f 72 6d 5b 30 5d 29 3b 76 61 72 20 73 75 63 63 65 73 73 42 6f 78 3d 66 6f 72 6d 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6a 73 2d 73 75 63 63 65 73 73 62 6f 78 22 29 2c 73 75 63 63 65 73 73 53 74 72 3d 74 5f 66 6f 72 6d 73 5f 5f 67 65 74 4d 73 67 28 22 73 75 63 63 65 73 73 22 29 3b 69 66 28 73 75 63 63 65 73 73 42 6f 78 29 7b 76 61 72 20 64 61 74 61 53 75 63 63 65 73 73 4d 65 73 73 61 67 65 3d 73 75 63 63 65 73 73 42 6f 78 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 22 29 3b 64 61 74 61 53 75 63 63 65 73 73 4d 65 73 73 61 67 65 3f 73 75 63 63 65 73 73 42 6f 78 2e 69 6e 6e 65 72 48 54 4d 4c 3d 64 61 74 61 53 75 63 63 65 73 Data Ascii: ceof Element\|\|(form=form[0]);var successBox=form.querySelector(".js-successbox"),successStr=t_forms__getMsg("success");if(successBox){var dataSuccessMessage=successBox.getAttribute("data-success-message");dataSuccessMessage?successBox.innerHTML=dataSucces
2024-10-07 22:14:25 UTC	7416	IN	Data Raw: 2c 77 69 6e 64 6f 77 2e 74 69 6c 64 61 46 6f 72 6d 2e 73 65 6e 64 28 66 6f 72 6d 2c 62 74 6e 53 75 62 6d 69 74 2c 66 6f 72 6d 54 79 70 65 2c 66 6f 72 6d 4b 65 79 29 2c 21 31 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 65 72 72 6f 72 20 69 6e 20 64 63 20 61 63 74 69 6f 6e 2e 22 29 7d 69 66 28 6f 62 6a 44 61 74 61 26 26 6f 62 6a 44 61 74 61 2e 65 72 72 6f 72 29 7b 64 61 74 61 53 75 63 63 65 73 73 55 72 6c 3d 22 22 2c 64 61 74 61 53 75 63 63 65 73 73 43 61 6c 6c 62 61 63 6b 3d 22 22 3b 76 61 72 20 6d 73 67 43 6f 6e 74 61 69 6e 65 72 73 3d 74 5f 66 6f 72 6d 73 5f 5f 67 65 74 45 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 73 28 66 6f 72 6d 2c 22 22 29 2c 65 72 72 6f 72 42 6f 78 65 73 3d 6d 73 67 43 6f 6e 74 61 69 6e 65 72 73 2e 65 72 72 6f Data Ascii: ,window.tildaForm.send(form,btnSubmit,formType,formKey),!1}catch(e){console.log("error in dc action.")}if(objData&&objData.error){dataSuccessUrl="",dataSuccessCallback="";var msgContainers=t_forms__getErrorContainers(form,""),errorBoxes=msgContainers.erro
2024-10-07 22:14:25 UTC	3708	IN	Data Raw: 61 46 6f 72 6d 2e 76 61 6c 69 64 61 74 65 28 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 65 3d 22 22 2c 72 3d 22 22 3b 69 66 28 2d 31 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 75 74 6d 5f 22 29 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 65 3d 28 65 3d 28 74 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2e 73 70 6c 69 74 28 22 3f 22 29 29 5b 31 5d 29 29 7b 76 61 72 20 6f 2c 61 2c 6e 3d 65 2e 73 70 6c 69 74 28 22 26 22 29 3b 66 6f 72 28 61 20 69 6e 20 6e 29 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 5b 61 5d 26 26 22 75 74 6d 5f 22 3d 3d 28 6f 3d 6e 5b 61 5d 2e 73 70 6c 69 74 28 22 3d 22 Data Ascii: aForm.validate(t)},function(){try{var t=window.location.href,e="",r="";if(-1!==t.toLowerCase().indexOf("utm_")&&"string"==typeof(e=(e=(t=t.toLowerCase()).split("?"))[1])){var o,a,n=e.split("&");for(a in n)"function"!=typeof n[a]&&"utm_"==(o=n[a].split("="
2024-10-07 22:14:25 UTC	372	IN	Data Raw: 74 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 65 2c 28 65 2b 3d 2e 31 29 3e 3d 31 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 72 29 7d 29 2c 33 30 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 74 72 69 67 67 65 72 45 76 65 6e 74 28 74 2c 65 29 7b 76 61 72 20 72 3b 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 3f 28 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 48 54 4d 4c 45 76 65 6e 74 73 22 29 29 2e 69 6e 69 74 45 76 65 6e 74 28 65 2c 21 30 2c 21 31 29 3a 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 4f 62 6a 65 63 74 26 26 28 28 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 4f 62 6a 65 63 74 28 29 29 2e 65 76 65 6e 74 54 79 70 65 3d 65 29 2c 72 2e 65 76 65 6e 74 4e 61 6d 65 3d Data Ascii: t.style.opacity=e,(e+=.1)>=1&&clearInterval(r)}),30)}}function t_triggerEvent(t,e){var r;document.createEvent?(r=document.createEvent("HTMLEvents")).initEvent(e,!0,!1):document.createEventObject&&((r=document.createEventObject()).eventType=e),r.eventName=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49784	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:24 UTC	371	OUT	GET /js/tilda-skiplink-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:25 UTC	544	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:25 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1879 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 19 Oct 2023 07:35:23 GMT ETag: "6530dc3b-757" tserver: 11 X-ID-SHIELD: am3-hw-edge-gc88 traceparent: 00-0654e267141aac0b871ebf7948c37287-560d8c0f00bbcedd-01 X-ID: fr5-hw-edge-gc12 Age: 4116613 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-08-21T06:44:12+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:25 UTC	1879	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 73 6b 69 70 6c 69 6e 6b 5f 5f 61 64 64 42 75 74 74 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 6c 6c 72 65 63 6f 72 64 73 22 29 3b 74 26 26 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 74 2d 68 65 61 64 65 72 22 29 26 26 28 65 3d 27 3c 6e 6f 69 6e 64 65 78 3e 3c 61 20 68 72 65 66 3d 22 23 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 22 20 63 6c 61 73 73 3d 22 74 2d 73 6b 69 70 6c 69 6e 6b 22 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 27 2b 74 5f 73 6b 69 70 6c 69 6e 6b 5f 5f 64 69 63 74 28 22 73 6b 69 70 6c 69 6e 6b 41 72 69 61 4c 61 62 65 6c 22 29 2b 27 22 20 73 74 79 6c 65 3d 22 6f 70 61 63 69 74 79 3a Data Ascii: function t_skiplink__addButton(){var e,t=document.getElementById("allrecords");t&&t.querySelector("#t-header")&&(e='<noindex><a href="#t-main-content" class="t-skiplink" rel="nofollow" aria-label="'+t_skiplink__dict("skiplinkAriaLabel")+'" style="opacity:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49786	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:24 UTC	392	OUT	GET /tild3636-6139-4435-a266-393363346437/Group_15.svg HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:25 UTC	971	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:25 GMT Content-Type: image/svg+xml Content-Length: 8462 Connection: close Vary: Accept-Encoding access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control cache-control: max-age=5184000 etag: "a693859b36771ec847891b56847624d8" last-modified: Sat, 10 Aug 2024 21:04:05 GMT x-container-storage-policy-index: 0 x-container-storage-policy-name: Policy-0 x-timestamp: 1723323844.54871 x-trans-id: 17ea79e7f317d027 Age: 3 expires: Fri, 06 Dec 2024 22:14:22 GMT t-server: or-10 X-ID-SHIELD: am3-hw-edge-gc93 traceparent: 00-5d35a3ecb6be291c99ad3a66f7561984-70786782fcc1e175-01 X-ID: fr5-hw-edge-gc38 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-07T22:14:22+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:25 UTC	7527	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 39 32 22 20 68 65 69 67 68 74 3d 22 32 39 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 39 32 20 32 39 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 36 32 2e 34 20 31 32 31 2e 31 31 36 4c 32 33 36 2e 33 39 36 20 39 30 2e 32 32 38 56 38 32 2e 38 33 36 4c 32 36 32 2e 34 20 35 31 2e 39 34 38 56 37 32 2e 35 34 4c 32 34 38 2e 39 33 36 20 38 36 2e 35 33 32 4c 32 36 32 2e 34 20 31 30 30 2e 35 32 34 56 31 32 31 2e 31 31 36 5a 4d 32 33 33 2e 38 38 38 20 31 32 31 2e Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="1092" height="294" viewBox="0 0 1092 294" fill="none"><path d="M262.4 121.116L236.396 90.228V82.836L262.4 51.948V72.54L248.936 86.532L262.4 100.524V121.116ZM233.888 121.
2024-10-07 22:14:25 UTC	935	IN	Data Raw: 33 32 56 31 38 31 2e 30 38 48 39 35 36 2e 35 34 38 56 32 35 34 2e 38 36 38 43 39 35 36 2e 35 34 38 20 32 36 32 2e 33 34 38 20 39 35 35 2e 35 38 20 32 36 38 2e 36 38 34 20 39 35 33 2e 36 34 34 20 32 37 33 2e 38 37 36 43 39 35 31 2e 37 39 36 20 32 37 38 2e 39 38 20 39 34 38 2e 35 38 34 20 32 38 32 2e 38 39 36 20 39 34 34 2e 30 30 38 20 32 38 35 2e 36 32 34 43 39 33 39 2e 34 33 32 20 32 38 38 2e 32 36 34 20 39 33 33 2e 30 35 32 20 32 38 39 2e 35 38 34 20 39 32 34 2e 38 36 38 20 32 38 39 2e 35 38 34 5a 4d 39 36 36 2e 33 30 32 20 32 38 38 56 31 38 31 2e 30 38 48 39 39 35 2e 37 33 38 43 31 30 30 32 2e 39 35 20 31 38 31 2e 30 38 20 31 30 30 39 2e 32 20 31 38 31 2e 38 37 32 20 31 30 31 34 2e 34 38 20 31 38 33 2e 34 35 36 43 31 30 31 39 2e 37 36 20 31 38 35 2e 30 Data Ascii: 32V181.08H956.548V254.868C956.548 262.348 955.58 268.684 953.644 273.876C951.796 278.98 948.584 282.896 944.008 285.624C939.432 288.264 933.052 289.584 924.868 289.584ZM966.302 288V181.08H995.738C1002.95 181.08 1009.2 181.872 1014.48 183.456C1019.76 185.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49788	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:24 UTC	547	OUT	GET /js/tilda-stat-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:25 UTC	544	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:25 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 8721 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 07 Sep 2022 13:40:09 GMT ETag: "63189f39-2211" tserver: 13 X-ID-SHIELD: am3-hw-edge-gc88 traceparent: 00-9f77401c3ccccea2476bbb3b2692217b-ce2da19ac6412d6c-01 X-ID: fr5-hw-edge-gc58 Age: 367968 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-03T16:01:37+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:25 UTC	8166	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 6c 6c 72 65 63 6f 72 64 73 22 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 35 3b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2b 22 2e 22 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 28 5b 5c 2e 24 3f 2a 7c 7b 7d 5c 28 5c 29 5c 5b 5c 5d 5c 5c 5c 2f 5c 2b 5e 5d 29 2f 67 2c 22 5c 5c 24 31 22 29 2c 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 3f 3a 5e 7c 3b 20 29 22 2b 65 2b 22 3d 28 5b 5e 3b 5d 2a 29 22 29 2c 65 3d 64 6f 63 75 6d Data Ascii: !function(){var r=document.getElementById("allrecords");function e(){var e=Math.floor(899999Math.random())+1e5;return(new Date).getTime()+"."+e}function n(e){e=e.replace(/([\.$?\|{}\[\]\\\/\+^])/g,"\\$1"),e=new RegExp("(?:^\|; )"+e+"=([^;]*)"),e=docum
2024-10-07 22:14:25 UTC	555	IN	Data Raw: 22 29 26 26 2d 31 21 3d 3d 78 2e 69 6e 64 65 78 4f 66 28 22 74 69 6c 64 61 2e 22 29 26 26 2d 31 21 3d 3d 78 2e 69 6e 64 65 78 4f 66 28 22 2f 74 69 6c 64 61 66 61 76 69 63 6f 6e 2e 69 63 6f 22 29 26 26 21 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 74 61 62 6c 65 23 61 6c 6c 72 65 63 6f 72 64 73 22 29 26 26 21 28 2d 31 21 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 2e 74 69 6c 64 61 2e 77 73 22 29 29 26 26 21 6b 2c 76 6f 69 64 20 30 3d 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 7c 7c 2f 42 6f 74 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7c 7c 45 7c 7c 31 3d 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 35 2a Data Ascii: ")&&-1!==x.indexOf("tilda.")&&-1!==x.indexOf("/tildafavicon.ico")&&!document.querySelector("table#allrecords")&&!(-1!==window.location.hostname.indexOf(".tilda.ws"))&&!k,void 0===navigator.sendBeacon\|\|/Bot/i.test(navigator.userAgent)\|\|E\|\|1===Math.floor(5*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49790	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:25 UTC	603	OUT	GET /lib/flags/flags7.png HTTP/1.1 Host: static.tildacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:25 UTC	967	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:25 GMT Content-Type: image/png Content-Length: 43194 Connection: close Access-Control-Expose-Headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control Cache-Control: max-age=5184000 Etag: "a788fcd070da2e0229d1b88dd532b746" Last-Modified: Wed, 28 Aug 2024 15:58:46 GMT x-container-storage-policy-index: 0 x-container-storage-policy-name: Policy-0 X-Timestamp: 1724860725.41581 X-Trans-Id: 9ada86a0-6795-41fd-ad64-61b0077481f8 Expires: Mon, 28 Oct 2024 08:03:38 GMT tserver: 11 X-ID-SHIELD: am3-hw-edge-gc89 Age: 3420647 traceparent: 00-571d2392df7475dbc700235a7d1cc8b3-22ae25bc8130a246-01 X-ID: fr5-hw-edge-gc16 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-08-29T08:33:11+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:25 UTC	14983	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 86 00 00 01 70 08 06 00 00 00 bc 4b dc e1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 a8 4f 49 44 41 54 78 01 ed 9d 07 7c 53 d5 db c7 7f 49 57 d2 bd 5b ba 5b 68 81 b2 f7 90 21 7b 08 02 0a 88 88 08 e2 16 b7 a2 88 8a e2 f8 2b 6e f4 75 23 82 c8 10 94 a9 c8 06 41 86 ec 55 a0 a5 7b d0 bd db a4 2b 79 ef 39 b7 49 d3 36 69 6f 92 9b b4 c5 f3 e5 13 ee b9 e7 9e e4 34 c9 cd f9 dd e7 79 ce 3d 0f c0 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 86 99 48 f4 d6 7a fd a6 6e 58 35 a3 f7 29 6c fc e1 7d bd cd 93 ef ea 86 d2 cb 76 8d ea bb 55 9c d5 ff fa 0d 50 4b 24 f5 fa 7b 65 78 Data Ascii: PNGIHDRpKpHYssRGBgAMAaOIDATx\|SIW[[h!{+nu#AU{+y9I6io4y=`0`0`0`0HznX5)l}vUPK${ex
2024-10-07 22:14:25 UTC	15928	IN	Data Raw: 5e 70 b5 a4 d5 60 69 34 01 66 22 0a 84 d6 70 ef 82 2e 4c 18 18 6d 0e 6b 8b 82 18 71 83 b6 8a ae 10 88 21 0a 0c 1e 8d 75 d0 9a a6 a8 32 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 46 eb 42 ef ba 6c 2f 6d 4b 34 2f f3 4e 2d 1f 4e 09 17 b4 ee 9b 4d c0 77 8d fa 53 05 29 51 f1 cf e3 8d d6 4b 21 19 ba 8a fa 8e d2 fb 3a 9e 71 67 84 ad 33 f7 fd 03 a2 bc 3f 3c bc 5a 50 7f c9 af 7d a0 f6 9d 3f 03 3b b8 8f f5 c1 4f f7 a2 f4 ea 4d ed b1 a5 cf 0e c5 bd 1b f9 5c 02 eb ef 79 06 6f 7d 76 44 7b cc b9 73 3b fc d6 b9 08 1d 4b 72 e0 3c 6a 28 bc 67 4e 11 d4 df 39 59 58 bd f7 47 16 24 f4 1e 91 86 9c bd 7c 9e 07 f7 2e fc d2 06 85 57 f8 f5 e6 7d c6 dc 44 ee c1 a0 46 8b 19 Data Ascii: ^p`i4f"p.Lmkq!u2`0`0`0`0`0`0`0FBl/mK4/N-NMwS)QK!:qg3?<ZP}?;OM\yo}vD{s;Kr<j(gN9YXG$\|.W}DF
2024-10-07 22:14:25 UTC	12283	IN	Data Raw: 22 90 1c 10 d1 9b 97 a1 22 37 b5 d1 eb 54 bd b2 55 50 7f 92 87 8e 8b f2 fe d4 3f 0c 12 d4 df 56 d7 30 51 fa 9b 5a 9c 24 a8 bf fc c8 3e f5 fa b3 1f d8 83 e6 ad bd f7 c9 fd f8 65 c9 68 dc b9 7f 97 c1 15 71 75 f1 8c 3b 23 6c 75 bf 88 a5 a2 bc 3f 24 bc 25 a8 bf ac 4f be 52 ef f7 f4 c1 7d ef ee 43 df 8e bd 70 d0 e3 5f 8c 28 e8 8f d3 d7 cf e1 af 29 11 e8 d3 bf 13 9c 23 1e 85 bd ac e9 a5 a2 a5 5d 8b 8c ea 6f ce c7 31 e8 13 ea 87 df 55 7b 71 97 74 0c 4e c5 dc c4 ee bb 1c e1 d9 27 00 03 de 4b a0 cb 3b 8b f1 fe e2 e4 01 ea aa 60 40 ee e2 85 f2 b3 31 f0 fe f8 0b f8 3e f7 38 4d 00 63 cc 02 7a 12 0e 21 ed d4 1c 4d 1d 27 2b b8 c6 74 1a cb 9d 58 4d 2f ee dd ad e2 ac e0 f7 d7 b0 ce 36 da 0b 21 07 8e 34 ca 3c 48 fa 4e 19 39 14 d5 31 8d d7 2f 8b 54 64 08 ea 2f ca c9 56 fd Data Ascii: ""7TUP?V0QZ$>ehqu;#lu?$%OR}Cp_()#]o1U{qtN'K;`@1>8Mcz!M'+tXM/6!4<HN91/Td/V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49791	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:25 UTC	566	OUT	GET /css/tilda-menusub-1.0.min.css HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:25 UTC	514	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:25 GMT Content-Type: text/css Content-Length: 3643 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 01 Sep 2023 11:19:10 GMT ETag: "64f1c8ae-e3b" tserver: 11 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-daf9f55cb7c562a0656dcb6e2df48206-403700475e06e608-01 X-ID: fr5-hw-edge-gc12 Age: 278723 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-04T16:49:02+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:25 UTC	3643	IN	Data Raw: 2e 74 2d 6d 65 6e 75 73 75 62 5f 5f 6d 65 6e 75 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 6f 70 61 63 69 74 79 3a 30 3b 7a 2d 69 6e 64 65 78 3a 36 30 30 30 30 30 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 35 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 37 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 37 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 Data Ascii: .t-menusub__menu{position:absolute;display:none;opacity:0;z-index:6000000;width:100%;max-width:150px;background-color:#fff;text-align:center;-webkit-box-shadow:0 0 7px 0 rgba(0,0,0,.2);box-shadow:0 0 7px 0 rgba(0,0,0,.2);border-radius:0;-webkit-font-smoot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49792	142.250.186.98	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:25 UTC	1447	OUT	GET /td/rul/16671369731?random=1728339263492&cv=11&fst=1728339263492&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:25 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 07 Oct 2024 22:14:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 07-Oct-2024 22:29:25 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 22:14:25 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-10-07 22:14:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49787	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:25 UTC	369	OUT	GET /js/tilda-events-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:25 UTC	544	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:25 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 18130 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 06 Feb 2024 12:50:32 GMT ETag: "65c22b18-46d2" tserver: 9 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-53933f56ee7be4811d4d61734571c076-61c3dd003b400b10-01 X-ID: fr5-hw-edge-gc51 Age: 993713 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-26T10:12:32+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:25 UTC	15406	IN	Data Raw: 77 69 6e 64 6f 77 2e 54 69 6c 64 61 3d 77 69 6e 64 6f 77 2e 54 69 6c 64 61 7c 7c 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 5f 65 76 65 6e 74 73 5f 5f 69 6e 69 74 45 76 65 6e 74 28 29 7b 76 61 72 20 6d 79 4e 61 76 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 69 73 49 45 3d 2d 31 21 3d 3d 6d 79 4e 61 76 2e 69 6e 64 65 78 4f 66 28 22 6d 73 69 65 22 29 26 26 70 61 72 73 65 49 6e 74 28 6d 79 4e 61 76 2e 73 70 6c 69 74 28 22 6d 73 69 65 22 29 5b 31 5d 29 3b 69 66 28 38 3d 3d 3d 69 73 49 45 7c 7c 39 3d 3d 3d 69 73 49 45 29 7b 76 61 72 20 62 74 6e 73 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 74 2d 62 74 6e 22 29 3b 41 72 72 61 79 Data Ascii: window.Tilda=window.Tilda\|\|{},function(){function t_events__initEvent(){var myNav=navigator.userAgent.toLowerCase(),isIE=-1!==myNav.indexOf("msie")&&parseInt(myNav.split("msie")[1]);if(8===isIE\|\|9===isIE){var btns=document.querySelectorAll(".t-btn");Array
2024-10-07 22:14:25 UTC	2724	IN	Data Raw: 74 6d 70 3d 28 74 6d 70 3d 28 74 6d 70 3d 76 69 72 74 50 61 67 65 2e 72 65 70 6c 61 63 65 28 22 2f 74 69 6c 64 61 2f 22 2c 22 22 29 29 2e 72 65 70 6c 61 63 65 28 22 74 69 6c 64 61 2f 22 2c 22 22 29 29 2e 72 65 70 6c 61 63 65 28 22 2f 73 75 62 6d 69 74 74 65 64 2f 22 2c 22 22 29 29 3b 65 6c 73 65 20 69 66 28 2d 31 21 3d 3d 76 69 72 74 50 61 67 65 2e 69 6e 64 65 78 4f 66 28 22 74 69 6c 64 61 2f 70 6f 70 75 70 22 29 29 65 76 65 6e 74 4e 61 6d 65 3d 22 74 2d 22 2b 28 74 6d 70 3d 28 74 6d 70 3d 76 69 72 74 50 61 67 65 2e 72 65 70 6c 61 63 65 28 22 2f 74 69 6c 64 61 2f 22 2c 22 22 29 29 2e 72 65 70 6c 61 63 65 28 22 2f 22 2c 22 2d 22 29 29 3b 65 6c 73 65 20 69 66 28 2d 31 21 3d 3d 76 69 72 74 50 61 67 65 2e 69 6e 64 65 78 4f 66 28 22 74 69 6c 64 61 2f 63 6c 69 Data Ascii: tmp=(tmp=(tmp=virtPage.replace("/tilda/","")).replace("tilda/","")).replace("/submitted/",""));else if(-1!==virtPage.indexOf("tilda/popup"))eventName="t-"+(tmp=(tmp=virtPage.replace("/tilda/","")).replace("/","-"));else if(-1!==virtPage.indexOf("tilda/cli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49785	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:25 UTC	373	OUT	GET /js/tilda-phone-mask-1.1.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:25 UTC	545	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:25 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 31021 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 29 Aug 2024 08:01:16 GMT ETag: "66d02acc-792d" tserver: 8 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-46af5cdee8077ae042e83c68c473e12b-5c897e573b1fe706-01 X-ID: fr5-hw-edge-gc28 Age: 3061969 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-02T11:41:36+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:25 UTC	15405	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 5f 72 65 61 64 79 28 65 29 7b 22 6c 6f 61 64 69 6e 67 22 21 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 65 28 29 3a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5f 73 69 62 6c 69 6e 67 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 63 68 69 6c 64 72 65 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 74 29 7d 29 29 3a 5b 5d 7d 66 75 6e 63 74 69 6f Data Ascii: function t_ready(e){"loading"!=document.readyState?e():document.addEventListener("DOMContentLoaded",e)}function t_siblings(e,t){return e.parentNode?Array.prototype.filter.call(e.parentNode.children,(function(e){return e.classList.contains(t)})):[]}functio
2024-10-07 22:14:25 UTC	15616	IN	Data Raw: 20 2d 39 37 70 78 22 2c 64 6f 3a 22 2d 33 33 70 78 20 2d 39 37 70 78 22 2c 64 7a 3a 22 2d 36 31 70 78 20 2d 39 37 70 78 22 2c 65 63 3a 22 2d 38 39 70 78 20 2d 39 37 70 78 22 2c 65 65 3a 22 2d 31 31 37 70 78 20 2d 39 37 70 78 22 2c 65 67 3a 22 2d 31 34 35 70 78 20 2d 39 37 70 78 22 2c 65 68 3a 22 2d 31 37 33 70 78 20 2d 39 37 70 78 22 2c 65 72 3a 22 2d 32 30 31 70 78 20 2d 39 37 70 78 22 2c 65 73 3a 22 2d 32 32 39 70 78 20 2d 39 37 70 78 22 2c 65 74 3a 22 2d 32 35 37 70 78 20 2d 39 37 70 78 22 2c 66 69 3a 22 2d 32 38 35 70 78 20 2d 39 37 70 78 22 2c 66 6a 3a 22 2d 33 31 33 70 78 20 2d 39 37 70 78 22 2c 66 6d 3a 22 2d 35 70 78 20 2d 31 32 30 70 78 22 2c 66 72 3a 22 2d 33 33 70 78 20 2d 31 32 30 70 78 22 2c 67 61 3a 22 2d 36 31 70 78 20 2d 31 32 30 70 78 22 Data Ascii: -97px",do:"-33px -97px",dz:"-61px -97px",ec:"-89px -97px",ee:"-117px -97px",eg:"-145px -97px",eh:"-173px -97px",er:"-201px -97px",es:"-229px -97px",et:"-257px -97px",fi:"-285px -97px",fj:"-313px -97px",fm:"-5px -120px",fr:"-33px -120px",ga:"-61px -120px"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49799	5.181.161.195	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:25 UTC	352	OUT	GET /geo/country/ HTTP/1.1 Host: geo.tildacdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:25 UTC	195	IN	HTTP/1.1 200 OK date: Mon, 07 Oct 2024 22:14:25 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked access-control-allow-origin: * x-tilda-server: 12 connection: close
2024-10-07 22:14:25 UTC	12	IN	Data Raw: 32 0d 0a 55 53 0d 0a 30 0d 0a 0d 0a Data Ascii: 2US0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49800	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:25 UTC	419	OUT	GET /tild3634-6139-4566-a231-383662633464/-/resize/600x500/-/format/webp/image.png HTTP/1.1 Host: optim.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:26 UTC	498	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:25 GMT Content-Type: image/png Content-Length: 74084 Connection: close last-modified: Mon, 07 Oct 2024 22:09:33 GMT etag: "67045c1d-12164" x-tilda-server: 3 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-23da5ee6b1e28b95b1ef09c4c3075a80-c859af6a008009df-01 X-ID: fr5-hw-edge-gc30 Age: 289 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-07T22:09:36+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:26 UTC	15886	IN	Data Raw: 52 49 46 46 5c 21 01 00 57 45 42 50 56 50 38 20 50 21 01 00 b0 71 03 9d 01 2a 80 03 f4 01 3e 51 22 8e 45 23 a2 23 14 4b 05 e8 38 05 04 b2 99 f1 56 98 50 f6 9b 69 8a ef 67 6a f7 85 56 5e f0 8f ab 5d 7b c6 17 8c 3e cf c1 db ce f6 0b 67 1d 69 f3 cc fd 7d 7f f2 ff cb 7f af e7 a3 cc fe 74 47 73 fc 1d db fc 27 fe 3f 33 ff 72 ef 8f ff 33 d6 87 f5 df f5 9e c2 3f df 3c ba fd 7c ff 7b ff cf ea b7 fa 9f fd ef dd cf 77 0f 4e bf de 7d 42 3f b9 fa 64 fa ce 7f 9b f5 57 f3 95 ff eb ed 3d fd d3 ff 6f a6 8f 5f b7 49 7f 95 7e d1 7a 52 f9 c7 f1 df e9 3f c4 7e 40 7a 3f e3 df d8 9f bc 7f a1 ff a9 fd f3 dc db fd bf 13 3d 67 ff 9b fd b7 a8 df cc ff 09 ff 07 fb ef ef 47 c5 8f ea 7f eb ff 94 f1 f7 e3 0f f9 7f e1 bf 27 7e 42 3f 28 fe 85 fe bb fb d7 f9 8f fd 1f e5 fe 33 fe c7 ff 2f Data Ascii: RIFF\!WEBPVP8 P!q*>Q"E##K8VPigjV^]{>gi}tGs'?3r3?<\|{wN}B?dW=o_I~zR?~@z?=gG'~B?(3/
2024-10-07 22:14:26 UTC	16384	IN	Data Raw: 5f d1 43 20 43 72 2c 6b 49 58 77 f8 95 b3 32 6b bd fb c2 3a 6f c2 30 ef 0e 1c 5a 4f 9c ab 94 eb 3c a6 97 d1 93 e6 10 46 9e 9b 28 29 98 5e f5 93 a2 a4 0b 3e 39 82 f4 47 bf 22 3b b5 63 7f 03 61 f3 59 32 ce af 46 ee 0b 12 b0 d8 b4 ce 1a 3f 6e dc f2 22 9b 87 9f 57 e4 ee 82 b9 0b 04 6e 53 e8 1b fe fa 1d f0 5a 04 ad 75 e5 77 d0 7b 2f eb 23 36 00 c1 8e a3 5e 33 84 de 1b fe bc 6a 3f e3 12 3d 32 0d 3a 78 57 bb a6 f1 c1 c3 1d bd 72 ec 7e 9f 19 f8 6c 60 38 5f e0 75 0a 8d f3 28 2b 50 52 81 5c b9 6d 57 71 10 1a df f3 f1 59 9c da b8 81 de d2 9c 95 24 9c 2e 03 7a 8d 07 60 f7 3d 37 08 09 e3 95 94 1f 74 b7 67 f8 9c 70 86 c4 02 98 fe 2e 9f 2a b1 7e 21 27 db 27 a9 c3 15 a1 49 2f 23 6e 2a 7b a3 e3 0f 87 ec 62 f6 ac 40 2e bd 9f 20 a2 4f ce 51 5e 48 e2 9b db f5 e0 86 c0 da 2e Data Ascii: _C Cr,kIXw2k:o0ZO<F()^>9G";caY2F?n"WnSZuw{/#6^3j?=2:xWr~l`8_u(+PR\mWqY$.z`=7tgp.~!''I/#n{b@. OQ^H.
2024-10-07 22:14:26 UTC	22	IN	Data Raw: 5d ee 8c c2 d6 68 f5 cf 6e 24 bb 4f 7f 27 6f 0d 4a 6f 77 b6 e9 10 Data Ascii: ]hn$O'oJow
2024-10-07 22:14:26 UTC	16384	IN	Data Raw: 23 9f be 50 56 74 37 18 a9 f8 0b 17 76 31 73 ba c2 36 b1 b9 22 ed 86 42 51 67 93 c2 c7 e4 51 74 eb d9 f7 8c 52 4b 5a 6d 63 f1 8a 81 53 6d 72 30 47 9a 81 2d 49 eb dc f4 46 82 1f 82 d7 5a 79 a5 76 c0 2c 42 b4 a5 06 cc 52 a4 fa c8 33 44 61 e7 bc d2 70 e6 9f d6 64 98 4a 9f 2d 5a be f5 b7 f2 78 dd b8 77 d6 13 e0 f8 1e b2 0b 7e 54 42 72 d6 21 f2 fe 1e 12 28 07 cd a4 48 07 68 af e4 16 3e 98 af c7 75 3e a0 a2 e5 b5 a1 a7 01 52 98 16 c3 7b 66 6d e5 90 e4 92 74 d5 f7 cb 55 43 f2 9f 24 ad 91 c2 ab 3a 3b 54 c9 67 ec cd e7 60 ec ec 19 26 dd 2b ed d9 a9 79 ba 73 55 ed 25 0e dd e6 66 d0 ff ed d1 f9 c0 6f 3e 8d 05 95 26 f2 8a 67 7c 52 ea f3 13 91 4d 14 a2 6d 86 43 17 39 ce 4e 27 4a 22 b3 bb 1c 5e 51 4f a8 46 54 dd 0e 56 aa 58 3e c8 dd 81 8c 62 8b 9b 8d 8c 16 5b 1e ef be Data Ascii: #PVt7v1s6"BQgQtRKZmcSmr0G-IFZyv,BR3DapdJ-Zxw~TBr!(Hh>u>R{fmtUC$:;Tg`&+ysU%fo>&g\|RMmC9N'J"^QOFTVX>b[
2024-10-07 22:14:26 UTC	12288	IN	Data Raw: ba 5e 79 b9 d2 a4 d6 2b 84 29 95 b5 c7 64 04 71 88 7e 17 d1 b9 0a 26 d2 63 9e b1 c8 11 0e 66 b3 f2 67 c9 27 ff 40 e5 c4 b3 d4 21 d6 2c a3 52 42 9c 8c b3 f2 53 84 a2 88 95 94 c6 93 a2 45 77 8d 69 6e df 91 dc 60 8e 64 40 c3 08 4f 31 8c 96 87 3f 79 77 c2 54 88 12 79 9c 01 6a 74 a0 3a 3c 0d 2a b8 46 36 e0 5d bb 33 d4 f8 aa 2f 0b 1d 9f eb 6d b8 92 01 45 a5 7e 94 bf 34 3e 4a 4d bf ad 38 2c 4f 00 14 bf b8 c9 ef 26 f3 83 6b 8e 75 89 7b d5 81 78 c5 62 a7 fe 3f 5d f0 32 cf f3 a8 8a 5b 80 1e 91 d4 34 99 c3 ab b9 88 55 49 b9 d3 21 51 ba 89 0c b9 59 73 9a b2 5f d6 7c 48 e1 3e 90 ba 45 53 c5 e4 c2 6b ac a2 89 b9 1b f5 8c 90 f4 9a 9a f4 89 66 a4 8e 12 4c 5b 20 23 37 88 4d 38 4a a7 b8 26 a4 4a 39 99 b9 89 59 cb bd 15 66 61 e9 93 63 8b 4c 3e dc 13 20 41 69 26 ef e8 7f 76 Data Ascii: ^y+)dq~&cfg'@!,RBSEwin`d@O1?ywTyjt:<*F6]3/mE~4>JM8,O&ku{xb?]2[4UI!QYs_\|H>ESkfL[ #7M8J&J9YfacL> Ai&v
2024-10-07 22:14:26 UTC	13120	IN	Data Raw: 7b ca 73 5e 33 ff 7e 47 eb 2e f4 7c e3 02 b0 34 a4 21 60 5d 5f e4 da 99 ad 26 75 30 d2 78 ed 3a 8e 54 e9 e2 ac d7 4d 9e 95 b2 38 c4 de bf 32 b5 46 90 ae 4c ee ac b0 8f db cf 51 5d 25 e0 38 40 91 9e 76 69 0f f9 b8 81 36 4c 84 52 49 b2 af c6 5b cb 24 78 cd d0 ec 96 02 fb 19 c5 3d b8 23 99 4c 0b 16 25 aa 56 ab 2b 35 74 3e 96 73 25 e2 ce f1 08 5a 21 8d bb b7 cb ff 61 8b 3e 09 48 82 c5 39 29 69 25 ce 62 be 85 8f e3 11 a8 e9 72 5c 57 f5 6b 9f c6 7c 4a f4 9c a9 1b 78 6c 10 ce 6a e5 c0 c5 08 87 76 96 f1 90 d9 d5 81 a5 7e 9f 67 07 25 e7 94 38 20 7e 62 de 36 a8 28 f3 c3 4c c3 e7 14 10 35 aa a8 0c c9 eb c6 17 c1 23 af 23 25 53 5e 26 e8 72 20 5a 80 17 3c a8 da 3c 96 0b ff ff 57 ef 09 02 8a e0 44 2a 59 b0 25 10 83 69 db 80 00 65 8c 79 3a 5f 59 e0 28 d6 3b 35 c0 56 33 Data Ascii: {s^3~G.\|4!`]_&u0x:TM82FLQ]%8@vi6LRI[$x=#L%V+5t>s%Z!a>H9)i%br\Wk\|Jxljv~g%8 ~b6(L5##%S^&r Z<<WD*Y%iey:_Y(;5V3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49798	157.240.251.9	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:25 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:26 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-07 22:14:26 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-07 22:14:26 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-07 22:14:26 UTC	14681	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-07 22:14:26 UTC	16384	IN	Data Raw: 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 Data Ascii: c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="objec
2024-10-07 22:14:26 UTC	16384	IN	Data Raw: 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 Data Ascii: k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})()
2024-10-07 22:14:26 UTC	16384	IN	Data Raw: 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 68 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 67 3d 68 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 3f 5b 61 2c 63 2c 6a 2c 66 2c 67 5d 3a 6e 75 6c 6c 7d 63 3d 6e 65 77 20 61 28 67 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 63 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 Data Ascii: )==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"undefined":i(h))==="object"&&(g=h);return a!=null&&c!=null?[a,c,j,f,g]:null}c=new a(g);l.exports=c})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered(
2024-10-07 22:14:26 UTC	1702	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 68 2c 61 29 3f 68 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 61 29 3f 76 6f 69 64 20 30 3a 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 Data Ascii: unction p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.prototype.hasOwnProperty.call(h,a)?h[a]:a}function r(a){if(typeof a==="string")return a;if(typeof a==="number")return isNaN(a)?void 0:a;try{return JSON.string
2024-10-07 22:14:26 UTC	14682	IN	Data Raw: 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 7d 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 21 3d 6e 75 6c 6c 26 26 61 2e 61 70 70 65 6e 64 28 22 68 6d 65 22 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 29 2c 61 2e 61 70 70 65 6e 64 28 22 65 78 5f 6d 22 2c 66 2e 6a 6f 69 6e 28 22 2c 22 29 29 29 7d 7d 5d 29 3b 72 65 Data Ascii: ion(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null}),function(a){return a!=null});f.length>0&&(this.moduleEncodings.hash!=null&&a.append("hme",this.moduleEncodings.hash),a.append("ex_m",f.join(",")))}}]);re
2024-10-07 22:14:26 UTC	16384	IN	Data Raw: 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 61 72 20 63 3d 21 30 2c 64 3d 21 31 2c 65 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 66 3d 62 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 62 3b 21 28 63 3d 28 62 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 63 3d 21 30 29 7b 62 3d 62 2e 76 61 6c 75 65 3b 6c 2e 74 72 69 67 67 65 72 28 61 2c 62 29 7d 7d 63 Data Ascii: alsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){var c=!0,d=!1,e=void 0;try{for(var f=b[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),b;!(c=(b=f.next()).done);c=!0){b=b.value;l.trigger(a,b)}}c
2024-10-07 22:14:26 UTC	16384	IN	Data Raw: 2c 6c 28 7b 7d 2c 65 2c 62 28 64 5b 65 5d 29 29 29 7d 2c 7b 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 61 28 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 64 3d 42 28 65 2c 49 2e 6f 62 6a 65 63 74 28 29 29 3b 65 3d 63 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 66 3d 62 5b 65 5d 2c 67 3d 64 5b 65 5d 3b 66 3d 66 28 67 29 3b 72 65 74 75 72 6e 20 61 28 7b 7d 2c 63 2c 6c 28 7b 7d 2c 65 2c 66 29 29 7d 2c 7b 7d 29 3b 72 65 74 75 72 6e Data Ascii: ,l({},e,b(d[e])))},{})}}function y(a){return function(b){return b==null?null:a(b)}}function z(b){return function(e){var d=B(e,I.object());e=c(Object.keys(b),function(c,e){if(c==null)return null;var f=b[e],g=d[e];f=f(g);return a({},c,l({},e,f))},{});return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49801	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:25 UTC	419	OUT	GET /tild3039-3739-4331-b732-363433636164/-/resize/600x500/-/format/webp/image.png HTTP/1.1 Host: optim.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:26 UTC	497	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:25 GMT Content-Type: image/png Content-Length: 151202 Connection: close last-modified: Mon, 07 Oct 2024 22:10:27 GMT etag: "67045c53-24ea2" x-tilda-server: 3 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-4680221b3e07a2cb17da223e6985a67c-41f0a8d6fdd8702e-01 X-ID: fr5-hw-edge-gc29 Age: 3 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-07T22:14:23+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:26 UTC	15453	IN	Data Raw: 52 49 46 46 9a 4e 02 00 57 45 42 50 56 50 38 20 8e 4e 02 00 30 01 05 9d 01 2a a6 03 f4 01 3e 49 1c 8a 44 22 a1 a1 24 b2 db cc 48 90 09 09 63 6c 38 af 3c 1e cd eb 83 93 65 cf bb 97 cf cd 08 bc e9 fd 57 9d 6f 82 ec 84 59 57 cc 90 91 80 37 1c 66 ae b6 19 da 62 6c db e8 af ab ec ff d8 eb f7 99 fe 31 fd df f4 be 92 bc c7 e1 97 d8 3f 1d eb a7 fe 6e c9 be 43 fe ef 99 0f b8 7f 6b e7 33 fe 8f ee 0f bb 5f ea ff eb 7d 82 7f ac ff 88 f5 41 ff 9b f7 8b de ff f7 bf fd 3e a3 bf b1 ff c7 fd c9 f7 92 ff cd fb b9 ef 27 fc bf a8 6f f8 7f fa be ba 9f fc bf ff fb aa 7e f9 7b 15 7e f4 fa cb 7f f7 fd e5 f8 69 ff 07 ff bf d3 6f ff ff b0 07 ff ff 6d ef e0 1f ff f8 cd fc a0 7c e3 f7 ff f3 9f df fc 4d fc 97 e7 7f c5 ff 70 ff 1d ff 3b fb cf b6 87 fa bf e6 7c 26 74 97 fd cf f3 7f f0 Data Ascii: RIFFNWEBPVP8 N0*>ID"$Hcl8<eWoYW7fbl1?nCk3_}A>'o~{~iom\|Mp;\|&t
2024-10-07 22:14:26 UTC	15928	IN	Data Raw: df e2 36 7f 1b 59 fb 68 9a 06 08 c0 c1 4c d2 3b c6 ee 74 8e 34 c8 02 ff d0 31 f4 46 7a 2e c8 8d 98 a7 23 fe f4 5c 75 f3 6d d8 85 e9 df f7 06 5e 56 f4 a2 26 5c 1a a3 89 fc cc 64 e7 e9 4b 64 e9 f2 9f 37 f1 2b e8 02 93 f5 58 fe 85 62 45 ab 31 c6 7a bf 38 e1 d7 82 48 56 93 76 dc 9b 58 51 8e 9b 97 aa a1 cf 83 77 e3 4a a3 50 b1 d9 79 61 fc 84 5c aa 58 64 b7 76 30 ff f6 a2 b0 a1 ac de 67 26 b1 34 e5 b1 17 bc f3 76 50 7b 92 fd c1 f9 f1 da c8 e5 c9 55 01 2c 43 46 1a 2a 2c 0c f3 06 5a f8 7b 4f 63 33 de b2 b7 b4 78 07 6f 9f 13 3d 31 81 68 43 2c a5 63 1c 32 c4 ca 22 55 5d e7 94 66 85 ba 6f bd ab 1e 18 a3 2f 53 18 67 f9 89 09 95 9e b7 75 d2 e5 ef f1 56 87 43 3c 78 5c 58 87 d6 b2 c5 98 82 49 0a 4d 07 23 6a 84 cf e9 71 49 60 55 21 aa 8f e0 12 d5 84 c2 db 23 ea 92 0a 24 Data Ascii: 6YhL;t41Fz.#\um^V&\dKd7+XbE1z8HVvXQwJPya\Xdv0g&4vP{U,CF*,Z{Oc3xo=1hC,c2"U]fo/SguVC<x\XIM#jqI`U!#$
2024-10-07 22:14:26 UTC	7240	IN	Data Raw: 9b 44 fa fe 9a 17 8d d8 24 46 59 c3 72 f9 00 bd ac e9 18 d3 e8 ba 11 4f 50 93 5a 45 d8 9c b3 7c 5c 14 64 8d 2b 3a 57 f9 af d6 05 b9 94 63 99 8e 65 60 2a 19 1f 93 e5 cc 13 b3 43 9c 12 2f 39 93 fb 80 a5 7c 66 73 4a 52 bf b9 f3 d0 82 51 9d ad 5c 6a 5a bc 72 27 79 a6 65 90 fe 46 9b 56 5e 6c a5 18 a9 49 8b 0f a8 10 e3 48 7c e6 4d 33 a9 68 61 08 66 68 6f b6 56 44 85 b6 83 7e a0 16 9a 5e f3 52 6b 52 ae 32 47 a2 42 8b 0e 01 4c d0 e6 e0 52 78 43 70 90 4e a6 d3 2b 84 b7 14 71 41 65 59 8d 20 45 a5 d2 ed 92 cf 3b 4b 49 40 77 d7 5f 97 eb df 38 f8 71 15 93 13 db 0a f9 31 17 24 8c 9f b7 d4 80 a3 72 94 a8 d7 09 29 23 4e 6f b1 2b 28 b1 09 f9 b3 de c8 cd 1a 6f 93 8e 2d de bd 7f 4f da 71 11 f7 77 e2 e6 8b 83 ad 36 56 1a e7 0a 24 d4 ca 27 9f 1e 21 6b 53 21 75 ec ad 50 25 b0 Data Ascii: D$FYrOPZE\|\d+:Wce`*C/9\|fsJRQ\jZr'yeFV^lIH\|M3hafhoVD~^RkR2GBLRxCpN+qAeY E;KI@w_8q1$r)#No+(o-Oqw6V$'!kS!uP%
2024-10-07 22:14:26 UTC	16384	IN	Data Raw: 60 4e 15 7e dc 4a 37 e5 5b 2d 47 4a cb 31 41 21 a6 42 95 a3 29 e2 13 8b 7e e5 67 5b 80 ae fc 90 d1 99 6c 42 83 32 53 f7 a5 ef 02 cb ff fd c1 9f 5d 73 c1 23 98 d8 51 b4 a7 c3 74 94 bb de 5b f5 14 30 2e 34 28 96 b5 c7 a0 1a 44 9a 2b 64 22 ff c4 f0 6b 40 37 22 0d b8 0e e2 9f 04 4b fb e7 e8 d0 61 36 f8 d8 dc 29 fd b1 08 84 e3 e3 25 4d 69 54 1c 76 9f b7 ab 4d 67 e6 16 76 2c c7 eb 33 67 5a 9e bf 79 0e 9c b7 a5 56 ef 2f c0 60 52 ac 65 8b 79 56 cb ee e7 3c 09 23 32 9c 6f 78 c3 18 b0 06 64 84 ae b4 ec 27 32 88 b0 a7 b7 dd 75 04 20 24 da 7a 5f 6f 13 c4 71 e4 fe d7 5f 09 ac 7a 62 57 4c f8 86 41 54 d1 69 d6 e4 25 76 13 9b 53 0b 33 cd 7e 5a 15 50 d1 ae 29 c0 8e bc c5 f0 19 96 ec 28 fc 7a 2f c2 7f c7 55 dc 19 67 04 9f 2f c1 cf 02 f2 4d 37 8e 04 2e 32 df 9c b2 d1 49 58 Data Ascii: `N~J7[-GJ1A!B)~g[lB2S]s#Qt[0.4(D+d"k@7"Ka6)%MiTvMgv,3gZyV/`ReyV<#2oxd'2u $z_oq_zbWLATi%vS3~ZP)(z/Ug/M7.2IX
2024-10-07 22:14:26 UTC	16384	IN	Data Raw: 1e f3 e6 75 bb 8c e8 e1 41 47 21 68 04 50 c2 aa 33 dc 77 27 97 20 a0 ef 1e ae f6 25 e1 c7 3f 31 54 62 b1 08 98 b2 dd 51 6c 8e ff c1 bf b0 f8 bb fa 4f c7 7b 6b fe 76 93 38 54 36 be 30 13 e7 f1 a5 d3 a6 46 7b 06 1f c3 c3 96 97 1c b8 8f c1 57 52 b5 99 33 f6 b5 0f b2 c0 24 2f f6 8b 37 14 da 3d ac 7c f0 b5 2d 02 d9 21 51 2e 5e 13 f2 ac 30 b1 dc 9a 00 dc cf 04 3d 23 92 80 10 b2 bc 2c 3e 47 f0 fb 8d 95 4b c0 b6 c6 e1 74 77 03 7e e5 20 f6 75 63 b1 37 55 ca b4 ed f1 fd 0c 5d e3 8a 88 a4 b4 05 db 00 f8 ae dc 20 89 cf c4 05 29 6b 0d 74 72 dc f2 f2 20 46 d9 e4 6b c6 a4 a5 95 72 8e 9b 61 b9 66 87 57 17 3c 4c 66 6d fc 4b b8 db af a7 2c 81 38 14 ea 99 5d 9f 84 80 35 eb 0b d3 7e 6c e7 6f 61 c2 ea 85 7c ff 00 b3 7e cf 33 9f fe ee c6 4f 2d 7f 14 a6 30 2d 57 c6 dc 56 43 e8 Data Ascii: uAG!hP3w' %?1TbQlO{kv8T60F{WR3$/7=\|-!Q.^0=#,>GKtw~ uc7U] )ktr FkrafW<LfmK,8]5~loa\|~3O-0-WVC
2024-10-07 22:14:26 UTC	16384	IN	Data Raw: 08 4b 0c 1c 0c 0f e8 12 3c f1 43 16 7a 19 f6 f6 00 f5 ba 94 d6 5e 8b 1c 0a f9 15 86 14 51 6c 21 64 8f 9d 59 e4 53 bb 6a 33 a1 a0 d7 9c 07 bb 96 2e 0d cf 3b 9b 13 ae a2 5e 95 65 3a 5b 5c df d1 5b 69 df 8e 08 15 2d 7a 9e 22 24 a7 94 40 4f 08 69 86 2d 11 79 12 29 6e 2f aa 6a ff a1 e6 ee c4 c0 93 63 9d d6 2d a9 cc d6 1e dd aa 78 9b 51 01 1c 6c 21 d0 b6 a1 9d 45 97 69 46 8d 27 9d 99 56 8f 33 9f 53 7b ea 7f ee be 03 4f 9c 1f 67 5c f3 2e 9b ec 99 76 09 94 8b f8 68 59 2a 38 7e 5c c6 c3 9e 4a ad ce d1 40 3d 88 86 31 36 f6 7f 9e 3b 7f 8b 19 b2 3c 8e c7 28 03 e0 4a b9 61 67 c6 1b f5 4e ee 6d 9d d4 6f f7 ff fc 94 bc ba f6 66 a7 83 85 e4 f9 d3 af 71 d6 1a 07 ad f5 b5 3b db e0 79 08 84 21 c7 d5 45 6f 5d d7 03 09 ba 79 01 ba 13 44 d9 87 34 8d 09 dd 4f b8 1d 2e e7 19 a8 Data Ascii: K<Cz^Ql!dYSj3.;^e:[\[i-z"$@Oi-y)n/jc-xQl!EiF'V3S{Og\.vhY*8~\J@=16;<(JagNmofq;y!Eo]yD4O.
2024-10-07 22:14:26 UTC	6224	IN	Data Raw: 2c 34 f8 05 28 41 fb 0f b0 99 34 7c ae 49 97 f6 de df f7 f7 36 fa 81 4e 12 bb 60 4f 0b ed 41 88 54 8a 4f e8 f3 6b a8 97 c8 ae e9 49 24 0d 24 37 f2 93 77 0d ed d1 c5 a6 65 92 61 db a0 09 77 ca 45 e4 14 2f f4 3c f9 8f 04 fc 76 97 6f 93 45 ce 84 18 6a 60 02 0f db 2b 77 f9 87 36 1d 80 1a a2 9c cc 72 54 6c 44 33 1d 9f e8 fe 77 24 6e b2 2d 54 e9 48 53 9f 95 63 1b ca c7 a7 55 15 c3 84 e2 f4 4b 29 d9 8d 62 90 ed b9 b4 61 51 7a 16 3d 90 8e 43 28 cb f6 3b 8b 4c c2 c6 a0 4e 46 c3 ed 14 a0 78 f3 8d 8e 3f f3 4e 3c 48 a4 fa 76 df 94 5c 03 29 96 4b 5d d6 86 49 af 8b 1f 14 82 7c 37 55 81 d4 5b a2 fa 76 0d da 0c 91 82 61 b2 6e 3f 53 ce b8 ff 07 0d 21 44 31 ed 14 d4 57 6e 01 3e 66 b7 a3 a5 35 b3 3d 71 31 b3 34 02 cb a2 7b fe b8 22 95 21 b9 9d 29 f1 df 0a 63 4c 3a 22 48 e4 Data Ascii: ,4(A4\|I6N`OATOkI$$7weawE/<voEj`+w6rTlD3w$n-THScUK)baQz=C(;LNFx?N<Hv\)K]I\|7U[van?S!D1Wn>f5=q14{"!)cL:"H
2024-10-07 22:14:26 UTC	2332	IN	Data Raw: c4 22 aa cc 97 1a ec c2 39 38 a0 0a e8 85 0a d3 b8 fc e1 9c 51 8a 44 43 d5 e7 d7 7a 70 e8 3f 40 dc 28 e3 27 7d 0d 79 9d 76 a5 46 76 de 18 04 2e a6 75 a2 3f 06 79 dc 1e c6 de 58 fc 83 78 f7 6d 01 aa 75 dd 90 9a d5 cd 40 7c da 0b b9 86 bb 45 72 4b 15 2c ff 92 3c a1 14 2e 19 5d aa b3 e1 d0 fd 1e 25 03 81 a8 70 21 d1 b1 ca ee a3 f8 b8 05 ae 88 fb b5 37 40 75 4b a5 e3 9f 9d e1 3b 94 93 33 1b 80 24 80 84 bb a4 1f 39 7e 57 d8 c7 3b 4e 77 ec 4c 91 ef 37 b7 e8 bc 9b 60 2e 1e 49 e4 7f 37 be 64 72 54 07 f8 20 da f0 5f c1 a3 de 95 1d e1 db 9c 3c 1f 0b 84 c8 e2 55 04 01 d9 68 c7 ec 60 50 0f 8c 1e 36 d1 66 4b 65 90 b5 5e fb a1 37 1c f3 95 e8 e7 6b ba e1 61 20 2a 56 7a 09 57 a6 1b f4 8b ae f7 43 92 ca ef ab 47 95 d8 16 2b 9f 81 ae 35 f2 82 4d f8 3f 7b ac 4c 1a 74 af d3 Data Ascii: "98QDCzp?@('}yvFv.u?yXxmu@\|ErK,<.]%p!7@uK;3$9~W;NwL7`.I7drT _<Uh`P6fKe^7ka *VzWCG+5M?{Lt
2024-10-07 22:14:26 UTC	14692	IN	Data Raw: c6 1b 43 b5 e2 3b 70 fb 27 1c 8e 3e ed 1c 34 0f 61 47 2e 5a 11 ff 46 93 e5 98 9f 90 e4 0c 86 99 49 ff 0e 03 35 84 17 29 f2 d7 09 1a cd 64 a0 d7 a4 27 1e c2 97 f0 c8 a0 f5 67 6a 46 01 6d 17 da e8 e3 e5 bb ef 7c 15 15 f2 38 98 1a f5 ce 08 5e 05 8a de 0b ca e9 88 47 40 94 47 e1 61 a9 ee f2 8d 20 f6 b5 bf f6 7e eb dc 60 6a d1 a0 7e 6d 5e ab ad 3a a3 9e a8 66 ab 06 a7 ee 3c 14 3e 93 1f 35 fb 66 27 13 52 7f 76 08 4d b7 47 1f 39 94 dd fc 56 cc 1b 8a 78 9b 95 60 d8 df 74 8a 0f 0f cb a6 9d 92 75 a5 3a af 14 2f fa 35 0a 0c 89 f9 da 0e 86 44 7c 51 e9 71 3a 5e c3 85 b1 b7 0d b5 18 d6 ca 01 1a a4 13 a4 cc d9 ea a8 de e1 83 43 64 db 28 3a 4f 9d 39 6b 2f 9f 81 7c ed 91 4b 65 8d 62 11 7d 30 0a fa 34 3a d4 25 48 a2 a4 62 e8 3b 95 92 f4 73 2b 87 ae 72 9c 63 46 c6 fd 1f fb Data Ascii: C;p'>4aG.ZFI5)d'gjFm\|8^G@Ga ~`j~m^:f<>5f'RvMG9Vx`tu:/5D\|Qq:^Cd(:O9k/\|Keb}04:%Hb;s+rcF
2024-10-07 22:14:26 UTC	16384	IN	Data Raw: f1 ee db fd a1 0e 0c bb 4f f8 4a 82 54 85 fe 5c 80 db 27 c9 4b 86 7f 5b 29 8f e4 cf 43 e0 e0 4a 27 d5 9c ce 01 04 17 a1 25 ab 9a 9e 36 05 90 41 6d 22 09 be fd 43 69 74 f1 0b 0b 6c 45 2d 67 4b 36 c7 38 53 ab 24 71 a1 82 b4 48 1b d3 f2 a2 22 65 91 5a 83 74 d5 7a 8f cf 65 e8 60 e7 d4 07 f2 07 0e 46 5f 19 cb 98 af b1 61 b6 16 68 ac ab 3c e3 b5 e6 cf 59 3f cc 07 53 a0 6e ef 45 15 a4 10 68 4a 20 06 10 02 a7 ce 18 f7 3f dd cd 35 1f db 7e 5b cc ac e7 7f e3 78 5e 13 77 ed 3e c2 81 29 65 3b b2 62 1a 47 58 3b 21 56 3a 9e f7 21 97 09 db c9 de 64 08 61 64 74 f6 21 d2 c1 cb 7f 58 1e d3 f7 22 e6 63 99 4d ee db 5d c0 b2 c6 a1 8e b4 23 d3 55 8d b1 47 9b 4e 4d 62 f3 1e 4c ca 4a da 55 13 80 e6 bb f6 8a 65 74 42 22 87 c9 ac 00 5e 21 5e c9 5c 1f 6d 9f f5 f8 f8 85 cd f2 41 7d Data Ascii: OJT\'K[)CJ'%6Am"CitlE-gK68S$qH"eZtze`F_ah<Y?SnEhJ ?5~[x^w>)e;bGX;!V:!dadt!X"cM]#UGNMbLJUetB"^!^\mA}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49802	157.240.0.6	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:25 UTC	1368	OUT	GET /signals/config/3778676962456122?v=2.9.170&r=stable&domain=aholding-croatia.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:26 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-07 22:14:26 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-07 22:14:26 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-07 22:14:26 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-10-07 22:14:26 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-10-07 22:14:26 UTC	1175	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-10-07 22:14:26 UTC	1500	IN	Data Raw: 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 46 65 61 74 75 72 65 43 6f 75 6e 74 65 72 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6c 6c 61 70 73 65 55 73 65 72 44 61 74 61 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 22 29 2c 64 3d 31 35 2c 65 3d 22 69 6e 70 75 74 2c 74 65 78 74 61 72 65 61 2c 73 65 6c 65 63 74 2c 62 75 74 74 6f 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 67 28 66 29 7b 76 61 Data Ascii: n(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsFeatureCounter"),b=f.getFbeventsModules("signalsFBEventsCollapseUserData"),c=f.getFbeventsModules("signalsFBEventsExtractFormFieldFeatures"),d=15,e="input,textarea,select,button";function g(f){va
2024-10-07 22:14:26 UTC	1500	IN	Data Raw: 72 65 73 5b 61 5d 2b 2b 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 66 65 61 74 75 72 65 73 5b 61 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 61 6b 65 53 61 66 65 53 74 72 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 Data Ascii: res[a]++;return this._features[a]}}]);return a}();k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsMakeSafeString",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=Objec
2024-10-07 22:14:26 UTC	1500	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 68 72 6f 74 74 6c 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 31 65 33 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 21 3d 3d 76 6f 69 Data Ascii: );return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsThrottler",function(){return function(f,g,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=1e3,b=function(){function b(){var c=arguments.length>0&&arguments[0]!==voi
2024-10-07 22:14:26 UTC	1500	IN	Data Raw: 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 22 29 3b 76 61 72 20 74 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 68 72 6f 74 74 6c 65 72 22 29 2c 75 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 76 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 45 76 65 6e 74 50 61 79 6c 6f 61 64 22 29 2c 77 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 61 6b 65 53 61 66 65 22 29 2c 78 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 Data Ascii: SignalsFBEventsPlugin");var t=f.getFbeventsModules("SignalsFBEventsThrottler"),u=f.getFbeventsModules("SignalsFBEventsUtils"),v=f.getFbeventsModules("signalsFBEventsExtractEventPayload"),w=f.getFbeventsModules("signalsFBEventsMakeSafe"),x=f.getFbeventsMod
2024-10-07 22:14:26 UTC	910	IN	Data Raw: 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 67 3f 68 3a 63 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 21 30 7d 29 3b 67 3d 65 2e 75 73 65 72 44 61 74 61 3b 67 3d 3d 6e 75 6c 6c 3f 64 2e 74 72 69 67 67 65 72 28 62 29 3a 43 28 61 2c 62 2c 67 2c 66 29 7d 75 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6b 28 62 2c 61 29 3b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 76 61 72 20 61 2c 63 2c 64 3b 6c 28 74 68 69 73 2c 62 29 3b 76 61 72 20 65 3b 66 6f 72 28 76 61 72 20 66 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 67 3d 41 72 72 61 79 28 66 29 2c 68 3d 30 3b 68 3c 66 3b 68 2b 2b 29 67 5b 68 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 3b 72 65 74 75 72 6e 20 64 3d 28 65 3d 28 63 3d 6a 28 74 68 69 73 2c 28 61 Data Ascii: utton:e,containerElement:g?h:c,shouldExtractUserData:!0});g=e.userData;g==null?d.trigger(b):C(a,b,g,f)}u=function(a){k(b,a);function b(){var a,c,d;l(this,b);var e;for(var f=arguments.length,g=Array(f),h=0;h<f;h++)g[h]=arguments[h];return d=(e=(c=j(this,(a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49803	142.250.186.66	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:26 UTC	1323	OUT	GET /pagead/viewthroughconversion/16671369731/?random=1728339263492&cv=11&fst=1728339263492&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:26 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 07 Oct 2024 22:14:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 07-Oct-2024 22:29:26 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 22:14:26 UTC	548	IN	Data Raw: 31 32 64 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12de(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-10-07 22:14:26 UTC	1390	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 64 29 7b 69 66 28 21 64 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 64 3d 76 5b 62 5d 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 64 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 64 21 3d 3d 76 6f 69 64 20 30 3f 64 3a 61 5b 62 5d 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 64 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 63 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 63 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 74 3f 67 3d 74 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 63 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d Data Ascii: ;function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]
2024-10-07 22:14:26 UTC	1390	IN	Data Raw: 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 62 3d 22 22 7d 72 65 74 75 72 6e 20 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 72 65 74 75 72 6e 20 47 3f 21 21 4f 26 26 4f 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 55 28 29 7b 72 65 74 75 72 6e 20 54 28 29 3f 51 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 52 28 22 43 68 72 6f 6d 65 22 29 7c 7c 52 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 54 28 29 3f 30 3a 52 28 22 45 64 Data Ascii: .brand)&&b.indexOf(a)!=-1}):!1:!1}function R(a){var b;a:{if(b=z.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function T(){return G?!!O&&O.brands.length>0:!1}function U(){return T()?Q("Chromium"):(R("Chrome")\|\|R("CriOS"))&&!(T()?0:R("Ed
2024-10-07 22:14:26 UTC	1390	IN	Data Raw: 66 65 74 63 68 28 71 2c 49 29 3b 53 26 26 53 2e 63 61 74 63 68 28 42 29 3b 76 61 72 20 4a 3d 21 30 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 62 61 29 7b 7d 7d 69 66 28 6e 26 26 6e 2e 6e 6f 46 61 6c 6c 62 61 63 6b 29 4a 3d 21 31 3b 65 6c 73 65 7b 74 72 79 7b 76 61 72 20 63 61 3d 44 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 44 2e 73 65 6e 64 42 65 61 63 6f 6e 28 71 29 7d 63 61 74 63 68 28 62 61 29 7b 41 2e 54 41 47 47 49 4e 47 3d 41 2e 54 41 47 47 49 4e 47 7c 7c 5b 5d 2c 41 2e 54 41 47 47 49 4e 47 5b 31 35 5d 3d 21 30 7d 63 61 7c 7c 45 28 71 29 3b 4a 3d 21 30 7d 7d 4a 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 65 3b 72 2e 73 72 63 3d 64 5b 66 2e 67 5d 7d 65 28 29 7d 76 61 72 20 58 3d 5b 22 73 73 5f 22 5d 2c 59 3d 73 7c 7c 7a 3b 58 5b Data Ascii: fetch(q,I);S&&S.catch(B);var J=!0;break a}catch(ba){}}if(n&&n.noFallback)J=!1;else{try{var ca=D.sendBeacon&&D.sendBeacon(q)}catch(ba){A.TAGGING=A.TAGGING\|\|[],A.TAGGING[15]=!0}ca\|\|E(q);J=!0}}J&&e()}}(f)));r.onload=e;r.src=d[f.g]}e()}var X=["ss_"],Y=s\|\|z;X[
2024-10-07 22:14:26 UTC	120	IN	Data Raw: 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 47 77 44 70 61 58 6e 66 57 71 36 5f 4e 32 53 34 5f 31 73 65 45 73 67 56 56 56 6c 72 54 6d 4a 30 2d 6d 37 75 31 77 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 32 36 38 32 38 38 37 31 37 37 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: \x26cid\x3dCAQSGwDpaXnfWq6_N2S4_1seEsgVVVlrTmJ0-m7u1w\x26random\x3d2682887177\x26rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2024-10-07 22:14:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49806	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:27 UTC	363	OUT	GET /lib/flags/flags7.png HTTP/1.1 Host: static.tildacdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:28 UTC	967	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:27 GMT Content-Type: image/png Content-Length: 43194 Connection: close Access-Control-Expose-Headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control Cache-Control: max-age=5184000 Etag: "a788fcd070da2e0229d1b88dd532b746" Last-Modified: Wed, 28 Aug 2024 15:58:46 GMT x-container-storage-policy-index: 0 x-container-storage-policy-name: Policy-0 X-Timestamp: 1724860725.41581 X-Trans-Id: 9ada86a0-6795-41fd-ad64-61b0077481f8 Expires: Mon, 28 Oct 2024 08:03:38 GMT tserver: 11 X-ID-SHIELD: am3-hw-edge-gc89 Age: 3420649 traceparent: 00-dbf801a6ccb9dc42e9348be56919252e-d17bda3d6bda3cee-01 X-ID: fr5-hw-edge-gc16 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-08-29T08:33:11+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:28 UTC	14983	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 86 00 00 01 70 08 06 00 00 00 bc 4b dc e1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 a8 4f 49 44 41 54 78 01 ed 9d 07 7c 53 d5 db c7 7f 49 57 d2 bd 5b ba 5b 68 81 b2 f7 90 21 7b 08 02 0a 88 88 08 e2 16 b7 a2 88 8a e2 f8 2b 6e f4 75 23 82 c8 10 94 a9 c8 06 41 86 ec 55 a0 a5 7b d0 bd db a4 2b 79 ef 39 b7 49 d3 36 69 6f 92 9b b4 c5 f3 e5 13 ee b9 e7 9e e4 34 c9 cd f9 dd e7 79 ce 3d 0f c0 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 86 99 48 f4 d6 7a fd a6 6e 58 35 a3 f7 29 6c fc e1 7d bd cd 93 ef ea 86 d2 cb 76 8d ea bb 55 9c d5 ff fa 0d 50 4b 24 f5 fa 7b 65 78 Data Ascii: PNGIHDRpKpHYssRGBgAMAaOIDATx\|SIW[[h!{+nu#AU{+y9I6io4y=`0`0`0`0HznX5)l}vUPK${ex
2024-10-07 22:14:28 UTC	15928	IN	Data Raw: 5e 70 b5 a4 d5 60 69 34 01 66 22 0a 84 d6 70 ef 82 2e 4c 18 18 6d 0e 6b 8b 82 18 71 83 b6 8a ae 10 88 21 0a 0c 1e 8d 75 d0 9a a6 a8 32 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 46 eb 42 ef ba 6c 2f 6d 4b 34 2f f3 4e 2d 1f 4e 09 17 b4 ee 9b 4d c0 77 8d fa 53 05 29 51 f1 cf e3 8d d6 4b 21 19 ba 8a fa 8e d2 fb 3a 9e 71 67 84 ad 33 f7 fd 03 a2 bc 3f 3c bc 5a 50 7f c9 af 7d a0 f6 9d 3f 03 3b b8 8f f5 c1 4f f7 a2 f4 ea 4d ed b1 a5 cf 0e c5 bd 1b f9 5c 02 eb ef 79 06 6f 7d 76 44 7b cc b9 73 3b fc d6 b9 08 1d 4b 72 e0 3c 6a 28 bc 67 4e 11 d4 df 39 59 58 bd f7 47 16 24 f4 1e 91 86 9c bd 7c 9e 07 f7 2e fc d2 06 85 57 f8 f5 e6 7d c6 dc 44 ee c1 a0 46 8b 19 Data Ascii: ^p`i4f"p.Lmkq!u2`0`0`0`0`0`0`0FBl/mK4/N-NMwS)QK!:qg3?<ZP}?;OM\yo}vD{s;Kr<j(gN9YXG$\|.W}DF
2024-10-07 22:14:28 UTC	7240	IN	Data Raw: 22 90 1c 10 d1 9b 97 a1 22 37 b5 d1 eb 54 bd b2 55 50 7f 92 87 8e 8b f2 fe d4 3f 0c 12 d4 df 56 d7 30 51 fa 9b 5a 9c 24 a8 bf fc c8 3e f5 fa b3 1f d8 83 e6 ad bd f7 c9 fd f8 65 c9 68 dc b9 7f 97 c1 15 71 75 f1 8c 3b 23 6c 75 bf 88 a5 a2 bc 3f 24 bc 25 a8 bf ac 4f be 52 ef f7 f4 c1 7d ef ee 43 df 8e bd 70 d0 e3 5f 8c 28 e8 8f d3 d7 cf e1 af 29 11 e8 d3 bf 13 9c 23 1e 85 bd ac e9 a5 a2 a5 5d 8b 8c ea 6f ce c7 31 e8 13 ea 87 df 55 7b 71 97 74 0c 4e c5 dc c4 ee bb 1c e1 d9 27 00 03 de 4b a0 cb 3b 8b f1 fe e2 e4 01 ea aa 60 40 ee e2 85 f2 b3 31 f0 fe f8 0b f8 3e f7 38 4d 00 63 cc 02 7a 12 0e 21 ed d4 1c 4d 1d 27 2b b8 c6 74 1a cb 9d 58 4d 2f ee dd ad e2 ac e0 f7 d7 b0 ce 36 da 0b 21 07 8e 34 ca 3c 48 fa 4e 19 39 14 d5 31 8d d7 2f 8b 54 64 08 ea 2f ca c9 56 fd Data Ascii: ""7TUP?V0QZ$>ehqu;#lu?$%OR}Cp_()#]o1U{qtN'K;`@1>8Mcz!M'+tXM/6!4<HN91/Td/V
2024-10-07 22:14:28 UTC	5043	IN	Data Raw: 7c 5f 71 be 3f cf 6c 61 df df 15 89 8d 28 fd 75 51 d7 08 ea ef e5 db 7b a8 1f 2b 51 a1 3a 26 0f 52 ff 32 98 4a fb c4 22 41 fd b5 df fa 08 7d 7f f7 6d bf 44 f7 83 4a 46 60 fb 5d d7 71 55 ee 05 63 88 9f fa 9d a0 fe d4 67 21 ca e7 29 e9 0d cb ac cb 2f 00 bd 6b 25 29 8a 2c bf fc ac 2e 76 a1 13 51 2d 0b 80 ea d2 52 58 83 79 5f aa b1 77 a9 17 b2 dc 59 72 71 86 11 78 da 42 e9 e9 80 aa 6b 79 70 b2 77 42 41 06 bf 66 90 5d 81 b0 71 a0 0a 02 71 33 6e c0 32 48 76 12 cc 25 1f 2a 78 42 dc 45 df 3e 38 74 01 ed 16 c9 f1 78 b4 33 52 36 3b 19 14 87 0a 3b 27 b8 15 ab 50 e4 2a 85 43 95 e9 02 a2 c1 a5 5b 38 dc 8e 85 c1 af ba 2e c1 58 7b 84 23 1e 89 60 d4 47 af 30 4c 1d ff 20 c4 e0 c2 87 af 08 6e 6b eb d7 13 55 f2 15 50 ff 2b 2c 1f b1 39 04 66 3a 63 e9 27 0a 3c b1 0c b7 24 12 Data Ascii: \|_q?la(uQ{+Q:&R2J"A}mDJF`]qUcg!)/k%),.vQ-RXy_wYrqxBkypwBAf]qq3n2Hv%xBE>8tx3R6;;'PC[8.X{#`G0L nkUP+,9f:c'<$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49804	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:27 UTC	367	OUT	GET /js/tilda-stat-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:28 UTC	544	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:27 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 8721 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 07 Sep 2022 13:40:09 GMT ETag: "63189f39-2211" tserver: 13 X-ID-SHIELD: am3-hw-edge-gc88 traceparent: 00-4f4d848822266ffe09aa3cee8fb3133d-18dca61349ad3e50-01 X-ID: fr5-hw-edge-gc58 Age: 367970 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-03T16:01:37+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:28 UTC	8166	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 6c 6c 72 65 63 6f 72 64 73 22 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 35 3b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2b 22 2e 22 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 28 5b 5c 2e 24 3f 2a 7c 7b 7d 5c 28 5c 29 5c 5b 5c 5d 5c 5c 5c 2f 5c 2b 5e 5d 29 2f 67 2c 22 5c 5c 24 31 22 29 2c 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 3f 3a 5e 7c 3b 20 29 22 2b 65 2b 22 3d 28 5b 5e 3b 5d 2a 29 22 29 2c 65 3d 64 6f 63 75 6d Data Ascii: !function(){var r=document.getElementById("allrecords");function e(){var e=Math.floor(899999Math.random())+1e5;return(new Date).getTime()+"."+e}function n(e){e=e.replace(/([\.$?\|{}\[\]\\\/\+^])/g,"\\$1"),e=new RegExp("(?:^\|; )"+e+"=([^;]*)"),e=docum
2024-10-07 22:14:28 UTC	555	IN	Data Raw: 22 29 26 26 2d 31 21 3d 3d 78 2e 69 6e 64 65 78 4f 66 28 22 74 69 6c 64 61 2e 22 29 26 26 2d 31 21 3d 3d 78 2e 69 6e 64 65 78 4f 66 28 22 2f 74 69 6c 64 61 66 61 76 69 63 6f 6e 2e 69 63 6f 22 29 26 26 21 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 74 61 62 6c 65 23 61 6c 6c 72 65 63 6f 72 64 73 22 29 26 26 21 28 2d 31 21 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 2e 74 69 6c 64 61 2e 77 73 22 29 29 26 26 21 6b 2c 76 6f 69 64 20 30 3d 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 7c 7c 2f 42 6f 74 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7c 7c 45 7c 7c 31 3d 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 35 2a Data Ascii: ")&&-1!==x.indexOf("tilda.")&&-1!==x.indexOf("/tildafavicon.ico")&&!document.querySelector("table#allrecords")&&!(-1!==window.location.hostname.indexOf(".tilda.ws"))&&!k,void 0===navigator.sendBeacon\|\|/Bot/i.test(navigator.userAgent)\|\|E\|\|1===Math.floor(5*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49808	193.3.17.197	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:27 UTC	647	OUT	POST /event/ HTTP/1.1 Host: stat.tildacdn.com Connection: keep-alive Content-Length: 743 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://aholding-croatia.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:27 UTC	743	OUT	Data Raw: 70 61 67 65 3d 61 68 6f 6c 64 69 6e 67 2d 63 72 6f 61 74 69 61 2e 63 6f 6d 25 32 46 26 72 65 66 65 72 72 65 72 3d 26 75 73 65 72 69 64 3d 73 69 6d 70 6c 65 26 73 65 73 73 69 6f 6e 69 64 3d 73 69 6d 70 6c 65 26 75 73 65 72 5f 61 67 65 6e 74 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 32 43 25 32 30 6c 69 6b 65 25 32 30 47 65 63 6b 6f 29 25 32 30 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 25 32 30 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 26 75 73 65 72 5f 6c 61 6e 67 75 61 67 65 3d 65 6e 2d 55 53 26 70 72 6f 6a 65 63 Data Ascii: page=aholding-croatia.com%2F&referrer=&userid=simple&sessionid=simple&user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&user_language=en-US&projec
2024-10-07 22:14:28 UTC	226	IN	HTTP/1.1 200 date: Mon, 07 Oct 2024 22:14:28 GMT content-type: application/json;charset=utf-8 access-control-allow-origin: https://aholding-croatia.com x-tilda-server: 12 connection: close transfer-encoding: chunked
2024-10-07 22:14:28 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 4f 4b 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"message":"OK"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49807	193.3.17.197	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:27 UTC	647	OUT	POST /event/ HTTP/1.1 Host: stat.tildacdn.com Connection: keep-alive Content-Length: 785 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://aholding-croatia.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:27 UTC	785	OUT	Data Raw: 70 61 67 65 3d 61 68 6f 6c 64 69 6e 67 2d 63 72 6f 61 74 69 61 2e 63 6f 6d 25 32 46 74 69 6c 64 61 25 32 46 72 65 61 64 74 69 6d 65 25 32 46 26 72 65 66 65 72 72 65 72 3d 61 68 6f 6c 64 69 6e 67 2d 63 72 6f 61 74 69 61 2e 63 6f 6d 25 32 46 26 75 73 65 72 69 64 3d 73 69 6d 70 6c 65 26 73 65 73 73 69 6f 6e 69 64 3d 73 69 6d 70 6c 65 26 75 73 65 72 5f 61 67 65 6e 74 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 32 43 25 32 30 6c 69 6b 65 25 32 30 47 65 63 6b 6f 29 25 32 30 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 25 32 30 Data Ascii: page=aholding-croatia.com%2Ftilda%2Freadtime%2F&referrer=aholding-croatia.com%2F&userid=simple&sessionid=simple&user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20
2024-10-07 22:14:28 UTC	226	IN	HTTP/1.1 200 date: Mon, 07 Oct 2024 22:14:27 GMT content-type: application/json;charset=utf-8 access-control-allow-origin: https://aholding-croatia.com x-tilda-server: 12 connection: close transfer-encoding: chunked
2024-10-07 22:14:28 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 4f 4b 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"message":"OK"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:29 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:29 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:29 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221429Z-1657d5bbd48q6t9vvmrkd293mg000000044g000000003ufe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:29 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-07 22:14:29 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-07 22:14:29 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-07 22:14:29 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-07 22:14:29 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-07 22:14:29 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-07 22:14:29 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-07 22:14:29 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-07 22:14:29 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-07 22:14:29 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49812	172.217.23.100	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:29 UTC	1451	OUT	GET /pagead/1p-user-list/16671369731/?random=1728339263492&cv=11&fst=1728338400000&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDpaXnfWq6_N2S4_1seEsgVVVlrTmJ0-m7u1w&random=2682887177&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:29 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 07 Oct 2024 22:14:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 22:14:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49814	157.240.253.35	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:29 UTC	850	OUT	GET /tr/?id=3778676962456122&ev=PageView&dl=https%3A%2F%2Faholding-croatia.com%2F&rl=&if=false&ts=1728339267284&sw=1280&sh=1024&v=2.9.170&r=stable&a=pltilda&ec=0&o=4126&fbp=fb.1.1728339267281.802210285189088884&ler=empty&cdl=API_unavailable&it=1728339263462&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:29 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=84, rtx=0, c=10, mss=1392, tbw=3401, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Mon, 07 Oct 2024 22:14:29 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49813	157.240.253.35	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:29 UTC	965	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=3778676962456122&ev=PageView&dl=https%3A%2F%2Faholding-croatia.com%2F&rl=&if=false&ts=1728339267284&sw=1280&sh=1024&v=2.9.170&r=stable&a=pltilda&ec=0&o=4126&fbp=fb.1.1728339267281.802210285189088884&ler=empty&cdl=API_unavailable&it=1728339263462&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:29 UTC	795	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7423160637449866641", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7423160637449866641"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-07 22:14:29 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-07 22:14:29 UTC	1675	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-10-07 22:14:29 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49818	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:31 UTC	633	OUT	GET /tild3938-6466-4465-b630-313637633536/image_179.svg HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:31 UTC	940	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:31 GMT Content-Type: image/svg+xml Content-Length: 212370 Connection: close Vary: Accept-Encoding Access-Control-Expose-Headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control Cache-Control: max-age=5184000 Etag: "e287fcf0628cfc4adceecdd5149f2014" Last-Modified: Mon, 19 Feb 2024 21:09:25 GMT x-container-storage-policy-index: 0 x-container-storage-policy-name: Policy-0 X-Timestamp: 1708376964.75476 X-Trans-Id: 17b55fcc4e9ae6e3 Age: 0 Expires: Fri, 06 Dec 2024 22:14:33 GMT tserver: 11 X-ID-SHIELD: am3-hw-edge-gc89 Cache: MISS traceparent: 00-4ad2cde13db216cf2f70b6d8ab68b0b1-74955a60e3dc75b2-01 X-ID: fr5-hw-edge-gc36 Access-Control-Allow-Origin: * Cache: MISS Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc26
2024-10-07 22:14:31 UTC	15010	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 77 69 64 74 68 3d 22 31 30 33 22 20 68 65 69 67 68 74 3d 22 31 30 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 33 20 31 30 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 33 22 20 68 65 69 67 68 74 3d 22 31 30 39 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 74 74 65 72 6e 30 29 22 3e 3c 2f 72 65 63 74 3e 20 3c 64 65 66 73 3e 20 3c 70 61 74 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="103" height="109" viewBox="0 0 103 109" fill="none"> <rect width="103" height="109" fill="url(#pattern0)"></rect> <defs> <patt
2024-10-07 22:14:32 UTC	15928	IN	Data Raw: 5a 56 76 64 4f 4e 37 62 4d 6f 32 4b 51 36 6c 4b 31 6a 77 6e 6e 57 49 6a 32 34 51 7a 32 63 4e 61 73 52 53 7a 6f 5a 76 6e 66 31 59 64 5a 35 52 71 50 74 6a 64 35 45 72 73 77 6e 55 45 52 6d 45 5a 35 69 77 64 5a 52 57 43 4a 78 63 5a 57 58 59 6f 6f 6b 62 72 59 75 68 33 6d 6d 4e 33 6f 63 4d 31 6f 49 51 41 41 43 45 46 67 43 41 68 54 6f 53 37 42 4a 4c 42 45 43 45 49 41 41 42 4f 49 45 37 41 2f 44 4e 62 62 6e 65 65 54 52 46 57 77 52 55 36 68 79 64 5a 36 79 58 65 6f 74 37 33 57 31 61 77 74 70 74 61 42 7a 48 4b 52 36 6f 35 64 7a 38 7a 77 46 51 38 39 53 76 47 71 52 59 6c 53 6b 4b 30 55 71 6a 5a 37 4e 6a 75 69 4e 6e 6d 4b 46 48 67 49 51 67 41 41 45 46 70 30 41 42 66 71 69 37 78 44 72 67 77 41 45 49 41 43 42 4a 49 45 72 37 33 2b 32 33 2f 63 38 54 33 67 56 31 58 67 32 4e Data Ascii: ZVvdON7bMo2KQ6lK1jwnnWIj24Qz2cNasRSzoZvnf1YdZ5RqPtjd5ErswnUERmEZ5iwdZRWCJxcZWXYookbrYuh3mmN3ocM1oIQAACEFgCAhToS7BJLBECEIAABOIE7A/DNbbneeTRFWwRU6hydZ6yXeot73W1awtptaBzHKR6o5dz8zwFQ89SvGqRYlSkK0UqjZ7NjuiNnmKFHgIQgAAEFp0ABfqi7xDrgwAEIACBJIEr73+23/c8T3gV1Xg2N
2024-10-07 22:14:32 UTC	15928	IN	Data Raw: 6a 7a 50 50 47 47 58 4b 53 66 4b 4b 6f 33 37 34 58 35 4d 72 57 41 6d 73 39 38 6e 2f 36 68 75 62 58 39 57 43 6b 5a 51 47 42 46 43 4c 7a 79 78 67 38 66 6d 45 4d 35 4e 76 39 35 44 2f 64 43 79 72 35 57 73 6b 61 58 73 74 42 74 46 4f 43 6d 64 67 6d 4d 4e 4f 55 74 37 31 75 62 7a 57 78 2f 4a 36 6c 4a 47 55 41 41 41 68 43 41 77 45 77 45 4b 4e 42 6e 77 6b 59 51 42 43 41 41 67 66 4d 68 30 50 59 38 72 36 72 74 57 62 4e 64 31 69 33 76 64 72 32 4a 57 71 41 37 46 48 71 65 64 79 52 34 58 6c 6b 43 70 75 76 43 62 76 7a 67 37 4b 76 44 76 55 4b 63 46 50 48 4f 47 70 31 2f 6f 5a 75 63 31 67 57 50 4a 66 57 42 58 47 42 56 69 70 30 33 76 33 4c 7a 74 74 49 77 67 41 41 45 49 41 43 42 43 79 46 41 67 58 34 68 6d 4a 6b 45 41 68 43 41 51 45 6a 41 39 6a 79 76 62 63 2f 7a 30 44 53 56 5a Data Ascii: jzPPGGXKSfKKo374X5MrWAms98n/6hubX9WCkZQGBFCLzyxg8fmEM5Nv95D/dCyr5WskaXstBtFOCmdgmMNOUt71ubzWx/J6lJGUAAAhCAwEwEKNBnwkYQBCAAgfMh0PY8r6rtWbNd1i3vdr2JWqA7FHqedyR4XlkCpuvCbvzg7KvDvUKcFPHOGp1/oZuc1gWPJfWBXGBVip03v3LzttIwgAAEIACBCyFAgX4hmJkEAhCAQEjA9jyvbc/z0DSVZ
2024-10-07 22:14:32 UTC	8648	IN	Data Raw: 54 66 6d 36 47 71 42 5a 52 70 64 53 6c 73 77 2f 61 56 44 39 47 76 2b 46 75 50 61 66 2f 33 77 43 33 58 63 4f 79 6f 78 35 5a 71 39 7a 5a 66 65 32 33 32 49 63 58 2b 7a 44 43 4f 6c 2f 54 50 4e 4b 75 4c 4a 4d 4e 59 64 6f 65 57 37 4b 47 39 71 65 2b 4f 75 4b 56 37 4b 35 6d 77 36 68 51 6a 69 59 59 79 4c 4f 77 66 38 58 75 34 38 2b 5a 62 56 56 48 75 6b 4d 65 47 38 49 71 6e 30 71 72 39 6f 56 71 7a 54 71 69 71 37 65 2f 2f 6c 63 2f 63 37 54 70 57 56 77 70 37 6f 39 50 38 48 35 6b 4d 46 73 4a 4e 42 57 47 44 4d 58 45 30 78 4d 54 66 32 79 78 57 4f 53 32 7a 58 75 74 48 44 77 78 48 45 41 41 42 45 44 68 6d 41 69 6a 51 6a 78 6b 34 68 67 4d 42 45 44 67 47 41 6b 39 70 7a 2f 4f 42 76 36 70 74 6e 66 77 4e 79 54 61 36 6d 6a 37 45 65 57 35 72 6e 73 6a 57 35 37 36 30 35 2f 6d 2f 76 Data Ascii: Tfm6GqBZRpdSlsw/aVD9Gv+FuPaf/3wC3XcOyox5Zq9zZfe232IcX+zDCOl/TPNKuLJMNYdoeW7KG9qe+OuKV7K5mw6hQjiYYyLOwf8Xu48+ZbVVHukMeG8Iqn0qr9oVqzTqiq7e//lc/c7TpWVwp7o9P8H5kMFsJNBWGDMXE0xMTf2yxWOS2zXutHDwxHEAABEDhmAijQjxk4hgMBEDgGAk9pz/OBv6ptnfwNyTa6mj7EeW5rnsjW57605/m/v
2024-10-07 22:14:32 UTC	15928	IN	Data Raw: 4f 39 2b 57 4a 56 6c 50 65 72 59 76 72 42 37 33 76 58 37 76 31 38 4c 31 69 65 42 67 4c 65 33 75 6a 57 2f 4d 51 78 4f 2f 4c 67 45 7a 48 30 51 49 62 53 36 4e 62 65 38 7a 62 64 48 31 4b 57 56 39 37 34 71 35 2f 64 4e 51 7a 51 44 51 49 67 41 41 4a 48 51 67 41 46 2b 70 46 67 52 56 41 51 41 49 45 2b 41 75 47 48 34 64 59 4c 66 38 2f 7a 6b 65 64 74 59 75 6a 6f 68 45 78 30 69 49 62 76 4a 37 53 73 6b 51 68 42 58 64 6a 7a 6e 43 45 36 69 2b 4a 58 66 6d 4e 72 73 36 77 6d 64 50 74 37 63 5a 58 6d 76 7a 6c 6a 6b 44 68 57 55 6d 77 79 7a 65 68 44 4a 32 6b 70 57 36 6e 49 66 70 38 4b 35 78 75 54 4e 68 54 6c 6b 32 72 36 57 30 38 4f 69 76 75 34 46 62 67 58 31 36 6b 32 38 50 5a 47 74 79 59 65 48 61 39 44 44 38 44 5a 4d 57 68 46 39 35 58 52 32 47 61 59 61 6f 39 75 64 62 2b 4d 34 Data Ascii: O9+WJVlPerYvrB73vX7v18L1ieBgLe3ujW/MQxO/LgEzH0QIbS6Nbe8zbdH1KWV974q5/dNQzQDQIgAAJHQgAF+pFgRVAQAIE+AuGH4dYLf8/zkedtYujohEx0iIbvJ7SskQhBXdjznCE6i+JXfmNrs6wmdPt7cZXmvzljkDhWUmwyzehDJ2kpW6nIfp8K5xuTNhTlk2r6W08Oivu4FbgX16k28PZGtyYeHa9DD8DZMWhF95XR2GaYao9udb+M4
2024-10-07 22:14:32 UTC	15360	IN	Data Raw: 42 44 59 75 45 4d 69 2f 35 75 38 52 36 52 4f 5a 6c 4d 73 33 70 77 59 36 4a 78 44 4d 4e 51 54 57 45 78 63 32 5a 42 34 30 53 55 6b 6a 57 5a 36 47 5a 72 4b 4e 32 68 57 4f 78 49 5a 50 47 69 44 31 59 69 34 36 67 44 65 36 4e 48 53 4e 41 42 41 73 74 4e 41 41 58 36 63 71 38 50 73 67 4f 42 69 45 44 59 38 37 77 73 70 2f 45 6e 34 73 34 37 2f 34 67 33 39 4e 6d 34 69 7a 38 52 6f 69 53 64 6f 4a 54 6e 37 57 39 39 2f 75 57 39 61 4e 4c 6f 4f 48 49 43 54 32 64 37 6e 70 63 62 38 57 48 45 7a 67 77 7a 73 33 43 57 4f 44 4f 43 71 6f 75 69 70 4f 79 63 62 49 30 61 32 6a 46 30 56 48 59 51 35 68 52 45 31 6c 51 2b 64 6e 4d 78 33 4e 6a 49 49 78 4e 68 45 65 4a 6b 44 57 55 38 6c 47 47 6f 49 7a 4b 7a 4f 49 59 32 54 72 64 5a 69 42 71 38 36 4f 41 2b 39 67 69 6d 53 33 42 33 6c 56 33 38 54 Data Ascii: BDYuEMi/5u8R6ROZlMs3pwY6JxDMNQTWExc2ZB40SUkjWZ6GZrKN2hWOxIZPGiD1Yi46gDe6NHSNABAstNAAX6cq8PsgOBiEDY87wsp/En4s47/4g39Nm4iz8RoiSdoJTn7W99/uW9aNLoOHICT2d7npcb8WHEzgwzs3CWODOCqouipOycbI0a2jF0VHYQ5hRE1lQ+dnMx3NjIIxNhEeJkDWU8lGGoIzKzOIY2TrdZiBq86OA+9gimS3B3lV38T
2024-10-07 22:14:32 UTC	9784	IN	Data Raw: 41 62 78 64 74 4c 2b 39 45 4e 4b 6f 73 4a 62 72 74 71 76 52 71 6d 4f 4d 47 36 6c 41 4f 30 35 51 42 57 63 31 68 77 32 77 65 4b 4c 55 39 5a 68 56 52 6b 62 6d 53 48 70 6c 77 4f 56 53 6b 35 63 4b 46 33 6f 4c 63 73 32 52 63 36 6f 4d 7a 72 75 78 6a 71 39 38 30 4f 54 66 58 76 32 65 39 47 63 78 51 76 37 59 6c 6e 6f 2f 75 79 4d 58 4b 46 46 4f 43 41 66 6f 55 75 42 6c 76 78 46 66 69 6a 33 37 35 2f 50 30 57 50 42 52 45 50 31 58 46 55 38 74 63 2f 42 6e 62 52 49 56 30 34 79 79 33 41 4f 75 75 4b 38 50 38 55 38 69 7a 56 66 68 65 43 4e 41 2b 6b 67 4a 78 35 6e 6d 37 57 2b 52 4d 5a 36 71 71 6f 48 69 54 53 6a 6c 37 30 42 59 79 55 36 65 63 49 2b 73 42 2b 66 52 69 69 31 6e 5a 37 56 78 58 4d 32 33 35 53 5a 66 71 2f 52 6b 61 34 31 4c 39 6e 6e 30 62 31 4c 6f 51 4c 53 42 57 48 4c Data Ascii: AbxdtL+9ENKosJbrtqvRqmOMG6lAO05QBWc1hw2weKLU9ZhVRkbmSHplwOVSk5cKF3oLcs2Rc6oMzruxjq980OTfXv2e9GcxQv7Ylno/uyMXKFFOCAfoUuBlvxFfij375/P0WPBREP1XFU8tc/BnbRIV04yy3AOuuK8P8U8izVfheCNA+kgJx5nm7W+RMZ6qqoHiTSjl70BYyU6ecI+sB+fRii1nZ7VxXM235SZfq/Rka41L9nn0b1LoQLSBWHL
2024-10-07 22:14:32 UTC	16384	IN	Data Raw: 64 6b 31 33 73 55 56 70 76 74 61 76 39 71 59 66 65 65 5a 74 37 39 50 37 59 76 37 70 49 4f 52 62 63 32 32 77 57 36 66 6e 47 42 33 42 31 54 39 5a 36 31 31 30 73 6c 57 52 66 57 77 43 33 74 42 75 4c 32 4f 70 76 71 59 52 2b 50 7a 72 2b 5a 58 6a 44 64 57 52 66 63 33 49 67 6c 72 2b 50 32 36 66 59 34 2f 33 74 62 63 6c 2b 66 53 65 63 68 50 52 2f 48 31 74 6e 55 42 72 59 2b 47 2f 32 2f 2f 35 2b 65 76 6a 2f 7a 38 5a 45 4b 37 46 4f 42 6e 6e 39 62 2b 36 78 48 72 6c 64 4d 67 54 2f 38 37 70 63 66 6a 71 76 68 50 66 79 54 35 39 49 6e 33 66 77 4c 65 56 63 4a 56 62 32 46 4a 49 6f 6a 4e 5a 44 38 73 78 38 50 71 30 39 2f 36 75 33 54 73 31 33 37 49 66 35 69 43 76 7a 68 62 39 2b 2f 4e 35 7a 76 64 75 59 35 56 6c 78 79 51 36 39 66 53 4d 41 4b 6d 46 6a 48 32 6a 32 77 59 58 58 30 39 Data Ascii: dk13sUVpvtav9qYfeeZt79P7Yv7pIORbc22wW6fnGB3B1T9Z6110slWRfWwC3tBuL2OpvqYR+Pzr+ZXjDdWRfc3Iglr+P26fY4/3tbcl+fSechPR/H1tnUBrY+G/2//5+evj/z8ZEK7FOBnn9b+6xHrldMgT/87pcfjqvhPfyT59In3fwLeVcJVb2FJIojNZD8sx8Pq09/6u3Ts137If5iCvzhb9+/N5zvduY5VlxyQ69fSMAKmFjH2j2wYXX09
2024-10-07 22:14:32 UTC	16384	IN	Data Raw: 30 6a 30 30 72 34 62 6e 64 4b 39 48 36 43 6b 48 71 72 66 5a 63 68 66 5a 64 42 66 52 68 58 48 2f 37 70 76 2f 72 74 39 37 33 2b 75 45 34 46 71 41 41 56 6f 41 4a 55 67 41 70 51 41 53 70 41 42 56 34 46 42 63 61 6a 36 56 31 30 32 61 73 64 64 4c 64 4d 79 30 55 65 6d 4a 74 72 6a 67 4b 4c 4c 4b 42 6f 4e 51 4b 70 43 67 6e 72 70 74 74 78 39 63 34 50 76 38 47 7a 30 5a 56 41 6c 2b 52 77 51 4c 38 6b 59 53 33 74 76 2f 6a 6d 7a 39 39 4c 6e 30 74 2f 61 4e 64 62 76 6a 74 49 79 79 54 75 54 4f 4e 42 53 4f 57 45 66 77 51 77 7a 66 51 4f 36 63 39 76 44 77 39 4d 4b 6c 30 71 51 41 57 6f 41 42 57 67 41 6c 53 41 43 6c 41 42 4b 76 44 4b 4b 66 43 5a 76 2f 6e 64 44 39 50 72 39 53 65 34 63 54 30 43 61 77 39 78 79 68 59 59 51 4d 46 55 73 4d 67 78 46 49 70 50 35 31 58 49 48 46 61 52 6b Data Ascii: 0j00r4bndK9H6CkHqrfZchfZdBfRhXH/7pv/rt973+uE4FqAAVoAJUgApQASpABV4FBcaj6V102asddLdMy0UemJtrjgKLLKBoNQKpCgnrpttx9c4Pv8Gz0ZVAl+RwQL8kYS3tv/jmz99Ln0t/aNdbvjtIyyTuTONBSOWEfwQwzfQO6c9vDw9MKl0qQAWoABWgAlSAClABKvDKKfCZv/ndD9Pr9Se4cT0Caw9xyhYYQMFUsMgxFIpP51XIHFaRk
2024-10-07 22:14:32 UTC	16384	IN	Data Raw: 47 45 4b 67 31 54 43 6b 50 78 33 6a 78 49 61 5a 43 32 6c 36 70 72 5a 42 53 54 5a 51 4f 71 69 53 45 51 7a 49 57 42 56 33 4b 79 4c 41 4d 45 5a 67 35 70 47 52 52 58 4f 62 53 51 30 32 57 31 6a 58 69 41 6b 35 4f 5a 46 77 4d 75 68 46 74 4c 35 34 45 50 46 4c 44 71 6d 31 57 74 41 5a 4b 4b 41 30 73 36 6f 45 44 32 77 30 64 7a 48 6f 51 35 70 58 4c 34 49 61 4f 36 78 7a 42 76 59 71 72 49 54 47 30 6a 4b 63 54 6b 79 2b 6d 54 34 58 4a 67 71 41 70 30 62 39 34 78 7a 37 46 48 62 71 42 56 47 34 6b 64 42 67 58 54 4b 54 74 6c 64 49 58 57 78 54 4b 74 41 33 46 50 4f 57 4d 32 52 6d 5a 57 46 42 76 65 33 4c 43 6e 4a 49 51 63 58 61 33 34 2f 73 77 6c 7a 68 4e 34 64 4e 38 63 52 54 64 6f 63 59 4f 49 4f 63 75 64 33 77 45 37 35 55 31 31 46 41 6b 6b 67 70 6e 37 32 57 71 4d 61 44 67 66 74 Data Ascii: GEKg1TCkPx3jxIaZC2l6prZBSTZQOqiSEQzIWBV3KyLAMEZg5pGRRXObSQ02W1jXiAk5OZFwMuhFtL54EPFLDqm1WtAZKKA0s6oED2w0dzHoQ5pXL4IaO6xzBvYqrITG0jKcTky+mT4XJgqAp0b94xz7FHbqBVG4kdBgXTKTtldIXWxTKtA3FPOWM2RmZWFBve3LCnJIQcXa34/swlzhN4dN8cRTdocYOIOcud3wE75U11FAkkgpn72WqMaDgft

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:33 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:33 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b27588a3-a01e-003d-6001-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221433Z-1657d5bbd48lknvp09v995n79000000003r000000000dyyb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:33 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:33 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:33 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: b4e56b29-201e-0000-2178-18a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221433Z-1657d5bbd48hzllksrq1r6zsvs000000016000000000wb92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:33 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:33 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:33 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:33 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221433Z-1657d5bbd482lxwq1dp2t1zwkc00000003vg00000000a750 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:33 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:33 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:33 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:33 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c59bb0f9-701e-0097-2d01-17b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221433Z-1657d5bbd48tnj6wmberkg2xy8000000043000000000s12c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:33 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:33 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:34 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:33 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221433Z-1657d5bbd48t66tjar5xuq22r8000000041000000000h4f8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:34 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49827	5.181.161.197	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:34 UTC	347	OUT	GET /event/ HTTP/1.1 Host: stat.tildacdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:35 UTC	199	IN	HTTP/1.1 200 date: Mon, 07 Oct 2024 22:14:35 GMT content-type: application/json;charset=utf-8 access-control-allow-origin: * x-tilda-server: 12 connection: close transfer-encoding: chunked
2024-10-07 22:14:35 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 4f 4b 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"message":"OK"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49825	157.240.251.9	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:34 UTC	1188	OUT	GET /signals/config/3778676962456122?v=2.9.170&r=stable&domain=aholding-croatia.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:34 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-07 22:14:34 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-07 22:14:34 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-07 22:14:34 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-10-07 22:14:34 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-10-07 22:14:34 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-10-07 22:14:34 UTC	747	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-10-07 22:14:34 UTC	1500	IN	Data Raw: 69 6f 6e 20 64 28 29 7b 76 61 72 20 61 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 74 69 74 6c 65 22 29 3b 61 3d 62 28 61 26 26 61 2e 74 65 78 74 2c 63 29 3b 72 65 74 75 72 6e 7b 74 69 74 6c 65 3a 61 7d 7d 6b 2e 65 78 70 6f 72 74 73 3d 64 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 46 65 61 74 75 72 65 43 6f 75 6e 74 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 Data Ascii: ion d(){var a=h.querySelector("title");a=b(a&&a.text,c);return{title:a}}k.exports=d})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsFeatureCounter",function(){return function(f,g,i,j){var k={exports:{}};k.exports;(function(){"u
2024-10-07 22:14:34 UTC	1500	IN	Data Raw: 3d 61 3b 61 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 62 3d 67 28 65 2c 64 5b 65 5d 2c 62 29 2c 62 21 3d 6e 75 6c 6c 26 26 28 68 28 62 2c 64 2e 6c 65 6e 67 74 68 29 3f 61 2e 70 75 73 68 28 62 29 3a 65 3d 3d 3d 64 2e 6c 65 6e 67 74 68 2d 31 26 26 28 62 2e 65 6e 64 3d 65 2c 68 28 62 2c 64 2e 6c 65 6e 67 74 68 29 26 26 61 2e 70 75 73 68 28 62 29 29 2c 62 2e 65 6e 64 21 3d 6e 75 6c 6c 26 26 28 62 3d 6e 75 6c 6c 29 29 3b 63 28 61 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 74 61 72 74 3b 61 3d 61 2e 65 6e 64 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 64 3d 64 2e 73 6c 69 63 65 28 30 2c 62 29 2b 22 40 22 2b 64 2e 73 6c 69 63 65 28 61 2b 31 29 7d Data Ascii: =a;a=[];for(var e=0;e<d.length;e++)b=g(e,d[e],b),b!=null&&(h(b,d.length)?a.push(b):e===d.length-1&&(b.end=e,h(b,d.length)&&a.push(b)),b.end!=null&&(b=null));c(a.reverse(),function(a){var b=a.start;a=a.end;if(a==null)return;d=d.slice(0,b)+"@"+d.slice(a+1)}
2024-10-07 22:14:34 UTC	1500	IN	Data Raw: 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 63 3d 62 2e 66 69 72 65 64 3b 62 2e 70 69 69 41 75 74 6f 6d 61 74 63 68 65 64 3b 76 61 72 20 64 3d 62 2e 70 69 69 43 6f 6e 66 6c 69 63 74 69 6e 67 2c 6d 3d 62 2e 65 78 74 72 61 63 74 50 69 69 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 3b 76 61 72 20 6e 3d 62 2e 73 69 67 6e 61 6c 73 43 6f 6e 76 65 72 74 4e 6f 64 65 54 6f 48 54 4d 4c 45 6c Data Ascii: t";var a=f.getFbeventsModules("SignalsFBEventsConfigStore"),b=f.getFbeventsModules("SignalsFBEventsEvents"),c=b.fired;b.piiAutomatched;var d=b.piiConflicting,m=b.extractPii;b=f.getFbeventsModules("SignalsFBEventsShared");var n=b.signalsConvertNodeToHTMLEl
2024-10-07 22:14:34 UTC	1500	IN	Data Raw: 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 68 7d 29 3b 6b 3d 69 28 66 2c 32 29 3b 6c 3d 6b 5b 30 5d 3b 6a 3d 6b 5b 31 5d 3b 67 26 26 28 6c 3d 7b 7d 29 3b 6a 3d 3d 6e 75 6c 6c 26 26 64 2e 74 72 69 67 67 65 72 28 63 29 3b 68 26 26 6a 21 3d 6e 75 6c 6c 26 26 43 28 62 2c 63 2c 6a 29 3b 69 66 28 67 26 26 28 63 2e 75 73 65 72 44 61 74 61 46 6f 72 6d 46 69 65 6c 64 73 3d 3d 6e 75 6c 6c 7c 7c 7a 28 63 2e 75 73 65 72 44 61 74 61 46 6f 72 6d 46 69 65 6c 64 73 29 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 29 72 65 74 75 72 6e 3b 62 2e 74 72 61 63 6b 53 69 6e 67 6c 65 53 79 73 74 65 6d 28 22 61 75 74 6f 6d 61 74 69 63 22 2c 63 2c 22 53 75 62 73 63 72 69 62 65 64 42 75 74 74 6f 6e 43 6c 69 63 6b 22 2c 6c 29 7d 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 63 Data Ascii: ExtractUserData:h});k=i(f,2);l=k[0];j=k[1];g&&(l={});j==null&&d.trigger(c);h&&j!=null&&C(b,c,j);if(g&&(c.userDataFormFields==null\|\|z(c.userDataFormFields).length===0))return;b.trackSingleSystem("automatic",c,"SubscribedButtonClick",l)})}}}function G(a,b,c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49826	142.250.185.162	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:34 UTC	1183	OUT	GET /pagead/viewthroughconversion/16671369731/?random=1728339263492&cv=11&fst=1728339263492&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-07 22:14:34 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 07 Oct 2024 22:14:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnojrkyJ233V7GMZ5xutZ6bon_ToyWnUJ5utSPs3edItDiiXlAVTAAIy-aZ; expires=Wed, 07-Oct-2026 22:14:34 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 22:14:34 UTC	379	IN	Data Raw: 31 32 65 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12ef(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-10-07 22:14:34 UTC	1390	IN	Data Raw: 2b 62 29 7b 76 61 72 20 64 3d 61 5b 62 5d 3b 69 66 28 64 26 26 64 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 64 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 70 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 74 3d 7b 7d 2c 76 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 64 29 7b 69 66 28 21 64 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 64 3d 76 5b 62 5d 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 64 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 64 21 3d 3d 76 6f 69 Data Ascii: +b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==voi
2024-10-07 22:14:34 UTC	1390	IN	Data Raw: 7b 48 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 48 3d 4c 7d 76 61 72 20 4e 3d 48 26 26 48 5b 36 31 30 34 30 31 33 30 31 5d 3b 47 3d 4e 21 3d 6e 75 6c 6c 3f 4e 3a 21 31 3b 76 61 72 20 4f 2c 50 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 3b 4f 3d 50 3f 50 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 72 65 74 75 72 6e 20 47 3f 4f 3f 4f 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 Data Ascii: {H=null;break a}H=L}var N=H&&H[610401301];G=N!=null?N:!1;var O,P=z.navigator;O=P?P.userAgentData\|\|null:null;function Q(a){return G?O?O.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1}function R(a){var b;a:{if(b=z.navigator)if(b=b.userA
2024-10-07 22:14:34 UTC	1390	IN	Data Raw: 73 69 67 6e 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 7b 7d 2c 46 29 3b 6e 26 26 28 6e 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 26 26 20 28 49 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 3d 6e 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 29 2c 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 26 26 28 49 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 3d 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 29 29 3b 74 72 79 7b 76 61 72 20 53 3d 43 2e 66 65 74 63 68 28 71 2c 49 29 3b 53 26 26 53 2e 63 61 74 63 68 28 42 29 3b 76 61 72 20 4a 3d 21 30 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 62 61 29 7b 7d 7d 69 66 28 6e 26 26 6e 2e 6e 6f 46 61 6c 6c 62 61 63 6b 29 4a 3d 21 31 3b 65 6c 73 65 7b 74 72 79 Data Ascii: sign").call(Object,{},F);n&&(n.attributionReporting&& (I.attributionReporting=n.attributionReporting),n.browsingTopics&&(I.browsingTopics=n.browsingTopics));try{var S=C.fetch(q,I);S&&S.catch(B);var J=!0;break a}catch(ba){}}if(n&&n.noFallback)J=!1;else{try
2024-10-07 22:14:34 UTC	306	IN	Data Raw: 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 5c 78 32 36 75 61 6d 62 5c 78 33 64 30 5c 78 32 36 75 61 6d 5c 78 33 64 5c 78 32 36 75 61 70 5c 78 33 64 57 69 6e 64 6f 77 73 5c 78 32 36 75 61 70 76 5c 78 33 64 31 30 2e 30 2e 30 5c 78 32 36 75 61 77 5c 78 33 64 30 5c 78 32 36 66 6c 65 64 67 65 5c 78 33 64 31 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 4b 51 44 70 61 58 6e 66 6c 6f 31 34 69 5a 49 46 5f 33 75 4e 70 37 51 57 55 4d 6e 74 6e 6a 37 42 45 34 6b 65 57 34 5a 6d 65 34 6c 62 41 4f 51 2d 4c 50 57 56 77 63 53 4d 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 34 Data Ascii: rand%3B8.0.0.0%7CChromium%3B117.0.5938.132\x26uamb\x3d0\x26uam\x3d\x26uap\x3dWindows\x26uapv\x3d10.0.0\x26uaw\x3d0\x26fledge\x3d1\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSKQDpaXnflo14iZIF_3uNp7QWUMntnj7BE4keW4Zme4lbAOQ-LPWVwcSM\x26random\x3d4
2024-10-07 22:14:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49836	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:37 UTC	393	OUT	GET /tild3938-6466-4465-b630-313637633536/image_179.svg HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:37 UTC	969	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 22:14:37 GMT Content-Type: image/svg+xml Content-Length: 212370 Connection: close Vary: Accept-Encoding Access-Control-Expose-Headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control Cache-Control: max-age=5184000 Etag: "e287fcf0628cfc4adceecdd5149f2014" Last-Modified: Mon, 19 Feb 2024 21:09:25 GMT x-container-storage-policy-index: 0 x-container-storage-policy-name: Policy-0 X-Timestamp: 1708376964.75476 X-Trans-Id: 17b55fcc4e9ae6e3 Age: 6 Expires: Fri, 06 Dec 2024 22:14:33 GMT tserver: 11 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-1636589e58ed2d8ed0d4829f00c183ca-a972d7e2ef9442ee-01 X-ID: fr5-hw-edge-gc36 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-07T22:14:31+00:00 Accept-Ranges: bytes X-ID-FE: fr5-hw-edge-gc57
2024-10-07 22:14:37 UTC	14981	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 77 69 64 74 68 3d 22 31 30 33 22 20 68 65 69 67 68 74 3d 22 31 30 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 33 20 31 30 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 33 22 20 68 65 69 67 68 74 3d 22 31 30 39 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 74 74 65 72 6e 30 29 22 3e 3c 2f 72 65 63 74 3e 20 3c 64 65 66 73 3e 20 3c 70 61 74 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="103" height="109" viewBox="0 0 103 109" fill="none"> <rect width="103" height="109" fill="url(#pattern0)"></rect> <defs> <patt
2024-10-07 22:14:37 UTC	15928	IN	Data Raw: 46 49 53 6f 45 42 66 79 6d 31 6a 30 52 43 41 41 41 51 67 30 42 46 34 2b 79 73 33 37 7a 5a 56 76 64 4f 4e 37 62 4d 6f 32 4b 51 36 6c 4b 31 6a 77 6e 6e 57 49 6a 32 34 51 7a 32 63 4e 61 73 52 53 7a 6f 5a 76 6e 66 31 59 64 5a 35 52 71 50 74 6a 64 35 45 72 73 77 6e 55 45 52 6d 45 5a 35 69 77 64 5a 52 57 43 4a 78 63 5a 57 58 59 6f 6f 6b 62 72 59 75 68 33 6d 6d 4e 33 6f 63 4d 31 6f 49 51 41 41 43 45 46 67 43 41 68 54 6f 53 37 42 4a 4c 42 45 43 45 49 41 41 42 4f 49 45 37 41 2f 44 4e 62 62 6e 65 65 54 52 46 57 77 52 55 36 68 79 64 5a 36 79 58 65 6f 74 37 33 57 31 61 77 74 70 74 61 42 7a 48 4b 52 36 6f 35 64 7a 38 7a 77 46 51 38 39 53 76 47 71 52 59 6c 53 6b 4b 30 55 71 6a 5a 37 4e 6a 75 69 4e 6e 6d 4b 46 48 67 49 51 67 41 41 45 46 70 30 41 42 66 71 69 37 78 44 72 Data Ascii: FISoEBfym1j0RCAAAQg0BF4+ys37zZVvdON7bMo2KQ6lK1jwnnWIj24Qz2cNasRSzoZvnf1YdZ5RqPtjd5ErswnUERmEZ5iwdZRWCJxcZWXYookbrYuh3mmN3ocM1oIQAACEFgCAhToS7BJLBECEIAABOIE7A/DNbbneeTRFWwRU6hydZ6yXeot73W1awtptaBzHKR6o5dz8zwFQ89SvGqRYlSkK0UqjZ7NjuiNnmKFHgIQgAAEFp0ABfqi7xDr
2024-10-07 22:14:37 UTC	7240	IN	Data Raw: 41 51 75 6d 67 41 46 2b 6b 55 54 5a 7a 34 49 51 41 41 43 67 6f 43 39 74 58 31 51 7a 39 6a 7a 50 50 47 47 58 4b 53 66 4b 4b 6f 33 37 34 58 35 4d 72 57 41 6d 73 39 38 6e 2f 36 68 75 62 58 39 57 43 6b 5a 51 47 42 46 43 4c 7a 79 78 67 38 66 6d 45 4d 35 4e 76 39 35 44 2f 64 43 79 72 35 57 73 6b 61 58 73 74 42 74 46 4f 43 6d 64 67 6d 4d 4e 4f 55 74 37 31 75 62 7a 57 78 2f 4a 36 6c 4a 47 55 41 41 41 68 43 41 77 45 77 45 4b 4e 42 6e 77 6b 59 51 42 43 41 41 67 66 4d 68 30 50 59 38 72 36 72 74 57 62 4e 64 31 69 33 76 64 72 32 4a 57 71 41 37 46 48 71 65 64 79 52 34 58 6c 6b 43 70 75 76 43 62 76 7a 67 37 4b 76 44 76 55 4b 63 46 50 48 4f 47 70 31 2f 6f 5a 75 63 31 67 57 50 4a 66 57 42 58 47 42 56 69 70 30 33 76 33 4c 7a 74 74 49 77 67 41 41 45 49 41 43 42 43 79 46 41 Data Ascii: AQumgAF+kUTZz4IQAACgoC9tX1Qz9jzPPGGXKSfKKo374X5MrWAms98n/6hubX9WCkZQGBFCLzyxg8fmEM5Nv95D/dCyr5WskaXstBtFOCmdgmMNOUt71ubzWx/J6lJGUAAAhCAwEwEKNBnwkYQBCAAgfMh0PY8r6rtWbNd1i3vdr2JWqA7FHqedyR4XlkCpuvCbvzg7KvDvUKcFPHOGp1/oZuc1gWPJfWBXGBVip03v3LzttIwgAAEIACBCyFA
2024-10-07 22:14:37 UTC	16384	IN	Data Raw: 4c 75 57 43 70 64 79 79 37 76 70 6a 66 34 4b 76 64 46 4c 74 77 67 2f 43 45 42 67 44 51 6c 77 42 58 30 4e 4e 35 31 44 68 67 41 45 70 69 4e 67 69 76 4d 39 45 36 45 4b 6b 79 42 44 65 33 6e 49 61 57 66 35 39 4e 4e 4c 4d 64 4d 6c 71 2b 79 38 76 74 48 32 50 46 2f 6d 34 76 77 76 64 75 34 30 77 2f 71 67 4b 38 34 74 66 58 74 6c 56 6c 32 64 39 59 2f 5a 62 5a 47 53 43 74 31 47 65 35 4a 77 31 6d 6f 37 30 68 70 37 35 58 77 5a 69 33 4d 4c 79 6c 78 4a 50 2f 4b 76 70 46 75 39 50 6b 4b 72 4b 58 68 34 61 4e 52 2b 46 59 53 33 4c 6b 47 4f 49 50 44 32 69 39 50 68 77 54 4c 2f 79 76 75 67 73 6e 65 32 43 4d 4b 54 6a 7a 6d 41 4d 45 6b 78 33 64 58 30 55 54 5a 76 47 58 6f 4b 73 56 78 74 45 43 50 54 56 65 48 74 72 39 79 38 4b 7a 53 49 45 49 41 41 42 43 41 67 43 46 43 67 43 78 69 49 Data Ascii: LuWCpdyy7vpjf4KvdFLtwg/CEBgDQlwBX0NN51DhgAEpiNgivM9E6EKkyBDe3nIaWf59NNLMdMlq+y8vtH2PF/m4vwvdu40w/qgK84tfXtlVl2d9Y/ZbZGSCt1Ge5Jw1mo70hp75XwZi3MLylxJP/KvpFu9PkKrKXh4aNR+FYS3LkGOIPD2i9PhwTL/yvugsne2CMKTjzmAMEkx3dX0UTZvGXoKsVxtECPTVeHtr9y8KzSIEIAABCAgCFCgCxiI
2024-10-07 22:14:37 UTC	8232	IN	Data Raw: 6e 73 30 37 6d 30 71 7a 4f 38 4f 48 52 2f 32 79 30 47 41 37 34 31 75 5a 53 54 57 66 4f 54 42 4a 32 4c 6f 67 51 79 6c 30 61 32 39 35 32 31 6d 50 52 63 6e 74 44 66 36 44 37 33 37 63 34 38 4d 42 33 53 44 41 41 69 41 77 4a 45 54 77 42 58 30 49 30 65 4d 41 55 41 41 42 50 6f 49 68 46 76 62 71 54 6a 66 36 62 4e 4c 36 63 57 6e 6a 50 4a 71 43 4a 6b 4c 62 65 73 65 6d 62 57 61 68 4a 41 4f 4d 59 74 73 71 47 53 51 71 6e 77 76 69 6e 4f 4a 5a 4a 56 61 7a 51 2f 4a 4e 56 66 55 61 63 33 54 74 37 38 4f 4f 4b 69 79 6a 70 73 41 69 56 31 39 48 42 44 65 78 4c 75 6f 71 2b 6e 74 41 41 4f 53 6d 73 39 35 6a 33 7a 44 46 66 4f 4c 4b 4d 35 62 69 69 73 70 72 4b 39 50 37 74 43 61 68 76 55 30 48 2f 4d 31 72 2f 55 6a 44 7a 34 52 51 34 39 6b 4b 45 4f 33 6f 64 49 52 70 4f 58 63 61 56 71 55 Data Ascii: ns07m0qzO8OHR/2y0GA741uZSTWfOTBJ2LogQyl0a29521mPRcntDf6D737c48MB3SDAAiAwJETwBX0I0eMAUAABPoIhFvbqTjf6bNL6cWnjPJqCJkLbesembWahJAOMYtsqGSQqnwvinOJZJVazQ/JNVfUac3Tt78OOKiyjpsAiV19HBDexLuoq+ntAAOSms95j3zDFfOLKM5biisprK9P7tCahvU0H/M1r/UjDz4RQ49kKEO3odIRpOXcaVqU
2024-10-07 22:14:37 UTC	10153	IN	Data Raw: 7a 43 65 70 64 44 74 50 38 47 65 35 77 4c 49 63 54 55 65 30 78 30 5a 74 47 62 76 79 52 76 50 50 6c 69 59 4a 69 38 55 57 59 30 38 56 6b 54 38 71 45 67 66 6b 59 6a 72 34 69 69 6c 53 72 5a 45 6b 72 77 52 7a 4a 67 70 45 37 6d 56 4b 77 73 66 46 55 38 36 32 6b 6f 52 51 7a 71 4a 2f 4c 53 4b 74 39 30 59 77 72 43 7a 74 44 50 69 44 72 36 38 71 4f 4d 6d 4f 6e 62 38 59 57 66 61 62 69 59 39 78 6f 36 68 56 4f 55 52 57 63 79 63 31 64 4c 4b 52 4e 53 45 30 6b 6f 33 32 37 54 4c 4d 47 34 38 43 7a 57 59 57 43 39 75 35 38 6c 52 44 4d 38 34 72 56 4d 68 36 68 65 75 59 49 71 39 30 64 50 41 30 41 73 43 5a 34 67 41 43 76 51 7a 74 4e 69 59 4b 67 69 6b 43 49 51 39 7a 2b 6e 37 69 50 56 74 79 41 73 35 45 57 4a 42 31 42 6b 49 30 36 52 53 79 65 6f 4c 4a 35 54 5a 6a 37 4b 34 6a 56 76 62 Data Ascii: zCepdDtP8Ge5wLIcTUe0x0ZtGbvyRvPPliYJi8UWY08VkT8qEgfkYjr4iilSrZEkrwRzJgpE7mVKwsfFU862koRQzqJ/LSKt90YwrCztDPiDr68qOMmOnb8YWfabiY9xo6hVOURWcyc1dLKRNSE0ko327TLMG48CzWYWC9u58lRDM84rVMh6heuYIq90dPA0AsCZ4gACvQztNiYKgikCIQ9z+n7iPVtyAs5EWJB1BkI06RSyeoLJ5TZj7K4jVvb
2024-10-07 22:14:37 UTC	16384	IN	Data Raw: 45 43 50 6f 47 77 35 33 6b 31 4b 63 4f 56 54 76 48 49 66 6b 4e 33 44 48 76 66 30 4d 57 49 58 57 4e 52 4a 30 4a 56 4f 58 6e 68 6d 57 76 33 39 37 76 49 6b 49 36 4e 51 4a 6c 78 4e 59 57 64 36 38 57 48 45 56 4e 6d 4a 72 32 6f 34 36 59 64 4c 6b 72 4b 7a 73 6e 57 74 4e 46 71 77 54 43 4d 68 6c 4a 75 73 73 6d 43 4b 4a 45 31 70 59 76 54 57 67 77 33 4e 6e 49 51 57 64 4d 5a 57 71 68 63 46 30 4d 5a 44 32 55 59 69 70 46 6b 66 6e 45 4d 62 5a 78 75 69 35 48 63 49 4d 4a 53 42 4c 4d 31 4d 6b 66 68 70 42 70 75 44 47 37 4c 46 74 70 4e 6c 2f 73 34 63 67 6a 48 51 6a 71 57 74 69 70 36 6a 38 69 63 54 4b 61 5a 65 78 7a 4b 47 4b 45 6c 65 31 4a 5a 4c 32 62 4f 61 69 52 7a 57 44 73 6e 57 2b 4e 50 77 78 77 71 4e 64 6d 6d 54 77 30 6d 50 6c 68 70 62 4a 72 6e 73 74 6a 42 33 75 67 4e 44 Data Ascii: ECPoGw53k1KcOVTvHIfkN3DHvf0MWIXWNRJ0JVOXnhmWv397vIkI6NQJlxNYWd68WHEVNmJr2o46YdLkrKzsnWtNFqwTCMhlJussmCKJE1pYvTWgw3NnIQWdMZWqhcF0MZD2UYipFkfnEMbZxui5HcIMJSBLM1MkfhpBpuDG7LFtpNl/s4cgjHQjqWtip6j8icTKaZexzKGKEle1JZL2bOaiRzWDsnW+NPwxwqNdmmTw0mPlhpbJrnstjB3ugND
2024-10-07 22:14:37 UTC	4153	IN	Data Raw: 2f 4d 4f 7a 4f 44 4f 79 41 48 38 37 61 62 73 79 61 4e 6f 33 4e 64 2f 41 61 36 6f 46 53 47 62 7a 50 53 6a 65 6a 30 6a 62 64 50 54 37 66 68 47 4e 2b 2f 41 76 2f 68 75 33 2f 31 63 66 71 46 64 32 38 72 63 33 44 6e 44 30 4b 4a 31 6e 6b 56 49 42 45 2f 74 4c 57 64 47 64 44 50 34 52 64 54 45 65 58 4d 56 65 70 48 67 58 56 42 41 32 41 34 39 4e 55 6c 38 30 72 2f 6e 6e 4e 4b 5a 61 6a 65 46 78 49 71 44 71 77 51 37 72 6c 54 74 37 57 36 55 4d 47 59 34 47 4c 6c 62 6e 76 68 6c 6c 4e 58 54 6d 56 5a 64 6b 4b 32 71 55 36 59 34 74 4d 35 4f 78 53 44 34 6b 76 33 44 42 52 36 69 31 55 62 75 6b 73 33 44 77 50 57 64 69 69 71 55 6a 5a 50 2b 55 42 69 54 48 42 56 52 75 54 73 52 7a 65 6f 4c 43 61 34 55 57 32 4d 68 53 6c 4f 73 43 37 6c 41 4c 47 51 32 41 43 72 4f 53 79 34 37 51 50 46 78 Data Ascii: /MOzODOyAH87absyaNo3Nd/Aa6oFSGbzPSjej0jbdPT7fhGN+/Av/hu3/1cfqFd28rc3DnD0KJ1nkVIBE/tLWdGdDP4RdTEeXMVepHgXVBA2A49NUl80r/nnNKZajeFxIqDqwQ7rlTt7W6UMGY4GLlbnvhllNXTmVZdkK2qU6Y4tM5OxSD4kv3DBR6i1Ubuks3DwPWdiiqUjZP+UBiTHBVRuTsRzeoLCa4UW2MhSlOsC7lALGQ2ACrOSy47QPFx
2024-10-07 22:14:37 UTC	16384	IN	Data Raw: 6c 64 4d 49 4d 75 61 4a 49 64 62 74 5a 63 75 4a 75 65 38 35 70 79 70 43 71 71 6e 4b 2f 69 4a 6d 6e 34 73 67 52 53 34 34 42 55 31 65 48 6a 41 63 64 6d 6d 49 51 4d 54 6e 39 37 6f 49 74 72 36 2b 58 65 38 30 36 6d 7a 4a 62 38 52 73 32 51 45 31 76 67 6a 36 4c 69 69 7a 5a 73 79 4a 49 6a 75 71 6a 63 74 52 43 54 75 33 75 4e 67 41 47 6f 56 78 6e 4d 67 78 53 33 4d 32 50 69 63 7a 4c 57 78 2f 33 6f 35 74 70 5a 47 76 56 47 67 41 4d 4f 68 68 73 54 4f 63 45 51 4d 32 6f 4c 72 54 6d 73 45 44 66 56 33 6e 4b 73 54 6c 2b 30 49 31 49 77 41 30 57 2f 6b 37 59 6c 41 41 58 75 6f 4f 36 46 48 45 73 6f 48 4d 51 32 35 66 56 37 35 76 4f 7a 66 54 41 58 74 78 61 75 61 38 72 74 6e 64 46 42 42 56 59 70 67 41 48 39 47 57 36 4d 65 75 69 43 69 77 38 38 7a 79 58 58 54 43 6b 53 32 35 37 70 4e Data Ascii: ldMIMuaJIdbtZcuJue85pypCqqnK/iJmn4sgRS44BU1eHjAcdmmIQMTn97oItr6+Xe806mzJb8Rs2QE1vgj6LiizZsyJIjuqjctRCTu3uNgAGoVxnMgxS3M2PiczLWx/3o5tpZGvVGgAMOhhsTOcEQM2oLrTmsEDfV3nKsTl+0I1IwA0W/k7YlAAXuoO6FHEsoHMQ25fV75vOzfTAXtxaua8rtndFBBVYpgAH9GW6MeuiCiw88zyXXTCkS257pN
2024-10-07 22:14:37 UTC	16384	IN	Data Raw: 4a 41 54 6b 62 50 58 32 7a 32 76 74 53 33 68 6c 30 74 33 59 6d 65 66 6b 6e 4a 46 48 49 6e 43 4b 47 48 39 6b 57 4c 44 53 57 59 7a 77 36 35 39 6e 6f 52 5a 34 72 61 58 46 41 76 35 4b 58 52 54 63 31 6e 50 64 2f 38 32 49 39 70 4c 66 48 62 46 6c 74 52 33 51 67 78 4f 6b 32 45 32 46 68 4c 4a 59 46 67 54 2b 73 33 76 38 76 2f 73 70 76 66 41 67 72 4e 4b 6b 41 46 61 41 43 56 49 41 4b 55 41 45 71 51 41 57 6f 77 45 74 58 34 4c 55 33 6e 6a 39 4a 45 2f 4b 7a 75 52 45 37 36 4d 37 72 30 61 50 6b 71 44 7a 6c 59 47 61 46 7a 45 45 2f 59 73 6c 7a 53 6d 57 59 73 6a 77 62 76 56 4c 6f 61 69 31 77 51 4c 39 61 31 36 50 71 35 6c 2f 2b 48 31 39 36 50 41 36 72 65 31 55 67 57 44 42 76 61 43 65 6b 50 79 36 37 45 51 6c 41 45 4d 79 67 73 75 51 55 70 4b 46 51 65 65 6b 58 78 62 50 62 48 37 Data Ascii: JATkbPX2z2vtS3hl0t3YmefknJFHInCKGH9kWLDSWYzw659noRZ4raXFAv5KXRTc1nPd/82I9pLfHbFltR3QgxOk2E2FhLJYFgT+s3v8v/spvfAgrNKkAFaACVIAKUAEqQAWowEtX4LU3nj9JE/KzuRE76M7r0aPkqDzlYGaFzEE/YslzSmWYsjwbvVLoai1wQL9a16Pq5l/+H196PA6re1UgWDBvaCekPy67EQlAEMygsuQUpKFQeekXxbPbH7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49834	157.240.0.35	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:37 UTC	610	OUT	GET /tr/?id=3778676962456122&ev=PageView&dl=https%3A%2F%2Faholding-croatia.com%2F&rl=&if=false&ts=1728339267284&sw=1280&sh=1024&v=2.9.170&r=stable&a=pltilda&ec=0&o=4126&fbp=fb.1.1728339267281.802210285189088884&ler=empty&cdl=API_unavailable&it=1728339263462&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:37 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=90, rtx=0, c=10, mss=1392, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Mon, 07 Oct 2024 22:14:37 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49833	142.250.186.68	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:37 UTC	1211	OUT	GET /pagead/1p-user-list/16671369731/?random=1728339263492&cv=11&fst=1728338400000&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDpaXnfWq6_N2S4_1seEsgVVVlrTmJ0-m7u1w&random=2682887177&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:37 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 07 Oct 2024 22:14:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 22:14:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49835	157.240.0.35	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:37 UTC	647	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=3778676962456122&ev=PageView&dl=https%3A%2F%2Faholding-croatia.com%2F&rl=&if=false&ts=1728339267284&sw=1280&sh=1024&v=2.9.170&r=stable&a=pltilda&ec=0&o=4126&fbp=fb.1.1728339267281.802210285189088884&ler=empty&cdl=API_unavailable&it=1728339263462&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:37 UTC	747	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7423160671805531197", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7423160671805531197"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-07 22:14:37 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-07 22:14:37 UTC	1706	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:37 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:37 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221437Z-1657d5bbd482krtfgrg72dfbtn00000003t000000000m7yz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:37 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:37 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:37 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221437Z-1657d5bbd48t66tjar5xuq22r80000000430000000009grv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:37 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:37 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:37 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221437Z-1657d5bbd48762wn1qw4s5sd3000000003y000000000gxt8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:37 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:37 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221437Z-1657d5bbd48dfrdj7px744zp8s00000003u000000000hbk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:37 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:37 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:37 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1be53f37-001e-00a2-0266-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221437Z-1657d5bbd487nf59mzf5b3gk8n00000003ug0000000014q3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:37 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:38 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:38 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 109d4e4b-c01e-002b-2299-186e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221438Z-1657d5bbd48hzllksrq1r6zsvs00000001dg00000000122p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:38 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:38 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221438Z-1657d5bbd48vlsxxpe15ac3q7n000000041g00000000g9qq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:38 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221438Z-1657d5bbd48762wn1qw4s5sd3000000004200000000001bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:38 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221438Z-1657d5bbd48dfrdj7px744zp8s00000003u000000000hbmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:38 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:38 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221438Z-1657d5bbd48762wn1qw4s5sd3000000003z000000000chwx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:38 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:40 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:40 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221440Z-1657d5bbd48qjg85buwfdynm5w000000042000000000yav7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:40 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:40 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:40 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221440Z-1657d5bbd48vlsxxpe15ac3q7n000000040g00000000n0z8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:40 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:40 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221440Z-1657d5bbd482tlqpvyz9e93p54000000043g00000000pgyq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:40 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:40 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221440Z-1657d5bbd4824mj9d6vp65b6n400000004a0000000009yf8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:40 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:40 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:40 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221440Z-1657d5bbd48xdq5dkwwugdpzr000000004fg000000002zyh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:40 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:41 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:41 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221441Z-1657d5bbd4824mj9d6vp65b6n4000000046g00000000s6ud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:41 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:41 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221441Z-1657d5bbd48tqvfc1ysmtbdrg000000003zg00000000997e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:41 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:41 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221441Z-1657d5bbd48wd55zet5pcra0cg00000003z000000000ua6b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:41 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:41 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221441Z-1657d5bbd48tnj6wmberkg2xy8000000046g000000009ny5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:41 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221441Z-1657d5bbd48762wn1qw4s5sd3000000004200000000001dt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49852	193.3.17.197	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:41 UTC	647	OUT	POST /event/ HTTP/1.1 Host: stat.tildacdn.com Connection: keep-alive Content-Length: 785 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://aholding-croatia.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:41 UTC	785	OUT	Data Raw: 70 61 67 65 3d 61 68 6f 6c 64 69 6e 67 2d 63 72 6f 61 74 69 61 2e 63 6f 6d 25 32 46 74 69 6c 64 61 25 32 46 72 65 61 64 74 69 6d 65 25 32 46 26 72 65 66 65 72 72 65 72 3d 61 68 6f 6c 64 69 6e 67 2d 63 72 6f 61 74 69 61 2e 63 6f 6d 25 32 46 26 75 73 65 72 69 64 3d 73 69 6d 70 6c 65 26 73 65 73 73 69 6f 6e 69 64 3d 73 69 6d 70 6c 65 26 75 73 65 72 5f 61 67 65 6e 74 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 32 43 25 32 30 6c 69 6b 65 25 32 30 47 65 63 6b 6f 29 25 32 30 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 25 32 30 Data Ascii: page=aholding-croatia.com%2Ftilda%2Freadtime%2F&referrer=aholding-croatia.com%2F&userid=simple&sessionid=simple&user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20
2024-10-07 22:14:42 UTC	226	IN	HTTP/1.1 200 date: Mon, 07 Oct 2024 22:14:42 GMT content-type: application/json;charset=utf-8 access-control-allow-origin: https://aholding-croatia.com x-tilda-server: 12 connection: close transfer-encoding: chunked
2024-10-07 22:14:42 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 4f 4b 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"message":"OK"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:42 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221442Z-1657d5bbd48f7nlxc7n5fnfzh000000003qg00000000gzp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:42 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:42 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:42 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 0506d398-001e-0049-0aef-185bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221442Z-1657d5bbd482krtfgrg72dfbtn00000003t000000000m86t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:42 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:42 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:42 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221442Z-1657d5bbd487nf59mzf5b3gk8n00000003m000000000wv0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:42 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:42 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221442Z-1657d5bbd48t66tjar5xuq22r8000000044g000000003q28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49862	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:42 UTC	646	OUT	GET /css/tilda-forms-1.0.min.css HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66ebe206-7ee6" If-Modified-Since: Thu, 19 Sep 2024 08:34:14 GMT
2024-10-07 22:14:42 UTC	458	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:42 GMT Connection: close Vary: Accept-Encoding last-modified: Thu, 19 Sep 2024 08:34:14 GMT etag: "66ebe206-7ee6" tserver: 11 X-ID-SHIELD: am3-hw-edge-gc88 Age: 1603898 traceparent: 00-541831a2eb6097b1a22f4f1a8008883b-c8a04da65325b2f4-01 X-ID: fr5-hw-edge-gc62 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-19T09:52:13+00:00 X-ID-FE: fr5-hw-edge-gc26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49860	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:42 UTC	632	OUT	GET /js/tilda-scripts-3.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66e19aee-50d4" If-Modified-Since: Wed, 11 Sep 2024 13:28:14 GMT
2024-10-07 22:14:42 UTC	458	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:42 GMT Connection: close Vary: Accept-Encoding Last-Modified: Wed, 11 Sep 2024 13:28:14 GMT ETag: "66e19aee-50d4" tserver: 13 X-ID-SHIELD: am3-hw-edge-gc89 Age: 2276049 traceparent: 00-8cc32f1cdf6eaa723fff72fd6c1e1fda-81525b18dc15e865-01 X-ID: fr5-hw-edge-gc32 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-11T14:00:53+00:00 X-ID-FE: fr5-hw-edge-gc26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49867	5.181.161.197	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:43 UTC	347	OUT	GET /event/ HTTP/1.1 Host: stat.tildacdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:44 UTC	199	IN	HTTP/1.1 200 date: Mon, 07 Oct 2024 22:14:43 GMT content-type: application/json;charset=utf-8 access-control-allow-origin: * x-tilda-server: 12 connection: close transfer-encoding: chunked
2024-10-07 22:14:44 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 4f 4b 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"message":"OK"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:43 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:44 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 4c0632d0-601e-0097-4413-17f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221444Z-1657d5bbd48vhs7r2p1ky7cs5w00000004dg00000000acwp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:44 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:44 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:44 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221444Z-1657d5bbd48xsz2nuzq4vfrzg800000003zg0000000094ge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:44 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:44 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:44 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221444Z-1657d5bbd482tlqpvyz9e93p54000000043000000000q0ps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:44 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:44 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:44 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221444Z-1657d5bbd48sdh4cyzadbb374800000004000000000059e6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:44 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49875	162.125.66.15	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:44 UTC	630	OUT	GET /scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0 HTTP/1.1 Host: dl.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://aholding-croatia.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-10-07 22:14:45 UTC	597	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf8 Cache-Control: no-cache Content-Security-Policy: sandbox Location: https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0 Date: Mon, 07 Oct 2024 22:14:44 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Robots-Tag: noindex, nofollow, noimageindex Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 81e74040163444e586478299ad67c76e Connection: close Transfer-Encoding: chunked
2024-10-07 22:14:45 UTC	219	IN	Data Raw: 64 35 0d 0a 33 30 32 20 46 6f 75 6e 64 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 77 61 73 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 73 3a 2f 2f 64 6c 2e 64 72 6f 70 62 6f 78 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 6b 7a 65 6b 62 36 77 34 35 33 64 38 63 38 75 69 67 6e 32 79 37 2f 49 4d 47 5f 34 31 33 38 2d 31 2d 31 2e 6d 70 34 3f 72 6c 6b 65 79 3d 6e 31 61 38 75 76 30 30 77 34 6d 62 33 74 6b 38 32 72 73 65 63 70 73 78 31 26 73 74 3d 37 38 73 30 64 73 78 6c 26 64 6c 3d 30 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a 0d 0a Data Ascii: d5302 FoundThe resource was found at https://dl.dropboxusercontent.com/scl/fi/kzekb6w453d8c8uign2y7/IMG_4138-1-1.mp4?rlkey=n1a8uv00w4mb3tk82rsecpsx1&st=78s0dsxl&dl=0;you should be redirected automatically.
2024-10-07 22:14:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49874	162.125.66.15	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:44 UTC	628	OUT	GET /scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0 HTTP/1.1 Host: dl.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://aholding-croatia.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-10-07 22:14:45 UTC	595	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf8 Cache-Control: no-cache Content-Security-Policy: sandbox Location: https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0 Date: Mon, 07 Oct 2024 22:14:44 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Robots-Tag: noindex, nofollow, noimageindex Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 563ef83dfaa74bd4b8402d70c0344ab3 Connection: close Transfer-Encoding: chunked
2024-10-07 22:14:45 UTC	217	IN	Data Raw: 64 33 0d 0a 33 30 32 20 46 6f 75 6e 64 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 77 61 73 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 73 3a 2f 2f 64 6c 2e 64 72 6f 70 62 6f 78 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 34 70 6e 6f 65 6d 39 39 75 78 61 34 6d 73 66 37 75 65 63 73 30 2f 49 4d 47 5f 34 31 33 38 2d 32 2e 6d 70 34 3f 72 6c 6b 65 79 3d 34 33 70 6b 79 31 74 30 73 72 7a 65 69 66 62 6c 74 31 31 67 75 78 73 30 33 26 73 74 3d 78 74 6f 39 68 37 62 73 26 64 6c 3d 30 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a 0d 0a Data Ascii: d3302 FoundThe resource was found at https://dl.dropboxusercontent.com/scl/fi/4pnoem99uxa4msf7uecs0/IMG_4138-2.mp4?rlkey=43pky1t0srzeifblt11guxs03&st=xto9h7bs&dl=0;you should be redirected automatically.
2024-10-07 22:14:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49869	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:44 UTC	634	OUT	GET /js/tilda-animation-2.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66e2b09e-861e" If-Modified-Since: Thu, 12 Sep 2024 09:13:02 GMT
2024-10-07 22:14:44 UTC	458	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:44 GMT Connection: close Vary: Accept-Encoding last-modified: Thu, 12 Sep 2024 09:13:02 GMT etag: "66e2b09e-861e" tserver: 11 X-ID-SHIELD: am3-hw-edge-gc89 Age: 2206107 traceparent: 00-82d80df828ef2e43db26e7594ec41836-f8edb97c98913c2c-01 X-ID: fr5-hw-edge-gc27 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-12T11:03:24+00:00 X-ID-FE: fr5-hw-edge-gc26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49870	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:44 UTC	629	OUT	GET /js/tilda-menu-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66cdb495-2d3c" If-Modified-Since: Tue, 27 Aug 2024 11:12:21 GMT
2024-10-07 22:14:44 UTC	461	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:44 GMT Connection: close Vary: Accept-Encoding last-modified: Tue, 27 Aug 2024 11:12:21 GMT etag: "66cdb495-2d3c" t-server: or-7 X-ID-SHIELD: am3-hw-edge-gc93 Age: 3581671 traceparent: 00-83db91bd6d080865783dbdc6e9bae21e-fc712f07e2d52278-01 X-ID: fr5-hw-edge-gc62 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-08-27T12:54:58+00:00 X-ID-FE: fr5-hw-edge-gc26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49868	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:44 UTC	629	OUT	GET /js/tilda-zero-1.1.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66e0219c-68df" If-Modified-Since: Tue, 10 Sep 2024 10:38:20 GMT
2024-10-07 22:14:44 UTC	457	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:44 GMT Connection: close Vary: Accept-Encoding last-modified: Tue, 10 Sep 2024 10:38:20 GMT etag: "66e0219c-68df" tserver: 9 X-ID-SHIELD: am3-hw-edge-gc88 Age: 2373471 traceparent: 00-c693304efdef02eb63743861cc70f21b-82ab95324e6a8ac9-01 X-ID: fr5-hw-edge-gc22 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-10T13:51:41+00:00 X-ID-FE: fr5-hw-edge-gc26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49871	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:44 UTC	638	OUT	GET /js/tilda-submenublocks-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66d84cba-5536" If-Modified-Since: Wed, 04 Sep 2024 12:04:10 GMT
2024-10-07 22:14:44 UTC	457	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:44 GMT Connection: close Vary: Accept-Encoding Last-Modified: Wed, 04 Sep 2024 12:04:10 GMT ETag: "66d84cba-5536" tserver: 9 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-62e1892758072dee11a88f6796e7d39a-33c8911e9b296233-01 X-ID: fr5-hw-edge-gc37 Age: 2886845 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-04T12:20:39+00:00 X-ID-FE: fr5-hw-edge-gc57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49872	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:44 UTC	629	OUT	GET /js/tilda-cards-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66e03673-873" If-Modified-Since: Tue, 10 Sep 2024 12:07:15 GMT
2024-10-07 22:14:44 UTC	460	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:44 GMT Connection: close Vary: Accept-Encoding Last-Modified: Tue, 10 Sep 2024 12:07:15 GMT ETag: "66e03673-873" T-Server: or-7 X-ID-SHIELD: am3-hw-edge-gc88 Age: 2368688 traceparent: 00-49da39e7cff039b31c61376de1ebfe47-7783437635f04bdb-01 X-ID: fr5-hw-edge-gc27 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-10T13:14:10+00:00 X-ID-FE: fr5-hw-edge-gc26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49873	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:44 UTC	630	OUT	GET /js/tilda-forms-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66fbe62a-e57e" If-Modified-Since: Tue, 01 Oct 2024 12:08:10 GMT
2024-10-07 22:14:44 UTC	464	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:44 GMT Connection: close Vary: Accept-Encoding last-modified: Tue, 01 Oct 2024 12:08:10 GMT etag: "66fbe62a-e57e" t-server: JWhHVWak X-ID-SHIELD: am3-hw-edge-gc93 Age: 554179 traceparent: 00-51b4e4a70dbe33b4a17a3dda5adfb888-dca04833ce546015-01 X-ID: fr5-hw-edge-gc38 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-01T14:18:56+00:00 X-ID-FE: fr5-hw-edge-gc57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49876	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:45 UTC	452	OUT	GET /js/tilda-scripts-3.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66e19aee-50d4" If-Modified-Since: Wed, 11 Sep 2024 13:28:14 GMT
2024-10-07 22:14:45 UTC	458	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:45 GMT Connection: close Vary: Accept-Encoding Last-Modified: Wed, 11 Sep 2024 13:28:14 GMT ETag: "66e19aee-50d4" tserver: 13 X-ID-SHIELD: am3-hw-edge-gc89 Age: 2276052 traceparent: 00-c435d38f48fe76f8658886cb57fca2f8-a94942452dec9554-01 X-ID: fr5-hw-edge-gc32 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-11T14:00:53+00:00 X-ID-FE: fr5-hw-edge-gc26

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:45 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:45 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221445Z-1657d5bbd48xdq5dkwwugdpzr000000004a000000000vq97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:45 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:46 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:46 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 7f686986-001e-0079-75e0-1812e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221446Z-1657d5bbd48xdq5dkwwugdpzr000000004eg00000000748p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:46 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49878	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:46 UTC	635	OUT	GET /js/tilda-zero-scale-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66e0219c-1180" If-Modified-Since: Tue, 10 Sep 2024 10:38:20 GMT
2024-10-07 22:14:46 UTC	457	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:46 GMT Connection: close Vary: Accept-Encoding Last-Modified: Tue, 10 Sep 2024 10:38:20 GMT ETag: "66e0219c-1180" tserver: 9 X-ID-SHIELD: am3-hw-edge-gc89 Age: 2373473 traceparent: 00-a1282815d644d4ab4926addb4786010b-d158a57a67e0e49a-01 X-ID: fr5-hw-edge-gc31 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-10T13:51:42+00:00 X-ID-FE: fr5-hw-edge-gc26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49879	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:46 UTC	632	OUT	GET /js/tilda-skiplink-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6530dc3b-757" If-Modified-Since: Thu, 19 Oct 2023 07:35:23 GMT
2024-10-07 22:14:46 UTC	457	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:46 GMT Connection: close Vary: Accept-Encoding Last-Modified: Thu, 19 Oct 2023 07:35:23 GMT ETag: "6530dc3b-757" tserver: 11 X-ID-SHIELD: am3-hw-edge-gc88 traceparent: 00-b92a45cb34a91ffcc1a7a9d64bf80a85-c5ef5bf7f8193637-01 X-ID: fr5-hw-edge-gc12 Age: 4116634 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-08-21T06:44:12+00:00 X-ID-FE: fr5-hw-edge-gc26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49880	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:46 UTC	635	OUT	GET /js/tilda-phone-mask-1.1.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66d02acc-792d" If-Modified-Since: Thu, 29 Aug 2024 08:01:16 GMT
2024-10-07 22:14:46 UTC	457	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:46 GMT Connection: close Vary: Accept-Encoding Last-Modified: Thu, 29 Aug 2024 08:01:16 GMT ETag: "66d02acc-792d" tserver: 8 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-688164128695148e64cdf1e2c0d7d124-b42804cefdbe8dd2-01 X-ID: fr5-hw-edge-gc28 Age: 3061990 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-02T11:41:36+00:00 X-ID-FE: fr5-hw-edge-gc57

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:46 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:46 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221446Z-1657d5bbd48jwrqbupe3ktsx9w0000000450000000011fda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:46 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:46 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:46 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221446Z-1657d5bbd48tqvfc1ysmtbdrg00000000400000000007mkt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:46 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:46 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221446Z-1657d5bbd48t66tjar5xuq22r800000003z000000000t99t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:46 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49885	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:48 UTC	742	OUT	GET /tild3634-6139-4566-a231-383662633464/-/resize/600x500/-/format/webp/image.png HTTP/1.1 Host: optim.tildacdn.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "67045c1d-12164" If-Modified-Since: Mon, 07 Oct 2024 22:09:33 GMT
2024-10-07 22:14:48 UTC	438	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:48 GMT Connection: close last-modified: Mon, 07 Oct 2024 22:09:33 GMT etag: "67045c1d-12164" x-tilda-server: 3 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-b1e83065e064f274f1c320454400f56d-875a92795b53b703-01 X-ID: fr5-hw-edge-gc30 Age: 312 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-10-07T22:09:36+00:00 X-ID-FE: fr5-hw-edge-gc26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49886	142.250.186.66	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:48 UTC	1401	OUT	GET /pagead/viewthroughconversion/16671369731/?random=1728339285300&cv=11&fst=1728339285300&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnojrkyJ233V7GMZ5xutZ6bon_ToyWnUJ5utSPs3edItDiiXlAVTAAIy-aZ
2024-10-07 22:14:48 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 07 Oct 2024 22:14:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 22:14:48 UTC	687	IN	Data Raw: 31 32 66 30 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12f0(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-10-07 22:14:48 UTC	1390	IN	Data Raw: 22 2e 22 29 3b 61 3d 63 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 63 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 74 3f 67 3d 74 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 63 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d 7d 63 3d 63 5b 63 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 70 26 26 64 3d 3d 3d 22 65 73 36 22 3f 67 5b 63 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 64 29 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3f 68 28 74 2c 63 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 3a 62 21 3d 3d 64 26 26 28 76 5b 63 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 61 3d 4d 61 74 68 2e 72 61 Data Ascii: ".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.ra
2024-10-07 22:14:48 UTC	1390	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 47 3f 21 21 4f 26 26 4f 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 55 28 29 7b 72 65 74 75 72 6e 20 54 28 29 3f 51 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 52 28 22 43 68 72 6f 6d 65 22 29 7c 7c 52 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 54 28 29 3f 30 3a 52 28 22 45 64 67 65 22 29 29 7c 7c 52 28 22 53 69 6c 6b 22 29 7d 3b 21 52 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 55 28 29 3b 55 28 29 3b 52 28 22 53 61 66 61 72 69 22 29 26 26 28 55 28 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 45 64 67 65 22 29 29 7c 7c 28 54 28 29 3f 51 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 Data Ascii: (){return G?!!O&&O.brands.length>0:!1}function U(){return T()?Q("Chromium"):(R("Chrome")\|\|R("CriOS"))&&!(T()?0:R("Edge"))\|\|R("Silk")};!R("Android")\|\|U();U();R("Safari")&&(U()\|\|(T()?0:R("Coast"))\|\|(T()?0:R("Opera"))\|\|(T()?0:R("Edge"))\|\|(T()?Q("Microsoft Ed
2024-10-07 22:14:48 UTC	1389	IN	Data Raw: 47 49 4e 47 3d 41 2e 54 41 47 47 49 4e 47 7c 7c 5b 5d 2c 41 2e 54 41 47 47 49 4e 47 5b 31 35 5d 3d 21 30 7d 63 61 7c 7c 45 28 71 29 3b 4a 3d 21 30 7d 7d 4a 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 65 3b 72 2e 73 72 63 3d 64 5b 66 2e 67 5d 7d 65 28 29 7d 76 61 72 20 58 3d 5b 22 73 73 5f 22 5d 2c 59 3d 73 7c 7c 7a 3b 58 5b 30 5d 69 6e 20 59 7c 7c 74 79 70 65 6f 66 20 59 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 59 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 58 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 5a 3b 58 2e 6c 65 6e 67 74 68 26 26 28 5a 3d 58 2e 73 68 69 66 74 28 29 29 3b 29 58 2e 6c 65 6e 67 74 68 7c 7c 57 3d 3d 3d 76 6f 69 64 20 30 3f 59 5b 5a 5d 26 26 59 5b 5a 5d 21 3d 3d 4f Data Ascii: GING=A.TAGGING\|\|[],A.TAGGING[15]=!0}ca\|\|E(q);J=!0}}J&&e()}}(f)));r.onload=e;r.src=d[f.g]}e()}var X=["ss_"],Y=s\|\|z;X[0]in Y\|\|typeof Y.execScript=="undefined"\|\|Y.execScript("var "+X[0]); for(var Z;X.length&&(Z=X.shift());)X.length\|\|W===void 0?Y[Z]&&Y[Z]!==O
2024-10-07 22:14:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49884	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:48 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:48 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 11b227e2-601e-0002-7f6b-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221448Z-1657d5bbd48tqvfc1ysmtbdrg000000003z000000000b85t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:48 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:48 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:48 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5a5a1e5c-a01e-001e-18f5-1649ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221448Z-1657d5bbd4824mj9d6vp65b6n400000004bg000000005375 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:48 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49888	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:48 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:48 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 7709e3c3-b01e-0097-5e02-174f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221448Z-1657d5bbd48xlwdx82gahegw40000000045g00000000yw4e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:48 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:48 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:48 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221448Z-1657d5bbd48q6t9vvmrkd293mg00000003z000000000t56b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:48 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:48 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:14:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:14:48 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2c548d6-d01e-0082-4f03-17e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T221448Z-1657d5bbd48f7nlxc7n5fnfzh000000003q000000000m18c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:14:48 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49893	5.181.161.195	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:48 UTC	566	OUT	GET /geo/country/ HTTP/1.1 Host: geo.tildacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://aholding-croatia.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:48 UTC	195	IN	HTTP/1.1 200 OK date: Mon, 07 Oct 2024 22:14:48 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked access-control-allow-origin: * x-tilda-server: 24 connection: close
2024-10-07 22:14:48 UTC	12	IN	Data Raw: 32 0d 0a 55 53 0d 0a 30 0d 0a 0d 0a Data Ascii: 2US0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49891	142.250.186.98	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:48 UTC	1525	OUT	GET /td/rul/16671369731?random=1728339285300&cv=11&fst=1728339285300&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnojrkyJ233V7GMZ5xutZ6bon_ToyWnUJ5utSPs3edItDiiXlAVTAAIy-aZ
2024-10-07 22:14:48 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 07 Oct 2024 22:14:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 22:14:48 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-10-07 22:14:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49894	193.3.17.197	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:48 UTC	647	OUT	POST /event/ HTTP/1.1 Host: stat.tildacdn.com Connection: keep-alive Content-Length: 743 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://aholding-croatia.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:48 UTC	743	OUT	Data Raw: 70 61 67 65 3d 61 68 6f 6c 64 69 6e 67 2d 63 72 6f 61 74 69 61 2e 63 6f 6d 25 32 46 26 72 65 66 65 72 72 65 72 3d 26 75 73 65 72 69 64 3d 73 69 6d 70 6c 65 26 73 65 73 73 69 6f 6e 69 64 3d 73 69 6d 70 6c 65 26 75 73 65 72 5f 61 67 65 6e 74 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 32 43 25 32 30 6c 69 6b 65 25 32 30 47 65 63 6b 6f 29 25 32 30 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 25 32 30 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 26 75 73 65 72 5f 6c 61 6e 67 75 61 67 65 3d 65 6e 2d 55 53 26 70 72 6f 6a 65 63 Data Ascii: page=aholding-croatia.com%2F&referrer=&userid=simple&sessionid=simple&user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&user_language=en-US&projec
2024-10-07 22:14:49 UTC	226	IN	HTTP/1.1 200 date: Mon, 07 Oct 2024 22:14:49 GMT content-type: application/json;charset=utf-8 access-control-allow-origin: https://aholding-croatia.com x-tilda-server: 12 connection: close transfer-encoding: chunked
2024-10-07 22:14:49 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 4f 4b 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"message":"OK"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49895	193.3.17.197	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:48 UTC	647	OUT	POST /event/ HTTP/1.1 Host: stat.tildacdn.com Connection: keep-alive Content-Length: 785 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://aholding-croatia.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://aholding-croatia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:14:48 UTC	785	OUT	Data Raw: 70 61 67 65 3d 61 68 6f 6c 64 69 6e 67 2d 63 72 6f 61 74 69 61 2e 63 6f 6d 25 32 46 74 69 6c 64 61 25 32 46 72 65 61 64 74 69 6d 65 25 32 46 26 72 65 66 65 72 72 65 72 3d 61 68 6f 6c 64 69 6e 67 2d 63 72 6f 61 74 69 61 2e 63 6f 6d 25 32 46 26 75 73 65 72 69 64 3d 73 69 6d 70 6c 65 26 73 65 73 73 69 6f 6e 69 64 3d 73 69 6d 70 6c 65 26 75 73 65 72 5f 61 67 65 6e 74 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 32 43 25 32 30 6c 69 6b 65 25 32 30 47 65 63 6b 6f 29 25 32 30 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 25 32 30 Data Ascii: page=aholding-croatia.com%2Ftilda%2Freadtime%2F&referrer=aholding-croatia.com%2F&userid=simple&sessionid=simple&user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20
2024-10-07 22:14:49 UTC	226	IN	HTTP/1.1 200 date: Mon, 07 Oct 2024 22:14:49 GMT content-type: application/json;charset=utf-8 access-control-allow-origin: https://aholding-croatia.com x-tilda-server: 12 connection: close transfer-encoding: chunked
2024-10-07 22:14:49 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 4f 4b 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"message":"OK"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49897	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:48 UTC	449	OUT	GET /js/tilda-zero-1.1.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66e0219c-68df" If-Modified-Since: Tue, 10 Sep 2024 10:38:20 GMT
2024-10-07 22:14:48 UTC	457	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:48 GMT Connection: close Vary: Accept-Encoding last-modified: Tue, 10 Sep 2024 10:38:20 GMT etag: "66e0219c-68df" tserver: 9 X-ID-SHIELD: am3-hw-edge-gc88 Age: 2373475 traceparent: 00-b0cb3765a68f643ea87cd392c95e3597-5fa2fbb12f813bbf-01 X-ID: fr5-hw-edge-gc22 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-10T13:51:41+00:00 X-ID-FE: fr5-hw-edge-gc26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49898	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:48 UTC	449	OUT	GET /js/tilda-cards-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66e03673-873" If-Modified-Since: Tue, 10 Sep 2024 12:07:15 GMT
2024-10-07 22:14:49 UTC	460	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:48 GMT Connection: close Vary: Accept-Encoding Last-Modified: Tue, 10 Sep 2024 12:07:15 GMT ETag: "66e03673-873" T-Server: or-7 X-ID-SHIELD: am3-hw-edge-gc88 Age: 2368692 traceparent: 00-759501461d7da660d74635d0f165b58f-dcb4cc95505663d8-01 X-ID: fr5-hw-edge-gc27 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-10T13:14:10+00:00 X-ID-FE: fr5-hw-edge-gc26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49896	92.223.124.62	443	1164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:14:48 UTC	458	OUT	GET /js/tilda-submenublocks-1.0.min.js HTTP/1.1 Host: static.tildacdn.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66d84cba-5536" If-Modified-Since: Wed, 04 Sep 2024 12:04:10 GMT
2024-10-07 22:14:49 UTC	457	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 07 Oct 2024 22:14:48 GMT Connection: close Vary: Accept-Encoding Last-Modified: Wed, 04 Sep 2024 12:04:10 GMT ETag: "66d84cba-5536" tserver: 9 X-ID-SHIELD: am3-hw-edge-gc89 traceparent: 00-1423fd650a7dc6d78023be44e6eeb507-75d6322dc2a853c0-01 X-ID: fr5-hw-edge-gc37 Age: 2886849 Access-Control-Allow-Origin: * Cache: HIT X-Cached-Since: 2024-09-04T12:20:39+00:00 X-ID-FE: fr5-hw-edge-gc57

Target ID:	0
Start time:	18:14:06
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:14:11
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=1912,i,4966215485567083278,9426922408629113011,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:14:14
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://aholding-croatia.com/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	18:14:21
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5908 --field-trial-handle=1912,i,4966215485567083278,9426922408629113011,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://aholding-croatia.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-P78MTL62
Source: https://aholding-croatia.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-P78MTL62
Source: https://aholding-croatia.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/16671369731?random=1728339263492&cv=11&fst=1728339263492&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://aholding-croatia.com/#our-projects	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-P78MTL62
Source: https://aholding-croatia.com/#our-projects	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/16671369731?random=1728339285300&cv=11&fst=1728339285300&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://aholding-croatia.com/#our-projects	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-P78MTL62
Source: https://aholding-croatia.com/#our-projects	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/16671369731?random=1728339285300&cv=11&fst=1728339285300&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://aholding-croatia.com/cases/privlaka-relax-residence	HTTP Parser: Iframe src: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2857.4841249823353!2d15.115180200000003!3d44.2588588!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x47621f06bf4862a1%3A0x87e746d6b0890d0c!2zUHV0IFJva2luaWNlIDI2LTM1LCAyMzIzMywgUHJpdmxha2EsINCl0L7RgNCy0LDRgtGW0Y8!5e0!3m2!1suk!2sua!4v1723212451329!5m2!1suk!2sua
Source: https://aholding-croatia.com/cases/privlaka-relax-residence	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-P78MTL62
Source: https://aholding-croatia.com/cases/privlaka-relax-residence	HTTP Parser: Iframe src: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2857.4841249823353!2d15.115180200000003!3d44.2588588!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x47621f06bf4862a1%3A0x87e746d6b0890d0c!2zUHV0IFJva2luaWNlIDI2LTM1LCAyMzIzMywgUHJpdmxha2EsINCl0L7RgNCy0LDRgtGW0Y8!5e0!3m2!1suk!2sua!4v1723212451329!5m2!1suk!2sua
Source: https://aholding-croatia.com/cases/privlaka-relax-residence	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-P78MTL62
Source: https://aholding-croatia.com/cases/privlaka-relax-residence	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/16671369731?random=1728339298228&cv=11&fst=1728339298228&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2Fcases%2Fprivlaka-relax-residence&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20Privlaka%20Relax%20Residence%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://aholding-croatia.com/#contact-us	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-P78MTL62
Source: https://aholding-croatia.com/#contact-us	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/16671369731?random=1728339318067&cv=11&fst=1728339318067&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://aholding-croatia.com/#contact-us	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-P78MTL62
Source: https://aholding-croatia.com/#contact-us	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/16671369731?random=1728339318067&cv=11&fst=1728339318067&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a20z89193026825za201zb9193026825&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Faholding-croatia.com%2F&hn=www.googleadservices.com&frm=0&tiba=%E1%90%88%20A-Holding%20Croatia%20-%20Open%20a%20new%20chapter%20of%20your%20life%20in%20a%20premium%20residential%20complex%20in%20the%20heart%20of%20the%20Adriatic&npa=0&pscdl=noapi&auid=1391043728.1728339259&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1

Source: https://aholding-croatia.com/cases/privlaka-relax-residence	HTTP Parser: No favicon
Source: https://aholding-croatia.com/cases/privlaka-relax-residence	HTTP Parser: No favicon

Source: https://aholding-croatia.com/	HTTP Parser: No <meta name="author".. found
Source: https://aholding-croatia.com/	HTTP Parser: No <meta name="author".. found
Source: https://aholding-croatia.com/#our-projects	HTTP Parser: No <meta name="author".. found
Source: https://aholding-croatia.com/#our-projects	HTTP Parser: No <meta name="author".. found
Source: https://aholding-croatia.com/cases/privlaka-relax-residence	HTTP Parser: No <meta name="author".. found
Source: https://aholding-croatia.com/cases/privlaka-relax-residence	HTTP Parser: No <meta name="author".. found
Source: https://aholding-croatia.com/#contact-us	HTTP Parser: No <meta name="author".. found
Source: https://aholding-croatia.com/#contact-us	HTTP Parser: No <meta name="author".. found

Source: https://aholding-croatia.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://aholding-croatia.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://aholding-croatia.com/#our-projects	HTTP Parser: No <meta name="copyright".. found
Source: https://aholding-croatia.com/#our-projects	HTTP Parser: No <meta name="copyright".. found
Source: https://aholding-croatia.com/cases/privlaka-relax-residence	HTTP Parser: No <meta name="copyright".. found
Source: https://aholding-croatia.com/cases/privlaka-relax-residence	HTTP Parser: No <meta name="copyright".. found
Source: https://aholding-croatia.com/#contact-us	HTTP Parser: No <meta name="copyright".. found
Source: https://aholding-croatia.com/#contact-us	HTTP Parser: No <meta name="copyright".. found

Source: chromecache_382.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_382.2.dr, chromecache_356.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=rA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},uA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_287.2.dr	String found in binary or memory: function t604_show(recid){var rec=document.getElementById('rec'+recid);var playBtns=rec.querySelectorAll('.t604__play');Array.prototype.forEach.call(playBtns,function(play){play.addEventListener('click',function(){var parent=play.parentElement;var videoBg=parent?parent.querySelector('.t-slds__bgimg'):null;if(videoBg)videoBg.style.opacity='0';var sliderVideo=play.getAttribute('data-slider-video-type');var url=play.getAttribute('data-slider-video-url');var nextEl=play.nextElementSibling;if(nextEl)nextEl.style.zIndex='3';var iframe;switch(sliderVideo){case 'youtube':iframe=document.createElement('iframe');iframe.classList.add('t604__iframe');iframe.width='100%';iframe.height='100%';iframe.src='https://www.youtube.com/embed/'+url+'?autoplay=1&enablejsapi=1';iframe.frameBorder='0';iframe.setAttribute('webkitallowfullscreen','');iframe.setAttribute('mozallowfullscreen','');iframe.setAttribute('allowfullscreen','');iframe.setAttribute('allow','autoplay');if(nextEl)nextEl.innerHTML='';if(nextEl)nextEl.appendChild(iframe);break;case 'vimeo':var idMatch=/vimeo[^/]\/(\d+)\/?(\w)\/?/i.exec(url);var id=idMatch?idMatch[1]:null;var hash=idMatch?'?h='+idMatch[2]:null;iframe=document.createElement('iframe');iframe.classList.add('t604__iframe');iframe.width='100%';iframe.height='100%';iframe.src='https://player.vimeo.com/video/'+id+hash+'?autoplay=1&api=1';iframe.frameBorder='0';iframe.setAttribute('webkitallowfullscreen','');iframe.setAttribute('mozallowfullscreen','');iframe.setAttribute('allowfullscreen','');if(nextEl)nextEl.innerHTML='';if(nextEl)nextEl.appendChild(iframe);break}})})} equals www.youtube.com (Youtube)
Source: chromecache_382.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_441.2.dr, chromecache_292.2.dr, chromecache_356.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_435.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_435.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_382.2.dr, chromecache_356.2.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)
Source: chromecache_384.2.dr	String found in binary or memory: }, 2000); </script><!-- Google Tag Manager (noscript) --><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-P78MTL62" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><!-- End Google Tag Manager (noscript) --><!-- FB Pixel code (noscript) --><noscript><img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=3778676962456122&ev=PageView&agent=pltilda&noscript=1"/></noscript><!-- End FB Pixel code (noscript) --></body></html> equals www.facebook.com (Facebook)

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: aholding-croatia.com
Source: global traffic	DNS traffic detected: DNS query: ws.tildacdn.com
Source: global traffic	DNS traffic detected: DNS query: static.tildacdn.one
Source: global traffic	DNS traffic detected: DNS query: neo.tildacdn.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: thb.tildacdn.one
Source: global traffic	DNS traffic detected: DNS query: dl.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: dl.dropboxusercontent.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: optim.tildacdn.one
Source: global traffic	DNS traffic detected: DNS query: geo.tildacdn.com
Source: global traffic	DNS traffic detected: DNS query: static.tildacdn.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stat.tildacdn.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://aholding-croatia.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Windows Analysis Report
http://aholding-croatia.com/