Edit tour

Windows Analysis Report
http://www.redcrossblood.org//give.html

Overview

General Information

Sample URL:	http://www.redcrossblood.org//give.html
Analysis ID:	1531958
Tags:	urlscan
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6000 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6620 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1908,i,4374098285260909332,9140003001819726548,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7052 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.redcrossblood.org//give.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /ee/v1/interact?configId=8e7ed3d9-5254-4632-b3b4-a45c9fec6d88&requestId=b594fdb8-d595-441c-bc69-8a1630e6d516 HTTP/1.1Host: adobedc.demdex.netConnection: keep-aliveContent-Length: 2769Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain; charset=UTF-8Accept: */*Origin: https://www.redcrossblood.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.redcrossblood.org/give.html/404Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56867263963802033431630789245748728165; dextp=144230-1-1728686880162|144231-1-1728686880760

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: b594fdb8-d595-441c-bc69-8a1630e6d516vary: Origindate: Fri, 11 Oct 2024 22:48:05 GMTx-konductor: N/Ax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 85186c0b-8788-4c2b-bb4a-79a55fc4db16vary: Origindate: Fri, 11 Oct 2024 22:48:07 GMTx-konductor: N/Ax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plainContent-Length: 18Connection: closeAccess-Control-Allow-Origin: *Date: Fri, 11 Oct 2024 22:48:10 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Powered-By: BranchX-Cache: Error from cloudfrontVia: 1.1 8dc3ccc34d68ee81173fff2a80f72bde.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P7X-Amz-Cf-Id: gHhMsMQYEoJcCi-iMMQfps54qoDJaSuFPYr_8YGLADM2Vsp7g9bfbg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plainContent-Length: 18Connection: closeAccess-Control-Allow-Origin: *Date: Fri, 11 Oct 2024 22:48:11 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Powered-By: BranchX-Cache: Error from cloudfrontVia: 1.1 85ca8c4198fb707d10ecc2a784a315be.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P7X-Amz-Cf-Id: fG84iBTtozNgNrlIKxU9kM2Zxuwk-KwBMIyYlOJ-rAOEZSeF4BrMLA==

Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: http://www.aabb.org/tm/donation/Pages/Blood-Bank-Locator.aspx
Source: chromecache_162.2.dr, chromecache_146.2.dr, chromecache_135.2.dr, chromecache_121.2.dr, chromecache_122.2.dr, chromecache_193.2.dr	String found in binary or memory: http://www.day.com/dam/1.0
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: http://www.redcrossblood.org/
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: http://www.redcrossblood.org/text
Source: chromecache_209.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_153.2.dr, chromecache_209.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_197.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CP_jvLy0h4kDFXiK_Qcdcq0Gig;src=4706068;type=rcbnew;cat
Source: chromecache_208.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_165.2.dr, chromecache_150.2.dr	String found in binary or memory: https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/EX17fa10f475694f94906f4081bb9dea6
Source: chromecache_210.2.dr	String found in binary or memory: https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC015d7944a2b0453bbe25c97d23bb3f7
Source: chromecache_189.2.dr	String found in binary or memory: https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC0679bf668fad40e789ca97109c43b61
Source: chromecache_129.2.dr	String found in binary or memory: https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC38acd34605ce4867a436ae91848f9e3
Source: chromecache_171.2.dr, chromecache_173.2.dr	String found in binary or memory: https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC45b0c1db23ef418b958ad660ff389a3
Source: chromecache_154.2.dr	String found in binary or memory: https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC65a396d8c7f54301a04f272a1d7974d
Source: chromecache_124.2.dr, chromecache_136.2.dr	String found in binary or memory: https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC686acd737cca463697e4b62a4cbb822
Source: chromecache_124.2.dr, chromecache_136.2.dr	String found in binary or memory: https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RCfe42907b9c65429e91b82009fc248bd
Source: chromecache_124.2.dr, chromecache_136.2.dr	String found in binary or memory: https://assets.adobedtm.com/16a36399704a/453d9ca51f91/launch-a1e85d51a3d8.js
Source: chromecache_147.2.dr, chromecache_130.2.dr, chromecache_153.2.dr, chromecache_209.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_185.2.dr, chromecache_210.2.dr	String found in binary or memory: https://cdn.branch.io/branch-latest.min.js
Source: chromecache_164.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.slim.min.js
Source: chromecache_180.2.dr, chromecache_187.2.dr, chromecache_202.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_197.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_180.2.dr, chromecache_187.2.dr, chromecache_202.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_164.2.dr	String found in binary or memory: https://ct-prod.redcrossblood.org/widgets/t/activity-history/
Source: chromecache_164.2.dr	String found in binary or memory: https://ct-prod.redcrossblood.org/widgets/t/activity-list/
Source: chromecache_164.2.dr	String found in binary or memory: https://ct-prod.redcrossblood.org/widgets/t/points-expiration/
Source: chromecache_164.2.dr	String found in binary or memory: https://ct-prod.redcrossblood.org/widgets/t/reward-history/
Source: chromecache_164.2.dr	String found in binary or memory: https://ct-prod.redcrossblood.org/widgets/t/reward-list/
Source: chromecache_163.2.dr, chromecache_195.2.dr	String found in binary or memory: https://e.acuityplatform.com/pj
Source: chromecache_197.2.dr	String found in binary or memory: https://origin.acuityplatform.com/event/v2/pixel.js
Source: chromecache_208.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_147.2.dr, chromecache_130.2.dr, chromecache_153.2.dr, chromecache_209.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_164.2.dr	String found in binary or memory: https://s.go-mpulse.net/boomerang/
Source: chromecache_164.2.dr	String found in binary or memory: https://s2.go-mpulse.net/boomerang/
Source: chromecache_147.2.dr, chromecache_130.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_147.2.dr, chromecache_130.2.dr, chromecache_153.2.dr, chromecache_209.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_208.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_147.2.dr, chromecache_130.2.dr, chromecache_153.2.dr, chromecache_209.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_208.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_153.2.dr, chromecache_209.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_147.2.dr, chromecache_130.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_164.2.dr	String found in binary or memory: https://www.redcross.org/content/dam/redcrossblood/social-media-images/FB_Donor_Image1.jpg
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/
Source: chromecache_164.2.dr	String found in binary or memory: https://www.redcrossblood.org/api/auth/v1
Source: chromecache_164.2.dr	String found in binary or memory: https://www.redcrossblood.org/api/drive/v1
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/contact-us.html
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/content/redcrossblood/en/donate-blood/dlp/covid-19-antibody-test-detai
Source: chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/donate-blood/blood-donation-process/before-during-after/iron-blood-don
Source: chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/donate-blood/blood-donor-rewards.html
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/donate-blood/blood-types/diversity/sicklecell.html
Source: chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/donate-blood/dlp/blood-pressure-donors.html
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/donate-blood/dlp/donor-rewards/ab-elite-rewards.html
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/donate-blood/dlp/donor-rewards/hero-for-babies-rewards.html
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/donate-blood/dlp/donor-rewards/o-powerful-rewards.html
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/donate-blood/dlp/donor-rewards/platelet-donor-rewards.html
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/donate-blood/dlp/donor-rewards/rare-blood-donor-rewards.html
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/donate-blood/dlp/donor-rewards/sickle-cell-fighters-rewards.html
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/donate-blood/dlp/donor-rewards/universal-hero-rewards.html
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/donate-blood/how-to-donate/types-of-blood-donations/plasma-donation/ab
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/donate-blood/how-to-donate/types-of-blood-donations/platelet-donation/
Source: chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/donate-blood/how-to-donate/types-of-blood-donations/whole-blood-donati
Source: chromecache_164.2.dr	String found in binary or memory: https://www.redcrossblood.org/give.html
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/give.html/donation-history
Source: chromecache_161.2.dr, chromecache_205.2.dr	String found in binary or memory: https://www.redcrossblood.org/give.html/find-drive-advanced
Source: chromecache_205.2.dr	String found in binary or memory: https://www.surveygizmo.com/s3/3769682/Social-Hub-2-0
Source: chromecache_147.2.dr, chromecache_130.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63432
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49730 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@20/143@141/42

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1908,i,4374098285260909332,9140003001819726548,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.redcrossblood.org//give.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1908,i,4374098285260909332,9140003001819726548,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://connect.facebook.net/en_US/fbevents.js	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://connect.facebook.net/log/fbevents_telemetry/	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dart.l.doubleclick.net	142.250.186.38	true	false	unknown
pixel-origin.mathtag.com	216.200.232.249	true	false	unknown
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
app.link	99.86.4.58	true	false	unknown
adservice.google.com	142.250.184.226	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
e.acuityplatform.com	154.59.122.94	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
demdex.net.ssl.sc.omtrdc.net	63.140.62.17	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	108.128.136.169	true	false	unknown
star-mini.c10r.facebook.com	157.240.251.35	true	false	unknown
us-u.openx.net	35.244.159.8	true	false	unknown
cdn.branch.io	108.138.26.113	true	false	unknown
ad.doubleclick.net	172.217.16.198	true	false	unknown
js-agent.newrelic.com	162.247.243.39	true	false	unknown
pug-lhr-bc.pubmnet.com	185.64.191.210	true	false	unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false	unknown
redcross.org.ssl.sc.omtrdc.net	63.140.62.27	true	false	unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false	unknown
adobedc.net.ssl.sc.omtrdc.net	63.140.62.17	true	false	unknown
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	unknown
td.doubleclick.net	142.250.185.226	true	false	unknown
ib.anycast.adnxs.com	185.89.210.122	true	false	unknown
fls.doubleclick.net	216.58.206.70	true	false	unknown
api2.branch.io	108.156.60.61	true	false	unknown
pixel.mathtag.com	unknown	unknown	false	unknown
s.go-mpulse.net	unknown	unknown	false	unknown
cm.everesttech.net	unknown	unknown	false	unknown
resources.crowdtwist.com	unknown	unknown	false	unknown
image2.pubmatic.com	unknown	unknown	false	unknown
adobedc.demdex.net	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
www.redcrossblood.org	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
241.42.69.40.in-addr.arpa	unknown	unknown	false	unknown
redcross.demdex.net	unknown	unknown	false	unknown
assets.adobedtm.com	unknown	unknown	false	unknown
origin.acuityplatform.com	unknown	unknown	false	unknown
s7.addthis.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
bam.nr-data.net	unknown	unknown	false	unknown
4706068.fls.doubleclick.net	unknown	unknown	false	unknown
smetrics.redcross.org	unknown	unknown	false	unknown
analytics.tiktok.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
sync.search.spotxchange.com	unknown	unknown	false	unknown
edge.adobedc.net	unknown	unknown	false	unknown
c.go-mpulse.net	unknown	unknown	false	unknown
sync-tm.everesttech.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://4706068.fls.doubleclick.net/activityi;dc_pre=CKHrpsS0h4kDFcGngwcdCs8J7w;src=4706068;type=rcopa0;cat=rconeADO;u6=56533479113366688501602802432891303576;ord=8269349374745.352?	false		unknown
https://www.facebook.com/tr/?id=1599953746963987&ev=PageView&dl=https%3A%2F%2Fwww.redcrossblood.org&rl=&if=false&ts=1728686885745&sw=1280&sh=1024&v=2.9.170&r=stable&a=adobe_launch&ec=0&o=4124&fbp=fb.1.1728686885735.994445313720174329&pm=1&hrl=a461c4&ler=empty&cdl=API_unavailable&it=1728686879974&coo=false&cs_cc=1&cas=25946852104906138%2C25115343601446968%2C6660002284063960&rqm=GET	false		unknown
https://edge.adobedc.net/ee/irl1/v1/collect?configId=8e7ed3d9-5254-4632-b3b4-a45c9fec6d88&requestId=bfe1fb0e-cc74-4cc6-9618-ab54bbfa6f25	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1731308323821672&ev=PageView&dl=https%3A%2F%2Fwww.redcrossblood.org&rl=&if=false&ts=1728686886925&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.1.1728686885735.994445313720174329&pm=1&hrl=a57d20&ler=empty&cdl=API_unavailable&cs_est=true&it=1728686879974&coo=false&cs_cc=1&rqm=FGET	false		unknown
https://pixel.mathtag.com/event/img?mt_id=1319619&mt_adid=149608&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3=&ord=104230782	false		unknown
https://us-u.openx.net/w/1.0/sd?id=537148856&val=ZwmrIgAIc-zJMAA9	false		unknown
https://bam.nr-data.net/events/1/20e6e07576?a=94805257&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=19275&ck=1&ref=https://www.redcrossblood.org/give.html/404	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1599953746963987&ev=PageView&dl=https%3A%2F%2F4706068.fls.doubleclick.net&rl=https%3A%2F%2Fwww.redcrossblood.org&if=true&ts=1728686887017&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.3.1728686887013.139129801368517081&pm=1&hrl=2be532&ler=other&cdl=API_unavailable&it=1728686885262&coo=false&cs_cc=1&cas=25946852104906138%2C25115343601446968%2C6660002284063960&rqm=FGET	false		unknown
https://dpm.demdex.net/id/rd?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=723A22C757518E2C7F000101%40AdobeOrg&d_nsid=0&ts=1728686876789	false		unknown
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZwmrIgAIc-zJMAA9&C=1	false		unknown
https://connect.facebook.net/en_US/fbevents.js	false	URL Reputation: safe	unknown
https://api2.branch.io/v1/pageview	false		unknown
https://www.facebook.com/tr/?id=1731308323821672&ev=PageView&dl=https%3A%2F%2Fwww.redcrossblood.org&rl=&if=false&ts=1728686886925&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.1.1728686885735.994445313720174329&pm=1&hrl=a57d20&ler=empty&cdl=API_unavailable&cs_est=true&it=1728686879974&coo=false&cs_cc=1&rqm=GET	false		unknown
https://www.facebook.com/tr/?id=1599953746963987&ev=PageView&dl=https%3A%2F%2F4706068.fls.doubleclick.net&rl=https%3A%2F%2Fwww.redcrossblood.org&if=true&ts=1728686887017&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.3.1728686887013.139129801368517081&pm=1&hrl=2be532&ler=other&cdl=API_unavailable&it=1728686885262&coo=false&cs_cc=1&cas=25946852104906138%2C25115343601446968%2C6660002284063960&rqm=GET	false		unknown
https://api2.branch.io/v1/open	false		unknown
https://redcross.demdex.net/dest5.html?d_nsid=0	false		unknown
https://fls.doubleclick.net/activityi;src=4706068;type=rcopa0;cat=rconeADO;u6=56533479113366688501602802432891303576;ord=8269349374745.352?	false		unknown
https://smetrics.redcross.org/id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=723A22C757518E2C7F000101%40AdobeOrg&mid=56533479113366688501602802432891303576&ts=1728686878713	false		unknown
https://adobedc.demdex.net/ee/v1/interact?configId=8e7ed3d9-5254-4632-b3b4-a45c9fec6d88&requestId=b594fdb8-d595-441c-bc69-8a1630e6d516	false		unknown
https://www.redcrossblood.org/give.html/404	false		unknown
https://www.facebook.com/fr/b.php?p=1531105787105294&e=ZwmrIgAIc-zJMAA9&t=2592000&o=0	false		unknown
https://connect.facebook.net/signals/config/1599953746963987?v=2.9.170&r=stable&domain=www.redcrossblood.org&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112	false		unknown
https://adservice.google.com/ddm/fls/z/dc_pre=CKHrpsS0h4kDFcGngwcdCs8J7w;src=4706068;type=rcopa0;cat=rconeADO;u6=56533479113366688501602802432891303576;ord=8269349374745.352	false		unknown
https://us-u.openx.net/w/1.0/sd?cc=1&id=537148856&val=ZwmrIgAIc-zJMAA9	false		unknown
https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D158%26code%3DZwmrIgAIc-zJMAA9	false		unknown
https://ib.adnxs.com/setuid?entity=158&code=ZwmrIgAIc-zJMAA9	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.slim.min.js	false		unknown
https://dpm.demdex.net/ibs:dpid=411&dpuuid=ZwmrIQAAAEocsgO-	false		unknown
https://bam.nr-data.net/events/1/20e6e07576?a=94805257&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=25639&ck=1&ref=https://www.redcrossblood.org/give.html/404	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1599953746963987&ev=PageView&dl=https%3A%2F%2Fwww.redcrossblood.org&rl=&if=false&ts=1728686885745&sw=1280&sh=1024&v=2.9.170&r=stable&a=adobe_launch&ec=0&o=4124&fbp=fb.1.1728686885735.994445313720174329&pm=1&hrl=a461c4&ler=empty&cdl=API_unavailable&it=1728686879974&coo=false&cs_cc=1&cas=25946852104906138%2C25115343601446968%2C6660002284063960&rqm=FGET	false		unknown
https://app.link/_r?sdk=web2.85.0&branch_key=key_live_mmHU3rrXl3U4GfMnF6H0sddfrzccH9ha&callback=branch_callback__0	false		unknown
https://www.redcrossblood.org//give.html	false		unknown
https://bam.nr-data.net/1/20e6e07576?a=94805257&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=15627&ck=1&ref=https://www.redcrossblood.org/give.html/404&be=2844&fe=14867&dc=6446&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1728686873483,%22n%22:0,%22f%22:25,%22dn%22:34,%22dne%22:57,%22c%22:57,%22s%22:58,%22ce%22:799,%22rq%22:799,%22rp%22:1392,%22rpe%22:1596,%22dl%22:1424,%22di%22:6443,%22ds%22:6443,%22de%22:6461,%22dc%22:14867,%22l%22:14867,%22le%22:14870%7D,%22navigation%22:%7B%7D%7D&fp=6407&fcp=6407&jsonp=NREUM.setToken	false		unknown
https://dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=723A22C757518E2C7F000101%40AdobeOrg&d_nsid=0&ts=1728686876789	false		unknown
https://js-agent.newrelic.com/nr-spa-1184.min.js	false		unknown
https://bam.nr-data.net/jserrors/1/20e6e07576?a=94805257&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=75640&ck=1&ref=https://www.redcrossblood.org/give.html/404&ierr=%5B%7B%22params%22:%7B%22stackHash%22:-687274247,%22exceptionClass%22:%22TypeError%22,%22request_uri%22:%22/give.html/404%22,%22message%22:%22Cannot%20convert%20undefined%20or%20null%20to%20object%22,%22stack_trace%22:%22TypeError:%20Cannot%20convert%20undefined%20or%20null%20to%20object%5Cn%20%20%20%20at%20hasOwnProperty%20(%3Canonymous%3E)%5Cn%20%20%20%20at%20r%20(https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive/new-relic/new-relic-rcbbloodapp-prod.js:2:24084)%5Cn%20%20%20%20at%20r.%3Canonymous%3E%20(https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive/new-relic/new-relic-rcbbloodapp-prod.js:2:4839)%5Cn%20%20%20%20at%20Object.n%20%5Bas%20emit%5D%20(https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive/new-relic/new-relic-rcbbloodapp-prod.js:2:23416)%5Cn%20%20%20%20at%20u%20(https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive/new-relic/new-relic-rcbbloodapp-prod.js:2:26539)%5Cn%20%20%20%20at%20https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive.min.js:2:117117%5Cn%20%20%20%20at%20https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive.min.js:4:264711%5Cn%20%20%20%20at%20https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive.min.js:4:264759%5Cn%20%20%20%20at%206823%20(https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive.min.js:4:353343)%22,%22releaseIds%22:%22%7B%7D%22,%22pageview%22:1,%22browserInteractionId%22:%2209666f88-b172-476f-baad-5cdeaeff657d%22%7D,%22custom%22:%7B%7D,%22metrics%22:%7B%22count%22:2,%22time%22:%7B%22t%22:12211,%22min%22:6089,%22max%22:6122,%22sos%22:74554805,%22c%22:2%7D%7D%7D%5D&xhr=%5B%7B%22params%22:%7B%22method%22:%22get%22,%22host%22:%22dpm.demdex.net:443%22,%22pathname%22:%22/id%22,%22status%22:200%7D,%22metrics%22:%7B%22count%22:1,%22rxSize%22:%7B%22t%22:2311%7D,%22duration%22:%7B%22t%22:1931%7D,%22cbTime%22:%7B%22t%22:0%7D,%22time%22:%7B%22t%22:3306%7D%7D%7D,%7B%22params%22:%7B%22method%22:%22get%22,%22host%22:%22smetrics.redcross.org:443%22,%22pathname%22:%22/id%22,%22status%22:200%7D,%22metrics%22:%7B%22count%22:1,%22rxSize%22:%7B%22t%22:48%7D,%22duration%22:%7B%22t%22:1189%7D,%22cbTime%22:%7B%22t%22:0%7D,%22time%22:%7B%22t%22:5230%7D%7D%7D,%7B%22params%22:%7B%22method%22:%22GET%22,%22host%22:%22www.redcrossblood.org:443%22,%22pathname%22:%22/give.authorData.json%22,%22status%22:200%7D,%22metrics%22:%7B%22count%22:1,%22rxSize%22:%7B%22t%22:62783%7D,%22duration%22:%7B%22t%22:2077%7D,%22cbTime%22:%7B%22t%22:32%7D,%22time%22:%7B%22t%22:6193%7D%7D%7D,%7B%22params%22:%7B%22method%22:%22POST%22,%22host%22:%22api2.branch.io:443%22,%22pathname%22:%22/v1/open%22,%22status%22:200%7D,%22metrics%22:%7B%22count%22:1,%22txSize%22:%7B%22t%22:266%7D,%22rxSize%22:%7B%22t%22:279%7D,%22duration%22:%7B%22t%22:1149%7D,%22cbTime%22:%7B%22t%22:0%7D,%22time%22:%7B%22t%22:13880%7D%7D%7D,%7B%22params%22:%7B%22method%22:%22POST%22,%22host%22:%22api2.branch.io:443%22,%22pathname%22:%22/v1/pageview%22,%22status%22:200%7D,%22metrics%22:%7B%22count%22:1,%22txSize%22:%7B%22t%22:2357%7D,%22rxSize%22:%7B%22t%22:28%7D,%22duration%22:%7B%22t%22:1107%7D,%22cbTime%22:%7B%22t%22:1%7D,%22time%22:%7B%22t%22:15028%7D%7D%7D,%7B%22params%22:%7B%22method%22:%22POST%22,%22host%22:%22bam.nr-data.net:443%22,%22pathname%22:%22/events/1/20e6e07576%22,%22status%22:200%7D,%22metrics%22:%7B%22count%22:2,%22txSize%22:%7B%22t%22:1050,%22min%22:190,%22max%22:860,%22sos%22:775700,%22c%22:2%7D,%22rxSize%22:%7B%22t%22:48,%22min%22:24,%22max%22:24,%22sos%22:1152,%22c%22:2%7D,%22duration%22:%7B%22t%22:1278,%22min%22:628,%22max%22:650,%22sos%22:816884,%22c%22:2%7D,%22cbTime%22:%7B%22t%22:0,%22min%22:0,%22max%22:0,%22sos%22:0,%22c%22:2%7D,%22time%22:%7B%22t%22:44916,%22min%22:19276,%22max%22:25640,%22sos%22:1028973776,%22c%22:2%7D%7D%7D%5D	false		unknown
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZwmrIgAIc-zJMAA9	false		unknown
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=ZwmrIgAIc-zJMAA9	false		unknown
https://cdn.branch.io/branch-latest.min.js	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=8e7ed3d9-5254-4632-b3b4-a45c9fec6d88&requestId=85186c0b-8788-4c2b-bb4a-79a55fc4db16	false		unknown
https://connect.facebook.net/signals/config/1731308323821672?v=2.9.170&r=stable&domain=www.redcrossblood.org&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C145%2C172%2C158%2C117%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C127	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.redcrossblood.org/content/redcrossblood/en/donate-blood/dlp/covid-19-antibody-test-detai	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_147.2.dr, chromecache_130.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	false	URL Reputation: safe	unknown
https://www.redcrossblood.org/donate-blood/dlp/donor-rewards/sickle-cell-fighters-rewards.html	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://www.redcrossblood.org/api/drive/v1	chromecache_164.2.dr	false		unknown
https://s2.go-mpulse.net/boomerang/	chromecache_164.2.dr	false		unknown
http://www.redcrossblood.org/text	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://www.redcrossblood.org/donate-blood/dlp/donor-rewards/universal-hero-rewards.html	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://www.redcrossblood.org/donate-blood/dlp/donor-rewards/ab-elite-rewards.html	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://ct-prod.redcrossblood.org/widgets/t/reward-list/	chromecache_164.2.dr	false		unknown
https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC38acd34605ce4867a436ae91848f9e3	chromecache_129.2.dr	false		unknown
https://www.google.com	chromecache_208.2.dr	false		unknown
https://www.youtube.com/iframe_api	chromecache_147.2.dr, chromecache_130.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	false		unknown
https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC686acd737cca463697e4b62a4cbb822	chromecache_124.2.dr, chromecache_136.2.dr	false		unknown
https://www.redcrossblood.org/donate-blood/how-to-donate/types-of-blood-donations/whole-blood-donati	chromecache_205.2.dr	false		unknown
http://www.redcrossblood.org/	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://www.redcrossblood.org/donate-blood/how-to-donate/types-of-blood-donations/plasma-donation/ab	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://www.redcrossblood.org/donate-blood/blood-donation-process/before-during-after/iron-blood-don	chromecache_205.2.dr	false		unknown
https://www.redcrossblood.org/donate-blood/dlp/donor-rewards/o-powerful-rewards.html	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://www.redcrossblood.org/donate-blood/blood-types/diversity/sicklecell.html	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://www.redcross.org/content/dam/redcrossblood/social-media-images/FB_Donor_Image1.jpg	chromecache_164.2.dr	false		unknown
https://www.redcrossblood.org/	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://ct-prod.redcrossblood.org/widgets/t/reward-history/	chromecache_164.2.dr	false		unknown
https://cct.google/taggy/agent.js	chromecache_147.2.dr, chromecache_130.2.dr, chromecache_153.2.dr, chromecache_209.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	false	URL Reputation: safe	unknown
https://connect.facebook.net/	chromecache_180.2.dr, chromecache_187.2.dr, chromecache_202.2.dr	false	URL Reputation: safe	unknown
https://www.redcrossblood.org/donate-blood/dlp/blood-pressure-donors.html	chromecache_205.2.dr	false		unknown
https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC015d7944a2b0453bbe25c97d23bb3f7	chromecache_210.2.dr	false		unknown
https://www.surveygizmo.com/s3/3769682/Social-Hub-2-0	chromecache_205.2.dr	false		unknown
http://www.aabb.org/tm/donation/Pages/Blood-Bank-Locator.aspx	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://www.redcrossblood.org/give.html/find-drive-advanced	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC0679bf668fad40e789ca97109c43b61	chromecache_189.2.dr	false		unknown
https://origin.acuityplatform.com/event/v2/pixel.js	chromecache_197.2.dr	false		unknown
https://www.redcrossblood.org/api/auth/v1	chromecache_164.2.dr	false		unknown
https://www.redcrossblood.org/give.html/donation-history	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RCfe42907b9c65429e91b82009fc248bd	chromecache_124.2.dr, chromecache_136.2.dr	false		unknown
https://www.redcrossblood.org/donate-blood/blood-donor-rewards.html	chromecache_205.2.dr	false		unknown
https://www.redcrossblood.org/give.html	chromecache_164.2.dr	false		unknown
https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC45b0c1db23ef418b958ad660ff389a3	chromecache_171.2.dr, chromecache_173.2.dr	false		unknown
https://s.go-mpulse.net/boomerang/	chromecache_164.2.dr	false		unknown
https://www.redcrossblood.org/donate-blood/dlp/donor-rewards/platelet-donor-rewards.html	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC65a396d8c7f54301a04f272a1d7974d	chromecache_154.2.dr	false		unknown
https://e.acuityplatform.com/pj	chromecache_163.2.dr, chromecache_195.2.dr	false		unknown
https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/EX17fa10f475694f94906f4081bb9dea6	chromecache_165.2.dr, chromecache_150.2.dr	false		unknown
https://assets.adobedtm.com/16a36399704a/453d9ca51f91/launch-a1e85d51a3d8.js	chromecache_124.2.dr, chromecache_136.2.dr	false		unknown
https://www.redcrossblood.org/contact-us.html	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://ct-prod.redcrossblood.org/widgets/t/activity-list/	chromecache_164.2.dr	false		unknown
https://adservice.google.com/ddm/fls/z/dc_pre=CP_jvLy0h4kDFXiK_Qcdcq0Gig;src=4706068;type=rcbnew;cat	chromecache_197.2.dr	false		unknown
https://www.redcrossblood.org/donate-blood/dlp/donor-rewards/rare-blood-donor-rewards.html	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://www.redcrossblood.org/donate-blood/dlp/donor-rewards/hero-for-babies-rewards.html	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://ad.doubleclick.net	chromecache_209.2.dr	false		unknown
http://www.day.com/dam/1.0	chromecache_162.2.dr, chromecache_146.2.dr, chromecache_135.2.dr, chromecache_121.2.dr, chromecache_122.2.dr, chromecache_193.2.dr	false		unknown
https://td.doubleclick.net	chromecache_147.2.dr, chromecache_130.2.dr, chromecache_153.2.dr, chromecache_209.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	false		unknown
https://connect.facebook.net/log/fbevents_telemetry/	chromecache_180.2.dr, chromecache_187.2.dr, chromecache_202.2.dr	false	URL Reputation: safe	unknown
https://www.merchant-center-analytics.goog	chromecache_147.2.dr, chromecache_130.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	false	URL Reputation: safe	unknown
https://ct-prod.redcrossblood.org/widgets/t/activity-history/	chromecache_164.2.dr	false		unknown
https://www.redcrossblood.org/donate-blood/how-to-donate/types-of-blood-donations/platelet-donation/	chromecache_161.2.dr, chromecache_205.2.dr	false		unknown
https://adservice.google.com/pagead/regclk?	chromecache_208.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
154.59.122.94	e.acuityplatform.com	United States	174	COGENT-174US	false
142.250.185.226	td.doubleclick.net	United States	15169	GOOGLEUS	false
99.86.4.58	app.link	United States	16509	AMAZON-02US	false
63.140.62.222	unknown	United States	15224	OMNITUREUS	false
142.250.184.226	adservice.google.com	United States	15169	GOOGLEUS	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
142.250.184.230	unknown	United States	15169	GOOGLEUS	false
142.250.186.38	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
185.89.210.122	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
63.140.62.17	demdex.net.ssl.sc.omtrdc.net	United States	15224	OMNITUREUS	false
108.156.60.61	api2.branch.io	United States	16509	AMAZON-02US	false
108.128.136.169	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
108.138.26.118	unknown	United States	16509	AMAZON-02US	false
18.239.50.124	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
108.138.26.113	cdn.branch.io	United States	16509	AMAZON-02US	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.16.198	ad.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.206.70	fls.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.206.34	unknown	United States	15169	GOOGLEUS	false
185.64.191.210	pug-lhr-bc.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
18.239.18.44	unknown	United States	16509	AMAZON-02US	false
172.64.151.101	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
216.200.232.253	unknown	United States	30419	MEDIAMATH-INCUS	false
63.140.62.27	redcross.org.ssl.sc.omtrdc.net	United States	15224	OMNITUREUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
216.200.232.249	pixel-origin.mathtag.com	United States	30419	MEDIAMATH-INCUS	false
157.240.251.9	unknown	United States	32934	FACEBOOKUS	false
150.171.27.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
34.98.64.218	unknown	United States	15169	GOOGLEUS	false
34.247.205.49	unknown	United States	16509	AMAZON-02US	false
54.77.0.81	unknown	United States	16509	AMAZON-02US	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
157.240.251.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false

Private

IP
192.168.2.8
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1531958
Start date and time:	2024-10-12 00:46:54 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.redcrossblood.org//give.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@20/143@141/42
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.184.238, 74.125.206.84, 34.104.35.123, 104.102.57.180, 184.28.89.29, 2.19.225.248, 23.201.247.116, 142.250.186.136, 2.18.64.15, 2.18.64.26, 2.23.196.132, 52.18.168.199, 34.255.61.41, 52.211.113.62, 151.101.130.49, 151.101.194.49, 151.101.2.49, 151.101.66.49, 184.27.96.174, 216.58.212.168, 142.250.186.110, 23.201.250.60, 69.173.144.138, 69.173.144.165, 69.173.144.139, 192.229.221.95, 52.149.20.212, 40.69.42.241, 20.3.187.198, 172.202.163.200, 4.245.163.56, 142.250.186.67
Excluded domains from analysis (whitelisted): pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, cn-assets.adobedtm.com.edgekey.net, clientservices.googleapis.com, san.redcrossblood.org.edgekey.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bat.bing.com, sls.update.microsoft.com, update.googleapis.com, analytics.tiktok.com.edgekey.net, e4518.dscx.akamaiedge.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, ip46.go-mpulse.net.edgekey.net, ds-s7.addthis.com.edgekey.net, fs.microsoft.com, accounts.google.com, cm.everesttech.net.akadns.net, origin.edgekey.net, e4016.a.akamaiedge.net, e6399.dsca.akamaiedge.net, e35058.a.akamaiedge.net, e13774.dsca.akamaiedge.net, fe3cr.delivery.mp.microsoft.com, e4518.dscapi7.akamaiedge.net, fe3.delivery.mp.microsoft.com, e7125.d.akamaiedge.net, edgedl.me.gvt1.com, e7808.dscg.akamaiedge.net, wildcard46.go-mpulse.net.edgekey.net, xandr-g-geo.trafficmanager.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.redcrossblood.org//give.html

Input	Output
URL: https://www.redcrossblood.org/give.html/404 Model: jbxai	{ "brands":["American Red Cross"], "text":"Home Eligibility Info Email Us 1-800-RED CROSS (1-800-733-2767)", "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.redcrossblood.org/give.html/404 Model: jbxai	{ "brands":["American Red Cross"], "text":"The online donor portal is currently unavailable. Please call Customer Care at 1-800-733-2767 to schedule an appointment. We apologize for the inconvenience.", "contains_trigger_text":true, "trigger_text":"The online donor portal is currently unavailable. Please call Customer Care at 1-800-733-2767 to schedule an appointment. We apologize for the inconvenience.", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.redcrossblood.org/give.html/404 Model: jbxai	{ "brands":["American Red Cross"], "text":"The online donor portal is currently unavailable. Please call Customer Care at 1-800-733-2767 to schedule an appointment. We apologize for the inconvenience.", "contains_trigger_text":true, "trigger_text":"The online donor portal is currently unavailable. Please call Customer Care at 1-800-733-2767 to schedule an appointment. We apologize for the inconvenience.", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.redcrossblood.org/give.html/404 Model: jbxai	{ "brands":["American Red Cross"], "text":"The online donor portal is currently unavailable. Please call Customer Care at 1-800-733-2767 to schedule an appointment. We apologize for the inconvenience.", "contains_trigger_text":true, "trigger_text":"The online donor portal is currently unavailable. Please call Customer Care at 1-800-733-2767 to schedule an appointment. We apologize for the inconvenience.", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.redcrossblood.org/give.html/404 Model: jbxai	{ "brands":["American Red Cross"], "text":"The online donor portal is currently unavailable. Please call Customer Care at 1-800-733-2767 to schedule an appointment. We apologize for the inconvenience.", "contains_trigger_text":true, "trigger_text":"The online donor portal is currently unavailable. Please call Customer Care at 1-800-733-2767 to schedule an appointment. We apologize for the inconvenience.", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 21:47:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.986766202562669
Encrypted:	false
SSDEEP:	48:8o0d1TdIk9H0idAKZdA1oehwiZUklqehekJy+3:8o+WkZ/Yy
MD5:	3CBC7C94F3E9C0BFC7A535E1A73509B2
SHA1:	22F21299167CC12112883E932CDF870E435C130F
SHA-256:	244E2AF92E19BE68F1E0564B9A1212CE37A1FF12DD636B49E4A5216EF2556121
SHA-512:	3EA65BF8FC84BB82B0415BC727FCF2D1CFDFB72BB8AD1FDD065B1D9F5E54092821148013DD516BA42B0A7A96026983534DC0985EA4036A73A2190F90272E7D31
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......../...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IKY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VKY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VKY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VKY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............u.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 21:47:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.001323884542083
Encrypted:	false
SSDEEP:	48:8h0d1TdIk9H0idAKZdA1leh/iZUkAQkqehvkJy+2:8h+WkL9Q0Yy
MD5:	0B33C60151D51CB5ACF189F053E018B4
SHA1:	75F1CE82F130A50B2EE232C31C4DDABCC74A62BB
SHA-256:	E83793A74FC4BB35FBFD6A680D9437C09A75B189746C5373A392B5709F6E640D
SHA-512:	01ADBEAE5B0ECC81CEEE6F1B8367E55567CBFD942B24B042B99AAD1175B211D9F5A457C8F50E4DD485BC17E724D5EEE728009EFF6373F43FE52406F6296A5DEA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....e../...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IKY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VKY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VKY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VKY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............u.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.012489084869658
Encrypted:	false
SSDEEP:	48:800d1TdIkbH0idAKZdA14t5eh7sFiZUkmgqeh7s9kJy+BX:80+WkdnjYy
MD5:	924C484E8A409549CD84E9DC1D844174
SHA1:	4DEE734D772C95333EE2FFC602283FB14CE091A1
SHA-256:	7C39D629F0C0AC846D4D15F0944E1EF531772647174DFE9A57292ECC360EEC30
SHA-512:	72BAFAEF264A37B074D311E4F268A11FCF204F9B7DE266567BBCB61EAE7C514D3BB6D670AEEF5C0259635D1ADA2A3CC8B3B790FBF16CF5EDD36F4CE1DCF7EC23
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IKY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VKY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VKY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............u.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 21:47:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.001209805991717
Encrypted:	false
SSDEEP:	48:8I0d1TdIk9H0idAKZdA16ehDiZUkwqehLkJy+R:8I+WkYlYy
MD5:	F9169838DF8346F4201E6E43DF95CA78
SHA1:	DD2E95B50B7B5DD6236DE92C944B9D93F66070E5
SHA-256:	02216ED2E41E9663E1F179980CEFDC8D4691613AF31AA8DFF4D1047DB66FF1DB
SHA-512:	120009003D95811F23191D3A02CBD644BA5E9AD30DE6A561A1005138AA8B8EFD9A1539F6233EA77E395CBD43C3A6A38C154942037CA4CABAA16A5521C603E951
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......../...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IKY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VKY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VKY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VKY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............u.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 21:47:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9892203606211387
Encrypted:	false
SSDEEP:	48:8d0d1TdIk9H0idAKZdA1UehBiZUk1W1qehRkJy+C:8d+WkI9xYy
MD5:	C38ACB55E41E630C7940852394BDD602
SHA1:	323A3E2FDB3E5802C4BA07DB783FF28A5FC4555A
SHA-256:	5C764C4CA6D8C2B4904ECB587EE4F1B155F8589DA02210A4DBD4A8F67CF4F0F4
SHA-512:	16BEEE7086B8AB7EADBBE6A256C1D975D9D25313FFABAB043A5884115BC6B7FD3239EB8777261C716F42F0BD1DBCFEB8DBF586480C2297E94378089B4FCA2DC8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....)../...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IKY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VKY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VKY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VKY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............u.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 21:47:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.000607461998277
Encrypted:	false
SSDEEP:	48:820d1TdIk9H0idAKZdA1duTrehOuTbbiZUk5OjqehOuTbjkJy+yT+:82+WklTYTbxWOvTbjYy7T
MD5:	C7B004B5CA400372DFBE45B475B4A6D4
SHA1:	2EB97B29DD29C13A2BC3426ADC1F093E82B336DE
SHA-256:	B7ACBDA3D7CD3EC0B935897D5C199B22BEE0F4D553E295F0F2E0795CD2545CD7
SHA-512:	7C50DEFAF8951E58A6AC107A8E6CAEAC859B811712A60D985479CD804A2C63FDD58488C875015C7DDD748266471BBBB04F1CB85A7FDE554C374A93F2EA6B878E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......./...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IKY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VKY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VKY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VKY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............u.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2017 (Macintosh), datetime=2018:02:09 14:56:41], baseline, precision 8, 1440x700, components 3
Category:	downloaded
Size (bytes):	537581
Entropy (8bit):	7.953323418209309
Encrypted:	false
SSDEEP:	12288:Q8I08kHVx6F8+vF/YrzSdgUqXdWYY/fAiAloS:Q8I2Vxw8+tSpUsddYXAi0
MD5:	C6541E73867C172757482A56D5279DAB
SHA1:	D4B5C2403059EF03073D44A207A5E7F53C1249E8
SHA-256:	08E089C49E99FF473B5D4374CB40726E279218DDB7C5DD721FE78B068B78459C
SHA-512:	6C13383A3BC6DA3C5DF522C4DE5056F07DF6D55A3A38C85DDDF3D01D8B54FB52977A54AE5BA30E5F8C562B7542C0C8E65BD9BD343A61369ACD8DB0A69D97571A
Malicious:	false
Reputation:	low
URL:	https://www.redcrossblood.org/content/dam/redcrossblood/rcb/blood-scheduling/Heart_Version_2.jpg
Preview:	.....!Exif..MM..............................b...........j.(...........1.....$...r.2...........i....................'.......'.Adobe Photoshop CC 2017 (Macintosh).2018:02:09 14:56:41........................................................................&.............(.....................6...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................N...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.I%)$.IK...&4.\<.H...RS!..wV...;.......F....S.%..........k.:KH.o.6......9....!..q.~.7.q5.r...i..+M.1.. .\Vma.y.>...].[..@...w.y...L......l}u.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 336 x 73, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16440
Entropy (8bit):	7.357665630248323
Encrypted:	false
SSDEEP:	384:p5a1EuxjwrfSzeFTU5/uTybNGWnE79c3vf56KWm:p5wEu5wrfSzeF4ZcyFnbf5ZWm
MD5:	2F6620C6768E548BAA8D3931E6DAF115
SHA1:	4AEABEE3894EFE26620B71223509D115B0F53EFC
SHA-256:	65B1BB8BA0DA3E35D9098D64BDC3492AA9DFC0F756A058BB89E71763B47319D1
SHA-512:	10635B67A6EF2F98264786DD9DE50D1CFAA326EA973ABD4F45BACC1B700D6F7007D6B57C07643201A5D7099D365C96673A18707090EBB88F9A146FB974065B7E
Malicious:	false
Reputation:	low
URL:	https://www.redcrossblood.org/content/dam/redcrossblood/images/arc-biomed-logo.png
Preview:	.PNG........IHDR...P...I.....kF~>...`iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.163858, 2019/03/06-03:18:36 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2019-09-24T08:13:02.115Z". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Comments="Software: Adobe ImageReady XML:com.adobe.xmp: <?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:x

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32766)
Category:	downloaded
Size (bytes):	518826
Entropy (8bit):	5.362077010793146
Encrypted:	false
SSDEEP:	6144:Be0IWZWFXE2ykz71ohB11571IQMwEJguIOFFElurv7fR6w9lJW4BA0Jdp1kjMO0H:XIMfy1of115Nub4lurvDgNj/G1
MD5:	F87A6F1CF7915A26A808CF2E7E27F20C
SHA1:	5023083AD66C9B56AA18B4BF8090726F9839C2DA
SHA-256:	9C942E033D0427AD693B4ADFB89C0FBF7D8D1CEBF14C6459B75580C27DF9CAA4
SHA-512:	FB9C24694AD444C2ADE38E78CB12E0327F1FE629AC3C8560A8422D853BFD8FBAF82E8292A408339390C62CB08B9D084AC7DA37AF10762362250C93BA617E8AC3
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/16a36399704a/453d9ca51f91/launch-a1e85d51a3d8.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/16a36399704a/453d9ca51f91/launch-a1e85d51a3d8.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-09-30T13:16:05Z",turbineBuildDate:"2024-08-22T17:32:44Z",turbineVersion:"28.0.0"},environment:{id:"EN8c4e92e5039e4ae18e41e47241de79ec",stage:"production"},dataElements:{identityVisitorEmailHash:{modulePath:"gcoe-adobe-client-data-layer/src/lib/dataElements/datalayerComputedState.js",settings:{path:"user.identities.visitorEmailHash"}},metaPixel:{modulePath:"core/src/lib/dataElements/constant.js",settings:{value:"1599953746963987"}},weekdayWeekend:{modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){const e=(new Date).getDay();return 0===e\|\|6===e?"Weekend":"Weekday"}}},eventData:{modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(e){const t=e.detail;if(t){const e=t.eventData?t.eventData:{};t.event=t.event?t.event:t.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	707
Entropy (8bit):	7.608379497092155
Encrypted:	false
SSDEEP:	12:6v/72rv20pmLArWk2UAgMfiaceqtFitbGfCWbV9t7nufTemoVqA7:3+0p3WDji9nfVPNJmoV9
MD5:	7290F6031BD5CEA8970D79AB346427D2
SHA1:	17042049CBACA23A2990C33EDE3F36AAF9D8E45F
SHA-256:	FFC59F3FA4B095C9CB419B0F615672259704D41C802AFAB6E354E83AD8D8851B
SHA-512:	95E876118054BDA242CE146A9D385826D6C1D023BD48C1D7B6B8F18059596CE13A703E6808BB669A37DCF77734E48D47DE60AAAABCC9A5F4527B08B9C77417CE
Malicious:	false
Reputation:	low
URL:	https://www.redcrossblood.org/etc/designs/redcross/rcbcontent/favicon.ico
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...eIDATx.S[k.Q.>.{.MJc.BB.6...s.B\|..../.....">..R..}*..%.`Z0.xI.j.1...n....gN.(6..&L..7.7sf.....5....D.4.X(...).......(....`..$IS..q'...g.K..p\w...9.1...J....,.$$d.....$..J..-.u..^..}.A......0rl...cL.#..~{m}94...O..u`4(."...w...c.nvvf.....}.69.5J)Q..(...."...t.\|... ..:.F.E...P....daA..ku.P@?ukc.2M...j9....#..B.Ng..p...!...;......N....P3.B.\|~.t).F.Q....HM.Ha....<l...N.\|..pPV.D.H...#...b.......j..;....0$...q......>.E2..\..Fc...\|.K++k.~.E..0d.a...c.4.....~....Ch....K..f.~.V..:...B9^(..cq.-....'.n...m.\|...6.`.N..\|lu....s.9.s.lv.................&..!.......N... .8...@...Z .=..0....`.A.j........IEND.B`.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://www.facebook.com/fr/b.php?p=1531105787105294&e=ZwmrIgAIc-zJMAA9&t=2592000&o=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	3.9951663126378123
Encrypted:	false
SSDEEP:	3:U3KTDW3MiLLUHcjVXlVBT7J:H6NLgHWXZT7J
MD5:	97B958FA75E225CEA6FA3F3E399010D0
SHA1:	4DDFF887AB1D6FFC1678A717F1327E6C0900B9F8
SHA-256:	0C909725B0EA7DA9994F16E47A4142783410C5AA25CDD7770F85DC61EB8A170C
SHA-512:	C8130E21AF2E53D9B3615EAF54714A1160C0D2D80629F4EC19108F307226FA62ED9A45D415041C649A9E2BC2631AF87DD0FC88792051B82096904D3A44166882
Malicious:	false
Reputation:	low
URL:	"https://bam.nr-data.net/1/20e6e07576?a=94805257&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=15627&ck=1&ref=https://www.redcrossblood.org/give.html/404&be=2844&fe=14867&dc=6446&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1728686873483,%22n%22:0,%22f%22:25,%22dn%22:34,%22dne%22:57,%22c%22:57,%22s%22:58,%22ce%22:799,%22rq%22:799,%22rp%22:1392,%22rpe%22:1596,%22dl%22:1424,%22di%22:6443,%22ds%22:6443,%22de%22:6461,%22dc%22:14867,%22l%22:14867,%22le%22:14870%7D,%22navigation%22:%7B%7D%7D&fp=6407&fcp=6407&jsonp=NREUM.setToken"
Preview:	NREUM.setToken({'stn':0,'err':1,'ins':1,'spa':1,'sr':0,'srs':0,'st':1,'sts':0})

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25086), with no line terminators
Category:	downloaded
Size (bytes):	25086
Entropy (8bit):	4.982083688514774
Encrypted:	false
SSDEEP:	192:FETH+G/NAd/L/tarncfb0oWqMElhkZ/i/W1/M/z/E/N3Mo/mUDIaR+9q9q5FOrcY:F6+0JCkMouG3AicDsD9oZdR/CmW
MD5:	841F41E2C0E9805A580C06A0D6ED186B
SHA1:	A98ED099D05144E4B8BA3AF51C2182E3645826BD
SHA-256:	AC72A58B6772D185FFC99A6C2FC86B3446708A9C0B86636B7F4C3CC88865AC01
SHA-512:	94F9C44FC5F0546E9BC5B04EE6A9A183CCCC3EF5C7D0892BCE7CCF26F80185978E1559C57949A985DAF80A21CA01E75C308C42833ABF6F917A06A0B905EA4A90
Malicious:	false
Reputation:	low
URL:	https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive.min.841f41e2c0e9805a580c06a0d6ed186b.css
Preview:	/! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[ty

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1122)
Category:	dropped
Size (bytes):	1269
Entropy (8bit):	5.275813202177879
Encrypted:	false
SSDEEP:	24:/Q1ct/BeQRuJymonhnjYfpJCYf/ag0aPxU+IEdI21GMYSp:nt/BXuFmZqpgWCgRP5IkI7y
MD5:	1425D61F285276C5BC4F602B5ABE3DE2
SHA1:	A2331067AA60FF32127BAC0544AF708E1574CF39
SHA-256:	0FF7051F9892C84DC9A7BC4AB174C39E821FD703EE85DDFFDF97FC3F51DEC3C7
SHA-512:	36850CB14E19E3100A2D07AA5FF87CB9FF72A2722297BCAB130521ED220AE15ECB313A2F814F958CECA1B6477B7371C28CB9BD92B6293A7024E33FC5D2C8C54A
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC38acd34605ce4867a436ae91848f9e39-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC38acd34605ce4867a436ae91848f9e39-source.min.js', "function sendEvent(e){const t=_satellite.getVar(\"eventData\",e);if(\"web.webinteraction.linkClicks\"===e.detail.event?window.adobeDataLayer.push({_experience:{analytics:{event1to100:null,event101to200:null,event201to300:null}},_redcross:{form:null,donationDetails:{presetAmount:null,paymentType:null}}}):\"route-change\"===e.detail.event&&(e.detail.web.webPageDetails.name=_satellite.getVar(\"spaBase\")+\":\"+e.detail.web.webPageDetails.viewName),window.adobeDataLayer.push(t),\"rco-login\"===e.detail.event){const t=e.detail,n=t&&t.user?t.user.identities:{},i=n?n.userId:null,l=n?n.accountEmail:null;_satellite.cookie.set(\"profile\",JSON.stringify({id:i,email:l}),{expires:1/48})}else\"rco-logout\"===

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	323747
Entropy (8bit):	5.567682709836014
Encrypted:	false
SSDEEP:	6144:D4xP8OF1uN7O54gBB1xcQLeD5EyaCmQdZKQo:UxZFgNiQtf+
MD5:	7CA90FC0207C3394525930E3DEA4085C
SHA1:	7F9E582A7B4766A6F27CE431425EDE69907C2047
SHA-256:	0A497A92A4637C1004582DB7F458AEB691827D896D38D7239786A6A0B3D72B15
SHA-512:	1B38131579E1F37A158CCA77374503E8E7775D6CE88CD66DF78BF64BD63E3A9E28DBB83D5BBB336AEA6A87EE6BDDF92E7B701DC03CAA0DE15C0111AF9B43CBB8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-XWN4JVMX8J&l=dataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52360)
Category:	dropped
Size (bytes):	349584
Entropy (8bit):	5.418305436693556
Encrypted:	false
SSDEEP:	3072:8JV0gSqdzJ3IZoCmn2y4nN4f9YPp8BwLzjPVhj1WOMUOxef54UjBuvZOcUX1YkEw:8JV06Qy4nN69YR8uLzzn1WOMU0ezdpP
MD5:	87C715B4DC4F81B18D226755469580A6
SHA1:	14DC54A67FFDDBD021AEF53EAFDA7C16F3133919
SHA-256:	4E9F6A80A2C5E548C6CDB6AB88151D457A77C8F33A626B3153AED2846B59A56A
SHA-512:	B1CD1FDDF262BAA5EEA0A6E7743DB4E3E90E949FB60104503496B90CF42C7DB1EA80B2A791BA87066AE713B037D0F233C09BB664A36D09E8CD678DA8487E68A5
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},r=Object.prototype,n=r.hasOwnProperty,o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",a=o.asyncIterator\|\|"@@asyncIterator",c=o.toStringTag\|\|"@@toStringTag";function u(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{u({},"")}catch(t){u=function(t,e,r){return t[e]=r}}function l(t,e,r,n){var o=e&&e.prototype instanceof p?e:p,i=Object.create(o.prototype),a=new I(n\|\|[]);return i._invoke=function(t,e,r){var n="suspendedStart";return function(o,i){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===o)throw i;return T()}for(r.method=o,r.arg=i;;){var a=r.delegate;if(a){var c=g(a,r);if(c){if(c===s)continue;return c}}if("next"===r.method)r.sent=r._sent=r.arg;else if("throw"===r.method){if("suspendedStart"===n)throw n="completed",r.arg;r.dispatchException(r.arg)}else"return"===r.method&&r.abrupt("return",r.arg);

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "build.min.js", last modified: Wed Apr 10 21:27:41 2024, from Unix, original size modulo 2^32 76432
Category:	dropped
Size (bytes):	23431
Entropy (8bit):	7.989595175333573
Encrypted:	false
SSDEEP:	384:wqd7ldoHsoBpEGtKTtoUyrmhtwX0NclNN8oR8miptv0Em0670Wn7HKDfTX/4mRLR:37luTBBtaoUuXENcvN383pLmrv7Hu/4Q
MD5:	F4EC9657A3DC111D088E2ECA7B9796A4
SHA1:	09C35D743B3BEEA77182EDD32741C7FD8DA7C6F5
SHA-256:	26CE152A459AA437F10161A8D3AA8BDF3D7219F1E082896897EB96F305822EEA
SHA-512:	CE6A632376579C38CB4D7F095390E50D52AFB5C628A032A1C8A301A76A79D284C751B4908DDE0A3F8BDEA21DC6AED926BB709EFB7DE5E2A1D8ADABE09BF8D8E2
Malicious:	false
Reputation:	low
Preview:	....M..f..build.min.js..y_..0.?.Bhr.4..&.,R...H.L..H23...Zl.l.X6K..g.....nI.f.9.y~.w...^.....j.?.G.4.[.q......M....tf..&..0....x..S6.6...l..+......o.(....^..gi?M...5a.i...W..X.`S.....A0..$Y...~M...'.t..O.I2..I.mJ...~2't".&.[,...Sv.N..,C....&....4..c...8<."..../S...m..b.....`.}......N.\|m...0.V.2.......[..a.m....q.....M-..0h..s....`v.Z.}..Q.#.a....}.f.A...!G...4.4v.S.en..8..0..h..]....d.....f.+...'..<..'..`>...a:.L.@.......z.[-...:.S.W..H....N.v.........<....1$..?.B+..p5......p5....."X..(....\|..a...i:..i..pa/.0...1n:...8.M..0.F"G...Gh..3..0.\|......l...kkV...[..c.....oo.4O...dVD........U........qD.... ......V.VD,.j{!~t...D..."..Fl8t.d2......8l:..`....\.>S...U,..;..zbprj....DP.VQ....+.@....j..8?M.31.....H...0..j..2!.bBN..9e.+....S....Y]...2..6.\.\}.[.....81.n...d.Oe....>..{......@...0k.\._...U...Y:.L..G.....N..........S.$\|..N.y..5...._.4..@&$:..sK.. .M.5L...}......................rb.A..2.w...~>..i%.e...6....s..E.V.s...=.M.C..1.).?\..i..5.4.M..B

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64222)
Category:	downloaded
Size (bytes):	3850051
Entropy (8bit):	5.632728638801723
Encrypted:	false
SSDEEP:	49152:ORXVaqmucPiIKSi+CQXk/3+9TWlmw95EUc/vAusvCTOv:KczJi+CQXk/3+9TWlhW9ve
MD5:	C1A1559272853485DC28DBBF1646447B
SHA1:	F7548A76DC72D53166A8770A498A3789415D789C
SHA-256:	7FFABF09222CBC6EB7B174142E7AEC77695969C34259BBD88F62CA8DE6A83487
SHA-512:	9CF97E3CC3F767A719CDEEEA29AA82C8659CCEDF6359CECD77478E0D796B9EC61047536D79C7A9DF8C7779018DA263C6121F55F30B900FE25BA3BEBEA280FA66
Malicious:	false
Reputation:	low
URL:	https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive.min.js
Preview:	!function(){"use strict";var r,n={},e={};function t(r){var o=e[r];if(void 0!==o)return o.exports;var u=e[r]={id:r,loaded:!1,exports:{}};return n[r].call(u.exports,u,u.exports,t),u.loaded=!0,u.exports}t.m=n,r=[],t.O=function(n,e,o,u){if(!e){var i=1/0;for(l=0;l<r.length;l++){e=r[l][0],o=r[l][1],u=r[l][2];for(var f=!0,a=0;a<e.length;a++)(!1&u\|\|i>=u)&&Object.keys(t.O).every(function(r){return t.O[r](e[a])})?e.splice(a--,1):(f=!1,u<i&&(i=u));if(f){r.splice(l--,1);var c=o();void 0!==c&&(n=c)}}return n}u=u\|\|0;for(var l=r.length;l>0&&r[l-1][2]>u;l--)r[l]=r[l-1];r[l]=[e,o,u]},t.n=function(r){var n=r&&r.__esModule?function(){return r.default}:function(){return r};return t.d(n,{a:n}),n},t.d=function(r,n){for(var e in n)t.o(n,e)&&!t.o(r,e)&&Object.defineProperty(r,e,{enumerable:!0,get:n[e]})},t.o=function(r,n){return Object.prototype.hasOwnProperty.call(r,n)},t.nmd=function(r){return r.paths=[],r.children\|\|(r.children=[]),r},function(){var r={666:0};t.O.j=function(n){return 0===r[n]};var n=functio

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2017 (Macintosh), datetime=2018:02:09 14:56:41], baseline, precision 8, 1440x700, components 3
Category:	dropped
Size (bytes):	537581
Entropy (8bit):	7.953323418209309
Encrypted:	false
SSDEEP:	12288:Q8I08kHVx6F8+vF/YrzSdgUqXdWYY/fAiAloS:Q8I2Vxw8+tSpUsddYXAi0
MD5:	C6541E73867C172757482A56D5279DAB
SHA1:	D4B5C2403059EF03073D44A207A5E7F53C1249E8
SHA-256:	08E089C49E99FF473B5D4374CB40726E279218DDB7C5DD721FE78B068B78459C
SHA-512:	6C13383A3BC6DA3C5DF522C4DE5056F07DF6D55A3A38C85DDDF3D01D8B54FB52977A54AE5BA30E5F8C562B7542C0C8E65BD9BD343A61369ACD8DB0A69D97571A
Malicious:	false
Reputation:	low
Preview:	.....!Exif..MM..............................b...........j.(...........1.....$...r.2...........i....................'.......'.Adobe Photoshop CC 2017 (Macintosh).2018:02:09 14:56:41........................................................................&.............(.....................6...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................N...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.I%)$.IK...&4.\<.H...RS!..wV...;.......F....S.%..........k.:KH.o.6......9....!..q.~.7.q5.r...i..+M.1.. .\Vma.y.>...].[..@...w.y...L......l}u.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32766)
Category:	dropped
Size (bytes):	518826
Entropy (8bit):	5.362077010793146
Encrypted:	false
SSDEEP:	6144:Be0IWZWFXE2ykz71ohB11571IQMwEJguIOFFElurv7fR6w9lJW4BA0Jdp1kjMO0H:XIMfy1of115Nub4lurvDgNj/G1
MD5:	F87A6F1CF7915A26A808CF2E7E27F20C
SHA1:	5023083AD66C9B56AA18B4BF8090726F9839C2DA
SHA-256:	9C942E033D0427AD693B4ADFB89C0FBF7D8D1CEBF14C6459B75580C27DF9CAA4
SHA-512:	FB9C24694AD444C2ADE38E78CB12E0327F1FE629AC3C8560A8422D853BFD8FBAF82E8292A408339390C62CB08B9D084AC7DA37AF10762362250C93BA617E8AC3
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/16a36399704a/453d9ca51f91/launch-a1e85d51a3d8.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-09-30T13:16:05Z",turbineBuildDate:"2024-08-22T17:32:44Z",turbineVersion:"28.0.0"},environment:{id:"EN8c4e92e5039e4ae18e41e47241de79ec",stage:"production"},dataElements:{identityVisitorEmailHash:{modulePath:"gcoe-adobe-client-data-layer/src/lib/dataElements/datalayerComputedState.js",settings:{path:"user.identities.visitorEmailHash"}},metaPixel:{modulePath:"core/src/lib/dataElements/constant.js",settings:{value:"1599953746963987"}},weekdayWeekend:{modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){const e=(new Date).getDay();return 0===e\|\|6===e?"Weekend":"Weekday"}}},eventData:{modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(e){const t=e.detail;if(t){const e=t.eventData?t.eventData:{};t.event=t.event?t.event:t.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.5724312513221195
Encrypted:	false
SSDEEP:	3:uZuUeB:u5eB
MD5:	53AF239EE5D3E261545DEDEDCB6FFD57
SHA1:	04CA7E137E1E9FEEAD96A7DF45BB67D5AB3DE190
SHA-256:	99EB12F2AB3C4866A353E098FFA3CB7A967E617C49B98480394EC5D8EA92B094
SHA-512:	C734E4A5FF5D335A91518DBF47861BDAF8012AF49371DCD2E3350E269C9A5A1CC094114D17C4F5B053F3757B4B07487EBD0D309C91EF97ACF4665CC5D5C9A2D3
Malicious:	false
Reputation:	low
Preview:	404 page not found

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32013)
Category:	downloaded
Size (bytes):	38395
Entropy (8bit):	5.317660187499057
Encrypted:	false
SSDEEP:	384:P/R9FYH1rlixOENuir4aDy6BwwyBIiDzAxdDIowkClSJRY+d9Fb06gQHqk6G+vBN:PZ3g48aDy6diCFR0vIih3y1M/eJ9FJK
MD5:	6B93DBF34696DF852C6D69D1652851DE
SHA1:	766CCE6A8D3915867B60446B8D3EDC2C4501E19F
SHA-256:	6AC927BF968F13F78B024DE0F986CA3A18D95852AEE8423F748D252FCA5C5C96
SHA-512:	874860356D009178EE7DF667D4C65856C02DD23DC8BF580DB6D80CEC5973C665CA14C8BF772B1F04993353E89C398975C65E6A29BF49602FFCF2AEAEA6C90B88
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-spa-1184.min.js
Preview:	!function(t,n,e){function r(e,o){if(!n[e]){if(!t[e]){var a="function"==typeof __nr_require&&__nr_require;if(!o&&a)return a(e,!0);if(i)return i(e,!0);throw new Error("Cannot find module '"+e+"'")}var s=n[e]={exports:{}};t[e][0].call(s.exports,function(n){var i=t[e][1][n];return r(i\|\|n)},s,s.exports)}return n[e].exports}for(var i="function"==typeof __nr_require&&__nr_require,o=0;o<e.length;o++)r(e[o]);return r}({1:[function(t,n,e){n.exports=function(t,n){return"addEventListener"in window?window.addEventListener(t,n,!1):"attachEvent"in window?window.attachEvent("on"+t,n):void 0}},{}],2:[function(t,n,e){function r(t,n,e,r,o){d[t]\|\|(d[t]={});var a=d[t][n];return a\|\|(a=d[t][n]={params:e\|\|{}},o&&(a.custom=o)),a.metrics=i(r,a.metrics),a}function i(t,n){return n\|\|(n={count:0}),n.count+=1,f(t,function(t,e){n[t]=o(e,n[t])}),n}function o(t,n){return n?(n&&!n.c&&(n={t:n.t,min:n.t,max:n.t,sos:n.tn.t,c:1}),n.c+=1,n.t+=t,n.sos+=tt,t>n.max&&(n.max=t),t<n.min&&(n.min=t),n):{t:t}}function a(t,n){return

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (380), with no line terminators
Category:	downloaded
Size (bytes):	380
Entropy (8bit):	5.567996209281127
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzw9xUpCX96v6OqPbRmEHc5nRx4MJ6GhOfTRWMcwU3nkiI/:hnMQbwuOaxyCkv4AEHkRKQthOfTRA1kf
MD5:	1245E25CECF1640914F33D9D5E18219D
SHA1:	EB1F6BB24997F9D176D446F4FDAEF02B2E36B064
SHA-256:	E6E561D613B61208BC4624FD5AA8CAE2D760C451B27D325A2353E4B1802CFC84
SHA-512:	D252C6E9FB4B4B91DF494FEFFBC044B4660FEEECABDBC5D7A89CA17819E2DBB53F0E5716130A152621B64EC065AC320A7207CC93A26B7F7392151E82B7599ADB
Malicious:	false
Reputation:	low
URL:	https://4706068.fls.doubleclick.net/activityi;dc_pre=CKHrpsS0h4kDFcGngwcdCs8J7w;src=4706068;type=rcopa0;cat=rconeADO;u6=56533479113366688501602802432891303576;ord=8269349374745.352?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CKHrpsS0h4kDFcGngwcdCs8J7w;src=4706068;type=rcopa0;cat=rconeADO;u6=56533479113366688501602802432891303576;ord=8269349374745.352"/></body></html>

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65241)
Category:	dropped
Size (bytes):	72535
Entropy (8bit):	5.292071082703333
Encrypted:	false
SSDEEP:	1536:jDFXTROYFbeDtyZxg6V4mMeexs1Lzu3JlQ5uCe/ZiEm9WTNBbgRC0W/XL3JaQ47u:FuIy3JlQ5cLURAJaQ47GKC
MD5:	6BB2D76BC531993F8368CEF389E88B04
SHA1:	50504DD95E37488EB9871BEE661C588F84E04C9C
SHA-256:	C3C0AF845B3B88735552D9D23F460A120D34A7D221D77AE52FDCC6AAF2DD78F0
SHA-512:	C81A6E7E56663F9970333674DE18822F303DE0DD0ADAF801B4982A43613599E27398805F8DB6FB938636DE4DA2D9CFEB21E49419CEE3A23C88639C1A2B767109
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(g,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,v=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),m={},b=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},w=g.document,c={type:!0,src:!0,nonce:!0,noModule:!0

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52360)
Category:	downloaded
Size (bytes):	349584
Entropy (8bit):	5.418305436693556
Encrypted:	false
SSDEEP:	3072:8JV0gSqdzJ3IZoCmn2y4nN4f9YPp8BwLzjPVhj1WOMUOxef54UjBuvZOcUX1YkEw:8JV06Qy4nN69YR8uLzzn1WOMU0ezdpP
MD5:	87C715B4DC4F81B18D226755469580A6
SHA1:	14DC54A67FFDDBD021AEF53EAFDA7C16F3133919
SHA-256:	4E9F6A80A2C5E548C6CDB6AB88151D457A77C8F33A626B3153AED2846B59A56A
SHA-512:	B1CD1FDDF262BAA5EEA0A6E7743DB4E3E90E949FB60104503496B90CF42C7DB1EA80B2A791BA87066AE713B037D0F233C09BB664A36D09E8CD678DA8487E68A5
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/main.MTdkNGE4ZTU0MQ.js
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},r=Object.prototype,n=r.hasOwnProperty,o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",a=o.asyncIterator\|\|"@@asyncIterator",c=o.toStringTag\|\|"@@toStringTag";function u(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{u({},"")}catch(t){u=function(t,e,r){return t[e]=r}}function l(t,e,r,n){var o=e&&e.prototype instanceof p?e:p,i=Object.create(o.prototype),a=new I(n\|\|[]);return i._invoke=function(t,e,r){var n="suspendedStart";return function(o,i){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===o)throw i;return T()}for(r.method=o,r.arg=i;;){var a=r.delegate;if(a){var c=g(a,r);if(c){if(c===s)continue;return c}}if("next"===r.method)r.sent=r._sent=r.arg;else if("throw"===r.method){if("suspendedStart"===n)throw n="completed",r.arg;r.dispatchException(r.arg)}else"return"===r.method&&r.abrupt("return",r.arg);

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	51
Entropy (8bit):	4.257935822610366
Encrypted:	false
SSDEEP:	3:YWMmqegWT/aNJtZlCn:YWMm9gXNJt6
MD5:	1B721AAB25417D5AEC04BBDC798F68C5
SHA1:	736AFFE428972F3A0A076E33FF1AA3AC592B991F
SHA-256:	DD7C1262AFB6324CFB7AE6808AEFBF8F796BBD7D83561B695D7C849540C8D950
SHA-512:	CFEE5B92975ECCF47ED97150FBAB56EDD046F3E29C0D288084DF7C2030432C07A8919B68AE21E17EDC157F7D3F0A8CE89EA21008EE8EE152A2DB5CC0DF5C232B
Malicious:	false
Reputation:	low
Preview:	{"site_domain":"arlid:434600","rate_limited":true}.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7082)
Category:	downloaded
Size (bytes):	44395
Entropy (8bit):	5.496673337396287
Encrypted:	false
SSDEEP:	768:soYwxAHXUpY/Y3YOgQxLAbnYeYQW9cYZYHYZYVY+YsqIedzA9KN9mO1RbkvT8oAC:R76HXswuvLcn5vV4WAcl8zA9K7hC
MD5:	885303E2D4623047BD27997B8858526A
SHA1:	EFB5058B92C91700F0D7FBB07B2A6504D8887555
SHA-256:	933517D16FB01EFCEA157AA5E7C428623865C82361F5CD1091ADE2FB1421A468
SHA-512:	51B48D86B1ECA3D4D3A934D928518B13651F766D540E9EE703BD620ACBFACFEB6EFE7FE2CB0A4F0BB2761106E67568D68370833E1224B288FB6261418C8FC829
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1731308323821672?v=2.9.170&r=stable&domain=www.redcrossblood.org&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C145%2C172%2C158%2C117%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C127
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, software=Adobe Photoshop CC (Windows)], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	80469
Entropy (8bit):	7.661925782366685
Encrypted:	false
SSDEEP:	1536:55T5+7LzjNROh0+dHCYTMdAbGKBelz7M6C55G5OW/OoQCldU:3T5+7PxROm4HCHdEGcexLCXgOW/UCE
MD5:	A83356B016D89046001275BE0DB5DFDF
SHA1:	88A1365BF3C44F8499E9138F220E94D9B31C489E
SHA-256:	BDA3AD054C360DC00E5673566B065A8A6278C72CF49FFD7FE85CBDF2E1969281
SHA-512:	1DC8D8A0E1905B08803B83C5172DC2C41B90A65BD7C6ABB2CD6E749280D051883D6A66A37209F08E4BF22DDAC61759A75012A42D1738A952E4F0B0D164196342
Malicious:	false
Reputation:	low
Preview:	.....HExif..II*...............1.......".......Adobe Photoshop CC (Windows).....`http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.163858, 2019/03/06-03:18:36 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="JPEG". dam:Progressive="no". dam:extracted="2017-10-17T11:43:47.603-04:00". dam:Bitsperpixel="24". dam:MIMEtype="image/jpeg". dam:Physicalwidthindpi="-1". dam:Physicalheightindpi="-1". dam:Numberofimages="1". dam:Numberoftextualcomments="0". dam:sha1="e3c06670c62d523

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	323801
Entropy (8bit):	5.5678715203857125
Encrypted:	false
SSDEEP:	6144:D4xP8OF1uVNO54gBB1xcQL7D5EyaCmQdZK2W:UxZFgVQntf2
MD5:	229F9BB0F88D8566877638907091B647
SHA1:	5E766ACCBEB4A90FC7B459A6CEFD6D844A9A0ADE
SHA-256:	295F16A9A64FBE0E8F66AB1265881FE6FFDFD96ADE0C0B22F4C88D7044AA5752
SHA-512:	5FD1845203B9928168098213D4F49DBD6C2BA2C4E5FE7C14FBD3349D32B5339AD68CBD92C2D8258FFA333CB214268D5103C1B1BB8A6EE6D930D4D2E3F4C0D94F
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	79
Entropy (8bit):	3.9951663126378123
Encrypted:	false
SSDEEP:	3:U3KTDW3MiLLUHcjVXlVBT7J:H6NLgHWXZT7J
MD5:	97B958FA75E225CEA6FA3F3E399010D0
SHA1:	4DDFF887AB1D6FFC1678A717F1327E6C0900B9F8
SHA-256:	0C909725B0EA7DA9994F16E47A4142783410C5AA25CDD7770F85DC61EB8A170C
SHA-512:	C8130E21AF2E53D9B3615EAF54714A1160C0D2D80629F4EC19108F307226FA62ED9A45D415041C649A9E2BC2631AF87DD0FC88792051B82096904D3A44166882
Malicious:	false
Reputation:	low
Preview:	NREUM.setToken({'stn':0,'err':1,'ins':1,'spa':1,'sr':0,'srs':0,'st':1,'sts':0})

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	149805
Entropy (8bit):	5.6004134683803555
Encrypted:	false
SSDEEP:	1536:Cnxj4bndhXdOU0tNo455wjdrm/bK+OTRMWMrvBDJTcitj+wf2EAeiPWMWNZVgdyo:Cnxj479OU03o4PwjhIBVT39ROyuvb
MD5:	5693E74A87CDFE0DD8CF9E97ABC2EC67
SHA1:	0912A92CEBFC4248B4D561F57B32D18135F9AD59
SHA-256:	79951B5BD4D729A2B2F4D380819F2C14BBCF26F21DB56A520189633467766CF4
SHA-512:	B0954FF6229C037AAEC67F6CC91889D3AD1C0D38AC3E53E61F3A98D49379FA43C1FF709C7017459B9BD416BCEB2236D90B24C17E072882C122360069DCD9E0E0
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},d=Object.prototype,n=d.hasOwnProperty,r="function"==typeof Symbol?Symbol:{},o=r.iterator\|\|"@@iterator",i=r.asyncIterator\|\|"@@asyncIterator",a=r.toStringTag\|\|"@@toStringTag";function $(t,e,d){return Object.defineProperty(t,e,{value:d,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{$({},"")}catch(t){$=function(t,e,d){return t[e]=d}}function u(t,e,d,n){var r=e&&e.prototype instanceof s?e:s,o=Object.create(r.prototype),i=new w(n\|\|[]);return o._invoke=function(t,e,d){var n="suspendedStart";return function(r,o){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===r)throw o;return E()}for(d.method=r,d.arg=o;;){var i=d.delegate;if(i){var a=_(i,d);if(a){if(a===c)continue;return a}}if("next"===d.method)d.sent=d._sent=d.arg;else if("throw"===d.method){if("suspendedStart"===n)throw n="completed",d.arg;d.dispatchException(d.arg)}else"return"===d.method&&d.abrupt("return",d.arg);

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32719)
Category:	downloaded
Size (bytes):	62091
Entropy (8bit):	5.453008483613087
Encrypted:	false
SSDEEP:	1536:R030Mf5pX0Ons8LVS+cODPf+VLTZK4Q28GC65bGEuuc5N:R030y0CPWV/1zZ2N
MD5:	A02680BABC20806329746EFE4823585B
SHA1:	61EDE3D97D99A9539F25635CE36585486E47F1AC
SHA-256:	D26359F09D0BE48E9508581151FEB005ABA256572B494E7EF4A3DF6AA00630D6
SHA-512:	EDE6A26DBF8BABCFB0966D4160E20C989D7BBAFCFF299F6E839E4070A6E21F2FC26CBB4AFCD3C36A33A2ECF019B6A82745FD14796CBD57145844543890646319
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/EX17fa10f475694f94906f4081bb9dea68-libraryCode_source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/EX17fa10f475694f94906f4081bb9dea68-libraryCode_source.js`..function s_getLoadTime(){if(!window.s_loadT){var e=(new Date).getTime(),t=window.performance?performance.timing:0,a=t?t.requestStart:window.inHeadTS\|\|0;s_loadT=a?Math.round((e-a)/100):""}return s_loadT}function getPreviousValue(e,t){var a=e,n=t;if("-v"===a)return{plugin:"getPreviousValue",version:"3.0"};var i,r=function(){if(void 0!==window.s_c_il)for(var e,t=0;t<window.s_c_il.length;t++)if((e=window.s_c_il[t])._c&&"s_c"===e._c)return e}();return void 0!==r&&(r.contextData.getPreviousValue="3.0"),window.cookieWrite=window.cookieWrite\|\|function(e,t,a){if("string"==typeof e){if(t=void 0!==t?""+t:"",a\|\|""===t)if(""===t&&(a=-60),"number"==typeof a){var n=new Date;n.setTime(n.getTime()+6e4*a)}else n=a;return!(!e\|\|(document.cookie=encodeURIComponent(e)+"="+encodeURIComponent(t)+"; path=/;"+(a?" expires="+n.toUTCString()+";":""),"undefi

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (31985)
Category:	dropped
Size (bytes):	207040
Entropy (8bit):	5.4572005914060355
Encrypted:	false
SSDEEP:	3072:y62bNbWHF80++NOtFkK/02nyjKKhBe4Rf0vdHlHMIWNbTiB:CbNb8Ft++N/v25KhR2HMI1B
MD5:	53F533FDF71FDB8527AB9FA6641E241B
SHA1:	8CDE78B625D06E4304941EC09EE038C47E4768DC
SHA-256:	95A439C4E11ACE2484E8D42C30FF56CF7DB5EA7C6463DF9CE2FDAFA7F6CCBF54
SHA-512:	D2E2A2EDDD0FBAF3EBCEDDE4B7CD5497BC40BDAD86ECD5A9FA4227E7F0C1DCEDB38867CCB3D004D027F675ED406FE437D2015DA949CA84B95F95A4FEA415075E
Malicious:	false
Reputation:	low
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ JavaScript MD5 1.0.1 Copyright 2011, Sebastian Tschan. Licensed under the MIT license. /./ Boomerang Version: 1.632.0 139f333a35e2484b05a07930423f1e230719cb95 */..function BOOMR_check_doc_domain(a){if(window){if(!a){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(b){BOOMR.isCrossOriginError(b)\|\|BOOMR.addError(b,"BOOMR_check_doc_domain.domainFix")}a=document.domain}if(a&&-1!==a.indexOf(".")&&window.parent){

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	371
Entropy (8bit):	4.600540137157355
Encrypted:	false
SSDEEP:	6:2LGaUImyCp0GlYM1wBJPyQK5DrIt6xfeGYqX3ofWLGJw47Jsr4z+LAltEsVsVsVo:2ffmyCkMwykgIaoO4nsrqH9yyyv
MD5:	97CF0FE353C517CEA6CB3E1F2E7EDFC9
SHA1:	58D8EB24BFD5CA347B6A0A72894E6C8B6EAE198F
SHA-256:	0E0C8CEDB72A7E5A3080203509132486E267E5D1B0C5C6EAE78AC16F7928FF01
SHA-512:	F3D33FE997DC8FDFF9B122C208321F1DB35B2A6C2650C8EAC119A2A20FAE74874691340C3419283AE0914E5405D51E40BF787469B3A7A2B66A81A68B6E2009EB
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/36000116.js
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', false, false, false, false, false);..

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4201)
Category:	downloaded
Size (bytes):	227832
Entropy (8bit):	5.544775206088561
Encrypted:	false
SSDEEP:	3072:Yf+H1CEOFp7Zzq0G6oI1LirsiI3XV9ujmxcQL58zao:S8OF1ZBO5IHGjmxcQL58Wo
MD5:	5D2A421FE4FB69E0176FABCFB361FDFB
SHA1:	0E4C578A10E92A7F28290C1018C3854175E0FEF5
SHA-256:	C30431A16E6BE29B3F18AA3409B9F125739420720D4668B3ACB7718F82B1ADC7
SHA-512:	62D3DA72C14EC821CC5788CC1B612C2C26F6836857A9EFBF4ACFDF81088AE4F452C95714430076C08A74B979B978EF05698586C9337B3719BB5BE64282C30D3F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=DC-4706068
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"DC-4706068","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__ogt_1p_data_v2","priority":0,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"",

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (737)
Category:	dropped
Size (bytes):	884
Entropy (8bit):	5.529550408922829
Encrypted:	false
SSDEEP:	24:US0ct/BpSVUosQVDIckRWZlhSTCLPIxTr:vt/B6UWIckwhzP0v
MD5:	A7869012AE78CF6C2AC7A0E144AF9AE7
SHA1:	9DDE1AD3C88C6B99A01EF35931E738A1921CD718
SHA-256:	0B7855CB82A3DDC69DB6DF8BF1AFBBEEE3815B6CC8408720A3C351C6DF610068
SHA-512:	2A2AD1421EE2D9BF8870EDED1580E1C02004DD4689A63C449C7E9A80A6E43FBD516203BDCACAF5A9453D30B714336C02BD75B1A40A785158F4A96083768D1F88
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC65a396d8c7f54301a04f272a1d7974d8-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC65a396d8c7f54301a04f272a1d7974d8-source.min.js', "<script>\n(function(w,d,t,r,u){var f,n,i;w[u]=w[u]\|\|[],f=function(){var o=\n\n{ti:\"36000116\"}\n;o.q=w[u],w[u]=new UET(o),w[u].push(\"pageLoad\")},n=d.createElement(t),n.src=r,n.async=1,n.onload=n.onreadystatechange=function()\n\n{var s=this.readyState;s&&s!==\"loaded\"&&s!==\"complete\"\|\|(f(),n.onload=n.onreadystatechange=null)}\n,i=d.getElementsByTagName(t)[0],i.parentNode.insertBefore(n,i)})(window,document,\"script\",\"//bat.bing.com/bat.js\",\"uetq\");\n\nwindow.uetq = window.uetq \|\| [];\nwindow.uetq.push('event', 'page_view', { page_path: '/RCOBIO_2889_Test' });\n</script>");

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CKHrpsS0h4kDFcGngwcdCs8J7w;src=4706068;type=rcopa0;cat=rconeADO;u6=56533479113366688501602802432891303576;ord=8269349374745.352
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.5724312513221195
Encrypted:	false
SSDEEP:	3:uZuUeB:u5eB
MD5:	53AF239EE5D3E261545DEDEDCB6FFD57
SHA1:	04CA7E137E1E9FEEAD96A7DF45BB67D5AB3DE190
SHA-256:	99EB12F2AB3C4866A353E098FFA3CB7A967E617C49B98480394EC5D8EA92B094
SHA-512:	C734E4A5FF5D335A91518DBF47861BDAF8012AF49371DCD2E3350E269C9A5A1CC094114D17C4F5B053F3757B4B07487EBD0D309C91EF97ACF4665CC5D5C9A2D3
Malicious:	false
Reputation:	low
Preview:	404 page not found

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "build.min.js", last modified: Wed Apr 10 21:27:41 2024, from Unix, original size modulo 2^32 76432
Category:	downloaded
Size (bytes):	23431
Entropy (8bit):	7.989595175333573
Encrypted:	false
SSDEEP:	384:wqd7ldoHsoBpEGtKTtoUyrmhtwX0NclNN8oR8miptv0Em0670Wn7HKDfTX/4mRLR:37luTBBtaoUuXENcvN383pLmrv7Hu/4Q
MD5:	F4EC9657A3DC111D088E2ECA7B9796A4
SHA1:	09C35D743B3BEEA77182EDD32741C7FD8DA7C6F5
SHA-256:	26CE152A459AA437F10161A8D3AA8BDF3D7219F1E082896897EB96F305822EEA
SHA-512:	CE6A632376579C38CB4D7F095390E50D52AFB5C628A032A1C8A301A76A79D284C751B4908DDE0A3F8BDEA21DC6AED926BB709EFB7DE5E2A1D8ADABE09BF8D8E2
Malicious:	false
Reputation:	low
URL:	https://cdn.branch.io/branch-latest.min.js
Preview:	....M..f..build.min.js..y_..0.?.Bhr.4..&.,R...H.L..H23...Zl.l.X6K..g.....nI.f.9.y~.w...^.....j.?.G.4.[.q......M....tf..&..0....x..S6.6...l..+......o.(....^..gi?M...5a.i...W..X.`S.....A0..$Y...~M...'.t..O.I2..I.mJ...~2't".&.[,...Sv.N..,C....&....4..c...8<."..../S...m..b.....`.}......N.\|m...0.V.2.......[..a.m....q.....M-..0h..s....`v.Z.}..Q.#.a....}.f.A...!G...4.4v.S.en..8..0..h..]....d.....f.+...'..<..'..`>...a:.L.@.......z.[-...:.S.W..H....N.v.........<....1$..?.B+..p5......p5....."X..(....\|..a...i:..i..pa/.0...1n:...8.M..0.F"G...Gh..3..0.\|......l...kkV...[..c.....oo.4O...dVD........U........qD.... ......V.VD,.j{!~t...D..."..Fl8t.d2......8l:..`....\.>S...U,..;..zbprj....DP.VQ....+.@....j..8?M.31.....H...0..j..2!.bBN..9e.+....S....Y]...2..6.\.\}.[.....81.n...d.Oe....>..{......@...0k.\._...U...Y:.L..G.....N..........S.$\|..N.y..5...._.4..@&$:..sK.. .M.5L...}......................rb.A..2.w...~>..i%.e...6....s..E.V.s...=.M.C..1.).?\..i..5.4.M..B

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?cc=1&id=537148856&val=ZwmrIgAIc-zJMAA9
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64222)
Category:	dropped
Size (bytes):	3850051
Entropy (8bit):	5.632728638801723
Encrypted:	false
SSDEEP:	49152:ORXVaqmucPiIKSi+CQXk/3+9TWlmw95EUc/vAusvCTOv:KczJi+CQXk/3+9TWlhW9ve
MD5:	C1A1559272853485DC28DBBF1646447B
SHA1:	F7548A76DC72D53166A8770A498A3789415D789C
SHA-256:	7FFABF09222CBC6EB7B174142E7AEC77695969C34259BBD88F62CA8DE6A83487
SHA-512:	9CF97E3CC3F767A719CDEEEA29AA82C8659CCEDF6359CECD77478E0D796B9EC61047536D79C7A9DF8C7779018DA263C6121F55F30B900FE25BA3BEBEA280FA66
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var r,n={},e={};function t(r){var o=e[r];if(void 0!==o)return o.exports;var u=e[r]={id:r,loaded:!1,exports:{}};return n[r].call(u.exports,u,u.exports,t),u.loaded=!0,u.exports}t.m=n,r=[],t.O=function(n,e,o,u){if(!e){var i=1/0;for(l=0;l<r.length;l++){e=r[l][0],o=r[l][1],u=r[l][2];for(var f=!0,a=0;a<e.length;a++)(!1&u\|\|i>=u)&&Object.keys(t.O).every(function(r){return t.O[r](e[a])})?e.splice(a--,1):(f=!1,u<i&&(i=u));if(f){r.splice(l--,1);var c=o();void 0!==c&&(n=c)}}return n}u=u\|\|0;for(var l=r.length;l>0&&r[l-1][2]>u;l--)r[l]=r[l-1];r[l]=[e,o,u]},t.n=function(r){var n=r&&r.__esModule?function(){return r.default}:function(){return r};return t.d(n,{a:n}),n},t.d=function(r,n){for(var e in n)t.o(n,e)&&!t.o(r,e)&&Object.defineProperty(r,e,{enumerable:!0,get:n[e]})},t.o=function(r,n){return Object.prototype.hasOwnProperty.call(r,n)},t.nmd=function(r){return r.paths=[],r.children\|\|(r.children=[]),r},function(){var r={666:0};t.O.j=function(n){return 0===r[n]};var n=functio

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	62860
Entropy (8bit):	5.016635568379279
Encrypted:	false
SSDEEP:	768:CIAqCGWW9pqopafboik8fQVknkaq5pF493xVtt/3eEi2ANz3hohz8fn5RfWtfeEN:CIdG+0ZMr8hnkz5pQoNzWh8n3kxV
MD5:	D3BF7A3D8A81DF2402611F3EA01F5BCD
SHA1:	249A87830FD457AF24507A85359AFCCA1142D5A9
SHA-256:	ABD42F3EDDEF6F7FC5E179107B8CFA4272D35808CC609F71BBE0002F8423CE8C
SHA-512:	3970C34BE9D688104A6B71C89CF843974F82E3F5957E61D5FDC74240725D59EC5BE71646D49789B470333EBD6AD0BE5D619BE3A753C93D780C776A3BA27ACD36
Malicious:	false
Reputation:	low
URL:	https://www.redcrossblood.org/give.authorData.json
Preview:	{. "jcr:title": "Schedule a Blood, Platelet or Plasma Donation \| American Red Cross",. "jcr:description": "Find the nearest Red Cross blood, platelet or plasma donation center. Make a difference in someone's life, give the gift of life.",. "pageTitle": "Schedule a Blood, Platelet or Plasma Donation \| American Red Cross",. "login": {. "buttonColor": "red-button",. "buttonLabel": "Sign In",. "emptyFieldsErrorMessage": "You cannot leave this field empty!",. "emptyFieldErrorMessage": "asdf",. "passwordLengthErrorMessage": "Password does not match length requirements. ",. "attributeSignInButton": "sign in",. "title": "Login",. "signInFailure": "<p>The username or password you entered is incorrect. Try entering them again or <a href=\"/give.html/reset-password\">get an email reminder<\/a>.<\/p>\r\n",. "attributeDonorLink": "i forgot my username/password". },. "temporary_password_login": {. "emptyError": "You can\u2019t leave this field empty!",. "tooSho

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 336 x 73, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	16440
Entropy (8bit):	7.357665630248323
Encrypted:	false
SSDEEP:	384:p5a1EuxjwrfSzeFTU5/uTybNGWnE79c3vf56KWm:p5wEu5wrfSzeF4ZcyFnbf5ZWm
MD5:	2F6620C6768E548BAA8D3931E6DAF115
SHA1:	4AEABEE3894EFE26620B71223509D115B0F53EFC
SHA-256:	65B1BB8BA0DA3E35D9098D64BDC3492AA9DFC0F756A058BB89E71763B47319D1
SHA-512:	10635B67A6EF2F98264786DD9DE50D1CFAA326EA973ABD4F45BACC1B700D6F7007D6B57C07643201A5D7099D365C96673A18707090EBB88F9A146FB974065B7E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...I.....kF~>...`iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.163858, 2019/03/06-03:18:36 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2019-09-24T08:13:02.115Z". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Comments="Software: Adobe ImageReady XML:com.adobe.xmp: <?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:x

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2423)
Category:	downloaded
Size (bytes):	2424
Entropy (8bit):	5.118561257013647
Encrypted:	false
SSDEEP:	48:dnxDYtXRpX2Va5eTpM8ChHViYro7bxSy8w0zhP2B/kheLQ+JvQ:dxDY5RpGVawnyHVDroJSy/0zh+Bs0Q2I
MD5:	C1E398D8CC65CD9241CC3F1840ADD2CB
SHA1:	316B1005D23D838C83E8BC65D3C2679B8C098DF6
SHA-256:	89CF66CB9DE8DA20FC15E9953845DD4D1DE2C0FB465C827A09D818449222C533
SHA-512:	E534DC63DB678A8248B5E3D83B34C7324B23C27055402616A98DE3009B9C524B0C31C08291482F3B0720061F35EEEF30803FE98E8B5AF8438A3EBD2A6D49AAD9
Malicious:	false
Reputation:	low
URL:	https://origin.acuityplatform.com/event/v2/pixel.js
Preview:	"use strict";!function(s,u){var l=s.__acuityAdsPixelEventServer\|\|"https://e.acuityplatform.com/pj",r="http://",n="https://",y="pixelKey",f="pk";function a(e){try{var t=d(function(e){var t=e.err,r=e.topFrame,n="";if(t)try{n=s.top.location.href}catch(e){n=s.location.href}else n=r.location.href;return n}(function(){var e=s,t=!1;try{for(;e.parent.document!==e.document;){if(!e.parent.document){t=!0;break}e=e.parent}}catch(e){t=!0}return{topFrame:e,err:t}}())),r=function(e){{if(e.hasOwnProperty(y)&&e[y])return e[y];if(e.hasOwnProperty(f)&&e[f])return e[f];if(s.acuityAdsPixelKey)return s.acuityAdsPixelKey;throw new TypeError("Missing required Pixel Key. Please check snippet or pass Pixel Key like following: aap({ pixelKey: '12345' }).")}}(e\|\|{}),n=(c=r,o=t,p=e\|\|{},"".concat(l,"?")+["pk=".concat(c),"pu=".concat(o)].concat(Object.keys(p).filter(function(e){return p[e]&&(!Array.isArray(p[e])\|\|0<p[e].length)}).map(function(e){return"".concat(e,"=").concat(d(Array.isArray(p[e])?p[e].join("~"):p[e]

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3108)
Category:	downloaded
Size (bytes):	9054
Entropy (8bit):	5.45310006648104
Encrypted:	false
SSDEEP:	192:8IHZVA+5VUWOU73zbgtQVR9+EDPbBVKLyBlOcnkCgDiubxwJ:3HZVA+5uWOreR9+E7bBVKL+ACCJxwJ
MD5:	BA541B6C0748E552CF7936B200B053D3
SHA1:	8E8F5969A9BBB838B16C35C8B8EA35419DA2D2FD
SHA-256:	3A16459D6A00D76A06CB07F9A66DFEC2EC0A97A039967F09F0AD89FC19F8F10C
SHA-512:	CAA07A00438CBF6DB744303C1A542E27A7F64A990ADFDE97DA8899384D806E258A246ABF89B6208764B2A2C1859F81E1DF01B884759453172D08ABCB208B18EC
Malicious:	false
Reputation:	low
URL:	https://www.redcrossblood.org//give.html
Preview:	.<!DOCTYPE HTML>.<html lang="en">. <head>...<base href="https://www.redcrossblood.org/give.html"/>..<base href="https://www.redcrossblood.org/api/drive/v1"/>..<base href="https://www.redcrossblood.org/api/auth/v1"/>..<base href="6LdO6r8hAAAAAGjSkiBRd-1tfpVI-G412GGyqMwL"/>..<base href="//resources.crowdtwist.com/v259/widgets/javascripts/widgets-sdk.0.3.1.js"/>..<base href="431"/>..<base href="https://ct-prod.redcrossblood.org/widgets/t/activity-list/"/>..<base href="441"/>..<base href="https://ct-prod.redcrossblood.org/widgets/t/reward-list/"/>..<base href="421"/>..<base href="https://ct-prod.redcrossblood.org/widgets/t/reward-history/"/>..<base href="411"/>..<base href="https://ct-prod.redcrossblood.org/widgets/t/activity-history/"/>..<base href="413"/>..<base href="https://ct-prod.redcrossblood.org/widgets/t/points-expiration/"/>..<base href="433"/>..<base href="https://ct-prod.redcrossblood.org/widgets/t/reward-list/"/>..<base href="435"/>..<base href="https://ct-prod.redcrossbloo

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32719)
Category:	dropped
Size (bytes):	62091
Entropy (8bit):	5.453008483613087
Encrypted:	false
SSDEEP:	1536:R030Mf5pX0Ons8LVS+cODPf+VLTZK4Q28GC65bGEuuc5N:R030y0CPWV/1zZ2N
MD5:	A02680BABC20806329746EFE4823585B
SHA1:	61EDE3D97D99A9539F25635CE36585486E47F1AC
SHA-256:	D26359F09D0BE48E9508581151FEB005ABA256572B494E7EF4A3DF6AA00630D6
SHA-512:	EDE6A26DBF8BABCFB0966D4160E20C989D7BBAFCFF299F6E839E4070A6E21F2FC26CBB4AFCD3C36A33A2ECF019B6A82745FD14796CBD57145844543890646319
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/EX17fa10f475694f94906f4081bb9dea68-libraryCode_source.js`..function s_getLoadTime(){if(!window.s_loadT){var e=(new Date).getTime(),t=window.performance?performance.timing:0,a=t?t.requestStart:window.inHeadTS\|\|0;s_loadT=a?Math.round((e-a)/100):""}return s_loadT}function getPreviousValue(e,t){var a=e,n=t;if("-v"===a)return{plugin:"getPreviousValue",version:"3.0"};var i,r=function(){if(void 0!==window.s_c_il)for(var e,t=0;t<window.s_c_il.length;t++)if((e=window.s_c_il[t])._c&&"s_c"===e._c)return e}();return void 0!==r&&(r.contextData.getPreviousValue="3.0"),window.cookieWrite=window.cookieWrite\|\|function(e,t,a){if("string"==typeof e){if(t=void 0!==t?""+t:"",a\|\|""===t)if(""===t&&(a=-60),"number"==typeof a){var n=new Date;n.setTime(n.getTime()+6e4*a)}else n=a;return!(!e\|\|(document.cookie=encodeURIComponent(e)+"="+encodeURIComponent(t)+"; path=/;"+(a?" expires="+n.toUTCString()+";":""),"undefi

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (4332)
Category:	downloaded
Size (bytes):	4479
Entropy (8bit):	5.339093070283357
Encrypted:	false
SSDEEP:	96:+OBBBDM3pKCEgUD617ISEa7ArOrf1O8nrgzrArYxCZu4JOBxJiJnoLlcmWWGbAcY:DBM3wzlm7ArOrf1O8nrKrArACZ9UzJim
MD5:	74BC47143F6EEC29389D00073324FF86
SHA1:	C533B271559F7271D0E1C5668B4B03CE26F949A3
SHA-256:	E6B10AC15FB6DCED41248779EE4DF590E5B49F7C42D8DAFB846C059E307F5C39
SHA-512:	3F2ABF94F4B3695C5216A9129F607D9D8EF5F540122105763C6252074A8F3AA87CD16F08C2735CCAE4720C268E409D3EC74B042C23A2EF8BC700F094BD14CD31
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC0679bf668fad40e789ca97109c43b619-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC0679bf668fad40e789ca97109c43b619-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC0679bf668fad40e789ca97109c43b619-source.min.js', "!function(e){\"function\"==typeof define&&define.amd?define(e):e()}((function(){\"use strict\";class e{static async getBType(){const t=document.location.origin;if(!t.includes(\"redcrossblood.org\"))return;let i=e.getCookie(\"bTypeCode\");if(i&&!localStorage.getItem(\"RCB_AUTH\"))return void _satellite.cookie.remove(\"bTypeCode\");if(i)return console.log(\"returning from cookie.\"),i;const o=e.buildUserProfile();if(o?.bloodType)return e.setCookie(\"bTypeCode\",o.bloodType),o.bloodType;if(localStorage.getItem(\"RCB_AUTH\"))try{const o=await fetch(t+\"/api/drive/v1/profile\",{credentials:\"include\",method:\"GET\"}),a=(await o.json()).profile.bloodType;return i=e.mapBloodType(a),e.setCookie(\"bTypeC

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50522), with no line terminators
Category:	downloaded
Size (bytes):	50523
Entropy (8bit):	5.297134171375771
Encrypted:	false
SSDEEP:	768:IaOFhhR9OIFhOjfRysgLzQyVwhYyDMsWxKQ:IaOFnR2DRszQekTWUQ
MD5:	14272A6CDF99BDC079B8EC8097889F49
SHA1:	2343F9F1D29F3B034F3B8FFB7A92BFFD98A88450
SHA-256:	73AAA4E6BFC1DBED5F3F934710D1ADA545F4068742235E59D0CB74F0EAF0A3C4
SHA-512:	BD83B900ACBFB123F485F46DE1692710B7C77DE90739CA3CFAB7A58CF3B71FCD9D97FCCEC6762528886C57A41F101574209F65B2BEF745613F0BCB7D196200A5
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	323784
Entropy (8bit):	5.567808327488033
Encrypted:	false
SSDEEP:	6144:D4xP8OF1uCdO54gBB1xcQL7D5EyaCmQdZKeW:UxZFgCAntfS
MD5:	9D81C1E2CF8F2687AC6ABE87EB152460
SHA1:	326001F984CF5FE991E65F82EB61250DC11FE9F6
SHA-256:	46870209F8D1DD0E2351CF69369A367D87E4A066C52D5578092EDA27AAF50F00
SHA-512:	5D5012D3AF1F80ADD9A58459C8B71C1F0758F096DA71F1E88C010D69B9C710BB96B2AF8EAD513767B35B96D4D81920190546F772E8102DED5D3A5C344FC93309
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-XWN4JVMX8J&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32013)
Category:	dropped
Size (bytes):	38395
Entropy (8bit):	5.317660187499057
Encrypted:	false
SSDEEP:	384:P/R9FYH1rlixOENuir4aDy6BwwyBIiDzAxdDIowkClSJRY+d9Fb06gQHqk6G+vBN:PZ3g48aDy6diCFR0vIih3y1M/eJ9FJK
MD5:	6B93DBF34696DF852C6D69D1652851DE
SHA1:	766CCE6A8D3915867B60446B8D3EDC2C4501E19F
SHA-256:	6AC927BF968F13F78B024DE0F986CA3A18D95852AEE8423F748D252FCA5C5C96
SHA-512:	874860356D009178EE7DF667D4C65856C02DD23DC8BF580DB6D80CEC5973C665CA14C8BF772B1F04993353E89C398975C65E6A29BF49602FFCF2AEAEA6C90B88
Malicious:	false
Reputation:	low
Preview:	!function(t,n,e){function r(e,o){if(!n[e]){if(!t[e]){var a="function"==typeof __nr_require&&__nr_require;if(!o&&a)return a(e,!0);if(i)return i(e,!0);throw new Error("Cannot find module '"+e+"'")}var s=n[e]={exports:{}};t[e][0].call(s.exports,function(n){var i=t[e][1][n];return r(i\|\|n)},s,s.exports)}return n[e].exports}for(var i="function"==typeof __nr_require&&__nr_require,o=0;o<e.length;o++)r(e[o]);return r}({1:[function(t,n,e){n.exports=function(t,n){return"addEventListener"in window?window.addEventListener(t,n,!1):"attachEvent"in window?window.attachEvent("on"+t,n):void 0}},{}],2:[function(t,n,e){function r(t,n,e,r,o){d[t]\|\|(d[t]={});var a=d[t][n];return a\|\|(a=d[t][n]={params:e\|\|{}},o&&(a.custom=o)),a.metrics=i(r,a.metrics),a}function i(t,n){return n\|\|(n={count:0}),n.count+=1,f(t,function(t,e){n[t]=o(e,n[t])}),n}function o(t,n){return n?(n&&!n.c&&(n={t:n.t,min:n.t,max:n.t,sos:n.tn.t,c:1}),n.c+=1,n.t+=t,n.sos+=tt,t>n.max&&(n.max=t),t<n.min&&(n.min=t),n):{t:t}}function a(t,n){return

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65241)
Category:	downloaded
Size (bytes):	72535
Entropy (8bit):	5.292071082703333
Encrypted:	false
SSDEEP:	1536:jDFXTROYFbeDtyZxg6V4mMeexs1Lzu3JlQ5uCe/ZiEm9WTNBbgRC0W/XL3JaQ47u:FuIy3JlQ5cLURAJaQ47GKC
MD5:	6BB2D76BC531993F8368CEF389E88B04
SHA1:	50504DD95E37488EB9871BEE661C588F84E04C9C
SHA-256:	C3C0AF845B3B88735552D9D23F460A120D34A7D221D77AE52FDCC6AAF2DD78F0
SHA-512:	C81A6E7E56663F9970333674DE18822F303DE0DD0ADAF801B4982A43613599E27398805F8DB6FB938636DE4DA2D9CFEB21E49419CEE3A23C88639C1A2B767109
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.slim.min.js
Preview:	/! jQuery v3.6.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(g,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,v=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),m={},b=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},w=g.document,c={type:!0,src:!0,nonce:!0,noModule:!0

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65389)
Category:	dropped
Size (bytes):	79108
Entropy (8bit):	5.498871016636038
Encrypted:	false
SSDEEP:	1536:QiJIW75oE91459pv6sZcAJ7v51IR35qQZxgh20FSgScj6OQEUHKN3SN/a/R+iT:A95esuSrI15qQZ6hZFSgScj6OvNiAZlT
MD5:	4582A9081A9BCFD4199E241D72CCAE37
SHA1:	D63C3316C29EDED1A4924E6B1F431DA8D2AEBE23
SHA-256:	7A56AF8EF285708EDBBC9A4A238D7EFCCF296E78E88DC6C9C26385241F22C0C3
SHA-512:	D2B4CAD55FC9BBC3C900CC0F21249A4A1D15C601D0BAF17FD41AADFCB458DDB7EC2DF6713811F28ACFF5ADD1EA82901E0DD8C3D85E32B824DFF9C7C4241F4086
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC45b0c1db23ef418b958ad660ff389a3f-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC45b0c1db23ef418b958ad660ff389a3f-source.min.js', "!function(e){\"function\"==typeof define&&define.amd?define(e):e()}((function(){\"use strict\";class e{constructor(){throw new TypeError(\"Class cannot be instantiated.\")}static async addAsyncEmails(t){const a=t;if(!t)return a;const n=t.visitorEmail,r=t.accountEmail;return n&&(a.visitorEmailHash=await e.digestMessage(n)),r&&(a.accountEmailHash=await e.digestMessage(r)),a}static async digestMessage(e){const t=(new TextEncoder).encode(e),a=await crypto.subtle.digest(\"SHA-256\",t);return Array.from(new Uint8Array(a)).map((e=>e.toString(16).padStart(2,\"0\"))).join(\"\")}static isCrossDomain(e){if(!e\|\|!this.isAbsolute(e))return!1;const t=document.location.hostname,n=new URL(e).hostname;return n===a

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	76827
Entropy (8bit):	5.422540075547587
Encrypted:	false
SSDEEP:	1536:R7hpwNFHM9ZK0BK01QYaKTZ02LKVsdmpyKcicu7JhQ:R7ss9ZKAKBYaKj8wKcH7
MD5:	85A00B7745F38E9A1EF99ED375B8DB55
SHA1:	DB2CD0856775DD252A587696B524200FDF3D1C5D
SHA-256:	861184F7D5CB14DC87640B0CEADFB44ED8F1E963361926C29CDBF3351B5F3260
SHA-512:	5CF03F908428FE17782C03B607E61360BB53A13A71172879F541CD79D02439B5B34853411F5963F394C34AFF5869352F39DA56DC9A1DFA1171C89EE96DD1D2F0
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65389)
Category:	downloaded
Size (bytes):	79108
Entropy (8bit):	5.498871016636038
Encrypted:	false
SSDEEP:	1536:QiJIW75oE91459pv6sZcAJ7v51IR35qQZxgh20FSgScj6OQEUHKN3SN/a/R+iT:A95esuSrI15qQZ6hZFSgScj6OvNiAZlT
MD5:	4582A9081A9BCFD4199E241D72CCAE37
SHA1:	D63C3316C29EDED1A4924E6B1F431DA8D2AEBE23
SHA-256:	7A56AF8EF285708EDBBC9A4A238D7EFCCF296E78E88DC6C9C26385241F22C0C3
SHA-512:	D2B4CAD55FC9BBC3C900CC0F21249A4A1D15C601D0BAF17FD41AADFCB458DDB7EC2DF6713811F28ACFF5ADD1EA82901E0DD8C3D85E32B824DFF9C7C4241F4086
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC45b0c1db23ef418b958ad660ff389a3f-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC45b0c1db23ef418b958ad660ff389a3f-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC45b0c1db23ef418b958ad660ff389a3f-source.min.js', "!function(e){\"function\"==typeof define&&define.amd?define(e):e()}((function(){\"use strict\";class e{constructor(){throw new TypeError(\"Class cannot be instantiated.\")}static async addAsyncEmails(t){const a=t;if(!t)return a;const n=t.visitorEmail,r=t.accountEmail;return n&&(a.visitorEmailHash=await e.digestMessage(n)),r&&(a.accountEmailHash=await e.digestMessage(r)),a}static async digestMessage(e){const t=(new TextEncoder).encode(e),a=await crypto.subtle.digest(\"SHA-256\",t);return Array.from(new Uint8Array(a)).map((e=>e.toString(16).padStart(2,\"0\"))).join(\"\")}static isCrossDomain(e){if(!e\|\|!this.isAbsolute(e))return!1;const t=document.location.hostname,n=new URL(e).hostname;return n===a

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32096)
Category:	dropped
Size (bytes):	157828
Entropy (8bit):	5.381771794405282
Encrypted:	false
SSDEEP:	3072:+bARkDN8OZux1qSe3wX73a98HrGoWF+As8zjkS1JB:+bYkDN8qoheAL3a98HrGCQJB
MD5:	8C54B25AD309C19ED1A21B70D464CF9E
SHA1:	1634372E34693332CA5E47F8559A3E5F8636C480
SHA-256:	25F8CC38CE999924492896E55FEC201A0FFF79C0C118A718947F857A2762D44D
SHA-512:	FD2E792401C5721EBC7C90CF3797C5C454E2B6FFDD2C8D12635EDF5E96CBDCA16DDA07955B737DC519648D91D978B2E50CF86D8D934DC24B8761F94C936349AF
Malicious:	false
Reputation:	low
Preview:	/*. CrowdTwist Widgets SDK for JavaScript.* v0.3.1.* 2023-02-03.**/!function(){function a(){}function b(a){var b=!1;return function(){if(b)throw new Error("Callback was already called.");b=!0,a.apply(this,arguments)}}function c(a){var b=!1;return function(){b\|\|(b=!0,a.apply(this,arguments))}}function d(a){return I(a)\|\|"number"==typeof a.length&&a.length>=0&&a.length%1===0}function e(a,b){return d(a)?f(a,b):j(a,b)}function f(a,b){for(var c=-1,d=a.length;++c<d;)b(a[c],c,a)}function g(a,b){for(var c=-1,d=a.length,e=Array(d);++c<d;)e[c]=b(a[c],c,a);return e}function h(a){return g(Array(a),function(a,b){return b})}function i(a,b,c){return f(a,function(a,d,e){c=b(c,a,d,e)}),c}function j(a,b){f(J(a),function(c){b(a[c],c)})}function k(a){var b,c,e=-1;return d(a)?(b=a.length,function(){return e++,e<b?e:null}):(c=J(a),b=c.length,function(){return e++,e<b?c[e]:null})}function l(a,b){b=b\|\|0;var c=-1,d=a.length;b&&(d-=b,d=d<0?0:d);for(var e=Array(d);++c<d;)e[c]=a[c+b];return e}function m(a){retur

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=4706068;type=rcbnew;cat=rcbne0;ord=4722219042743;npa=0;auiddc=1616239341.1728686880;ps=1;pcor=2078001472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a90v9189992675za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101686685;epver=2;~oref=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404?
Preview:	<html></html>

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (31985)
Category:	downloaded
Size (bytes):	207040
Entropy (8bit):	5.4572005914060355
Encrypted:	false
SSDEEP:	3072:y62bNbWHF80++NOtFkK/02nyjKKhBe4Rf0vdHlHMIWNbTiB:CbNb8Ft++N/v25KhR2HMI1B
MD5:	53F533FDF71FDB8527AB9FA6641E241B
SHA1:	8CDE78B625D06E4304941EC09EE038C47E4768DC
SHA-256:	95A439C4E11ACE2484E8D42C30FF56CF7DB5EA7C6463DF9CE2FDAFA7F6CCBF54
SHA-512:	D2E2A2EDDD0FBAF3EBCEDDE4B7CD5497BC40BDAD86ECD5A9FA4227E7F0C1DCEDB38867CCB3D004D027F675ED406FE437D2015DA949CA84B95F95A4FEA415075E
Malicious:	false
Reputation:	low
URL:	https://s.go-mpulse.net/boomerang/4D299-9F5ZX-TKLEA-FQ49R-XHSY7
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ JavaScript MD5 1.0.1 Copyright 2011, Sebastian Tschan. Licensed under the MIT license. /./ Boomerang Version: 1.632.0 139f333a35e2484b05a07930423f1e230719cb95 */..function BOOMR_check_doc_domain(a){if(window){if(!a){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(b){BOOMR.isCrossOriginError(b)\|\|BOOMR.addError(b,"BOOMR_check_doc_domain.domainFix")}a=document.domain}if(a&&-1!==a.indexOf(".")&&window.parent){

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50522), with no line terminators
Category:	dropped
Size (bytes):	50523
Entropy (8bit):	5.297134171375771
Encrypted:	false
SSDEEP:	768:IaOFhhR9OIFhOjfRysgLzQyVwhYyDMsWxKQ:IaOFnR2DRszQekTWUQ
MD5:	14272A6CDF99BDC079B8EC8097889F49
SHA1:	2343F9F1D29F3B034F3B8FFB7A92BFFD98A88450
SHA-256:	73AAA4E6BFC1DBED5F3F934710D1ADA545F4068742235E59D0CB74F0EAF0A3C4
SHA-512:	BD83B900ACBFB123F485F46DE1692710B7C77DE90739CA3CFAB7A58CF3B71FCD9D97FCCEC6762528886C57A41F101574209F65B2BEF745613F0BCB7D196200A5
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	371
Entropy (8bit):	4.600540137157355
Encrypted:	false
SSDEEP:	6:2LGaUImyCp0GlYM1wBJPyQK5DrIt6xfeGYqX3ofWLGJw47Jsr4z+LAltEsVsVsVo:2ffmyCkMwykgIaoO4nsrqH9yyyv
MD5:	97CF0FE353C517CEA6CB3E1F2E7EDFC9
SHA1:	58D8EB24BFD5CA347B6A0A72894E6C8B6EAE198F
SHA-256:	0E0C8CEDB72A7E5A3080203509132486E267E5D1B0C5C6EAE78AC16F7928FF01
SHA-512:	F3D33FE997DC8FDFF9B122C208321F1DB35B2A6C2650C8EAC119A2A20FAE74874691340C3419283AE0914E5405D51E40BF787469B3A7A2B66A81A68B6E2009EB
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', false, false, false, false, false);..

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	231864
Entropy (8bit):	5.458039173946496
Encrypted:	false
SSDEEP:	3072:nfLeYH8At6JK37OeR8NteGvQ+AMPpgArl0xYu5s713TW:nfLeYc+6JaH8N7QQGArHu5s713K
MD5:	40283CFC473AFBE1D4ABBA7E6C809885
SHA1:	8A32CB88D9F537B02582DF17A5BB11C2087937F6
SHA-256:	48BA1993011DB4834882D81B2153753437607292F704A6543D4466C0F6D1372A
SHA-512:	DABD9FD4CC3FB4FF3EBC2C3529E602E91939DDB1F42C2D7E70188DFC3262548922EA45C96691D567F2C777D393B5CE7162B5BD4C2054B33A03856BBEA1C1A0E3
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	51
Entropy (8bit):	4.257935822610366
Encrypted:	false
SSDEEP:	3:YWMmqegWT/aNJtZlCn:YWMm9gXNJt6
MD5:	1B721AAB25417D5AEC04BBDC798F68C5
SHA1:	736AFFE428972F3A0A076E33FF1AA3AC592B991F
SHA-256:	DD7C1262AFB6324CFB7AE6808AEFBF8F796BBD7D83561B695D7C849540C8D950
SHA-512:	CFEE5B92975ECCF47ED97150FBAB56EDD046F3E29C0D288084DF7C2030432C07A8919B68AE21E17EDC157F7D3F0A8CE89EA21008EE8EE152A2DB5CC0DF5C232B
Malicious:	false
Reputation:	low
URL:	"https://c.go-mpulse.net/api/config.json?key=4D299-9F5ZX-TKLEA-FQ49R-XHSY7&d=www.redcrossblood.org&t=5762290&v=1.632.0&if=&sl=0&si=omzgwhgm1w-sl7rbx&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,Angular,Backbone,Ember,History,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,LOGN&acao=&ak.ai=434600"
Preview:	{"site_domain":"arlid:434600","rate_limited":true}.

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	76827
Entropy (8bit):	5.422540075547587
Encrypted:	false
SSDEEP:	1536:R7hpwNFHM9ZK0BK01QYaKTZ02LKVsdmpyKcicu7JhQ:R7ss9ZKAKBYaKj8wKcH7
MD5:	85A00B7745F38E9A1EF99ED375B8DB55
SHA1:	DB2CD0856775DD252A587696B524200FDF3D1C5D
SHA-256:	861184F7D5CB14DC87640B0CEADFB44ED8F1E963361926C29CDBF3351B5F3260
SHA-512:	5CF03F908428FE17782C03B607E61360BB53A13A71172879F541CD79D02439B5B34853411F5963F394C34AFF5869352F39DA56DC9A1DFA1171C89EE96DD1D2F0
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1599953746963987?v=2.9.170&r=stable&domain=www.redcrossblood.org&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CP_jvLy0h4kDFXiK_Qcdcq0Gig;src=4706068;type=rcbnew;cat=rcbne0;ord=4722219042743;npa=0;auiddc=*;ps=1;pcor=2078001472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a90v9189992675za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101686685;epver=2;~oref=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/ct/upi/pid/5w3jqr4k?redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dg8f47s39e399f3fe%26google_push%26google_sc%26google_hm%3D%24%7BTM_USER_ID_BASE64ENC_URLENC%7D&_test=ZwmrIgAIXekqBgA3
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1236)
Category:	downloaded
Size (bytes):	1383
Entropy (8bit):	5.519973878589324
Encrypted:	false
SSDEEP:	24:Hct/BwErdwMpfIel4469gS3NDjRWCwHKJ5A6Zyf2IovxzAqUbtFGU6+ApO:8t/BwEr2d46hDjwLKJD5IovxzAqot8i
MD5:	0361CCAE4CE95CC692FDBC2CF091FFB5
SHA1:	F014A1B47BE09D3B93C82935CC4D169357F59BFC
SHA-256:	B2E1E023E8C25D3A97238DE3E0E03F7FD5AC611D20203BD654F4E4167ABC8830
SHA-512:	FF12AA299331E19A7ADAE026DA747B8FB44E20D02E88262F36A7A94ABD9ADF8577DEC6F27117BAF70F19D6CFB2092E469BA34C813912E4FE51924FEB1DA6C9BA
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC015d7944a2b0453bbe25c97d23bb3f78-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC015d7944a2b0453bbe25c97d23bb3f78-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC015d7944a2b0453bbe25c97d23bb3f78-source.min.js', "var environment=window._satellite.buildInfo.environment,key=\"\";key=\"development\"==environment\|\|\"staging\"==environment?\"key_test_biGR9wE8gWR0GfHoZaf24ipbwypfT8dF\":\"key_live_mmHU3rrXl3U4GfMnF6H0sddfrzccH9ha\",function(e,n,i,t,r,a,o,s,d,c){if(!e[t]\|\|!e[t]._q){for(;s<o.length;)r(a,o[s++]);(d=n.createElement(i)).async=1,d.src=\"https://cdn.branch.io/branch-latest.min.js\",(c=n.getElementsByTagName(i)[0]).parentNode.insertBefore(d,c),e[t]=a}}(window,document,\"script\",\"branch\",(function(e,n){e[n]=function(){e._q.push([n,arguments])}}),{_q:[],_v:1},\"addListener applyCode autoAppIndex banner closeBanner closeJourney creditHistory credits data deepview deepviewCta first getCode init link logo

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32096)
Category:	downloaded
Size (bytes):	157828
Entropy (8bit):	5.381771794405282
Encrypted:	false
SSDEEP:	3072:+bARkDN8OZux1qSe3wX73a98HrGoWF+As8zjkS1JB:+bYkDN8qoheAL3a98HrGCQJB
MD5:	8C54B25AD309C19ED1A21B70D464CF9E
SHA1:	1634372E34693332CA5E47F8559A3E5F8636C480
SHA-256:	25F8CC38CE999924492896E55FEC201A0FFF79C0C118A718947F857A2762D44D
SHA-512:	FD2E792401C5721EBC7C90CF3797C5C454E2B6FFDD2C8D12635EDF5E96CBDCA16DDA07955B737DC519648D91D978B2E50CF86D8D934DC24B8761F94C936349AF
Malicious:	false
Reputation:	low
URL:	https://resources.crowdtwist.com/v259/widgets/javascripts/widgets-sdk.0.3.1.js
Preview:	/*. CrowdTwist Widgets SDK for JavaScript.* v0.3.1.* 2023-02-03.**/!function(){function a(){}function b(a){var b=!1;return function(){if(b)throw new Error("Callback was already called.");b=!0,a.apply(this,arguments)}}function c(a){var b=!1;return function(){b\|\|(b=!0,a.apply(this,arguments))}}function d(a){return I(a)\|\|"number"==typeof a.length&&a.length>=0&&a.length%1===0}function e(a,b){return d(a)?f(a,b):j(a,b)}function f(a,b){for(var c=-1,d=a.length;++c<d;)b(a[c],c,a)}function g(a,b){for(var c=-1,d=a.length,e=Array(d);++c<d;)e[c]=b(a[c],c,a);return e}function h(a){return g(Array(a),function(a,b){return b})}function i(a,b,c){return f(a,function(a,d,e){c=b(c,a,d,e)}),c}function j(a,b){f(J(a),function(c){b(a[c],c)})}function k(a){var b,c,e=-1;return d(a)?(b=a.length,function(){return e++,e<b?e:null}):(c=J(a),b=c.length,function(){return e++,e<b?c[e]:null})}function l(a,b){b=b\|\|0;var c=-1,d=a.length;b&&(d-=b,d=d<0?0:d);for(var e=Array(d);++c<d;)e[c]=a[c+b];return e}function m(a){retur

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	231864
Entropy (8bit):	5.458039173946496
Encrypted:	false
SSDEEP:	3072:nfLeYH8At6JK37OeR8NteGvQ+AMPpgArl0xYu5s713TW:nfLeYc+6JaH8N7QQGArHu5s713K
MD5:	40283CFC473AFBE1D4ABBA7E6C809885
SHA1:	8A32CB88D9F537B02582DF17A5BB11C2087937F6
SHA-256:	48BA1993011DB4834882D81B2153753437607292F704A6543D4466C0F6D1372A
SHA-512:	DABD9FD4CC3FB4FF3EBC2C3529E602E91939DDB1F42C2D7E70188DFC3262548922EA45C96691D567F2C777D393B5CE7162B5BD4C2054B33A03856BBEA1C1A0E3
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	707
Entropy (8bit):	7.608379497092155
Encrypted:	false
SSDEEP:	12:6v/72rv20pmLArWk2UAgMfiaceqtFitbGfCWbV9t7nufTemoVqA7:3+0p3WDji9nfVPNJmoV9
MD5:	7290F6031BD5CEA8970D79AB346427D2
SHA1:	17042049CBACA23A2990C33EDE3F36AAF9D8E45F
SHA-256:	FFC59F3FA4B095C9CB419B0F615672259704D41C802AFAB6E354E83AD8D8851B
SHA-512:	95E876118054BDA242CE146A9D385826D6C1D023BD48C1D7B6B8F18059596CE13A703E6808BB669A37DCF77734E48D47DE60AAAABCC9A5F4527B08B9C77417CE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...eIDATx.S[k.Q.>.{.MJc.BB.6...s.B\|..../.....">..R..}*..%.`Z0.xI.j.1...n....gN.(6..&L..7.7sf.....5....D.4.X(...).......(....`..$IS..q'...g.K..p\w...9.1...J....,.$$d.....$..J..-.u..^..}.A......0rl...cL.#..~{m}94...O..u`4(."...w...c.nvvf.....}.69.5J)Q..(...."...t.\|... ..:.F.E...P....daA..ku.P@?ukc.2M...j9....#..B.Ng..p...!...;......N....P3.B.\|~.t).F.Q....HM.Ha....<l...N.\|..pPV.D.H...#...b.......j..;....0$...q......>.E2..\..Fc...\|.K++k.~.E..0d.a...c.4.....~....Ch....K..f.~.V..:...B9^(..cq.-....'.n...m.\|...6.`.N..\|lu....s.9.s.lv.................&..!.......N... .8...@...Z .=..0....`.A.j........IEND.B`.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (4332)
Category:	dropped
Size (bytes):	4479
Entropy (8bit):	5.339093070283357
Encrypted:	false
SSDEEP:	96:+OBBBDM3pKCEgUD617ISEa7ArOrf1O8nrgzrArYxCZu4JOBxJiJnoLlcmWWGbAcY:DBM3wzlm7ArOrf1O8nrKrArACZ9UzJim
MD5:	74BC47143F6EEC29389D00073324FF86
SHA1:	C533B271559F7271D0E1C5668B4B03CE26F949A3
SHA-256:	E6B10AC15FB6DCED41248779EE4DF590E5B49F7C42D8DAFB846C059E307F5C39
SHA-512:	3F2ABF94F4B3695C5216A9129F607D9D8EF5F540122105763C6252074A8F3AA87CD16F08C2735CCAE4720C268E409D3EC74B042C23A2EF8BC700F094BD14CD31
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC0679bf668fad40e789ca97109c43b619-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC0679bf668fad40e789ca97109c43b619-source.min.js', "!function(e){\"function\"==typeof define&&define.amd?define(e):e()}((function(){\"use strict\";class e{static async getBType(){const t=document.location.origin;if(!t.includes(\"redcrossblood.org\"))return;let i=e.getCookie(\"bTypeCode\");if(i&&!localStorage.getItem(\"RCB_AUTH\"))return void _satellite.cookie.remove(\"bTypeCode\");if(i)return console.log(\"returning from cookie.\"),i;const o=e.buildUserProfile();if(o?.bloodType)return e.setCookie(\"bTypeCode\",o.bloodType),o.bloodType;if(localStorage.getItem(\"RCB_AUTH\"))try{const o=await fetch(t+\"/api/drive/v1/profile\",{credentials:\"include\",method:\"GET\"}),a=(await o.json()).profile.bloodType;return i=e.mapBloodType(a),e.setCookie(\"bTypeC

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26974)
Category:	dropped
Size (bytes):	27298
Entropy (8bit):	5.238471621327159
Encrypted:	false
SSDEEP:	768:WgYDaz/zmBV5lFslQe96zc8GEYEQWO8Il:6+zbUFs78Giu9
MD5:	F62D72F9BADA8896E7218F17D63F3A39
SHA1:	AA1C606C110A67FBF6F7033662B12F653373EDC1
SHA-256:	82AA8D65D7E8A711D4E887349D5D9F7553A5DC355F40FA7D91E21A4F2DE4E3FF
SHA-512:	2D03AB554D01F0BE4613ACAEF8DF10091D6CC68D73AE446DA6CFB3200AE899AA8D842D0D5CD6037FF14F244F82893E26F5B6BBB559D47588E58B6F363FFDDB7B
Malicious:	false
Reputation:	low
Preview:	;window.NREUM\|\|(NREUM={});NREUM.init={privacy:{cookies_enabled:true}};.window.NREUM\|\|(NREUM={}),__nr_require=function(t,e,n){function r(n){if(!e[n]){var o=e[n]={exports:{}};t[n][0].call(o.exports,function(e){var o=t[n][1][e];return r(o\|\|e)},o,o.exports)}return e[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var o=0;o<n.length;o++)r(n[o]);return r}({1:[function(t,e,n){function r(t){try{c.console&&console.log(t)}catch(e){}}var o,i=t("ee"),a=t(27),c={};try{o=localStorage.getItem("__nr_flags").split(","),console&&"function"==typeof console.log&&(c.console=!0,o.indexOf("dev")!==-1&&(c.dev=!0),o.indexOf("nr_dev")!==-1&&(c.nrDev=!0))}catch(s){}c.nrDev&&i.on("internal-error",function(t){r(t.stack)}),c.dev&&i.on("fn-err",function(t,e,n){r(n.stack)}),c.dev&&(r("NR AGENT IN DEVELOPMENT MODE"),r("flags: "+a(c,function(t,e){return t}).join(", ")))},{}],2:[function(t,e,n){function r(t,e,n,r,c){try{l?l-=1:o(c\|\|new UncaughtException(t,e,n),!0)}catch(f){try{i("ierr",[f,s.now(),!

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1122)
Category:	downloaded
Size (bytes):	1269
Entropy (8bit):	5.275813202177879
Encrypted:	false
SSDEEP:	24:/Q1ct/BeQRuJymonhnjYfpJCYf/ag0aPxU+IEdI21GMYSp:nt/BXuFmZqpgWCgRP5IkI7y
MD5:	1425D61F285276C5BC4F602B5ABE3DE2
SHA1:	A2331067AA60FF32127BAC0544AF708E1574CF39
SHA-256:	0FF7051F9892C84DC9A7BC4AB174C39E821FD703EE85DDFFDF97FC3F51DEC3C7
SHA-512:	36850CB14E19E3100A2D07AA5FF87CB9FF72A2722297BCAB130521ED220AE15ECB313A2F814F958CECA1B6477B7371C28CB9BD92B6293A7024E33FC5D2C8C54A
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC38acd34605ce4867a436ae91848f9e39-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC38acd34605ce4867a436ae91848f9e39-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC38acd34605ce4867a436ae91848f9e39-source.min.js', "function sendEvent(e){const t=_satellite.getVar(\"eventData\",e);if(\"web.webinteraction.linkClicks\"===e.detail.event?window.adobeDataLayer.push({_experience:{analytics:{event1to100:null,event101to200:null,event201to300:null}},_redcross:{form:null,donationDetails:{presetAmount:null,paymentType:null}}}):\"route-change\"===e.detail.event&&(e.detail.web.webPageDetails.name=_satellite.getVar(\"spaBase\")+\":\"+e.detail.web.webPageDetails.viewName),window.adobeDataLayer.push(t),\"rco-login\"===e.detail.event){const t=e.detail,n=t&&t.user?t.user.identities:{},i=n?n.userId:null,l=n?n.accountEmail:null;_satellite.cookie.set(\"profile\",JSON.stringify({id:i,email:l}),{expires:1/48})}else\"rco-logout\"===

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7082)
Category:	dropped
Size (bytes):	44395
Entropy (8bit):	5.496673337396287
Encrypted:	false
SSDEEP:	768:soYwxAHXUpY/Y3YOgQxLAbnYeYQW9cYZYHYZYVY+YsqIedzA9KN9mO1RbkvT8oAC:R76HXswuvLcn5vV4WAcl8zA9K7hC
MD5:	885303E2D4623047BD27997B8858526A
SHA1:	EFB5058B92C91700F0D7FBB07B2A6504D8887555
SHA-256:	933517D16FB01EFCEA157AA5E7C428623865C82361F5CD1091ADE2FB1421A468
SHA-512:	51B48D86B1ECA3D4D3A934D928518B13651F766D540E9EE703BD620ACBFACFEB6EFE7FE2CB0A4F0BB2761106E67568D68370833E1224B288FB6261418C8FC829
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, software=Adobe Photoshop CC (Windows)], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	80469
Entropy (8bit):	7.661925782366685
Encrypted:	false
SSDEEP:	1536:55T5+7LzjNROh0+dHCYTMdAbGKBelz7M6C55G5OW/OoQCldU:3T5+7PxROm4HCHdEGcexLCXgOW/UCE
MD5:	A83356B016D89046001275BE0DB5DFDF
SHA1:	88A1365BF3C44F8499E9138F220E94D9B31C489E
SHA-256:	BDA3AD054C360DC00E5673566B065A8A6278C72CF49FFD7FE85CBDF2E1969281
SHA-512:	1DC8D8A0E1905B08803B83C5172DC2C41B90A65BD7C6ABB2CD6E749280D051883D6A66A37209F08E4BF22DDAC61759A75012A42D1738A952E4F0B0D164196342
Malicious:	false
Reputation:	low
URL:	https://www.redcrossblood.org/content/dam/redcrossblood/rcb-assets/heartOverlay.jpg
Preview:	.....HExif..II*...............1.......".......Adobe Photoshop CC (Windows).....`http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.163858, 2019/03/06-03:18:36 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="JPEG". dam:Progressive="no". dam:extracted="2017-10-17T11:43:47.603-04:00". dam:Bitsperpixel="24". dam:MIMEtype="image/jpeg". dam:Physicalwidthindpi="-1". dam:Physicalheightindpi="-1". dam:Numberofimages="1". dam:Numberoftextualcomments="0". dam:sha1="e3c06670c62d523

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	91
Entropy (8bit):	4.832569673452823
Encrypted:	false
SSDEEP:	3:Ub/HXiREpEyqXXl6EAaXWv7se:UrXiglqX1Ev4e
MD5:	30EEF3BBAE1F869B24BB33F9A980CFD2
SHA1:	9D113B7A143BEA024A74B26839BF1F303CC59FFF
SHA-256:	DE3E759F825ACFA316844194923E54E0BAAD5E6D575D062FFAB3ED52C2FBA230
SHA-512:	C06F9A51E9F7E41094F1E4A7590A148FBDF31E0DAA1202AED7B70746557B56DAE981A2CE55F048807218781A75DFA0781DABEB2A469AD24C5994B6A56BD444B6
Malicious:	false
Reputation:	low
URL:	https://app.link/_r?sdk=web2.85.0&branch_key=key_live_mmHU3rrXl3U4GfMnF6H0sddfrzccH9ha&callback=branch_callback__0
Preview:	/**/ typeof branch_callback__0 === 'function' && branch_callback__0("1373419231308141071");

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2423)
Category:	dropped
Size (bytes):	2424
Entropy (8bit):	5.118561257013647
Encrypted:	false
SSDEEP:	48:dnxDYtXRpX2Va5eTpM8ChHViYro7bxSy8w0zhP2B/kheLQ+JvQ:dxDY5RpGVawnyHVDroJSy/0zh+Bs0Q2I
MD5:	C1E398D8CC65CD9241CC3F1840ADD2CB
SHA1:	316B1005D23D838C83E8BC65D3C2679B8C098DF6
SHA-256:	89CF66CB9DE8DA20FC15E9953845DD4D1DE2C0FB465C827A09D818449222C533
SHA-512:	E534DC63DB678A8248B5E3D83B34C7324B23C27055402616A98DE3009B9C524B0C31C08291482F3B0720061F35EEEF30803FE98E8B5AF8438A3EBD2A6D49AAD9
Malicious:	false
Reputation:	low
Preview:	"use strict";!function(s,u){var l=s.__acuityAdsPixelEventServer\|\|"https://e.acuityplatform.com/pj",r="http://",n="https://",y="pixelKey",f="pk";function a(e){try{var t=d(function(e){var t=e.err,r=e.topFrame,n="";if(t)try{n=s.top.location.href}catch(e){n=s.location.href}else n=r.location.href;return n}(function(){var e=s,t=!1;try{for(;e.parent.document!==e.document;){if(!e.parent.document){t=!0;break}e=e.parent}}catch(e){t=!0}return{topFrame:e,err:t}}())),r=function(e){{if(e.hasOwnProperty(y)&&e[y])return e[y];if(e.hasOwnProperty(f)&&e[f])return e[f];if(s.acuityAdsPixelKey)return s.acuityAdsPixelKey;throw new TypeError("Missing required Pixel Key. Please check snippet or pass Pixel Key like following: aap({ pixelKey: '12345' }).")}}(e\|\|{}),n=(c=r,o=t,p=e\|\|{},"".concat(l,"?")+["pk=".concat(c),"pu=".concat(o)].concat(Object.keys(p).filter(function(e){return p[e]&&(!Array.isArray(p[e])\|\|0<p[e].length)}).map(function(e){return"".concat(e,"=").concat(d(Array.isArray(p[e])?p[e].join("~"):p[e]

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	149805
Entropy (8bit):	5.6004134683803555
Encrypted:	false
SSDEEP:	1536:Cnxj4bndhXdOU0tNo455wjdrm/bK+OTRMWMrvBDJTcitj+wf2EAeiPWMWNZVgdyo:Cnxj479OU03o4PwjhIBVT39ROyuvb
MD5:	5693E74A87CDFE0DD8CF9E97ABC2EC67
SHA1:	0912A92CEBFC4248B4D561F57B32D18135F9AD59
SHA-256:	79951B5BD4D729A2B2F4D380819F2C14BBCF26F21DB56A520189633467766CF4
SHA-512:	B0954FF6229C037AAEC67F6CC91889D3AD1C0D38AC3E53E61F3A98D49379FA43C1FF709C7017459B9BD416BCEB2236D90B24C17E072882C122360069DCD9E0E0
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/identify_7bf75739.js
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},d=Object.prototype,n=d.hasOwnProperty,r="function"==typeof Symbol?Symbol:{},o=r.iterator\|\|"@@iterator",i=r.asyncIterator\|\|"@@asyncIterator",a=r.toStringTag\|\|"@@toStringTag";function $(t,e,d){return Object.defineProperty(t,e,{value:d,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{$({},"")}catch(t){$=function(t,e,d){return t[e]=d}}function u(t,e,d,n){var r=e&&e.prototype instanceof s?e:s,o=Object.create(r.prototype),i=new w(n\|\|[]);return o._invoke=function(t,e,d){var n="suspendedStart";return function(r,o){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===r)throw o;return E()}for(d.method=r,d.arg=o;;){var i=d.delegate;if(i){var a=_(i,d);if(a){if(a===c)continue;return a}}if("next"===d.method)d.sent=d._sent=d.arg;else if("throw"===d.method){if("suspendedStart"===n)throw n="completed",d.arg;d.dispatchException(d.arg)}else"return"===d.method&&d.abrupt("return",d.arg);

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (703)
Category:	downloaded
Size (bytes):	2229
Entropy (8bit):	5.578804080544614
Encrypted:	false
SSDEEP:	48:NObJ0gri9k2wvybilOSswsyK8rIWRndp1CEWM92G9vE:q0g+9UvyiDjLBrVhdpkBMHE
MD5:	A037DB988E6DF4BF7EACDCC1283BB417
SHA1:	9094FACE0EB297C1ED4E9AFB31B97E5ADF426F7A
SHA-256:	96C13ED3DCB860F45CFCD1FD7B7C2897CA24CDAC3EC4C65844C40C644C07359D
SHA-512:	AE5D034EE4EC9364135C864F8ADB7622FA4CE399DF32164C250D0235C5FCBD36ED7492A4691FE1FD64673F8F8275D74B1D999297E16BF441004849B9AE86202B
Malicious:	false
Reputation:	low
URL:	https://4706068.fls.doubleclick.net/activityi;dc_pre=CP_jvLy0h4kDFXiK_Qcdcq0Gig;src=4706068;type=rcbnew;cat=rcbne0;ord=4722219042743;npa=0;auiddc=1616239341.1728686880;ps=1;pcor=2078001472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a90v9189992675za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101686685;epver=2;~oref=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent">" AcuityAds Pixel -->.<script>. 'use strict'. !(function(a, e) {. if (!a.aap) {. a.aap = function(e) {. ;(a.acuityAdsEventQueue = a.acuityAdsEventQueue \|\| []).push(e). }. var t = 'script'. var i = e.createElement(t). i.async = true. i.src = 'https://origin.acuityplatform.com/event/v2/pixel.js'. var c = e.getElementsByTagName(t)[0]. c.parentNode.insertBefore(i, c). a.acuityPiggybackCallback = function(e) {. a.acuityParseResponse(e). }. }. })(window, document). aap({ pixelKey: '6890959346797160070' }).</script>. AcuityAds Pixel -->" Facebook Pixel Code -->.<script>.!function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 31752, version 1.0
Category:	downloaded
Size (bytes):	31752
Entropy (8bit):	7.986696590342029
Encrypted:	false
SSDEEP:	768:4lwv3k1fh3DnlToio8SXzHPnh1bMGFR5K14Cy9qmKW:N8VMiZ2vnh1bv245ErW
MD5:	7734EE8395DB8A0C4B6F80401DBE5623
SHA1:	922FE7C115C4B4941CB6A49F4261B80213F52E5C
SHA-256:	D85F7F9185D92391162A9A6BDE4EB53FC663C24998AC4F9A6664E5A0963F8219
SHA-512:	96733602BD1C8CC4C4FCE2551919783E708445A4EF02EDDD201DD59C76680EFEC6FD1F67B47B2B216A5AEF52BE8900C978FDC528E62E64EB5F9F61110D7D73CA
Malicious:	false
Reputation:	low
URL:	https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive/app/etc/clientlibs/redcross/rcbblooddrive/app/assets/images/standard-extrabold-2011.07.01-webfont.woff
Preview:	wOFF......\|.................................FFTM............f;6.GDEF.......#...&....GPOS.......+..\.Z. .GSUB.......6....5.'.OS/2...L...U...`..M-cmap..............Bcvt ...,...T...T....fpgm...........eS./.gasp...4............glyf...<..U'....g.N.head..rd...4...6...Qhhea..r.... ...$.q..hmtx..r.........:.loca..t..........sRmaxp..v.... ... ....name..v....l....H..post..y<.........y2.prep..{,........hg..webf..\|...........S..........=.......5.B......e.x.c`d``..b9..`.BF..@...%....c..+....x..{pTu..O......M......A%.........B...........n.t..0:.J......"..D./5.e-[......?.........9.....4.X5..o.}.....=s.GD~.%m...6..,.....A......i....RT...F...C.....m4.o.[.....\..r\|6?.......gK.O..y....4..z.....O..<.&W..>.]AA.!.Kpl..r..........+....X.+..G.xz.^..t..D.....J.O...2....2...a3m.Z...t.}.0..", .....7.a.o%..y%kJ:J...+...j.........H..'.^......@...)....=Q.y....K+.+...Pqa........O........}eye..G...SY...rZ..........j.B& ..@B......%...HI..9.4.Cj..5............'.t..b.^...(.J)=....

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	76827
Entropy (8bit):	5.422540075547587
Encrypted:	false
SSDEEP:	1536:R7hpwNFHM9ZK0BK01QYaKTZ02LKVsdmpyKcicu7JhQ:R7ss9ZKAKBYaKj8wKcH7
MD5:	85A00B7745F38E9A1EF99ED375B8DB55
SHA1:	DB2CD0856775DD252A587696B524200FDF3D1C5D
SHA-256:	861184F7D5CB14DC87640B0CEADFB44ED8F1E963361926C29CDBF3351B5F3260
SHA-512:	5CF03F908428FE17782C03B607E61360BB53A13A71172879F541CD79D02439B5B34853411F5963F394C34AFF5869352F39DA56DC9A1DFA1171C89EE96DD1D2F0
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1599953746963987?v=2.9.170&r=stable&domain=www.redcrossblood.org&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	231864
Entropy (8bit):	5.458039173946496
Encrypted:	false
SSDEEP:	3072:nfLeYH8At6JK37OeR8NteGvQ+AMPpgArl0xYu5s713TW:nfLeYc+6JaH8N7QQGArHu5s713K
MD5:	40283CFC473AFBE1D4ABBA7E6C809885
SHA1:	8A32CB88D9F537B02582DF17A5BB11C2087937F6
SHA-256:	48BA1993011DB4834882D81B2153753437607292F704A6543D4466C0F6D1372A
SHA-512:	DABD9FD4CC3FB4FF3EBC2C3529E602E91939DDB1F42C2D7E70188DFC3262548922EA45C96691D567F2C777D393B5CE7162B5BD4C2054B33A03856BBEA1C1A0E3
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZwmrIgAIc-zJMAA9&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	91
Entropy (8bit):	4.832569673452823
Encrypted:	false
SSDEEP:	3:Ub/HXiREpEyqXXl6EAaXWv7se:UrXiglqX1Ev4e
MD5:	30EEF3BBAE1F869B24BB33F9A980CFD2
SHA1:	9D113B7A143BEA024A74B26839BF1F303CC59FFF
SHA-256:	DE3E759F825ACFA316844194923E54E0BAAD5E6D575D062FFAB3ED52C2FBA230
SHA-512:	C06F9A51E9F7E41094F1E4A7590A148FBDF31E0DAA1202AED7B70746557B56DAE981A2CE55F048807218781A75DFA0781DABEB2A469AD24C5994B6A56BD444B6
Malicious:	false
Reputation:	low
Preview:	/**/ typeof branch_callback__0 === 'function' && branch_callback__0("1373419231308141071");

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	62860
Entropy (8bit):	5.016635568379279
Encrypted:	false
SSDEEP:	768:CIAqCGWW9pqopafboik8fQVknkaq5pF493xVtt/3eEi2ANz3hohz8fn5RfWtfeEN:CIdG+0ZMr8hnkz5pQoNzWh8n3kxV
MD5:	D3BF7A3D8A81DF2402611F3EA01F5BCD
SHA1:	249A87830FD457AF24507A85359AFCCA1142D5A9
SHA-256:	ABD42F3EDDEF6F7FC5E179107B8CFA4272D35808CC609F71BBE0002F8423CE8C
SHA-512:	3970C34BE9D688104A6B71C89CF843974F82E3F5957E61D5FDC74240725D59EC5BE71646D49789B470333EBD6AD0BE5D619BE3A753C93D780C776A3BA27ACD36
Malicious:	false
Reputation:	low
Preview:	{. "jcr:title": "Schedule a Blood, Platelet or Plasma Donation \| American Red Cross",. "jcr:description": "Find the nearest Red Cross blood, platelet or plasma donation center. Make a difference in someone's life, give the gift of life.",. "pageTitle": "Schedule a Blood, Platelet or Plasma Donation \| American Red Cross",. "login": {. "buttonColor": "red-button",. "buttonLabel": "Sign In",. "emptyFieldsErrorMessage": "You cannot leave this field empty!",. "emptyFieldErrorMessage": "asdf",. "passwordLengthErrorMessage": "Password does not match length requirements. ",. "attributeSignInButton": "sign in",. "title": "Login",. "signInFailure": "<p>The username or password you entered is incorrect. Try entering them again or <a href=\"/give.html/reset-password\">get an email reminder<\/a>.<\/p>\r\n",. "attributeDonorLink": "i forgot my username/password". },. "temporary_password_login": {. "emptyError": "You can\u2019t leave this field empty!",. "tooSho

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (737)
Category:	downloaded
Size (bytes):	884
Entropy (8bit):	5.529550408922829
Encrypted:	false
SSDEEP:	24:US0ct/BpSVUosQVDIckRWZlhSTCLPIxTr:vt/B6UWIckwhzP0v
MD5:	A7869012AE78CF6C2AC7A0E144AF9AE7
SHA1:	9DDE1AD3C88C6B99A01EF35931E738A1921CD718
SHA-256:	0B7855CB82A3DDC69DB6DF8BF1AFBBEEE3815B6CC8408720A3C351C6DF610068
SHA-512:	2A2AD1421EE2D9BF8870EDED1580E1C02004DD4689A63C449C7E9A80A6E43FBD516203BDCACAF5A9453D30B714336C02BD75B1A40A785158F4A96083768D1F88
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC65a396d8c7f54301a04f272a1d7974d8-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC65a396d8c7f54301a04f272a1d7974d8-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC65a396d8c7f54301a04f272a1d7974d8-source.min.js', "<script>\n(function(w,d,t,r,u){var f,n,i;w[u]=w[u]\|\|[],f=function(){var o=\n\n{ti:\"36000116\"}\n;o.q=w[u],w[u]=new UET(o),w[u].push(\"pageLoad\")},n=d.createElement(t),n.src=r,n.async=1,n.onload=n.onreadystatechange=function()\n\n{var s=this.readyState;s&&s!==\"loaded\"&&s!==\"complete\"\|\|(f(),n.onload=n.onreadystatechange=null)}\n,i=d.getElementsByTagName(t)[0],i.parentNode.insertBefore(n,i)})(window,document,\"script\",\"//bat.bing.com/bat.js\",\"uetq\");\n\nwindow.uetq = window.uetq \|\| [];\nwindow.uetq.push('event', 'page_view', { page_path: '/RCOBIO_2889_Test' });\n</script>");

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26974)
Category:	downloaded
Size (bytes):	27298
Entropy (8bit):	5.238471621327159
Encrypted:	false
SSDEEP:	768:WgYDaz/zmBV5lFslQe96zc8GEYEQWO8Il:6+zbUFs78Giu9
MD5:	F62D72F9BADA8896E7218F17D63F3A39
SHA1:	AA1C606C110A67FBF6F7033662B12F653373EDC1
SHA-256:	82AA8D65D7E8A711D4E887349D5D9F7553A5DC355F40FA7D91E21A4F2DE4E3FF
SHA-512:	2D03AB554D01F0BE4613ACAEF8DF10091D6CC68D73AE446DA6CFB3200AE899AA8D842D0D5CD6037FF14F244F82893E26F5B6BBB559D47588E58B6F363FFDDB7B
Malicious:	false
Reputation:	low
URL:	https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive/new-relic/new-relic-rcbbloodapp-prod.js
Preview:	;window.NREUM\|\|(NREUM={});NREUM.init={privacy:{cookies_enabled:true}};.window.NREUM\|\|(NREUM={}),__nr_require=function(t,e,n){function r(n){if(!e[n]){var o=e[n]={exports:{}};t[n][0].call(o.exports,function(e){var o=t[n][1][e];return r(o\|\|e)},o,o.exports)}return e[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var o=0;o<n.length;o++)r(n[o]);return r}({1:[function(t,e,n){function r(t){try{c.console&&console.log(t)}catch(e){}}var o,i=t("ee"),a=t(27),c={};try{o=localStorage.getItem("__nr_flags").split(","),console&&"function"==typeof console.log&&(c.console=!0,o.indexOf("dev")!==-1&&(c.dev=!0),o.indexOf("nr_dev")!==-1&&(c.nrDev=!0))}catch(s){}c.nrDev&&i.on("internal-error",function(t){r(t.stack)}),c.dev&&i.on("fn-err",function(t,e,n){r(n.stack)}),c.dev&&(r("NR AGENT IN DEVELOPMENT MODE"),r("flags: "+a(c,function(t,e){return t}).join(", ")))},{}],2:[function(t,e,n){function r(t,e,n,r,c){try{l?l-=1:o(c\|\|new UncaughtException(t,e,n),!0)}catch(f){try{i("ierr",[f,s.now(),!

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	323758
Entropy (8bit):	5.567742911166107
Encrypted:	false
SSDEEP:	6144:D4xP8OF1uC1O54gBB1xcQLeD5EyaCmQdZKeo:UxZFgCIQtf0
MD5:	541F3A5FB00272BEAFE6398D1EA7B8F2
SHA1:	6B0ED2CE06A1B48C6A0FA308852E9C84D5B8E6C0
SHA-256:	5F05B59E706C98FAD41877DBA3BB4F639C7B45A6D70393474764589FD8D0E3F6
SHA-512:	A3345049F3A0E5C734670D52E9D727D4158688A4028F209055860E6FF3A6D67EA729FBB32A133007E81BA90071C82FB72C5DCF94DB8A11A60EFEBBE01F8E558B
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4201)
Category:	dropped
Size (bytes):	227822
Entropy (8bit):	5.544516672414018
Encrypted:	false
SSDEEP:	3072:Yf+H1CEOFp7Ziq0G6oI1LirsiI3XV9ujmxcQL58z2o:S8OF1Z4O5IHGjmxcQL58ao
MD5:	A1B7B9354B651D2F49A3C6198CDB2B51
SHA1:	5D7E3628E162883DEB90FA0B00543823CE0E30E1
SHA-256:	225E6D3E5A337BA6430CD6AC555559B3EFF89F614358637CDE266643D02D03A7
SHA-512:	6F3E638C19B8D399E8E4E9EC0D4D1A9C75EFFEC8912622F0D9FBC86FC5206F4897679818672C14639A6FC42EBB05D81CE0855B8C96095C03B99DA83BFEE6889D
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"DC-4706068","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__ogt_1p_data_v2","priority":0,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"",

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1236)
Category:	dropped
Size (bytes):	1383
Entropy (8bit):	5.519973878589324
Encrypted:	false
SSDEEP:	24:Hct/BwErdwMpfIel4469gS3NDjRWCwHKJ5A6Zyf2IovxzAqUbtFGU6+ApO:8t/BwEr2d46hDjwLKJD5IovxzAqot8i
MD5:	0361CCAE4CE95CC692FDBC2CF091FFB5
SHA1:	F014A1B47BE09D3B93C82935CC4D169357F59BFC
SHA-256:	B2E1E023E8C25D3A97238DE3E0E03F7FD5AC611D20203BD654F4E4167ABC8830
SHA-512:	FF12AA299331E19A7ADAE026DA747B8FB44E20D02E88262F36A7A94ABD9ADF8577DEC6F27117BAF70F19D6CFB2092E469BA34C813912E4FE51924FEB1DA6C9BA
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC015d7944a2b0453bbe25c97d23bb3f78-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/16a36399704a/453d9ca51f91/a91216cfe63e/RC015d7944a2b0453bbe25c97d23bb3f78-source.min.js', "var environment=window._satellite.buildInfo.environment,key=\"\";key=\"development\"==environment\|\|\"staging\"==environment?\"key_test_biGR9wE8gWR0GfHoZaf24ipbwypfT8dF\":\"key_live_mmHU3rrXl3U4GfMnF6H0sddfrzccH9ha\",function(e,n,i,t,r,a,o,s,d,c){if(!e[t]\|\|!e[t]._q){for(;s<o.length;)r(a,o[s++]);(d=n.createElement(i)).async=1,d.src=\"https://cdn.branch.io/branch-latest.min.js\",(c=n.getElementsByTagName(i)[0]).parentNode.insertBefore(d,c),e[t]=a}}(window,document,\"script\",\"branch\",(function(e,n){e[n]=function(){e._q.push([n,arguments])}}),{_q:[],_v:1},\"addListener applyCode autoAppIndex banner closeBanner closeJourney creditHistory credits data deepview deepviewCta first getCode init link logo

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 12, 2024 00:47:43.407068968 CEST	49705	443	192.168.2.8	13.107.246.51
Oct 12, 2024 00:47:44.641472101 CEST	49676	443	192.168.2.8	52.182.143.211
Oct 12, 2024 00:47:45.203972101 CEST	49673	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:47:45.563474894 CEST	49672	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:47:45.907104015 CEST	49671	443	192.168.2.8	204.79.197.203
Oct 12, 2024 00:47:46.235240936 CEST	49677	80	192.168.2.8	192.229.211.108
Oct 12, 2024 00:47:54.383702993 CEST	49676	443	192.168.2.8	52.182.143.211
Oct 12, 2024 00:47:54.807394028 CEST	49673	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:47:55.166465044 CEST	49672	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:47:56.131624937 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.131691933 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.131755114 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.131988049 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.132018089 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.602364063 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.602699995 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.602725029 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.603934050 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.604020119 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.605186939 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.605257034 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.605591059 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.605609894 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.654201984 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.871407986 CEST	49677	80	192.168.2.8	192.229.211.108
Oct 12, 2024 00:47:56.883239985 CEST	443	49704	23.206.229.226	192.168.2.8
Oct 12, 2024 00:47:56.885720015 CEST	49704	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:47:56.890912056 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.890961885 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.890990973 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.891083956 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.891109943 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.891165018 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.891199112 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.891213894 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.891220093 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.891232967 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.891765118 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.891794920 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.891946077 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.891977072 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.892227888 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.892235041 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.892277956 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.895881891 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.948116064 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.977447033 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.977555990 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.977588892 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.977616072 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.977637053 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.977700949 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.977700949 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.977771997 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.978274107 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.978302956 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.978326082 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.978333950 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.978348970 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.978364944 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.979517937 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.979561090 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.979578018 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.979595900 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.979609013 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.979655027 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.979688883 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.979695082 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.979850054 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.979872942 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.979907990 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.979913950 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.980045080 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.980078936 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.980088949 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.980124950 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.980988979 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.981024027 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.981067896 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:56.981070995 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.981081963 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:56.981112957 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.006587029 CEST	49722	443	192.168.2.8	142.250.186.68
Oct 12, 2024 00:47:57.006618977 CEST	443	49722	142.250.186.68	192.168.2.8
Oct 12, 2024 00:47:57.006690025 CEST	49722	443	192.168.2.8	142.250.186.68
Oct 12, 2024 00:47:57.006911039 CEST	49722	443	192.168.2.8	142.250.186.68
Oct 12, 2024 00:47:57.006922007 CEST	443	49722	142.250.186.68	192.168.2.8
Oct 12, 2024 00:47:57.064354897 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.064419985 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.064455032 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.064502954 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.064522028 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.064570904 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.064807892 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.064841032 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.064866066 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.064893007 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.064898968 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.064908981 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.065792084 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.065829039 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.065864086 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.065870047 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.065888882 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.065901041 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.065908909 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.065937996 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.065979958 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.069407940 CEST	49719	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.069467068 CEST	443	49719	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.130270004 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.130316019 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.130642891 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.130872965 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.130887032 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.402841091 CEST	49724	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:57.402878046 CEST	443	49724	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:57.402952909 CEST	49724	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:57.404652119 CEST	49724	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:57.404663086 CEST	443	49724	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:57.612864017 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.613081932 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.613112926 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.614106894 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.614170074 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.614525080 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.614636898 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.614665985 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.655311108 CEST	443	49722	142.250.186.68	192.168.2.8
Oct 12, 2024 00:47:57.655553102 CEST	49722	443	192.168.2.8	142.250.186.68
Oct 12, 2024 00:47:57.655570030 CEST	443	49722	142.250.186.68	192.168.2.8
Oct 12, 2024 00:47:57.656524897 CEST	443	49722	142.250.186.68	192.168.2.8
Oct 12, 2024 00:47:57.656579018 CEST	49722	443	192.168.2.8	142.250.186.68
Oct 12, 2024 00:47:57.657512903 CEST	49722	443	192.168.2.8	142.250.186.68
Oct 12, 2024 00:47:57.657572985 CEST	443	49722	142.250.186.68	192.168.2.8
Oct 12, 2024 00:47:57.659404993 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.665077925 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.665086031 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.697303057 CEST	49722	443	192.168.2.8	142.250.186.68
Oct 12, 2024 00:47:57.697321892 CEST	443	49722	142.250.186.68	192.168.2.8
Oct 12, 2024 00:47:57.714193106 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.745712042 CEST	49722	443	192.168.2.8	142.250.186.68
Oct 12, 2024 00:47:57.766278982 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.766326904 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.766370058 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.766381979 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.766410112 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.766446114 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.766448975 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.766459942 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.766516924 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.766524076 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.767105103 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.767149925 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.767155886 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.767165899 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.767196894 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.772419930 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.772481918 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.772522926 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.772530079 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.821042061 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.842925072 CEST	49727	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:57.842962980 CEST	443	49727	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:57.843023062 CEST	49727	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:57.843409061 CEST	49727	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:57.843420029 CEST	443	49727	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:57.858635902 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.858772993 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.858805895 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.858824968 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.858855009 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.858895063 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.859175920 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.859488010 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.859525919 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.859534979 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.859642029 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.859673977 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.859678030 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.859684944 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.859713078 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.859719038 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.860524893 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.860569000 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.860573053 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.860586882 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.860621929 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.860627890 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.860665083 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.860699892 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.860704899 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.861546040 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.861582994 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.861584902 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.861594915 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.861628056 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.861634016 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.862341881 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.862379074 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.862385988 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.912297010 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.912302971 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.952445984 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.952481985 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.952495098 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.952511072 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.952550888 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.952553034 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.952565908 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.952616930 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.952934980 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.952941895 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.952979088 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.952984095 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.952995062 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.953035116 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.953691006 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.953699112 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.953758955 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.953788042 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.953840017 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.953845978 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.953913927 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:57.953972101 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.958662033 CEST	49723	443	192.168.2.8	104.17.25.14
Oct 12, 2024 00:47:57.958666086 CEST	443	49723	104.17.25.14	192.168.2.8
Oct 12, 2024 00:47:58.099297047 CEST	443	49724	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:58.099390984 CEST	49724	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:58.103224993 CEST	49724	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:58.103243113 CEST	443	49724	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:58.103504896 CEST	443	49724	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:58.149365902 CEST	49724	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:58.157732010 CEST	49724	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:58.203404903 CEST	443	49724	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:58.427494049 CEST	443	49724	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:58.427659035 CEST	443	49724	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:58.427702904 CEST	49724	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:58.427735090 CEST	443	49724	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:58.427748919 CEST	49724	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:58.427748919 CEST	49724	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:58.427757978 CEST	443	49724	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:58.427764893 CEST	443	49724	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:58.483788013 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:58.483844042 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:58.483910084 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:58.484637976 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:58.484652996 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:58.490767002 CEST	443	49727	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:58.491435051 CEST	49727	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:58.491492033 CEST	443	49727	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:58.492583990 CEST	443	49727	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:58.492652893 CEST	49727	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:58.501061916 CEST	49727	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:58.501163960 CEST	443	49727	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:58.501271009 CEST	49727	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:58.501291037 CEST	443	49727	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:58.548237085 CEST	49727	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:58.746978998 CEST	443	49727	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:58.747067928 CEST	443	49727	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:58.747164965 CEST	49727	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:58.834053040 CEST	49727	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:58.834126949 CEST	443	49727	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:58.839176893 CEST	49731	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:58.839211941 CEST	443	49731	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:58.839373112 CEST	49731	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:58.839854956 CEST	49731	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:58.839874983 CEST	443	49731	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:59.188321114 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:47:59.188357115 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:47:59.188453913 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:47:59.188643932 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:47:59.188654900 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:47:59.231302023 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:59.231378078 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:59.232841015 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:59.232847929 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:59.233092070 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:59.234324932 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:59.279407024 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:59.462430954 CEST	443	49731	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:59.463186979 CEST	49731	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:59.463201046 CEST	443	49731	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:59.463634014 CEST	443	49731	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:59.464209080 CEST	49731	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:59.464287996 CEST	443	49731	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:59.464370012 CEST	49731	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:59.509438992 CEST	49731	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:59.509458065 CEST	443	49731	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:59.567730904 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:59.567795992 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:59.567918062 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:59.568702936 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:59.568708897 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:59.568738937 CEST	49730	443	192.168.2.8	184.28.90.27
Oct 12, 2024 00:47:59.568744898 CEST	443	49730	184.28.90.27	192.168.2.8
Oct 12, 2024 00:47:59.720355034 CEST	443	49731	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:59.720376968 CEST	443	49731	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:59.720433950 CEST	49731	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:59.720448017 CEST	443	49731	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:59.720506907 CEST	443	49731	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:59.720716953 CEST	49731	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:59.722194910 CEST	49731	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:47:59.722209930 CEST	443	49731	108.128.136.169	192.168.2.8
Oct 12, 2024 00:47:59.793607950 CEST	49738	443	192.168.2.8	34.247.205.49
Oct 12, 2024 00:47:59.793642044 CEST	443	49738	34.247.205.49	192.168.2.8
Oct 12, 2024 00:47:59.793770075 CEST	49738	443	192.168.2.8	34.247.205.49
Oct 12, 2024 00:47:59.794079065 CEST	49738	443	192.168.2.8	34.247.205.49
Oct 12, 2024 00:47:59.794090033 CEST	443	49738	34.247.205.49	192.168.2.8
Oct 12, 2024 00:47:59.794399977 CEST	49739	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:47:59.794440985 CEST	443	49739	54.77.0.81	192.168.2.8
Oct 12, 2024 00:47:59.794785976 CEST	49739	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:47:59.794951916 CEST	49739	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:47:59.794962883 CEST	443	49739	54.77.0.81	192.168.2.8
Oct 12, 2024 00:47:59.837790966 CEST	49740	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:47:59.837836027 CEST	443	49740	63.140.62.27	192.168.2.8
Oct 12, 2024 00:47:59.838001013 CEST	49740	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:47:59.838469982 CEST	49740	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:47:59.838485956 CEST	443	49740	63.140.62.27	192.168.2.8
Oct 12, 2024 00:47:59.846772909 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:47:59.847395897 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:47:59.847413063 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:47:59.848510027 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:47:59.848587036 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:47:59.849931002 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:47:59.850033045 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:47:59.850291967 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:47:59.850301027 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:47:59.899009943 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.286325932 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.286412001 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.286439896 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.286463022 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.286840916 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.376945972 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.376964092 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.377006054 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.377041101 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.377068043 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.377120018 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.377120018 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.402546883 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.402605057 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.402719021 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.402719021 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.402736902 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.402997017 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.408592939 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.408673048 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.414406061 CEST	443	49739	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:00.415038109 CEST	49739	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:00.415047884 CEST	443	49739	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:00.418622971 CEST	443	49739	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:00.418728113 CEST	49739	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:00.419754982 CEST	49739	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:00.419960022 CEST	443	49739	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:00.419998884 CEST	49739	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:00.439866066 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.439929962 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.439985037 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.440000057 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.440227985 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.458391905 CEST	443	49738	34.247.205.49	192.168.2.8
Oct 12, 2024 00:48:00.462678909 CEST	49739	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:00.462694883 CEST	443	49739	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:00.465164900 CEST	49738	443	192.168.2.8	34.247.205.49
Oct 12, 2024 00:48:00.465174913 CEST	443	49738	34.247.205.49	192.168.2.8
Oct 12, 2024 00:48:00.467910051 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.468008041 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.468028069 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.468045950 CEST	443	49738	34.247.205.49	192.168.2.8
Oct 12, 2024 00:48:00.468135118 CEST	49738	443	192.168.2.8	34.247.205.49
Oct 12, 2024 00:48:00.472079992 CEST	49738	443	192.168.2.8	34.247.205.49
Oct 12, 2024 00:48:00.472259998 CEST	443	49738	34.247.205.49	192.168.2.8
Oct 12, 2024 00:48:00.472614050 CEST	49738	443	192.168.2.8	34.247.205.49
Oct 12, 2024 00:48:00.472624063 CEST	443	49738	34.247.205.49	192.168.2.8
Oct 12, 2024 00:48:00.478210926 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.478234053 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.478692055 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.478717089 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.478801012 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.478940964 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.479013920 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.483851910 CEST	443	49740	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:00.499356985 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.499411106 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.499447107 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.499473095 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.499818087 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.503192902 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.503673077 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.503684044 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.518160105 CEST	49738	443	192.168.2.8	34.247.205.49
Oct 12, 2024 00:48:00.518183947 CEST	49739	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:00.520457029 CEST	49740	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:00.520483971 CEST	443	49740	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:00.521672010 CEST	443	49740	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:00.521752119 CEST	49740	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:00.522892952 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.522914886 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.522965908 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.522996902 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.523148060 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.523263931 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.524137020 CEST	49740	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:00.524236917 CEST	443	49740	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:00.524815083 CEST	49740	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:00.524826050 CEST	443	49740	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:00.526653051 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.526880980 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.544519901 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.544559002 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.544729948 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.544751883 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.546502113 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.558700085 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.558741093 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.558798075 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.558814049 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.558887005 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.563126087 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.563163042 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.563251019 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.563251019 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.563271046 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.563432932 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.568984985 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.569125891 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.570759058 CEST	49740	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:00.575839043 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.575882912 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.575927973 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.575954914 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.576309919 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.577831030 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.581084967 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.581096888 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.587826014 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.587842941 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.587970972 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.587970972 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.587981939 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.588465929 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.589988947 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.590316057 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.598057985 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.599240065 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.599277020 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.599399090 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.599399090 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.599415064 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.601886034 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.601991892 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.602001905 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.602015018 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.602144003 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.602152109 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.609821081 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.609848976 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.610039949 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.610053062 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.610281944 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.613639116 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.613832951 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.613846064 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.620848894 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.621474028 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.621507883 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.621566057 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.621566057 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.621577978 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.621633053 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.621633053 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.624907970 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.624974966 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.631845951 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.631880999 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.631979942 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.631979942 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.631993055 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.635283947 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.635348082 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.635364056 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.635442019 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.635823011 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.640983105 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.641976118 CEST	49734	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:00.641995907 CEST	443	49734	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:00.672910929 CEST	443	49739	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:00.672938108 CEST	443	49739	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:00.672998905 CEST	443	49739	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:00.673043013 CEST	49739	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:00.673120975 CEST	49739	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:00.674792051 CEST	49739	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:00.674813986 CEST	443	49739	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:00.751852989 CEST	443	49738	34.247.205.49	192.168.2.8
Oct 12, 2024 00:48:00.751916885 CEST	443	49738	34.247.205.49	192.168.2.8
Oct 12, 2024 00:48:00.751948118 CEST	443	49738	34.247.205.49	192.168.2.8
Oct 12, 2024 00:48:00.751996994 CEST	49738	443	192.168.2.8	34.247.205.49
Oct 12, 2024 00:48:00.752013922 CEST	443	49738	34.247.205.49	192.168.2.8
Oct 12, 2024 00:48:00.752068996 CEST	443	49738	34.247.205.49	192.168.2.8
Oct 12, 2024 00:48:00.752140045 CEST	49738	443	192.168.2.8	34.247.205.49
Oct 12, 2024 00:48:00.752140045 CEST	49738	443	192.168.2.8	34.247.205.49
Oct 12, 2024 00:48:00.754175901 CEST	49738	443	192.168.2.8	34.247.205.49
Oct 12, 2024 00:48:00.754199982 CEST	443	49738	34.247.205.49	192.168.2.8
Oct 12, 2024 00:48:00.786387920 CEST	443	49740	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:00.786444902 CEST	443	49740	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:00.786617994 CEST	49740	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:00.803186893 CEST	49740	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:00.803231001 CEST	443	49740	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:01.669133902 CEST	49748	443	192.168.2.8	142.250.185.226
Oct 12, 2024 00:48:01.669183969 CEST	443	49748	142.250.185.226	192.168.2.8
Oct 12, 2024 00:48:01.669245005 CEST	49748	443	192.168.2.8	142.250.185.226
Oct 12, 2024 00:48:01.669689894 CEST	49748	443	192.168.2.8	142.250.185.226
Oct 12, 2024 00:48:01.669704914 CEST	443	49748	142.250.185.226	192.168.2.8
Oct 12, 2024 00:48:01.687804937 CEST	49751	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:01.687844038 CEST	443	49751	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:01.687948942 CEST	49751	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:01.688198090 CEST	49751	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:01.688214064 CEST	443	49751	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:01.697112083 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:01.697149038 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:01.697221994 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:01.697586060 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:01.697597980 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:01.746882915 CEST	49755	443	192.168.2.8	63.140.62.222
Oct 12, 2024 00:48:01.746926069 CEST	443	49755	63.140.62.222	192.168.2.8
Oct 12, 2024 00:48:01.746995926 CEST	49755	443	192.168.2.8	63.140.62.222
Oct 12, 2024 00:48:01.747478962 CEST	49755	443	192.168.2.8	63.140.62.222
Oct 12, 2024 00:48:01.747493982 CEST	443	49755	63.140.62.222	192.168.2.8
Oct 12, 2024 00:48:01.820653915 CEST	49759	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:48:01.820678949 CEST	443	49759	108.128.136.169	192.168.2.8
Oct 12, 2024 00:48:01.820965052 CEST	49759	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:48:01.826472998 CEST	49759	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:48:01.826493979 CEST	443	49759	108.128.136.169	192.168.2.8
Oct 12, 2024 00:48:02.314179897 CEST	443	49748	142.250.185.226	192.168.2.8
Oct 12, 2024 00:48:02.317420006 CEST	49748	443	192.168.2.8	142.250.185.226
Oct 12, 2024 00:48:02.317450047 CEST	443	49748	142.250.185.226	192.168.2.8
Oct 12, 2024 00:48:02.317754030 CEST	443	49751	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:02.318552971 CEST	49751	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:02.318568945 CEST	443	49751	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:02.318726063 CEST	443	49748	142.250.185.226	192.168.2.8
Oct 12, 2024 00:48:02.318789959 CEST	49748	443	192.168.2.8	142.250.185.226
Oct 12, 2024 00:48:02.320086956 CEST	443	49751	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:02.320991993 CEST	49751	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:02.333580017 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.334192991 CEST	49748	443	192.168.2.8	142.250.185.226
Oct 12, 2024 00:48:02.334472895 CEST	443	49748	142.250.185.226	192.168.2.8
Oct 12, 2024 00:48:02.335807085 CEST	49748	443	192.168.2.8	142.250.185.226
Oct 12, 2024 00:48:02.335871935 CEST	443	49748	142.250.185.226	192.168.2.8
Oct 12, 2024 00:48:02.336381912 CEST	49751	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:02.336667061 CEST	443	49751	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:02.336721897 CEST	49751	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:02.345767021 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.345779896 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.348298073 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.348364115 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.349766970 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.349946022 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.350400925 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.350409031 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.371191978 CEST	443	49755	63.140.62.222	192.168.2.8
Oct 12, 2024 00:48:02.372159958 CEST	49760	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:02.372190952 CEST	443	49760	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:02.372283936 CEST	49760	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:02.372767925 CEST	49760	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:02.372781038 CEST	443	49760	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:02.373219967 CEST	49755	443	192.168.2.8	63.140.62.222
Oct 12, 2024 00:48:02.373234034 CEST	443	49755	63.140.62.222	192.168.2.8
Oct 12, 2024 00:48:02.377059937 CEST	443	49755	63.140.62.222	192.168.2.8
Oct 12, 2024 00:48:02.377146959 CEST	49755	443	192.168.2.8	63.140.62.222
Oct 12, 2024 00:48:02.378073931 CEST	49755	443	192.168.2.8	63.140.62.222
Oct 12, 2024 00:48:02.378179073 CEST	443	49755	63.140.62.222	192.168.2.8
Oct 12, 2024 00:48:02.378331900 CEST	49755	443	192.168.2.8	63.140.62.222
Oct 12, 2024 00:48:02.379400969 CEST	443	49751	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:02.388153076 CEST	49748	443	192.168.2.8	142.250.185.226
Oct 12, 2024 00:48:02.388175011 CEST	49751	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:02.388187885 CEST	443	49751	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:02.402862072 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.419410944 CEST	443	49755	63.140.62.222	192.168.2.8
Oct 12, 2024 00:48:02.433643103 CEST	49755	443	192.168.2.8	63.140.62.222
Oct 12, 2024 00:48:02.433645010 CEST	49751	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:02.433655024 CEST	443	49755	63.140.62.222	192.168.2.8
Oct 12, 2024 00:48:02.445472002 CEST	443	49759	108.128.136.169	192.168.2.8
Oct 12, 2024 00:48:02.446229935 CEST	49759	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:48:02.446239948 CEST	443	49759	108.128.136.169	192.168.2.8
Oct 12, 2024 00:48:02.446585894 CEST	443	49759	108.128.136.169	192.168.2.8
Oct 12, 2024 00:48:02.447113037 CEST	49759	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:48:02.447170019 CEST	443	49759	108.128.136.169	192.168.2.8
Oct 12, 2024 00:48:02.447659969 CEST	49759	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:48:02.474312067 CEST	49755	443	192.168.2.8	63.140.62.222
Oct 12, 2024 00:48:02.491405010 CEST	443	49759	108.128.136.169	192.168.2.8
Oct 12, 2024 00:48:02.597862005 CEST	443	49748	142.250.185.226	192.168.2.8
Oct 12, 2024 00:48:02.598011971 CEST	443	49748	142.250.185.226	192.168.2.8
Oct 12, 2024 00:48:02.598088026 CEST	49748	443	192.168.2.8	142.250.185.226
Oct 12, 2024 00:48:02.603398085 CEST	443	49751	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:02.603496075 CEST	443	49751	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:02.603631973 CEST	49751	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:02.611377954 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.611471891 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.611601114 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.664879084 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.664891958 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.668116093 CEST	443	49755	63.140.62.222	192.168.2.8
Oct 12, 2024 00:48:02.668179989 CEST	443	49755	63.140.62.222	192.168.2.8
Oct 12, 2024 00:48:02.668292999 CEST	49755	443	192.168.2.8	63.140.62.222
Oct 12, 2024 00:48:02.680771112 CEST	49755	443	192.168.2.8	63.140.62.222
Oct 12, 2024 00:48:02.680792093 CEST	443	49755	63.140.62.222	192.168.2.8
Oct 12, 2024 00:48:02.691651106 CEST	49751	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:02.691679955 CEST	443	49751	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:02.698257923 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.698272943 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.698312044 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.698323011 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.698332071 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.698342085 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.698348045 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.698409081 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.703248978 CEST	443	49759	108.128.136.169	192.168.2.8
Oct 12, 2024 00:48:02.703337908 CEST	443	49759	108.128.136.169	192.168.2.8
Oct 12, 2024 00:48:02.703460932 CEST	49759	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:48:02.718358040 CEST	49748	443	192.168.2.8	142.250.185.226
Oct 12, 2024 00:48:02.718372107 CEST	443	49748	142.250.185.226	192.168.2.8
Oct 12, 2024 00:48:02.721812963 CEST	49759	443	192.168.2.8	108.128.136.169
Oct 12, 2024 00:48:02.721841097 CEST	443	49759	108.128.136.169	192.168.2.8
Oct 12, 2024 00:48:02.725692034 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.725702047 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.725727081 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.725740910 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.725747108 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.725786924 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.725790977 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.725852966 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.760380983 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.760410070 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.760426998 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.760457993 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.760504961 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.760514021 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.760535955 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.760560036 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.797642946 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.797667980 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.797703981 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.797713041 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.797744989 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.801801920 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.801853895 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.821914911 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.821952105 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.821979046 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.821984053 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.822015047 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.830208063 CEST	49762	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:02.830255032 CEST	443	49762	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:02.830347061 CEST	49762	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:02.830909014 CEST	49762	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:02.830924034 CEST	443	49762	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:02.846142054 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.846162081 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.846199036 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.846206903 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.846229076 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.868804932 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.868834972 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.868923903 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.868923903 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.868936062 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.884829998 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.884850979 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.884888887 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.884898901 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.884919882 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.884933949 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.886984110 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.887028933 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.897362947 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.897396088 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.897428989 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.897433996 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.897469044 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.909480095 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.909512043 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.909627914 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.909627914 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.909636021 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.920867920 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.920892000 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.920936108 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.920943022 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.943319082 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.943336964 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.943372965 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.943394899 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.943413973 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.943610907 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.943645000 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.943649054 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.943708897 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.945334911 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.945374012 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.945393085 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.945395947 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.945410013 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.945425987 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.953782082 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.953810930 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.953845024 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.953851938 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.953876019 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.953890085 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.957240105 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.957283974 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:02.957288980 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.957326889 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:02.957360029 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:03.016699076 CEST	443	49760	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:03.063580036 CEST	49760	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:03.065485001 CEST	49760	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:03.065490007 CEST	443	49760	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:03.065756083 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:03.066688061 CEST	443	49760	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:03.066745043 CEST	49760	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:03.414933920 CEST	49753	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:03.414969921 CEST	443	49753	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:03.490695953 CEST	443	49762	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:03.490978956 CEST	49762	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:03.490998983 CEST	443	49762	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:03.491331100 CEST	443	49762	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:03.491667986 CEST	49762	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:03.491734982 CEST	443	49762	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:03.491822958 CEST	49762	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:03.539397001 CEST	443	49762	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:03.544678926 CEST	49762	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:03.790041924 CEST	443	49762	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:03.790090084 CEST	443	49762	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:03.790141106 CEST	49762	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:03.790174007 CEST	443	49762	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:03.790529013 CEST	443	49762	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:03.790570974 CEST	49762	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:03.791565895 CEST	49762	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:03.791583061 CEST	443	49762	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:03.870943069 CEST	49760	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:03.871117115 CEST	443	49760	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:03.873176098 CEST	49760	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:03.873192072 CEST	443	49760	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:03.873219967 CEST	49760	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:03.873251915 CEST	443	49760	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:03.912108898 CEST	49772	443	192.168.2.8	216.200.232.249
Oct 12, 2024 00:48:03.912117958 CEST	443	49772	216.200.232.249	192.168.2.8
Oct 12, 2024 00:48:03.912241936 CEST	49772	443	192.168.2.8	216.200.232.249
Oct 12, 2024 00:48:03.912688971 CEST	49772	443	192.168.2.8	216.200.232.249
Oct 12, 2024 00:48:03.912703037 CEST	443	49772	216.200.232.249	192.168.2.8
Oct 12, 2024 00:48:03.913531065 CEST	49760	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:03.917658091 CEST	49773	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:03.917685986 CEST	443	49773	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:03.917810917 CEST	49773	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:03.918638945 CEST	49773	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:03.918653965 CEST	443	49773	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:03.926954031 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:03.926987886 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:03.927037954 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:03.932111025 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:03.932126045 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:03.970983028 CEST	49781	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:03.971019030 CEST	443	49781	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:03.971088886 CEST	49781	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:03.971570969 CEST	49781	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:03.971585989 CEST	443	49781	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:04.212001085 CEST	443	49760	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:04.212028980 CEST	443	49760	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:04.212037086 CEST	443	49760	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:04.212090015 CEST	49760	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:04.212105989 CEST	443	49760	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:04.212472916 CEST	443	49760	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:04.212625980 CEST	49760	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:04.219836950 CEST	49760	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:04.219856024 CEST	443	49760	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:04.290091991 CEST	49783	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:04.290126085 CEST	443	49783	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:04.290230989 CEST	49783	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:04.291718960 CEST	49783	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:04.291733980 CEST	443	49783	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:04.375017881 CEST	49786	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:04.375061989 CEST	443	49786	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:04.375147104 CEST	49786	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:04.377829075 CEST	49786	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:04.377844095 CEST	443	49786	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:04.503602982 CEST	49788	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:04.503698111 CEST	443	49788	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:04.503763914 CEST	49788	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:04.504590988 CEST	49788	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:04.504626036 CEST	443	49788	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:04.506038904 CEST	49789	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:04.506082058 CEST	443	49789	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:04.506275892 CEST	49789	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:04.508058071 CEST	49789	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:04.508075953 CEST	443	49789	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:04.531233072 CEST	443	49772	216.200.232.249	192.168.2.8
Oct 12, 2024 00:48:04.533385038 CEST	49772	443	192.168.2.8	216.200.232.249
Oct 12, 2024 00:48:04.533401966 CEST	443	49772	216.200.232.249	192.168.2.8
Oct 12, 2024 00:48:04.534452915 CEST	443	49772	216.200.232.249	192.168.2.8
Oct 12, 2024 00:48:04.534514904 CEST	49772	443	192.168.2.8	216.200.232.249
Oct 12, 2024 00:48:04.541749954 CEST	49772	443	192.168.2.8	216.200.232.249
Oct 12, 2024 00:48:04.541822910 CEST	443	49772	216.200.232.249	192.168.2.8
Oct 12, 2024 00:48:04.542351007 CEST	49772	443	192.168.2.8	216.200.232.249
Oct 12, 2024 00:48:04.542371988 CEST	443	49772	216.200.232.249	192.168.2.8
Oct 12, 2024 00:48:04.612540960 CEST	443	49781	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:04.613326073 CEST	49781	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:04.613338947 CEST	443	49781	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:04.613701105 CEST	443	49781	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:04.614856958 CEST	49781	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:04.614928007 CEST	443	49781	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:04.615453005 CEST	49781	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:04.659190893 CEST	443	49772	216.200.232.249	192.168.2.8
Oct 12, 2024 00:48:04.659284115 CEST	49772	443	192.168.2.8	216.200.232.249
Oct 12, 2024 00:48:04.659405947 CEST	443	49781	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:04.660401106 CEST	49772	443	192.168.2.8	216.200.232.249
Oct 12, 2024 00:48:04.660417080 CEST	443	49772	216.200.232.249	192.168.2.8
Oct 12, 2024 00:48:04.668375015 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:04.669802904 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:04.669816017 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:04.670876980 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:04.671116114 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:04.673191071 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:04.673265934 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:04.673455954 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:04.673461914 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:04.679439068 CEST	443	49773	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:04.679748058 CEST	49792	443	192.168.2.8	216.200.232.253
Oct 12, 2024 00:48:04.679790974 CEST	443	49792	216.200.232.253	192.168.2.8
Oct 12, 2024 00:48:04.679856062 CEST	49792	443	192.168.2.8	216.200.232.253
Oct 12, 2024 00:48:04.682032108 CEST	49792	443	192.168.2.8	216.200.232.253
Oct 12, 2024 00:48:04.682054996 CEST	443	49792	216.200.232.253	192.168.2.8
Oct 12, 2024 00:48:04.682300091 CEST	49773	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:04.682318926 CEST	443	49773	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:04.682809114 CEST	443	49773	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:04.682868958 CEST	49773	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:04.683751106 CEST	443	49773	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:04.683796883 CEST	49773	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:04.686367035 CEST	49773	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:04.686450005 CEST	443	49773	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:04.687057972 CEST	49773	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:04.687072039 CEST	443	49773	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:04.727699995 CEST	49773	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:04.732017994 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:04.881876945 CEST	443	49781	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:04.881953001 CEST	443	49781	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:04.882006884 CEST	49781	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:04.883934975 CEST	49781	443	192.168.2.8	54.77.0.81
Oct 12, 2024 00:48:04.883950949 CEST	443	49781	54.77.0.81	192.168.2.8
Oct 12, 2024 00:48:04.904393911 CEST	443	49783	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:04.904833078 CEST	49783	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:04.904848099 CEST	443	49783	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:04.906349897 CEST	443	49783	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:04.906426907 CEST	49783	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:04.907938957 CEST	49783	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:04.908009052 CEST	443	49783	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:04.908798933 CEST	49783	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:04.908798933 CEST	49783	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:04.908813000 CEST	443	49783	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:04.908840895 CEST	443	49783	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:04.927407026 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:04.927438974 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:04.927692890 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:04.928375006 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:04.928392887 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:04.948820114 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:04.948892117 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:04.948925018 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:04.948940992 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:04.949368954 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:04.955666065 CEST	49783	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:04.983841896 CEST	443	49773	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:04.984227896 CEST	443	49773	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:04.984361887 CEST	49773	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:04.987037897 CEST	443	49789	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:04.987426996 CEST	49789	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:04.987438917 CEST	443	49789	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:04.987802029 CEST	49773	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:04.987814903 CEST	443	49773	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:04.988517046 CEST	443	49789	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:04.988641977 CEST	49789	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:04.990452051 CEST	49789	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:04.990521908 CEST	443	49789	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:04.990989923 CEST	49789	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:04.990998030 CEST	443	49789	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:05.023693085 CEST	443	49786	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:05.024137974 CEST	49786	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:05.024153948 CEST	443	49786	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:05.025192022 CEST	443	49786	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:05.025270939 CEST	49786	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:05.026096106 CEST	49801	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:05.026138067 CEST	443	49801	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:05.026264906 CEST	49801	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:05.027272940 CEST	49786	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:05.027347088 CEST	443	49786	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:05.027348995 CEST	49786	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:05.028002977 CEST	49801	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:05.028022051 CEST	443	49801	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:05.029047966 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.029057026 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.029088020 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.029114008 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.029143095 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.029155016 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.029175997 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.059258938 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.059281111 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.059413910 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.059438944 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.071412086 CEST	443	49786	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:05.093679905 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.093697071 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.093791008 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.093791008 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.093801022 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.106424093 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:05.106451035 CEST	443	49803	172.217.16.198	192.168.2.8
Oct 12, 2024 00:48:05.106544018 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:05.106847048 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:05.106856108 CEST	443	49803	172.217.16.198	192.168.2.8
Oct 12, 2024 00:48:05.131104946 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.131140947 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.131175041 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.131186008 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.131215096 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.136127949 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.136220932 CEST	49789	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:05.136224985 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.136224985 CEST	49786	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:05.136233091 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.136243105 CEST	443	49786	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:05.137157917 CEST	443	49789	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:05.137227058 CEST	443	49789	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:05.137972116 CEST	49789	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:05.155348063 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.155364037 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.157259941 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.157277107 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.157367945 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.173582077 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:05.173616886 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:05.174060106 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:05.175502062 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:05.175517082 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:05.179585934 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.179594040 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.179630041 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.179673910 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.179673910 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.179691076 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.180032969 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.182517052 CEST	49789	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:05.182531118 CEST	443	49789	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:05.199867964 CEST	443	49783	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:05.200438976 CEST	443	49783	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:05.200519085 CEST	49783	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:05.202132940 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.202173948 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.202235937 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.202244997 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.202276945 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.202276945 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.204885006 CEST	49783	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:05.204904079 CEST	443	49783	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:05.218307018 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.218348980 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.218414068 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.218414068 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.218425035 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.220427036 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.220737934 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.220747948 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.220973969 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.230922937 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.230957031 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.231019020 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.231033087 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.231043100 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.231102943 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.239789009 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:05.239830971 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:05.239907980 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:05.240186930 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:05.240221024 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:05.243412018 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.243428946 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.244003057 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.244009972 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.244062901 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.249073029 CEST	49807	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:05.249111891 CEST	443	49807	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:05.249175072 CEST	49807	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:05.249396086 CEST	49807	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:05.249413013 CEST	443	49807	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:05.254403114 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.254420042 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.254475117 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.254482985 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.254496098 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.254522085 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.258511066 CEST	49786	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:05.265228033 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.265249968 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.265307903 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.265315056 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.265342951 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.266912937 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.266963959 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.273931026 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.273968935 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.274007082 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.274018049 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.274040937 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.284925938 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.284946918 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.284982920 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.284991026 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.285013914 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.288434029 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.288492918 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.288500071 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.288512945 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.288568020 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.290597916 CEST	49774	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.290622950 CEST	443	49774	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.300052881 CEST	443	49792	216.200.232.253	192.168.2.8
Oct 12, 2024 00:48:05.304483891 CEST	49792	443	192.168.2.8	216.200.232.253
Oct 12, 2024 00:48:05.304496050 CEST	443	49792	216.200.232.253	192.168.2.8
Oct 12, 2024 00:48:05.304498911 CEST	443	49788	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:05.304841042 CEST	49788	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:05.304847956 CEST	443	49788	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:05.305665016 CEST	443	49792	216.200.232.253	192.168.2.8
Oct 12, 2024 00:48:05.305732012 CEST	49792	443	192.168.2.8	216.200.232.253
Oct 12, 2024 00:48:05.305835962 CEST	443	49788	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:05.305891991 CEST	49788	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:05.315258026 CEST	49788	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:05.315363884 CEST	443	49788	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:05.315689087 CEST	49792	443	192.168.2.8	216.200.232.253
Oct 12, 2024 00:48:05.315814018 CEST	443	49792	216.200.232.253	192.168.2.8
Oct 12, 2024 00:48:05.316415071 CEST	49788	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:05.316428900 CEST	443	49788	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:05.316582918 CEST	49792	443	192.168.2.8	216.200.232.253
Oct 12, 2024 00:48:05.316592932 CEST	443	49792	216.200.232.253	192.168.2.8
Oct 12, 2024 00:48:05.368645906 CEST	49792	443	192.168.2.8	216.200.232.253
Oct 12, 2024 00:48:05.368669033 CEST	49788	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:05.372375965 CEST	443	49786	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:05.372443914 CEST	443	49786	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:05.372833967 CEST	49786	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:05.372867107 CEST	443	49786	63.140.62.27	192.168.2.8
Oct 12, 2024 00:48:05.372879028 CEST	49786	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:05.372925997 CEST	49786	443	192.168.2.8	63.140.62.27
Oct 12, 2024 00:48:05.438931942 CEST	443	49792	216.200.232.253	192.168.2.8
Oct 12, 2024 00:48:05.439013958 CEST	443	49792	216.200.232.253	192.168.2.8
Oct 12, 2024 00:48:05.439233065 CEST	49792	443	192.168.2.8	216.200.232.253
Oct 12, 2024 00:48:05.458105087 CEST	49792	443	192.168.2.8	216.200.232.253
Oct 12, 2024 00:48:05.458122969 CEST	443	49792	216.200.232.253	192.168.2.8
Oct 12, 2024 00:48:05.490822077 CEST	443	49788	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:05.490915060 CEST	443	49788	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:05.490977049 CEST	49788	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:05.573215961 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.573661089 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.573674917 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.574023962 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.574326038 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.574393988 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.574615955 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:05.615417957 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:05.659252882 CEST	443	49801	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:05.659564018 CEST	49801	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:05.659590960 CEST	443	49801	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:05.659979105 CEST	443	49801	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:05.660281897 CEST	49801	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:05.660666943 CEST	443	49801	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:05.660713911 CEST	49801	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:05.660842896 CEST	49801	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:05.660907030 CEST	443	49801	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:05.661097050 CEST	49801	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:05.661108017 CEST	443	49801	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:05.736685038 CEST	443	49807	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:05.745531082 CEST	443	49803	172.217.16.198	192.168.2.8
Oct 12, 2024 00:48:05.748419046 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:05.797095060 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:05.797382116 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:05.854846954 CEST	49801	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:05.856357098 CEST	49807	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:05.961689949 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:05.961724997 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:05.961781025 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:05.961797953 CEST	443	49803	172.217.16.198	192.168.2.8
Oct 12, 2024 00:48:05.962279081 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:05.962290049 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:05.962346077 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:05.962968111 CEST	443	49803	172.217.16.198	192.168.2.8
Oct 12, 2024 00:48:05.962980032 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:05.962981939 CEST	443	49803	172.217.16.198	192.168.2.8
Oct 12, 2024 00:48:05.963028908 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:05.963035107 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:05.965169907 CEST	49807	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:05.965198040 CEST	443	49807	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:05.965599060 CEST	443	49807	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:05.969517946 CEST	49807	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:05.969634056 CEST	443	49807	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:05.970207930 CEST	49807	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:05.981652975 CEST	443	49801	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:05.981770992 CEST	443	49801	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:05.981950998 CEST	49801	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:05.995232105 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:06.000924110 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:06.000952005 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:06.002002001 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:06.002073050 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:06.015407085 CEST	443	49807	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:06.024404049 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.024571896 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.027440071 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.045306921 CEST	49801	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:06.045348883 CEST	443	49801	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:06.087887049 CEST	443	49807	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:06.087970018 CEST	443	49807	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:06.088193893 CEST	49807	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:06.096384048 CEST	49807	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:06.096421957 CEST	443	49807	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:06.119312048 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.119329929 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.119432926 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.119457960 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.119468927 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.119494915 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.119523048 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.119525909 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.119645119 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.119645119 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.146960020 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.146975994 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.147011042 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.147042990 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.147044897 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.147063971 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.147208929 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.207746029 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.207793951 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.207823038 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.207838058 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.207851887 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.207884073 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.207884073 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.223212957 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.223257065 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.223283052 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.223299026 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.223309994 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.223467112 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.227608919 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.227718115 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.235632896 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.235678911 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.239854097 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.239903927 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.240120888 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.240147114 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.240211010 CEST	443	49795	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.240252018 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.240252018 CEST	49795	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.642720938 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:06.642888069 CEST	443	49803	172.217.16.198	192.168.2.8
Oct 12, 2024 00:48:06.642910957 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:06.680268049 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.680419922 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.680592060 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.680604935 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.681019068 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:06.681196928 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:06.681217909 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:06.687400103 CEST	443	49803	172.217.16.198	192.168.2.8
Oct 12, 2024 00:48:06.700082064 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:06.700103998 CEST	443	49803	172.217.16.198	192.168.2.8
Oct 12, 2024 00:48:06.727401972 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:06.761759996 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:06.761790037 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:06.779179096 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.779207945 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.779252052 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.783988953 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.783998966 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.785409927 CEST	49813	443	192.168.2.8	154.59.122.94
Oct 12, 2024 00:48:06.785440922 CEST	443	49813	154.59.122.94	192.168.2.8
Oct 12, 2024 00:48:06.785518885 CEST	49813	443	192.168.2.8	154.59.122.94
Oct 12, 2024 00:48:06.786024094 CEST	49813	443	192.168.2.8	154.59.122.94
Oct 12, 2024 00:48:06.786045074 CEST	443	49813	154.59.122.94	192.168.2.8
Oct 12, 2024 00:48:06.789310932 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.789378881 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.789386988 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.789436102 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.790833950 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.790843010 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.790868044 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.790898085 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.790927887 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.791562080 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.791570902 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.791610956 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.817318916 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.817353010 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.817454100 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.818808079 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:06.818828106 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:06.825089931 CEST	49815	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:06.825119019 CEST	443	49815	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:06.825171947 CEST	49815	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:06.825232983 CEST	49816	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:06.825270891 CEST	443	49816	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:06.825320005 CEST	49816	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:06.825467110 CEST	49815	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:06.825478077 CEST	443	49815	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:06.825602055 CEST	49816	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:06.825614929 CEST	443	49816	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:06.833095074 CEST	49788	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:06.833121061 CEST	443	49788	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:06.833923101 CEST	49817	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:06.833935022 CEST	443	49817	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:06.834007025 CEST	49817	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:06.834249973 CEST	49817	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:06.834259033 CEST	443	49817	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:06.839534998 CEST	49818	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:06.839555979 CEST	443	49818	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:06.839656115 CEST	49818	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:06.839792013 CEST	49818	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:06.839807987 CEST	443	49818	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:06.879323959 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.879336119 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.879364014 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.879401922 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.879450083 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.880029917 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.880038023 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.880076885 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.880090952 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.880127907 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.880635977 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.880644083 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.880681992 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.880690098 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.881364107 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.881411076 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.881417990 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.881449938 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.881481886 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.881486893 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.881526947 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.881561041 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.897876024 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:06.904170036 CEST	49804	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.904197931 CEST	443	49804	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.916276932 CEST	49820	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.916328907 CEST	443	49820	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.916388988 CEST	49820	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.916620016 CEST	49820	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:06.916635036 CEST	443	49820	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:06.938002110 CEST	49823	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:06.938033104 CEST	443	49823	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:06.938093901 CEST	49823	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:06.938277006 CEST	49823	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:06.938291073 CEST	443	49823	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:06.952162981 CEST	443	49803	172.217.16.198	192.168.2.8
Oct 12, 2024 00:48:06.952179909 CEST	443	49803	172.217.16.198	192.168.2.8
Oct 12, 2024 00:48:06.952239037 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:06.953243017 CEST	443	49803	172.217.16.198	192.168.2.8
Oct 12, 2024 00:48:06.953286886 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:06.953293085 CEST	443	49803	172.217.16.198	192.168.2.8
Oct 12, 2024 00:48:06.953329086 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:06.953726053 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:06.953741074 CEST	443	49803	172.217.16.198	192.168.2.8
Oct 12, 2024 00:48:06.953751087 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:06.953782082 CEST	49803	443	192.168.2.8	172.217.16.198
Oct 12, 2024 00:48:06.961740017 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:07.066056013 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.066076040 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.066082954 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.066106081 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.066118956 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.066138029 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:07.066169024 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.066184998 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:07.142483950 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:07.148922920 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.218483925 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.218497992 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.218530893 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.218547106 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.218561888 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.218585968 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:07.218626022 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.218645096 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.218645096 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:07.218688011 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:07.238729954 CEST	49806	443	192.168.2.8	108.138.26.113
Oct 12, 2024 00:48:07.238765955 CEST	443	49806	108.138.26.113	192.168.2.8
Oct 12, 2024 00:48:07.260674953 CEST	49825	443	192.168.2.8	99.86.4.58
Oct 12, 2024 00:48:07.260721922 CEST	443	49825	99.86.4.58	192.168.2.8
Oct 12, 2024 00:48:07.260782957 CEST	49825	443	192.168.2.8	99.86.4.58
Oct 12, 2024 00:48:07.260948896 CEST	49825	443	192.168.2.8	99.86.4.58
Oct 12, 2024 00:48:07.260960102 CEST	443	49825	99.86.4.58	192.168.2.8
Oct 12, 2024 00:48:07.322309971 CEST	443	49818	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.322716951 CEST	49818	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:07.322734118 CEST	443	49818	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.323751926 CEST	443	49818	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.323817015 CEST	49818	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:07.324971914 CEST	49818	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:07.325046062 CEST	443	49818	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.325160027 CEST	49818	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:07.325175047 CEST	443	49818	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.354080915 CEST	49826	443	192.168.2.8	198.47.127.205
Oct 12, 2024 00:48:07.354116917 CEST	443	49826	198.47.127.205	192.168.2.8
Oct 12, 2024 00:48:07.354199886 CEST	49826	443	192.168.2.8	198.47.127.205
Oct 12, 2024 00:48:07.354444027 CEST	49826	443	192.168.2.8	198.47.127.205
Oct 12, 2024 00:48:07.354454041 CEST	443	49826	198.47.127.205	192.168.2.8
Oct 12, 2024 00:48:07.379498959 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:07.379540920 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:07.379590988 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:07.381187916 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:07.381198883 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:07.386662006 CEST	49831	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:07.386742115 CEST	443	49831	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:07.386801958 CEST	49831	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:07.386998892 CEST	49831	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:07.387027979 CEST	443	49831	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:07.387665987 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:07.387702942 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:07.387748003 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:07.387955904 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:07.387967110 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:07.398283958 CEST	49818	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:07.400124073 CEST	49833	443	192.168.2.8	142.250.184.230
Oct 12, 2024 00:48:07.400157928 CEST	443	49833	142.250.184.230	192.168.2.8
Oct 12, 2024 00:48:07.400412083 CEST	49833	443	192.168.2.8	142.250.184.230
Oct 12, 2024 00:48:07.400412083 CEST	49833	443	192.168.2.8	142.250.184.230
Oct 12, 2024 00:48:07.400435925 CEST	443	49833	142.250.184.230	192.168.2.8
Oct 12, 2024 00:48:07.401401997 CEST	49834	443	192.168.2.8	18.239.50.124
Oct 12, 2024 00:48:07.401432991 CEST	443	49834	18.239.50.124	192.168.2.8
Oct 12, 2024 00:48:07.401489973 CEST	49834	443	192.168.2.8	18.239.50.124
Oct 12, 2024 00:48:07.401640892 CEST	49834	443	192.168.2.8	18.239.50.124
Oct 12, 2024 00:48:07.401650906 CEST	443	49834	18.239.50.124	192.168.2.8
Oct 12, 2024 00:48:07.438227892 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.438846111 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.438906908 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.439284086 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.439837933 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.439919949 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.440126896 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.441298962 CEST	443	49818	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.441481113 CEST	443	49818	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.441534042 CEST	49818	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:07.446216106 CEST	49818	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:07.446233988 CEST	443	49818	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.452029943 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.452294111 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.452306032 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.452708960 CEST	443	49815	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.452752113 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.453299046 CEST	443	49816	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.453526020 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.453593016 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.453805923 CEST	49815	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.453823090 CEST	443	49815	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.453969002 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.453994036 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.454415083 CEST	49816	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.454441071 CEST	443	49816	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.454893112 CEST	443	49815	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.454952002 CEST	49815	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.455179930 CEST	49835	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:07.455204964 CEST	443	49835	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.455261946 CEST	49835	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:07.455579996 CEST	443	49816	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.455638885 CEST	49816	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.455753088 CEST	49835	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:07.455763102 CEST	443	49835	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.457360983 CEST	49815	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.457431078 CEST	443	49815	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.457798004 CEST	49815	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.457808971 CEST	443	49815	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.458460093 CEST	49816	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.458528996 CEST	443	49816	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.458563089 CEST	49816	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.483932018 CEST	443	49817	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:07.484388113 CEST	49817	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:07.484409094 CEST	443	49817	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:07.484769106 CEST	443	49817	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:07.485074997 CEST	49817	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:07.485129118 CEST	443	49817	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:07.485208035 CEST	49817	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:07.487406969 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.499496937 CEST	49816	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.499516964 CEST	443	49816	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.514281988 CEST	443	49820	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:07.514740944 CEST	49820	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:07.514764071 CEST	443	49820	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:07.515177011 CEST	443	49820	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:07.515609980 CEST	49820	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:07.515676975 CEST	443	49820	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:07.515815973 CEST	49820	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:07.521833897 CEST	443	49813	154.59.122.94	192.168.2.8
Oct 12, 2024 00:48:07.527405977 CEST	443	49817	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:07.548171043 CEST	49815	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.551162004 CEST	49813	443	192.168.2.8	154.59.122.94
Oct 12, 2024 00:48:07.551177025 CEST	443	49813	154.59.122.94	192.168.2.8
Oct 12, 2024 00:48:07.555617094 CEST	443	49813	154.59.122.94	192.168.2.8
Oct 12, 2024 00:48:07.555727959 CEST	49813	443	192.168.2.8	154.59.122.94
Oct 12, 2024 00:48:07.557171106 CEST	49813	443	192.168.2.8	154.59.122.94
Oct 12, 2024 00:48:07.557377100 CEST	443	49813	154.59.122.94	192.168.2.8
Oct 12, 2024 00:48:07.557395935 CEST	49813	443	192.168.2.8	154.59.122.94
Oct 12, 2024 00:48:07.559406042 CEST	443	49820	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:07.571369886 CEST	443	49722	142.250.186.68	192.168.2.8
Oct 12, 2024 00:48:07.571439981 CEST	443	49722	142.250.186.68	192.168.2.8
Oct 12, 2024 00:48:07.571557999 CEST	49722	443	192.168.2.8	142.250.186.68
Oct 12, 2024 00:48:07.589622021 CEST	443	49823	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:07.589957952 CEST	49823	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:07.589983940 CEST	443	49823	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:07.591022968 CEST	443	49823	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:07.591082096 CEST	49823	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:07.591434002 CEST	49823	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:07.591491938 CEST	443	49823	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:07.591578007 CEST	49823	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:07.591584921 CEST	443	49823	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:07.599405050 CEST	443	49813	154.59.122.94	192.168.2.8
Oct 12, 2024 00:48:07.630342960 CEST	443	49820	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:07.630625010 CEST	443	49820	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:07.630697966 CEST	49820	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:07.635497093 CEST	49820	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:07.635526896 CEST	443	49820	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:07.643490076 CEST	49722	443	192.168.2.8	142.250.186.68
Oct 12, 2024 00:48:07.643507004 CEST	443	49722	142.250.186.68	192.168.2.8
Oct 12, 2024 00:48:07.643845081 CEST	49836	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:07.643887997 CEST	443	49836	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:07.643944025 CEST	49836	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:07.644328117 CEST	49836	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:07.644349098 CEST	443	49836	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:07.656383038 CEST	49813	443	192.168.2.8	154.59.122.94
Oct 12, 2024 00:48:07.656398058 CEST	443	49813	154.59.122.94	192.168.2.8
Oct 12, 2024 00:48:07.686858892 CEST	49816	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.686868906 CEST	49823	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:07.721368074 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.721427917 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.721446991 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.722007036 CEST	443	49815	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.722084045 CEST	443	49815	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.722131968 CEST	49815	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.738514900 CEST	49815	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.738538980 CEST	443	49815	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.740411043 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.740423918 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.740489960 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.740509987 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.740557909 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.760463953 CEST	443	49813	154.59.122.94	192.168.2.8
Oct 12, 2024 00:48:07.762079000 CEST	49838	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:07.762119055 CEST	49813	443	192.168.2.8	154.59.122.94
Oct 12, 2024 00:48:07.762125015 CEST	443	49838	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:07.762600899 CEST	49838	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:07.762612104 CEST	49813	443	192.168.2.8	154.59.122.94
Oct 12, 2024 00:48:07.762625933 CEST	443	49813	154.59.122.94	192.168.2.8
Oct 12, 2024 00:48:07.763103962 CEST	49838	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:07.763122082 CEST	443	49838	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:07.799099922 CEST	49840	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.799146891 CEST	443	49840	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.799225092 CEST	49840	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.799436092 CEST	49840	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.799458981 CEST	443	49840	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.799671888 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.799746037 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.799870014 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.799880981 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.800000906 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.832077026 CEST	443	49817	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:07.832153082 CEST	443	49817	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:07.832237959 CEST	49817	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:07.833271027 CEST	49817	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:07.833287001 CEST	443	49817	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:07.838212967 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.838234901 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.838316917 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.838383913 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.838437080 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.844064951 CEST	443	49831	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:07.844710112 CEST	49831	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:07.844731092 CEST	443	49831	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:07.845136881 CEST	49841	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:07.845176935 CEST	443	49841	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:07.845267057 CEST	49841	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:07.845506907 CEST	49841	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:07.845521927 CEST	443	49841	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:07.846934080 CEST	443	49831	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:07.847011089 CEST	49831	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:07.847359896 CEST	49831	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:07.847497940 CEST	49831	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:07.847613096 CEST	443	49831	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:07.872828960 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.872849941 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.872931957 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.872967005 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.873018980 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.888135910 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.888149977 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.888176918 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.888205051 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.888217926 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.888258934 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.888258934 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.896686077 CEST	443	49816	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.896858931 CEST	443	49816	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.896965027 CEST	443	49816	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.897013903 CEST	49816	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.897025108 CEST	443	49816	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.897053957 CEST	443	49816	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.897059917 CEST	49816	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.897090912 CEST	49816	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.899096012 CEST	49816	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.899102926 CEST	443	49816	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.910250902 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.910271883 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.910311937 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.910330057 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.910345078 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.911184072 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.914648056 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.914690018 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.914982080 CEST	443	49835	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.915224075 CEST	49835	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:07.915230036 CEST	443	49835	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.915610075 CEST	443	49835	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.918406010 CEST	49835	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:07.918469906 CEST	443	49835	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.918699026 CEST	49835	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:07.921232939 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.921267033 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.921291113 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.921350956 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.921350956 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.921361923 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.924876928 CEST	49842	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.924889088 CEST	443	49842	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.924957991 CEST	49842	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.925117016 CEST	49842	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:07.925126076 CEST	443	49842	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:07.943181038 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.943223000 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.943334103 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.943350077 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.943463087 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.943521976 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.943528891 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.943691969 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.943742990 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.943762064 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.943767071 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.943794966 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.943819046 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.943909883 CEST	443	49823	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:07.943975925 CEST	443	49823	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:07.944024086 CEST	49823	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:07.944308996 CEST	49823	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:07.944320917 CEST	443	49823	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:07.946538925 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.946609020 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.946614981 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.946675062 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.946747065 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.958776951 CEST	49814	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.958796024 CEST	443	49814	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.959402084 CEST	443	49835	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:07.962116957 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:07.963339090 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:07.963354111 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:07.963917971 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:07.963989973 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:07.964977980 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:07.965039015 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:07.965174913 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:07.965264082 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:07.965509892 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:07.965517044 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:07.971740007 CEST	443	49826	198.47.127.205	192.168.2.8
Oct 12, 2024 00:48:07.974860907 CEST	49826	443	192.168.2.8	198.47.127.205
Oct 12, 2024 00:48:07.974870920 CEST	443	49826	198.47.127.205	192.168.2.8
Oct 12, 2024 00:48:07.975949049 CEST	443	49826	198.47.127.205	192.168.2.8
Oct 12, 2024 00:48:07.976016998 CEST	49826	443	192.168.2.8	198.47.127.205
Oct 12, 2024 00:48:07.977453947 CEST	49826	443	192.168.2.8	198.47.127.205
Oct 12, 2024 00:48:07.977590084 CEST	443	49826	198.47.127.205	192.168.2.8
Oct 12, 2024 00:48:07.977667093 CEST	49826	443	192.168.2.8	198.47.127.205
Oct 12, 2024 00:48:07.978631973 CEST	49811	443	192.168.2.8	157.240.0.6
Oct 12, 2024 00:48:07.978648901 CEST	443	49811	157.240.0.6	192.168.2.8
Oct 12, 2024 00:48:07.982168913 CEST	443	49825	99.86.4.58	192.168.2.8
Oct 12, 2024 00:48:07.982350111 CEST	49825	443	192.168.2.8	99.86.4.58
Oct 12, 2024 00:48:07.982376099 CEST	443	49825	99.86.4.58	192.168.2.8
Oct 12, 2024 00:48:07.983480930 CEST	443	49825	99.86.4.58	192.168.2.8
Oct 12, 2024 00:48:07.983534098 CEST	49825	443	192.168.2.8	99.86.4.58
Oct 12, 2024 00:48:07.984374046 CEST	49825	443	192.168.2.8	99.86.4.58
Oct 12, 2024 00:48:07.984452009 CEST	443	49825	99.86.4.58	192.168.2.8
Oct 12, 2024 00:48:07.984544992 CEST	49825	443	192.168.2.8	99.86.4.58
Oct 12, 2024 00:48:07.984556913 CEST	443	49825	99.86.4.58	192.168.2.8
Oct 12, 2024 00:48:08.003276110 CEST	49843	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.003308058 CEST	443	49843	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.003372908 CEST	49843	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.003809929 CEST	49843	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.003823996 CEST	443	49843	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.006979942 CEST	443	49831	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:08.007039070 CEST	49831	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:08.010891914 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.019102097 CEST	49831	443	192.168.2.8	172.64.151.101
Oct 12, 2024 00:48:08.019123077 CEST	443	49831	172.64.151.101	192.168.2.8
Oct 12, 2024 00:48:08.019937992 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.020140886 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.020162106 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.020489931 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.020802975 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.020869970 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.020998955 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.023402929 CEST	443	49826	198.47.127.205	192.168.2.8
Oct 12, 2024 00:48:08.023801088 CEST	443	49835	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:08.023874998 CEST	443	49835	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:08.024441957 CEST	49835	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:08.024547100 CEST	49835	443	192.168.2.8	35.244.159.8
Oct 12, 2024 00:48:08.024558067 CEST	443	49835	35.244.159.8	192.168.2.8
Oct 12, 2024 00:48:08.032525063 CEST	443	49833	142.250.184.230	192.168.2.8
Oct 12, 2024 00:48:08.035067081 CEST	49833	443	192.168.2.8	142.250.184.230
Oct 12, 2024 00:48:08.035083055 CEST	443	49833	142.250.184.230	192.168.2.8
Oct 12, 2024 00:48:08.036628962 CEST	443	49833	142.250.184.230	192.168.2.8
Oct 12, 2024 00:48:08.036734104 CEST	49833	443	192.168.2.8	142.250.184.230
Oct 12, 2024 00:48:08.037116051 CEST	49833	443	192.168.2.8	142.250.184.230
Oct 12, 2024 00:48:08.037201881 CEST	443	49833	142.250.184.230	192.168.2.8
Oct 12, 2024 00:48:08.037731886 CEST	49833	443	192.168.2.8	142.250.184.230
Oct 12, 2024 00:48:08.037739038 CEST	443	49833	142.250.184.230	192.168.2.8
Oct 12, 2024 00:48:08.039134026 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.039166927 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.041642904 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.041934013 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.041948080 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.057667971 CEST	49845	443	192.168.2.8	34.98.64.218
Oct 12, 2024 00:48:08.057691097 CEST	443	49845	34.98.64.218	192.168.2.8
Oct 12, 2024 00:48:08.057765007 CEST	49845	443	192.168.2.8	34.98.64.218
Oct 12, 2024 00:48:08.057919979 CEST	49845	443	192.168.2.8	34.98.64.218
Oct 12, 2024 00:48:08.057929039 CEST	443	49845	34.98.64.218	192.168.2.8
Oct 12, 2024 00:48:08.063405991 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.076335907 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.076365948 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.076414108 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.076427937 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.077181101 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.077193022 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.077230930 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.077236891 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.077246904 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.081144094 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.081209898 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.081223011 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.082978964 CEST	49846	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.083019018 CEST	443	49846	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.083084106 CEST	49847	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.083125114 CEST	443	49847	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.083165884 CEST	49846	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.083249092 CEST	49847	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.083374977 CEST	49846	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.083395958 CEST	443	49846	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.083529949 CEST	49847	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.083544016 CEST	443	49847	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.095571995 CEST	443	49834	18.239.50.124	192.168.2.8
Oct 12, 2024 00:48:08.095977068 CEST	49834	443	192.168.2.8	18.239.50.124
Oct 12, 2024 00:48:08.096000910 CEST	443	49834	18.239.50.124	192.168.2.8
Oct 12, 2024 00:48:08.097557068 CEST	443	49834	18.239.50.124	192.168.2.8
Oct 12, 2024 00:48:08.097616911 CEST	49834	443	192.168.2.8	18.239.50.124
Oct 12, 2024 00:48:08.097954988 CEST	49834	443	192.168.2.8	18.239.50.124
Oct 12, 2024 00:48:08.098067999 CEST	443	49834	18.239.50.124	192.168.2.8
Oct 12, 2024 00:48:08.098367929 CEST	49834	443	192.168.2.8	18.239.50.124
Oct 12, 2024 00:48:08.098381042 CEST	443	49834	18.239.50.124	192.168.2.8
Oct 12, 2024 00:48:08.101435900 CEST	49848	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.101484060 CEST	443	49848	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.102093935 CEST	49848	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.104126930 CEST	49848	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.104146004 CEST	443	49848	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.149318933 CEST	49826	443	192.168.2.8	198.47.127.205
Oct 12, 2024 00:48:08.149318933 CEST	49833	443	192.168.2.8	142.250.184.230
Oct 12, 2024 00:48:08.149321079 CEST	49825	443	192.168.2.8	99.86.4.58
Oct 12, 2024 00:48:08.149342060 CEST	443	49826	198.47.127.205	192.168.2.8
Oct 12, 2024 00:48:08.149379015 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.149380922 CEST	49834	443	192.168.2.8	18.239.50.124
Oct 12, 2024 00:48:08.166909933 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.166934967 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.166943073 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.167025089 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.167025089 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.167053938 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.167233944 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.167243004 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.167263031 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.167278051 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.167287111 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.167295933 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.168023109 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.168032885 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.168081045 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.168092012 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.168124914 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.168148994 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.168170929 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.168175936 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.168193102 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.168888092 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.168967009 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.169019938 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.169187069 CEST	49832	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.169203997 CEST	443	49832	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.193628073 CEST	443	49836	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.195373058 CEST	49836	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.195408106 CEST	443	49836	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.195836067 CEST	443	49836	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.197143078 CEST	49836	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.197216034 CEST	443	49836	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.197537899 CEST	49836	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.214253902 CEST	443	49826	198.47.127.205	192.168.2.8
Oct 12, 2024 00:48:08.219223022 CEST	49826	443	192.168.2.8	198.47.127.205
Oct 12, 2024 00:48:08.242585897 CEST	49826	443	192.168.2.8	198.47.127.205
Oct 12, 2024 00:48:08.242607117 CEST	443	49826	198.47.127.205	192.168.2.8
Oct 12, 2024 00:48:08.243401051 CEST	443	49836	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.243478060 CEST	49850	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.243514061 CEST	443	49850	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.243565083 CEST	49850	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.244713068 CEST	49850	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.244728088 CEST	443	49850	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.305645943 CEST	443	49836	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.305762053 CEST	443	49836	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.306235075 CEST	49836	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.312990904 CEST	49836	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.313019037 CEST	443	49836	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.318684101 CEST	49851	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.318710089 CEST	443	49851	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.318860054 CEST	49851	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.319446087 CEST	49851	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.319463968 CEST	443	49851	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.335828066 CEST	443	49838	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.336070061 CEST	49838	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.336092949 CEST	443	49838	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.336464882 CEST	443	49838	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.336524010 CEST	49838	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.336858988 CEST	443	49833	142.250.184.230	192.168.2.8
Oct 12, 2024 00:48:08.336869955 CEST	443	49833	142.250.184.230	192.168.2.8
Oct 12, 2024 00:48:08.336916924 CEST	49833	443	192.168.2.8	142.250.184.230
Oct 12, 2024 00:48:08.336935997 CEST	443	49833	142.250.184.230	192.168.2.8
Oct 12, 2024 00:48:08.336991072 CEST	443	49833	142.250.184.230	192.168.2.8
Oct 12, 2024 00:48:08.337101936 CEST	49833	443	192.168.2.8	142.250.184.230
Oct 12, 2024 00:48:08.337168932 CEST	443	49838	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.337313890 CEST	49838	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.340701103 CEST	49838	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.340818882 CEST	443	49838	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.340850115 CEST	49838	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.345040083 CEST	49833	443	192.168.2.8	142.250.184.230
Oct 12, 2024 00:48:08.345061064 CEST	443	49833	142.250.184.230	192.168.2.8
Oct 12, 2024 00:48:08.387394905 CEST	443	49838	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.399310112 CEST	49838	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.399327040 CEST	443	49838	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.401154041 CEST	443	49825	99.86.4.58	192.168.2.8
Oct 12, 2024 00:48:08.401429892 CEST	443	49825	99.86.4.58	192.168.2.8
Oct 12, 2024 00:48:08.401582956 CEST	49825	443	192.168.2.8	99.86.4.58
Oct 12, 2024 00:48:08.402648926 CEST	49825	443	192.168.2.8	99.86.4.58
Oct 12, 2024 00:48:08.402668953 CEST	443	49825	99.86.4.58	192.168.2.8
Oct 12, 2024 00:48:08.419369936 CEST	49852	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:08.419415951 CEST	443	49852	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:08.423230886 CEST	49852	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:08.423614979 CEST	49852	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:08.423631907 CEST	443	49852	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:08.445240021 CEST	443	49840	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.446996927 CEST	49840	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.447007895 CEST	443	49840	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.448093891 CEST	443	49840	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.448282003 CEST	49840	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.448863029 CEST	49840	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.448916912 CEST	443	49840	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.449186087 CEST	49840	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.449192047 CEST	443	49840	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.454818010 CEST	443	49838	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.454885006 CEST	49838	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.455137014 CEST	443	49841	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:08.455656052 CEST	49841	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:08.455684900 CEST	443	49841	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:08.456418037 CEST	49838	443	192.168.2.8	150.171.27.10
Oct 12, 2024 00:48:08.456434965 CEST	443	49838	150.171.27.10	192.168.2.8
Oct 12, 2024 00:48:08.456759930 CEST	443	49841	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:08.456823111 CEST	49841	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:08.457854033 CEST	49841	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:08.457941055 CEST	443	49841	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:08.457999945 CEST	49841	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:08.499401093 CEST	443	49841	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:08.507452965 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.507527113 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.507531881 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.507560015 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.509202957 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.512197971 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.512238026 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.554359913 CEST	443	49842	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.559853077 CEST	443	49843	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.562128067 CEST	443	49845	34.98.64.218	192.168.2.8
Oct 12, 2024 00:48:08.586787939 CEST	49840	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.587532043 CEST	49845	443	192.168.2.8	34.98.64.218
Oct 12, 2024 00:48:08.587546110 CEST	443	49845	34.98.64.218	192.168.2.8
Oct 12, 2024 00:48:08.587727070 CEST	49843	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.587733984 CEST	443	49843	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.588013887 CEST	49842	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.588021040 CEST	443	49842	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.588202000 CEST	443	49843	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.589122057 CEST	443	49842	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.589189053 CEST	49842	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.589210987 CEST	443	49845	34.98.64.218	192.168.2.8
Oct 12, 2024 00:48:08.589252949 CEST	49845	443	192.168.2.8	34.98.64.218
Oct 12, 2024 00:48:08.594161034 CEST	49845	443	192.168.2.8	34.98.64.218
Oct 12, 2024 00:48:08.594288111 CEST	443	49845	34.98.64.218	192.168.2.8
Oct 12, 2024 00:48:08.594446898 CEST	49842	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.594584942 CEST	443	49842	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.596108913 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.596122026 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.596163034 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.596179008 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.596193075 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.596215963 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.599332094 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.599370956 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.599380016 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.599419117 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.599468946 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.599474907 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.599503994 CEST	49843	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.599570036 CEST	443	49843	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.599673986 CEST	49845	443	192.168.2.8	34.98.64.218
Oct 12, 2024 00:48:08.599680901 CEST	443	49845	34.98.64.218	192.168.2.8
Oct 12, 2024 00:48:08.599721909 CEST	49842	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.599728107 CEST	443	49842	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.599770069 CEST	49843	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.639516115 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.639564037 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.639607906 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.639638901 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.639653921 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.643414974 CEST	443	49843	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.645704031 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.645734072 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.645844936 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.645855904 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.645894051 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.655145884 CEST	443	49848	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.656256914 CEST	49841	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:08.656256914 CEST	49842	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.656256914 CEST	49845	443	192.168.2.8	34.98.64.218
Oct 12, 2024 00:48:08.656279087 CEST	443	49841	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:08.684453964 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.684499025 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.684525013 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.684533119 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.684542894 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.684570074 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.684762001 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.684809923 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.684966087 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.685008049 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.694585085 CEST	49848	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.694596052 CEST	443	49848	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.724349976 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.724387884 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.724410057 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.724416018 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.724426985 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.724436045 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.724462032 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.724514961 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.724555016 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.724562883 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.724952936 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.726182938 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.726191044 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.726202965 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.726226091 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.726253033 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.726260900 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.726372004 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.743236065 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.763892889 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.805897951 CEST	443	49834	18.239.50.124	192.168.2.8
Oct 12, 2024 00:48:08.805917978 CEST	443	49834	18.239.50.124	192.168.2.8
Oct 12, 2024 00:48:08.805924892 CEST	443	49834	18.239.50.124	192.168.2.8
Oct 12, 2024 00:48:08.805975914 CEST	49834	443	192.168.2.8	18.239.50.124
Oct 12, 2024 00:48:08.805984974 CEST	443	49834	18.239.50.124	192.168.2.8
Oct 12, 2024 00:48:08.805999041 CEST	443	49843	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.806025982 CEST	443	49845	34.98.64.218	192.168.2.8
Oct 12, 2024 00:48:08.806030035 CEST	49834	443	192.168.2.8	18.239.50.124
Oct 12, 2024 00:48:08.806107044 CEST	443	49843	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.806154966 CEST	49843	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.806168079 CEST	443	49828	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.806212902 CEST	49828	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.806217909 CEST	443	49841	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:08.806272030 CEST	443	49848	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.806298018 CEST	49841	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:08.806310892 CEST	443	49841	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:08.806325912 CEST	49848	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.806377888 CEST	443	49845	34.98.64.218	192.168.2.8
Oct 12, 2024 00:48:08.806463957 CEST	49845	443	192.168.2.8	34.98.64.218
Oct 12, 2024 00:48:08.806483030 CEST	443	49840	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.806529045 CEST	443	49841	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:08.806590080 CEST	443	49840	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.806591034 CEST	49841	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:08.806646109 CEST	49840	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.806718111 CEST	443	49847	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.806927919 CEST	443	49846	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.806991100 CEST	443	49848	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.807178020 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.807224035 CEST	49848	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.837901115 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.837920904 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.837923050 CEST	49846	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.837939024 CEST	443	49846	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.838047028 CEST	49847	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.838068008 CEST	443	49847	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.838371038 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.838556051 CEST	49848	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.838561058 CEST	443	49848	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.838781118 CEST	443	49848	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.839042902 CEST	443	49846	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.839104891 CEST	49846	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.839178085 CEST	443	49847	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.839231014 CEST	49847	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.842514038 CEST	443	49834	18.239.50.124	192.168.2.8
Oct 12, 2024 00:48:08.842573881 CEST	49834	443	192.168.2.8	18.239.50.124
Oct 12, 2024 00:48:08.842581034 CEST	443	49834	18.239.50.124	192.168.2.8
Oct 12, 2024 00:48:08.842622042 CEST	49834	443	192.168.2.8	18.239.50.124
Oct 12, 2024 00:48:08.843736887 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.843828917 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.845201015 CEST	49846	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.845266104 CEST	443	49846	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.845652103 CEST	49841	443	192.168.2.8	185.89.210.122
Oct 12, 2024 00:48:08.845664978 CEST	443	49841	185.89.210.122	192.168.2.8
Oct 12, 2024 00:48:08.846093893 CEST	49847	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.846198082 CEST	443	49847	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.846587896 CEST	49848	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.846596956 CEST	443	49848	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.846978903 CEST	49846	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.846986055 CEST	443	49846	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.847409964 CEST	49847	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.847412109 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:08.847418070 CEST	443	49847	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.851188898 CEST	49840	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.851203918 CEST	443	49840	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.853007078 CEST	49843	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.853018999 CEST	443	49843	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.856735945 CEST	49845	443	192.168.2.8	34.98.64.218
Oct 12, 2024 00:48:08.856761932 CEST	443	49845	34.98.64.218	192.168.2.8
Oct 12, 2024 00:48:08.858778954 CEST	49834	443	192.168.2.8	18.239.50.124
Oct 12, 2024 00:48:08.858804941 CEST	443	49834	18.239.50.124	192.168.2.8
Oct 12, 2024 00:48:08.895401001 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:08.899017096 CEST	49848	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.900942087 CEST	443	49850	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.900980949 CEST	49847	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.905565977 CEST	49850	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.905589104 CEST	443	49850	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.905975103 CEST	443	49850	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.906752110 CEST	49850	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.906837940 CEST	443	49850	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.907221079 CEST	49850	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.928561926 CEST	49853	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.928602934 CEST	443	49853	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.928710938 CEST	49853	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.928937912 CEST	49853	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.928950071 CEST	443	49853	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:08.951395988 CEST	443	49850	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.952543020 CEST	443	49842	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.952598095 CEST	443	49842	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.952650070 CEST	49842	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.952656984 CEST	443	49842	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.952670097 CEST	443	49842	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.952703953 CEST	49842	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.953475952 CEST	49842	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.953510046 CEST	443	49842	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.953670979 CEST	443	49842	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.953680992 CEST	49842	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.953701019 CEST	49842	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.955332994 CEST	443	49848	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.956193924 CEST	49848	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.956239939 CEST	443	49848	150.171.28.10	192.168.2.8
Oct 12, 2024 00:48:08.956290007 CEST	49848	443	192.168.2.8	150.171.28.10
Oct 12, 2024 00:48:08.959108114 CEST	49854	443	192.168.2.8	185.64.191.210
Oct 12, 2024 00:48:08.959136009 CEST	443	49854	185.64.191.210	192.168.2.8
Oct 12, 2024 00:48:08.959188938 CEST	49854	443	192.168.2.8	185.64.191.210
Oct 12, 2024 00:48:08.959573030 CEST	49854	443	192.168.2.8	185.64.191.210
Oct 12, 2024 00:48:08.959583998 CEST	443	49854	185.64.191.210	192.168.2.8
Oct 12, 2024 00:48:08.962196112 CEST	49846	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:08.962408066 CEST	49855	443	192.168.2.8	18.239.18.44
Oct 12, 2024 00:48:08.962462902 CEST	443	49855	18.239.18.44	192.168.2.8
Oct 12, 2024 00:48:08.962826014 CEST	49855	443	192.168.2.8	18.239.18.44
Oct 12, 2024 00:48:08.963066101 CEST	49855	443	192.168.2.8	18.239.18.44
Oct 12, 2024 00:48:08.963082075 CEST	443	49855	18.239.18.44	192.168.2.8
Oct 12, 2024 00:48:08.983460903 CEST	443	49851	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.983772039 CEST	49851	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.983789921 CEST	443	49851	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.984138966 CEST	443	49851	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.984535933 CEST	49851	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:08.984603882 CEST	443	49851	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:08.984668016 CEST	49851	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.021297932 CEST	49704	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:48:09.021425009 CEST	49704	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:48:09.021704912 CEST	49856	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:48:09.021759987 CEST	443	49856	23.206.229.226	192.168.2.8
Oct 12, 2024 00:48:09.021858931 CEST	49856	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:48:09.027813911 CEST	443	49704	23.206.229.226	192.168.2.8
Oct 12, 2024 00:48:09.028306007 CEST	443	49704	23.206.229.226	192.168.2.8
Oct 12, 2024 00:48:09.031403065 CEST	443	49851	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.043524981 CEST	49856	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:48:09.043564081 CEST	443	49856	23.206.229.226	192.168.2.8
Oct 12, 2024 00:48:09.146697044 CEST	443	49852	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:09.147087097 CEST	49852	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:09.147099018 CEST	443	49852	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:09.147902966 CEST	49851	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.148232937 CEST	443	49852	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:09.148541927 CEST	49852	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:09.149672985 CEST	49852	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:09.149672985 CEST	49852	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:09.149693012 CEST	443	49852	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:09.149761915 CEST	443	49852	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:09.166105986 CEST	443	49846	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.166203022 CEST	443	49846	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.167195082 CEST	49846	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:09.167195082 CEST	49846	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:09.167195082 CEST	49846	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:09.170397043 CEST	49858	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.170449972 CEST	443	49858	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.170502901 CEST	49858	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.170708895 CEST	49858	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.170727968 CEST	443	49858	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.172986031 CEST	443	49850	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.173064947 CEST	443	49850	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.173130035 CEST	49850	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.173449993 CEST	49850	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.173471928 CEST	49850	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.173471928 CEST	443	49850	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.173511982 CEST	49850	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.176798105 CEST	49859	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.176835060 CEST	443	49859	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.177058935 CEST	49859	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.177253962 CEST	49859	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.177267075 CEST	443	49859	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.186913967 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.186985970 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.187169075 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.187200069 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.187645912 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.188199043 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.188261986 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.259087086 CEST	49852	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:09.259114027 CEST	443	49852	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:09.275652885 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.275667906 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.275732040 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.275800943 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.275800943 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.275821924 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.279539108 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.279562950 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.279635906 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.279661894 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.281404018 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.314568996 CEST	443	49847	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.314629078 CEST	443	49847	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.314681053 CEST	49847	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:09.314704895 CEST	443	49847	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.315216064 CEST	443	49847	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.315309048 CEST	49847	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:09.317102909 CEST	49847	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:09.317121983 CEST	443	49847	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.322974920 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.323024988 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.323126078 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.323126078 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.323153019 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.323296070 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.329916954 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.330178976 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.335481882 CEST	49860	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.335520983 CEST	443	49860	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.335746050 CEST	49860	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.336244106 CEST	49860	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.336256981 CEST	443	49860	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.336416006 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.336500883 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.343322992 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.343400002 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.359452963 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.359544039 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.359554052 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.359594107 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.359707117 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.359915018 CEST	49844	443	192.168.2.8	157.240.251.9
Oct 12, 2024 00:48:09.359926939 CEST	443	49844	157.240.251.9	192.168.2.8
Oct 12, 2024 00:48:09.389908075 CEST	443	49851	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.389970064 CEST	443	49851	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.390033007 CEST	443	49851	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.390103102 CEST	49851	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.390120983 CEST	443	49851	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.390185118 CEST	443	49851	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.390307903 CEST	49851	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.390307903 CEST	49851	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.391045094 CEST	49851	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.391064882 CEST	443	49851	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.395700932 CEST	49861	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.395739079 CEST	443	49861	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.395808935 CEST	49861	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.396236897 CEST	49861	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.396249056 CEST	443	49861	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.407119989 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:09.407151937 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:09.407222033 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:09.407229900 CEST	49852	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:09.407655954 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:09.407668114 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:09.548856020 CEST	443	49852	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:09.549212933 CEST	443	49852	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:09.549467087 CEST	49852	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:09.549711943 CEST	49852	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:09.549726963 CEST	443	49852	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:09.555615902 CEST	49864	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:09.555663109 CEST	443	49864	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:09.556194067 CEST	49864	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:09.556740999 CEST	49864	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:09.556754112 CEST	443	49864	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:09.569996119 CEST	49865	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:09.570024014 CEST	443	49865	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:09.570137024 CEST	49865	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:09.571760893 CEST	49865	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:09.571770906 CEST	443	49865	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:09.576200962 CEST	443	49854	185.64.191.210	192.168.2.8
Oct 12, 2024 00:48:09.576706886 CEST	49854	443	192.168.2.8	185.64.191.210
Oct 12, 2024 00:48:09.576735020 CEST	443	49854	185.64.191.210	192.168.2.8
Oct 12, 2024 00:48:09.577817917 CEST	443	49854	185.64.191.210	192.168.2.8
Oct 12, 2024 00:48:09.577871084 CEST	49854	443	192.168.2.8	185.64.191.210
Oct 12, 2024 00:48:09.578452110 CEST	49854	443	192.168.2.8	185.64.191.210
Oct 12, 2024 00:48:09.578531981 CEST	443	49854	185.64.191.210	192.168.2.8
Oct 12, 2024 00:48:09.578829050 CEST	49854	443	192.168.2.8	185.64.191.210
Oct 12, 2024 00:48:09.578838110 CEST	443	49854	185.64.191.210	192.168.2.8
Oct 12, 2024 00:48:09.587125063 CEST	443	49853	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.604902983 CEST	49853	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:09.604933977 CEST	443	49853	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.605453014 CEST	443	49853	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.605856895 CEST	49853	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:09.605933905 CEST	443	49853	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.606029034 CEST	49853	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:09.640681982 CEST	443	49856	23.206.229.226	192.168.2.8
Oct 12, 2024 00:48:09.640754938 CEST	49856	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:48:09.647412062 CEST	443	49853	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.659822941 CEST	49856	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:48:09.659845114 CEST	443	49856	23.206.229.226	192.168.2.8
Oct 12, 2024 00:48:09.660154104 CEST	443	49856	23.206.229.226	192.168.2.8
Oct 12, 2024 00:48:09.660247087 CEST	49856	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:48:09.660726070 CEST	49856	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:48:09.660756111 CEST	443	49856	23.206.229.226	192.168.2.8
Oct 12, 2024 00:48:09.661075115 CEST	49856	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:48:09.664612055 CEST	443	49855	18.239.18.44	192.168.2.8
Oct 12, 2024 00:48:09.665981054 CEST	49855	443	192.168.2.8	18.239.18.44
Oct 12, 2024 00:48:09.665991068 CEST	443	49855	18.239.18.44	192.168.2.8
Oct 12, 2024 00:48:09.667023897 CEST	443	49855	18.239.18.44	192.168.2.8
Oct 12, 2024 00:48:09.667092085 CEST	49855	443	192.168.2.8	18.239.18.44
Oct 12, 2024 00:48:09.667545080 CEST	49855	443	192.168.2.8	18.239.18.44
Oct 12, 2024 00:48:09.667603970 CEST	443	49855	18.239.18.44	192.168.2.8
Oct 12, 2024 00:48:09.667689085 CEST	49855	443	192.168.2.8	18.239.18.44
Oct 12, 2024 00:48:09.703407049 CEST	443	49856	23.206.229.226	192.168.2.8
Oct 12, 2024 00:48:09.715406895 CEST	443	49855	18.239.18.44	192.168.2.8
Oct 12, 2024 00:48:09.757792950 CEST	49854	443	192.168.2.8	185.64.191.210
Oct 12, 2024 00:48:09.757837057 CEST	49855	443	192.168.2.8	18.239.18.44
Oct 12, 2024 00:48:09.757869005 CEST	443	49855	18.239.18.44	192.168.2.8
Oct 12, 2024 00:48:09.802932024 CEST	443	49859	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.803199053 CEST	49859	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.803220987 CEST	443	49859	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.803579092 CEST	443	49859	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.804672003 CEST	49859	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.804754972 CEST	443	49859	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.804841042 CEST	49859	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.812150002 CEST	443	49858	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.814471006 CEST	443	49854	185.64.191.210	192.168.2.8
Oct 12, 2024 00:48:09.814620018 CEST	443	49854	185.64.191.210	192.168.2.8
Oct 12, 2024 00:48:09.814672947 CEST	49854	443	192.168.2.8	185.64.191.210
Oct 12, 2024 00:48:09.816658020 CEST	49858	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.816695929 CEST	443	49858	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.817841053 CEST	443	49858	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.817929983 CEST	49858	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.818567991 CEST	49854	443	192.168.2.8	185.64.191.210
Oct 12, 2024 00:48:09.818588018 CEST	443	49854	185.64.191.210	192.168.2.8
Oct 12, 2024 00:48:09.819447994 CEST	49858	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.819539070 CEST	443	49858	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.819845915 CEST	49858	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.819854975 CEST	443	49858	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.851409912 CEST	443	49859	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.866436958 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:09.866821051 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:09.866841078 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:09.867930889 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:09.867990017 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:09.910423994 CEST	443	49856	23.206.229.226	192.168.2.8
Oct 12, 2024 00:48:09.910495043 CEST	49856	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:48:09.910511017 CEST	443	49856	23.206.229.226	192.168.2.8
Oct 12, 2024 00:48:09.910562038 CEST	49856	443	192.168.2.8	23.206.229.226
Oct 12, 2024 00:48:09.951903105 CEST	49855	443	192.168.2.8	18.239.18.44
Oct 12, 2024 00:48:09.952297926 CEST	49858	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.957457066 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:09.957695007 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:09.957998991 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:09.958018064 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:09.973078012 CEST	443	49853	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.973145008 CEST	49853	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:09.973181963 CEST	443	49853	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.973268032 CEST	443	49853	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.973309040 CEST	49853	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:09.974112034 CEST	49853	443	192.168.2.8	157.240.253.35
Oct 12, 2024 00:48:09.974136114 CEST	443	49853	157.240.253.35	192.168.2.8
Oct 12, 2024 00:48:09.980942965 CEST	49866	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.980993032 CEST	443	49866	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.981066942 CEST	49866	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.981332064 CEST	49866	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.981348038 CEST	443	49866	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.995362043 CEST	443	49860	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.995637894 CEST	49860	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.995651960 CEST	443	49860	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.996702909 CEST	443	49860	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.997093916 CEST	49860	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.997415066 CEST	49860	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.997482061 CEST	443	49860	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:09.997596025 CEST	49860	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:09.997616053 CEST	443	49860	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.025111914 CEST	443	49861	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.025365114 CEST	49861	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.025383949 CEST	443	49861	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.026442051 CEST	443	49861	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.026505947 CEST	49861	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.026964903 CEST	49861	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.027029991 CEST	443	49861	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.027136087 CEST	49861	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.027144909 CEST	443	49861	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.053992987 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.054060936 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.054100037 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.054111004 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.054189920 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.054203033 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.054209948 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.054235935 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.061204910 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.061244965 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.061268091 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.061279058 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.061501980 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.061503887 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.061518908 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.061567068 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.061575890 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.066772938 CEST	443	49855	18.239.18.44	192.168.2.8
Oct 12, 2024 00:48:10.066869974 CEST	443	49855	18.239.18.44	192.168.2.8
Oct 12, 2024 00:48:10.066931963 CEST	49855	443	192.168.2.8	18.239.18.44
Oct 12, 2024 00:48:10.067845106 CEST	49855	443	192.168.2.8	18.239.18.44
Oct 12, 2024 00:48:10.067867041 CEST	443	49855	18.239.18.44	192.168.2.8
Oct 12, 2024 00:48:10.073085070 CEST	443	49859	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.073160887 CEST	443	49859	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.073620081 CEST	49859	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.073635101 CEST	443	49859	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.073652983 CEST	49859	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.073673964 CEST	49859	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.086294889 CEST	443	49858	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.086395025 CEST	443	49858	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.086467028 CEST	49858	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.086555958 CEST	49860	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.086905003 CEST	49858	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.086925983 CEST	443	49858	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.143398046 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.143440962 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.143457890 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.143474102 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.143508911 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.143533945 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.143541098 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.143667936 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.143711090 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.143727064 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.143734932 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.143745899 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.144233942 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.144272089 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.144279957 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.144288063 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.144347906 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.144359112 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.145085096 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.145132065 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.145138979 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.148286104 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.148330927 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.148381948 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.148389101 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.148422956 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.148472071 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.148710012 CEST	49862	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.148720026 CEST	443	49862	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.162257910 CEST	49861	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.163677931 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.163722992 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.163778067 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.164026022 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.164041996 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.164650917 CEST	49868	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:10.164701939 CEST	443	49868	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:10.164753914 CEST	49868	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:10.164963961 CEST	49868	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:10.164979935 CEST	443	49868	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:10.290858984 CEST	443	49864	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:10.291134119 CEST	49864	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:10.291152000 CEST	443	49864	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:10.292349100 CEST	443	49864	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:10.292809010 CEST	49864	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:10.292987108 CEST	443	49864	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:10.293145895 CEST	49864	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:10.293179035 CEST	49864	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:10.293196917 CEST	443	49864	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:10.293827057 CEST	443	49865	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:10.294051886 CEST	49865	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:10.294070005 CEST	443	49865	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:10.295066118 CEST	443	49865	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:10.295142889 CEST	49865	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:10.295572996 CEST	49865	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:10.295629978 CEST	443	49865	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:10.295784950 CEST	49865	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:10.295792103 CEST	443	49865	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:10.399197102 CEST	49865	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:10.430172920 CEST	443	49861	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.430222034 CEST	443	49861	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.430324078 CEST	443	49861	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.430398941 CEST	443	49861	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.430516958 CEST	49861	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.430516958 CEST	49861	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.431550980 CEST	49861	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.431571007 CEST	443	49861	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.436398983 CEST	443	49860	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.436464071 CEST	443	49860	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.436522961 CEST	49860	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.436537027 CEST	443	49860	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.436587095 CEST	443	49860	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.436640978 CEST	49860	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.436645985 CEST	443	49860	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.436680079 CEST	443	49860	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.436739922 CEST	49860	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.437252998 CEST	49860	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.437267065 CEST	443	49860	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.626914978 CEST	443	49868	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:10.627190113 CEST	49868	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:10.627218962 CEST	443	49868	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:10.628257036 CEST	443	49868	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:10.628328085 CEST	49868	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:10.629802942 CEST	49868	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:10.629882097 CEST	443	49868	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:10.629980087 CEST	49868	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:10.629988909 CEST	443	49868	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:10.636980057 CEST	443	49866	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.637206078 CEST	49866	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.637238979 CEST	443	49866	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.637655973 CEST	443	49866	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.637978077 CEST	49866	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.638109922 CEST	49866	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.638191938 CEST	443	49866	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:10.643579960 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.643915892 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.643943071 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.644988060 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.645047903 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.645313978 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.645371914 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.645426989 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.645433903 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.656977892 CEST	443	49864	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:10.657186031 CEST	443	49864	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:10.657449961 CEST	49864	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:10.657732964 CEST	49864	443	192.168.2.8	108.156.60.61
Oct 12, 2024 00:48:10.657748938 CEST	443	49864	108.156.60.61	192.168.2.8
Oct 12, 2024 00:48:10.661077976 CEST	49870	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:10.661099911 CEST	443	49870	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:10.661220074 CEST	49870	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:10.661449909 CEST	49870	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:10.661461115 CEST	443	49870	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:10.680233955 CEST	49866	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:10.756422997 CEST	443	49868	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:10.756478071 CEST	49868	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:10.757344961 CEST	49868	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:10.757366896 CEST	443	49868	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:10.758347988 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.769377947 CEST	49871	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:10.769413948 CEST	443	49871	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:10.769541979 CEST	49871	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:10.769707918 CEST	49871	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:10.769723892 CEST	443	49871	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:10.804572105 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.804744005 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.804784060 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.804820061 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.804826975 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.804862976 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.804896116 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.805577040 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.805624962 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.805640936 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.805686951 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.805757999 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.805769920 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.809588909 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.809617996 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.809685946 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.809699059 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.809763908 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.820689917 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.869621992 CEST	443	49865	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:10.869810104 CEST	443	49865	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:10.869863987 CEST	49865	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:10.871321917 CEST	49865	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:10.871340990 CEST	443	49865	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:10.895591021 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.895627975 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.895658016 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.895672083 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.895746946 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.895781994 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.896085978 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.896116972 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.896143913 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.896158934 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.896327019 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.896511078 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.896632910 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.896667004 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.896683931 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.896696091 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.896739006 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.896750927 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.896761894 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.896821022 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.897423029 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.897474051 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.897552967 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:10.897569895 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.897618055 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.897859097 CEST	49867	443	192.168.2.8	162.247.243.39
Oct 12, 2024 00:48:10.897888899 CEST	443	49867	162.247.243.39	192.168.2.8
Oct 12, 2024 00:48:11.025146008 CEST	443	49866	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:11.025240898 CEST	49866	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:11.025363922 CEST	443	49866	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:11.025464058 CEST	443	49866	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:11.025510073 CEST	49866	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:11.032753944 CEST	49866	443	192.168.2.8	157.240.251.35
Oct 12, 2024 00:48:11.032774925 CEST	443	49866	157.240.251.35	192.168.2.8
Oct 12, 2024 00:48:11.223026037 CEST	443	49871	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:11.223387957 CEST	49871	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:11.223417997 CEST	443	49871	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:11.224428892 CEST	443	49871	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:11.224498034 CEST	49871	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:11.226219893 CEST	49871	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:11.226284981 CEST	443	49871	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:11.226526022 CEST	49871	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:11.226537943 CEST	443	49871	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:11.383982897 CEST	443	49870	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:11.386054039 CEST	49870	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:11.386070013 CEST	443	49870	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:11.386576891 CEST	443	49870	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:11.387541056 CEST	49870	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:11.387624979 CEST	443	49870	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:11.387692928 CEST	49870	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:11.417670012 CEST	49871	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:11.430361986 CEST	49870	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:11.430382967 CEST	443	49870	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:11.453500986 CEST	443	49871	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:11.453594923 CEST	443	49871	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:11.453663111 CEST	49871	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:11.464060068 CEST	49871	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:11.464087009 CEST	443	49871	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:11.805341005 CEST	443	49870	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:11.805674076 CEST	443	49870	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:11.805723906 CEST	49870	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:11.806788921 CEST	49870	443	192.168.2.8	108.138.26.118
Oct 12, 2024 00:48:11.806809902 CEST	443	49870	108.138.26.118	192.168.2.8
Oct 12, 2024 00:48:13.803174019 CEST	49872	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:13.803215981 CEST	443	49872	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:13.803308010 CEST	49872	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:13.803531885 CEST	49872	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:13.803549051 CEST	443	49872	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.290143967 CEST	443	49872	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.290756941 CEST	49872	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:14.290771008 CEST	443	49872	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.291152000 CEST	443	49872	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.291902065 CEST	49872	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:14.291976929 CEST	443	49872	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.292011023 CEST	49872	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:14.292011023 CEST	49872	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:14.292031050 CEST	443	49872	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.336498976 CEST	49872	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:14.423492908 CEST	443	49872	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.423634052 CEST	443	49872	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.423707008 CEST	49872	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:14.425379992 CEST	49872	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:14.425400972 CEST	443	49872	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.431850910 CEST	49873	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:14.431895018 CEST	443	49873	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.432115078 CEST	49873	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:14.432343006 CEST	49873	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:14.432358027 CEST	443	49873	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.885902882 CEST	443	49873	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.886231899 CEST	49873	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:14.886260033 CEST	443	49873	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.886631966 CEST	443	49873	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.887054920 CEST	49873	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:14.887083054 CEST	49873	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:14.887125969 CEST	443	49873	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:14.930437088 CEST	49873	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:15.042555094 CEST	443	49873	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:15.042680025 CEST	443	49873	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:15.042790890 CEST	49873	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:15.054379940 CEST	49873	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:15.054409981 CEST	443	49873	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:17.997561932 CEST	49874	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:17.997607946 CEST	443	49874	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:17.997750998 CEST	49874	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:17.998159885 CEST	49874	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:17.998173952 CEST	443	49874	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:18.090466976 CEST	49875	443	192.168.2.8	216.58.206.70
Oct 12, 2024 00:48:18.090514898 CEST	443	49875	216.58.206.70	192.168.2.8
Oct 12, 2024 00:48:18.090575933 CEST	49875	443	192.168.2.8	216.58.206.70
Oct 12, 2024 00:48:18.090768099 CEST	49875	443	192.168.2.8	216.58.206.70
Oct 12, 2024 00:48:18.090780020 CEST	443	49875	216.58.206.70	192.168.2.8
Oct 12, 2024 00:48:18.645168066 CEST	443	49874	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:18.653011084 CEST	49874	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:18.653033018 CEST	443	49874	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:18.653379917 CEST	443	49874	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:18.659941912 CEST	49874	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:18.660022020 CEST	443	49874	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:18.663408041 CEST	49874	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:18.666974068 CEST	49874	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:18.667005062 CEST	443	49874	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:18.734474897 CEST	443	49875	216.58.206.70	192.168.2.8
Oct 12, 2024 00:48:18.734806061 CEST	49875	443	192.168.2.8	216.58.206.70
Oct 12, 2024 00:48:18.734838009 CEST	443	49875	216.58.206.70	192.168.2.8
Oct 12, 2024 00:48:18.735902071 CEST	443	49875	216.58.206.70	192.168.2.8
Oct 12, 2024 00:48:18.735955954 CEST	49875	443	192.168.2.8	216.58.206.70
Oct 12, 2024 00:48:18.745572090 CEST	49875	443	192.168.2.8	216.58.206.70
Oct 12, 2024 00:48:18.745747089 CEST	443	49875	216.58.206.70	192.168.2.8
Oct 12, 2024 00:48:18.749079943 CEST	49875	443	192.168.2.8	216.58.206.70
Oct 12, 2024 00:48:18.749099016 CEST	443	49875	216.58.206.70	192.168.2.8
Oct 12, 2024 00:48:18.789483070 CEST	49875	443	192.168.2.8	216.58.206.70
Oct 12, 2024 00:48:18.951365948 CEST	443	49874	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:18.951464891 CEST	443	49874	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:18.951550961 CEST	49874	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:18.951700926 CEST	49874	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:18.951700926 CEST	49874	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:18.951716900 CEST	443	49874	63.140.62.17	192.168.2.8
Oct 12, 2024 00:48:18.951843023 CEST	49874	443	192.168.2.8	63.140.62.17
Oct 12, 2024 00:48:19.019099951 CEST	443	49875	216.58.206.70	192.168.2.8
Oct 12, 2024 00:48:19.019179106 CEST	443	49875	216.58.206.70	192.168.2.8
Oct 12, 2024 00:48:19.019229889 CEST	49875	443	192.168.2.8	216.58.206.70
Oct 12, 2024 00:48:19.019603968 CEST	49875	443	192.168.2.8	216.58.206.70
Oct 12, 2024 00:48:19.019625902 CEST	443	49875	216.58.206.70	192.168.2.8
Oct 12, 2024 00:48:19.021852970 CEST	49876	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:19.021888018 CEST	443	49876	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:19.021949053 CEST	49876	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:19.022159100 CEST	49876	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:19.022173882 CEST	443	49876	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:19.676234007 CEST	443	49876	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:19.676542997 CEST	49876	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:19.676563978 CEST	443	49876	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:19.676881075 CEST	443	49876	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:19.677511930 CEST	49876	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:19.677568913 CEST	443	49876	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:19.677793026 CEST	49876	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:19.719448090 CEST	443	49876	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:19.968436003 CEST	443	49876	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:19.968575001 CEST	443	49876	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:19.968621969 CEST	49876	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:19.999202013 CEST	49876	443	192.168.2.8	142.250.186.38
Oct 12, 2024 00:48:19.999234915 CEST	443	49876	142.250.186.38	192.168.2.8
Oct 12, 2024 00:48:20.037674904 CEST	49877	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:20.037719965 CEST	443	49877	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:20.037782907 CEST	49877	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:20.038412094 CEST	49877	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:20.038427114 CEST	443	49877	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:20.168431997 CEST	49878	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:20.168479919 CEST	443	49878	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:20.168709993 CEST	49878	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:20.169534922 CEST	49878	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:20.169550896 CEST	443	49878	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:20.682537079 CEST	443	49878	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:20.682883978 CEST	49878	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:20.682902098 CEST	443	49878	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:20.683270931 CEST	443	49878	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:20.683638096 CEST	49878	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:20.683710098 CEST	443	49878	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:20.683801889 CEST	49878	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:20.731396914 CEST	443	49878	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:20.792323112 CEST	443	49877	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:20.792912960 CEST	49877	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:20.792922974 CEST	443	49877	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:20.793354988 CEST	443	49877	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:20.793792963 CEST	49877	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:20.793858051 CEST	443	49877	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:20.793957949 CEST	49877	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:20.813935995 CEST	443	49878	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:20.814213037 CEST	443	49878	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:20.814269066 CEST	49878	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:20.814589024 CEST	49878	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:20.814604998 CEST	443	49878	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:20.817990065 CEST	49879	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:20.818042994 CEST	443	49879	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:20.818114042 CEST	49879	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:20.818348885 CEST	49879	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:20.818366051 CEST	443	49879	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:20.835406065 CEST	443	49877	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:21.097043037 CEST	443	49877	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:21.097130060 CEST	443	49877	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:21.097210884 CEST	49877	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:21.156038046 CEST	49877	443	192.168.2.8	142.250.184.226
Oct 12, 2024 00:48:21.156059027 CEST	443	49877	142.250.184.226	192.168.2.8
Oct 12, 2024 00:48:21.166089058 CEST	49880	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:21.166150093 CEST	443	49880	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:21.166260958 CEST	49880	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:21.166464090 CEST	49880	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:21.166476965 CEST	443	49880	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:21.304064035 CEST	443	49879	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:21.310492039 CEST	49879	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:21.310514927 CEST	443	49879	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:21.310892105 CEST	443	49879	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:21.317385912 CEST	49879	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:21.317459106 CEST	443	49879	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:21.317543983 CEST	49879	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:21.363405943 CEST	443	49879	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:21.440330982 CEST	443	49879	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:21.440437078 CEST	443	49879	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:21.440486908 CEST	49879	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:21.441447973 CEST	49879	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:48:21.441468954 CEST	443	49879	162.247.243.29	192.168.2.8
Oct 12, 2024 00:48:21.920819044 CEST	443	49880	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:21.921118021 CEST	49880	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:21.921148062 CEST	443	49880	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:21.921531916 CEST	443	49880	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:21.921860933 CEST	49880	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:21.921919107 CEST	443	49880	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:21.921994925 CEST	49880	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:21.967401028 CEST	443	49880	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:22.226413012 CEST	443	49880	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:22.226510048 CEST	443	49880	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:22.226562977 CEST	49880	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:22.227942944 CEST	49880	443	192.168.2.8	216.58.206.34
Oct 12, 2024 00:48:22.227972031 CEST	443	49880	216.58.206.34	192.168.2.8
Oct 12, 2024 00:48:23.187695026 CEST	63425	53	192.168.2.8	162.159.36.2
Oct 12, 2024 00:48:23.192534924 CEST	53	63425	162.159.36.2	192.168.2.8
Oct 12, 2024 00:48:23.192604065 CEST	63425	53	192.168.2.8	162.159.36.2
Oct 12, 2024 00:48:23.192701101 CEST	63425	53	192.168.2.8	162.159.36.2
Oct 12, 2024 00:48:23.197691917 CEST	53	63425	162.159.36.2	192.168.2.8
Oct 12, 2024 00:48:23.657721996 CEST	53	63425	162.159.36.2	192.168.2.8
Oct 12, 2024 00:48:23.658318043 CEST	63425	53	192.168.2.8	162.159.36.2
Oct 12, 2024 00:48:23.663883924 CEST	53	63425	162.159.36.2	192.168.2.8
Oct 12, 2024 00:48:23.663937092 CEST	63425	53	192.168.2.8	162.159.36.2
Oct 12, 2024 00:48:36.333468914 CEST	49703	80	192.168.2.8	199.232.210.172
Oct 12, 2024 00:48:36.341216087 CEST	80	49703	199.232.210.172	192.168.2.8
Oct 12, 2024 00:48:36.341269970 CEST	49703	80	192.168.2.8	199.232.210.172
Oct 12, 2024 00:48:57.050987959 CEST	63431	443	192.168.2.8	142.250.185.196
Oct 12, 2024 00:48:57.051013947 CEST	443	63431	142.250.185.196	192.168.2.8
Oct 12, 2024 00:48:57.051209927 CEST	63431	443	192.168.2.8	142.250.185.196
Oct 12, 2024 00:48:57.051424026 CEST	63431	443	192.168.2.8	142.250.185.196
Oct 12, 2024 00:48:57.051434040 CEST	443	63431	142.250.185.196	192.168.2.8
Oct 12, 2024 00:48:57.683425903 CEST	443	63431	142.250.185.196	192.168.2.8
Oct 12, 2024 00:48:57.686640978 CEST	63431	443	192.168.2.8	142.250.185.196
Oct 12, 2024 00:48:57.686655045 CEST	443	63431	142.250.185.196	192.168.2.8
Oct 12, 2024 00:48:57.687005997 CEST	443	63431	142.250.185.196	192.168.2.8
Oct 12, 2024 00:48:57.695780039 CEST	63431	443	192.168.2.8	142.250.185.196
Oct 12, 2024 00:48:57.695866108 CEST	443	63431	142.250.185.196	192.168.2.8
Oct 12, 2024 00:48:57.744026899 CEST	63431	443	192.168.2.8	142.250.185.196
Oct 12, 2024 00:49:07.587085009 CEST	443	63431	142.250.185.196	192.168.2.8
Oct 12, 2024 00:49:07.587158918 CEST	443	63431	142.250.185.196	192.168.2.8
Oct 12, 2024 00:49:07.587249994 CEST	63431	443	192.168.2.8	142.250.185.196
Oct 12, 2024 00:49:08.947727919 CEST	63431	443	192.168.2.8	142.250.185.196
Oct 12, 2024 00:49:08.947753906 CEST	443	63431	142.250.185.196	192.168.2.8
Oct 12, 2024 00:49:10.175787926 CEST	63432	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:49:10.175848007 CEST	443	63432	162.247.243.29	192.168.2.8
Oct 12, 2024 00:49:10.175910950 CEST	63432	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:49:10.176183939 CEST	63432	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:49:10.176196098 CEST	443	63432	162.247.243.29	192.168.2.8
Oct 12, 2024 00:49:10.641508102 CEST	443	63432	162.247.243.29	192.168.2.8
Oct 12, 2024 00:49:10.641875029 CEST	63432	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:49:10.641901970 CEST	443	63432	162.247.243.29	192.168.2.8
Oct 12, 2024 00:49:10.642932892 CEST	443	63432	162.247.243.29	192.168.2.8
Oct 12, 2024 00:49:10.643332958 CEST	63432	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:49:10.643475056 CEST	63432	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:49:10.643511057 CEST	443	63432	162.247.243.29	192.168.2.8
Oct 12, 2024 00:49:10.696190119 CEST	63432	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:49:10.768790960 CEST	443	63432	162.247.243.29	192.168.2.8
Oct 12, 2024 00:49:10.769052029 CEST	443	63432	162.247.243.29	192.168.2.8
Oct 12, 2024 00:49:10.769114017 CEST	63432	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:49:10.770970106 CEST	63432	443	192.168.2.8	162.247.243.29
Oct 12, 2024 00:49:10.770988941 CEST	443	63432	162.247.243.29	192.168.2.8
Oct 12, 2024 00:49:13.354402065 CEST	443	49705	13.107.246.51	192.168.2.8
Oct 12, 2024 00:49:13.354562044 CEST	443	49705	13.107.246.51	192.168.2.8
Oct 12, 2024 00:49:13.354618073 CEST	49705	443	192.168.2.8	13.107.246.51
Oct 12, 2024 00:49:13.355074883 CEST	49705	443	192.168.2.8	13.107.246.51
Oct 12, 2024 00:49:13.360673904 CEST	443	49705	13.107.246.51	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 12, 2024 00:47:52.650242090 CEST	53	64351	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:52.756989956 CEST	53	53523	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:53.903553009 CEST	53	52514	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:54.550270081 CEST	59711	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:54.550435066 CEST	50390	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:54.559926987 CEST	64817	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:54.560058117 CEST	63252	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:56.124072075 CEST	61271	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:56.124382973 CEST	51751	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:56.127441883 CEST	57125	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:56.127615929 CEST	58858	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:56.128920078 CEST	51817	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:56.129336119 CEST	53869	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:56.130920887 CEST	53	61271	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:56.131109953 CEST	53	51751	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:56.988013029 CEST	51143	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:56.988162994 CEST	65462	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:57.005352974 CEST	53	65462	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:57.005610943 CEST	53	51143	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:57.122134924 CEST	54136	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:57.122318029 CEST	64580	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:57.129631042 CEST	53	54136	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:57.129647017 CEST	53	64580	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:57.392673016 CEST	61196	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:57.392788887 CEST	63540	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:57.811975956 CEST	54915	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:57.812352896 CEST	53397	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:57.820245028 CEST	60657	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:57.820424080 CEST	54889	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:57.833323002 CEST	58071	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:57.833518028 CEST	62818	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:57.841650009 CEST	53	58071	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:57.842386007 CEST	53	62818	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:59.179224014 CEST	63882	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:59.179433107 CEST	52526	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:59.187676907 CEST	53	63882	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:59.187737942 CEST	53	52526	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:59.741812944 CEST	63439	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:59.742259026 CEST	65184	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:59.749253035 CEST	53	58198	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:59.765714884 CEST	62641	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:59.765970945 CEST	61384	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:59.766741037 CEST	51664	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:59.766961098 CEST	60014	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:59.777726889 CEST	63081	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:59.777877092 CEST	63446	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:59.784643888 CEST	54181	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:59.784854889 CEST	57148	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:59.788255930 CEST	53	51664	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:59.792891979 CEST	53	60014	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:59.793190002 CEST	53	54181	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:59.793798923 CEST	53	57148	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:59.815998077 CEST	53	63446	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:59.836563110 CEST	53	63081	1.1.1.1	192.168.2.8
Oct 12, 2024 00:47:59.864865065 CEST	51168	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:47:59.865084887 CEST	57856	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:00.598057985 CEST	57847	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:00.598057985 CEST	63633	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:00.606766939 CEST	53	63633	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:01.659878969 CEST	54833	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.660057068 CEST	64683	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.661119938 CEST	49169	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.661323071 CEST	61470	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.662213087 CEST	59748	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.662354946 CEST	51000	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.663642883 CEST	64031	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.663944960 CEST	59862	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.667710066 CEST	53	49169	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:01.667763948 CEST	53	61470	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:01.668883085 CEST	53	51000	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:01.670430899 CEST	53	64683	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:01.682485104 CEST	53	54833	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:01.689609051 CEST	59698	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.689759016 CEST	61051	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.690033913 CEST	57887	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.690138102 CEST	62339	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.690360069 CEST	62560	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.690565109 CEST	58168	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.696470976 CEST	53	61051	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:01.696527004 CEST	53	59698	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:01.700424910 CEST	53	62339	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:01.744442940 CEST	53	57887	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:01.749841928 CEST	63822	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.750201941 CEST	53504	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:01.755526066 CEST	53	62550	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:02.361819029 CEST	54744	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:02.362406969 CEST	65258	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:02.369213104 CEST	53	54744	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:02.369638920 CEST	53	65258	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:02.687180996 CEST	53	61966	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:03.900324106 CEST	57021	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:03.900501966 CEST	56984	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:03.903634071 CEST	49366	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:03.907577038 CEST	65528	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:03.909090042 CEST	53	56984	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:03.909287930 CEST	63519	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:03.909454107 CEST	53	57021	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:03.909533978 CEST	50775	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:03.912026882 CEST	53	49366	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:03.915911913 CEST	59667	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:03.916294098 CEST	65331	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:03.916812897 CEST	53	65528	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:03.924442053 CEST	53	65331	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:03.924740076 CEST	53	59667	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:03.973877907 CEST	50027	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:03.974050999 CEST	62329	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.272825003 CEST	50235	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.273509026 CEST	54915	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.280147076 CEST	53	50235	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:04.329869032 CEST	53	54915	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:04.331295967 CEST	60853	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.331836939 CEST	55563	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.338205099 CEST	53	60853	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:04.363584042 CEST	53	55563	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:04.495734930 CEST	53767	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.495995998 CEST	55284	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.497059107 CEST	52498	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.497168064 CEST	52659	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.500597000 CEST	50939	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.501301050 CEST	49999	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.502532005 CEST	53	55284	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:04.504004002 CEST	53	52498	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:04.504682064 CEST	53	52659	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:04.513678074 CEST	59039	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.514296055 CEST	58447	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.521363974 CEST	53	49999	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:04.521539927 CEST	53	58447	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:04.671353102 CEST	50304	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.672068119 CEST	63996	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.678714037 CEST	53	50304	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:04.679071903 CEST	53	63996	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:04.959614038 CEST	50777	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:04.960361958 CEST	56414	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:05.014691114 CEST	49964	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:05.015316963 CEST	50810	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:05.024323940 CEST	53	49964	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:05.025438070 CEST	53	50810	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:05.093274117 CEST	53241	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:05.094172001 CEST	61702	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:05.103050947 CEST	53	53241	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:05.104418039 CEST	53	61702	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:05.231005907 CEST	51451	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:05.231221914 CEST	60461	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:05.239180088 CEST	53	60461	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:05.239360094 CEST	53	51451	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:06.735078096 CEST	59566	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:06.743753910 CEST	53	59566	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:06.771054983 CEST	54465	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:06.779928923 CEST	53	54465	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:06.817775011 CEST	51232	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:06.818018913 CEST	61326	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:06.824376106 CEST	53	51232	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:06.824668884 CEST	53	61326	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:06.832124949 CEST	60309	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:06.832294941 CEST	55059	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:06.838938951 CEST	53	60309	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:06.839072943 CEST	53	55059	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:06.928626060 CEST	62828	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:06.928864002 CEST	60803	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:06.935472012 CEST	53	62828	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:06.937640905 CEST	53	60803	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.253115892 CEST	63455	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.253417969 CEST	53940	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.260114908 CEST	53	63455	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.260360003 CEST	53	53940	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.345392942 CEST	49849	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.345555067 CEST	59698	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.351994038 CEST	53	49849	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.353575945 CEST	53	59698	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.376669884 CEST	62479	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.377094030 CEST	63845	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.378833055 CEST	50030	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.379113913 CEST	54484	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.384212017 CEST	53	63845	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.385370970 CEST	53	50030	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.386230946 CEST	53	54484	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.392410994 CEST	59832	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.392549038 CEST	54758	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.394279003 CEST	63697	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.394479990 CEST	53135	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.399185896 CEST	53	59832	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.399198055 CEST	53	54758	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.400993109 CEST	53	53135	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.401067019 CEST	53	63697	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.570900917 CEST	56803	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.571078062 CEST	53393	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.577666998 CEST	53	56803	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.578460932 CEST	53	53393	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.579140902 CEST	56228	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.585760117 CEST	53	56228	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.788496971 CEST	49850	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.788682938 CEST	61186	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.795500994 CEST	53	61186	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.796082020 CEST	53	49850	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:07.837451935 CEST	52130	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.837654114 CEST	49478	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:07.844691992 CEST	53	49478	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:08.049817085 CEST	61214	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:08.049817085 CEST	63339	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:08.056619883 CEST	53	61214	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:08.057188988 CEST	53	63339	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:08.062443018 CEST	64871	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:08.062690973 CEST	55285	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:08.070859909 CEST	53	55285	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:08.082523108 CEST	53	64871	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:08.409302950 CEST	65441	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:08.409302950 CEST	52116	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:08.418572903 CEST	53	65441	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:08.418596029 CEST	53	52116	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:08.949295998 CEST	60522	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:08.950012922 CEST	63439	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:08.952574015 CEST	51263	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:08.952574015 CEST	61421	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:08.958020926 CEST	53	60522	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:08.958657980 CEST	53	63439	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:08.960879087 CEST	53	51263	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:08.961816072 CEST	53	61421	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:09.396904945 CEST	49968	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:09.397031069 CEST	62619	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:09.403862953 CEST	53	62619	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:09.403877974 CEST	53	49968	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:09.559600115 CEST	49229	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:09.559767962 CEST	51994	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:09.568211079 CEST	53	51994	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:09.569214106 CEST	53	49229	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:10.156332970 CEST	55090	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:10.156455040 CEST	61240	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:10.156980991 CEST	60040	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:10.157219887 CEST	56800	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:10.163141966 CEST	53	55090	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:10.163175106 CEST	53	61240	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:10.163546085 CEST	53	60040	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:10.164263964 CEST	53	56800	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:10.761570930 CEST	58343	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:10.762080908 CEST	53063	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:10.768678904 CEST	53	58343	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:10.768780947 CEST	53	53063	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:11.017446995 CEST	53	55916	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:18.075572014 CEST	63520	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:18.078546047 CEST	55139	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:18.085495949 CEST	53	63520	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:18.089997053 CEST	53	55139	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:21.151201963 CEST	52607	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:21.158238888 CEST	53	52607	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:23.187114954 CEST	53	51653	162.159.36.2	192.168.2.8
Oct 12, 2024 00:48:23.680308104 CEST	54466	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:23.688796997 CEST	53	54466	1.1.1.1	192.168.2.8
Oct 12, 2024 00:48:35.067770958 CEST	138	138	192.168.2.8	192.168.2.255
Oct 12, 2024 00:48:57.041229963 CEST	65447	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:48:57.049674988 CEST	53	65447	1.1.1.1	192.168.2.8
Oct 12, 2024 00:49:10.168318033 CEST	49498	53	192.168.2.8	1.1.1.1
Oct 12, 2024 00:49:10.175019026 CEST	53	49498	1.1.1.1	192.168.2.8

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 12, 2024 00:47:59.967829943 CEST	192.168.2.8	1.1.1.1	c293	(Port unreachable)	Destination Unreachable
Oct 12, 2024 00:48:04.329947948 CEST	192.168.2.8	1.1.1.1	c256	(Port unreachable)	Destination Unreachable
Oct 12, 2024 00:48:04.978713989 CEST	192.168.2.8	1.1.1.1	c26e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 12, 2024 00:47:54.550270081 CEST	192.168.2.8	1.1.1.1	0x86df	Standard query (0)	www.redcrossblood.org	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:54.550435066 CEST	192.168.2.8	1.1.1.1	0xa344	Standard query (0)	www.redcrossblood.org	65	IN (0x0001)	false
Oct 12, 2024 00:47:54.559926987 CEST	192.168.2.8	1.1.1.1	0x5695	Standard query (0)	www.redcrossblood.org	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:54.560058117 CEST	192.168.2.8	1.1.1.1	0xebb2	Standard query (0)	www.redcrossblood.org	65	IN (0x0001)	false
Oct 12, 2024 00:47:56.124072075 CEST	192.168.2.8	1.1.1.1	0xbb2c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:56.124382973 CEST	192.168.2.8	1.1.1.1	0xc170	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 12, 2024 00:47:56.127441883 CEST	192.168.2.8	1.1.1.1	0x8927	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:56.127615929 CEST	192.168.2.8	1.1.1.1	0xc991	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Oct 12, 2024 00:47:56.128920078 CEST	192.168.2.8	1.1.1.1	0x3aac	Standard query (0)	s7.addthis.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:56.129336119 CEST	192.168.2.8	1.1.1.1	0xb2db	Standard query (0)	s7.addthis.com	65	IN (0x0001)	false
Oct 12, 2024 00:47:56.988013029 CEST	192.168.2.8	1.1.1.1	0xb7fd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:56.988162994 CEST	192.168.2.8	1.1.1.1	0x6aeb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 12, 2024 00:47:57.122134924 CEST	192.168.2.8	1.1.1.1	0xc82a	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.122318029 CEST	192.168.2.8	1.1.1.1	0xee41	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 12, 2024 00:47:57.392673016 CEST	192.168.2.8	1.1.1.1	0x1074	Standard query (0)	www.redcrossblood.org	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.392788887 CEST	192.168.2.8	1.1.1.1	0x7404	Standard query (0)	www.redcrossblood.org	65	IN (0x0001)	false
Oct 12, 2024 00:47:57.811975956 CEST	192.168.2.8	1.1.1.1	0xf6c2	Standard query (0)	resources.crowdtwist.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.812352896 CEST	192.168.2.8	1.1.1.1	0x5326	Standard query (0)	resources.crowdtwist.com	65	IN (0x0001)	false
Oct 12, 2024 00:47:57.820245028 CEST	192.168.2.8	1.1.1.1	0x12e7	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.820424080 CEST	192.168.2.8	1.1.1.1	0x9339	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Oct 12, 2024 00:47:57.833323002 CEST	192.168.2.8	1.1.1.1	0x6b5e	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.833518028 CEST	192.168.2.8	1.1.1.1	0x7376	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 12, 2024 00:47:59.179224014 CEST	192.168.2.8	1.1.1.1	0xade	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.179433107 CEST	192.168.2.8	1.1.1.1	0x34c2	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 12, 2024 00:47:59.741812944 CEST	192.168.2.8	1.1.1.1	0xd955	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.742259026 CEST	192.168.2.8	1.1.1.1	0x90f8	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Oct 12, 2024 00:47:59.765714884 CEST	192.168.2.8	1.1.1.1	0xbdf8	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.765970945 CEST	192.168.2.8	1.1.1.1	0xe02d	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Oct 12, 2024 00:47:59.766741037 CEST	192.168.2.8	1.1.1.1	0xcc42	Standard query (0)	redcross.demdex.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.766961098 CEST	192.168.2.8	1.1.1.1	0xf642	Standard query (0)	redcross.demdex.net	65	IN (0x0001)	false
Oct 12, 2024 00:47:59.777726889 CEST	192.168.2.8	1.1.1.1	0x3d9c	Standard query (0)	smetrics.redcross.org	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.777877092 CEST	192.168.2.8	1.1.1.1	0x7557	Standard query (0)	smetrics.redcross.org	65	IN (0x0001)	false
Oct 12, 2024 00:47:59.784643888 CEST	192.168.2.8	1.1.1.1	0x65c1	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.784854889 CEST	192.168.2.8	1.1.1.1	0xb57f	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 12, 2024 00:47:59.864865065 CEST	192.168.2.8	1.1.1.1	0x125b	Standard query (0)	resources.crowdtwist.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.865084887 CEST	192.168.2.8	1.1.1.1	0x3c26	Standard query (0)	resources.crowdtwist.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:00.598057985 CEST	192.168.2.8	1.1.1.1	0x8395	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:00.598057985 CEST	192.168.2.8	1.1.1.1	0x611d	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:01.659878969 CEST	192.168.2.8	1.1.1.1	0x8f46	Standard query (0)	4706068.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:01.660057068 CEST	192.168.2.8	1.1.1.1	0x24e3	Standard query (0)	4706068.fls.doubleclick.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:01.661119938 CEST	192.168.2.8	1.1.1.1	0x49b9	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:01.661323071 CEST	192.168.2.8	1.1.1.1	0xde20	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:01.662213087 CEST	192.168.2.8	1.1.1.1	0x8252	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:01.662354946 CEST	192.168.2.8	1.1.1.1	0x1821	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:01.663642883 CEST	192.168.2.8	1.1.1.1	0x7909	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:01.663944960 CEST	192.168.2.8	1.1.1.1	0xdfc7	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:01.689609051 CEST	192.168.2.8	1.1.1.1	0xfcfd	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:01.689759016 CEST	192.168.2.8	1.1.1.1	0xf7d6	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:01.690033913 CEST	192.168.2.8	1.1.1.1	0xfb47	Standard query (0)	smetrics.redcross.org	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:01.690138102 CEST	192.168.2.8	1.1.1.1	0x814a	Standard query (0)	smetrics.redcross.org	65	IN (0x0001)	false
Oct 12, 2024 00:48:01.690360069 CEST	192.168.2.8	1.1.1.1	0xcd6a	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:01.690565109 CEST	192.168.2.8	1.1.1.1	0x1f26	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:01.749841928 CEST	192.168.2.8	1.1.1.1	0x35ae	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:01.750201941 CEST	192.168.2.8	1.1.1.1	0xb692	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:02.361819029 CEST	192.168.2.8	1.1.1.1	0x4df1	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:02.362406969 CEST	192.168.2.8	1.1.1.1	0x3bd1	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:03.900324106 CEST	192.168.2.8	1.1.1.1	0x6f8d	Standard query (0)	pixel.mathtag.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:03.900501966 CEST	192.168.2.8	1.1.1.1	0xd4ed	Standard query (0)	pixel.mathtag.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:03.903634071 CEST	192.168.2.8	1.1.1.1	0x3c6	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:03.907577038 CEST	192.168.2.8	1.1.1.1	0x89a5	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:03.909287930 CEST	192.168.2.8	1.1.1.1	0xe7a0	Standard query (0)	origin.acuityplatform.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:03.909533978 CEST	192.168.2.8	1.1.1.1	0xa66b	Standard query (0)	origin.acuityplatform.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:03.915911913 CEST	192.168.2.8	1.1.1.1	0xb957	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:03.916294098 CEST	192.168.2.8	1.1.1.1	0x75e5	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:03.973877907 CEST	192.168.2.8	1.1.1.1	0xe0d0	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:03.974050999 CEST	192.168.2.8	1.1.1.1	0x2985	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:04.272825003 CEST	192.168.2.8	1.1.1.1	0x4c48	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.273509026 CEST	192.168.2.8	1.1.1.1	0xebbd	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:04.331295967 CEST	192.168.2.8	1.1.1.1	0x1084	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.331836939 CEST	192.168.2.8	1.1.1.1	0x2d5c	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:04.495734930 CEST	192.168.2.8	1.1.1.1	0xdd4c	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.495995998 CEST	192.168.2.8	1.1.1.1	0x7965	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:04.497059107 CEST	192.168.2.8	1.1.1.1	0xfe3a	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.497168064 CEST	192.168.2.8	1.1.1.1	0x44dd	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:04.500597000 CEST	192.168.2.8	1.1.1.1	0x7e15	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.501301050 CEST	192.168.2.8	1.1.1.1	0xa7fc	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:04.513678074 CEST	192.168.2.8	1.1.1.1	0x7d4f	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.514296055 CEST	192.168.2.8	1.1.1.1	0xa383	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:04.671353102 CEST	192.168.2.8	1.1.1.1	0x8f6f	Standard query (0)	pixel.mathtag.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.672068119 CEST	192.168.2.8	1.1.1.1	0xafac	Standard query (0)	pixel.mathtag.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:04.959614038 CEST	192.168.2.8	1.1.1.1	0x9d39	Standard query (0)	origin.acuityplatform.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.960361958 CEST	192.168.2.8	1.1.1.1	0xd08f	Standard query (0)	origin.acuityplatform.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:05.014691114 CEST	192.168.2.8	1.1.1.1	0xbbc9	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:05.015316963 CEST	192.168.2.8	1.1.1.1	0x108	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:05.093274117 CEST	192.168.2.8	1.1.1.1	0xdbf7	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:05.094172001 CEST	192.168.2.8	1.1.1.1	0x411c	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:05.231005907 CEST	192.168.2.8	1.1.1.1	0xa3b0	Standard query (0)	cdn.branch.io	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:05.231221914 CEST	192.168.2.8	1.1.1.1	0xb8a4	Standard query (0)	cdn.branch.io	65	IN (0x0001)	false
Oct 12, 2024 00:48:06.735078096 CEST	192.168.2.8	1.1.1.1	0xeeed	Standard query (0)	e.acuityplatform.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:06.771054983 CEST	192.168.2.8	1.1.1.1	0x7ced	Standard query (0)	e.acuityplatform.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:06.817775011 CEST	192.168.2.8	1.1.1.1	0xf0b7	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:06.818018913 CEST	192.168.2.8	1.1.1.1	0xbc6c	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:06.832124949 CEST	192.168.2.8	1.1.1.1	0x40d0	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:06.832294941 CEST	192.168.2.8	1.1.1.1	0x9224	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:06.928626060 CEST	192.168.2.8	1.1.1.1	0x272e	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:06.928864002 CEST	192.168.2.8	1.1.1.1	0x8645	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:07.253115892 CEST	192.168.2.8	1.1.1.1	0xf707	Standard query (0)	app.link	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.253417969 CEST	192.168.2.8	1.1.1.1	0xa8ef	Standard query (0)	app.link	65	IN (0x0001)	false
Oct 12, 2024 00:48:07.345392942 CEST	192.168.2.8	1.1.1.1	0xc09d	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.345555067 CEST	192.168.2.8	1.1.1.1	0x9098	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:07.376669884 CEST	192.168.2.8	1.1.1.1	0xd612	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.377094030 CEST	192.168.2.8	1.1.1.1	0x3eb1	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:07.378833055 CEST	192.168.2.8	1.1.1.1	0x842e	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.379113913 CEST	192.168.2.8	1.1.1.1	0x7f51	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:07.392410994 CEST	192.168.2.8	1.1.1.1	0x3ef8	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.392549038 CEST	192.168.2.8	1.1.1.1	0x43a9	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:07.394279003 CEST	192.168.2.8	1.1.1.1	0x4d9d	Standard query (0)	cdn.branch.io	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.394479990 CEST	192.168.2.8	1.1.1.1	0xc4ac	Standard query (0)	cdn.branch.io	65	IN (0x0001)	false
Oct 12, 2024 00:48:07.570900917 CEST	192.168.2.8	1.1.1.1	0xa821	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.571078062 CEST	192.168.2.8	1.1.1.1	0xadd	Standard query (0)	sync.search.spotxchange.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:07.579140902 CEST	192.168.2.8	1.1.1.1	0xab45	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.788496971 CEST	192.168.2.8	1.1.1.1	0xe8ee	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.788682938 CEST	192.168.2.8	1.1.1.1	0x9f66	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:07.837451935 CEST	192.168.2.8	1.1.1.1	0xbfc9	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.837654114 CEST	192.168.2.8	1.1.1.1	0x6028	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:08.049817085 CEST	192.168.2.8	1.1.1.1	0x9827	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.049817085 CEST	192.168.2.8	1.1.1.1	0x5cd	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:08.062443018 CEST	192.168.2.8	1.1.1.1	0x6f4	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.062690973 CEST	192.168.2.8	1.1.1.1	0x18d9	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:08.409302950 CEST	192.168.2.8	1.1.1.1	0xc0a0	Standard query (0)	api2.branch.io	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.409302950 CEST	192.168.2.8	1.1.1.1	0x725c	Standard query (0)	api2.branch.io	65	IN (0x0001)	false
Oct 12, 2024 00:48:08.949295998 CEST	192.168.2.8	1.1.1.1	0xb5f0	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.950012922 CEST	192.168.2.8	1.1.1.1	0xe89d	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:08.952574015 CEST	192.168.2.8	1.1.1.1	0x84b3	Standard query (0)	app.link	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.952574015 CEST	192.168.2.8	1.1.1.1	0x4988	Standard query (0)	app.link	65	IN (0x0001)	false
Oct 12, 2024 00:48:09.396904945 CEST	192.168.2.8	1.1.1.1	0xfacc	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:09.397031069 CEST	192.168.2.8	1.1.1.1	0xf059	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:09.559600115 CEST	192.168.2.8	1.1.1.1	0x52de	Standard query (0)	api2.branch.io	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:09.559767962 CEST	192.168.2.8	1.1.1.1	0xae65	Standard query (0)	api2.branch.io	65	IN (0x0001)	false
Oct 12, 2024 00:48:10.156332970 CEST	192.168.2.8	1.1.1.1	0xe063	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:10.156455040 CEST	192.168.2.8	1.1.1.1	0xecc	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Oct 12, 2024 00:48:10.156980991 CEST	192.168.2.8	1.1.1.1	0x4ae4	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:10.157219887 CEST	192.168.2.8	1.1.1.1	0xdf3d	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:10.761570930 CEST	192.168.2.8	1.1.1.1	0xb9a0	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:10.762080908 CEST	192.168.2.8	1.1.1.1	0xff09	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:18.075572014 CEST	192.168.2.8	1.1.1.1	0x2f3a	Standard query (0)	fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:18.078546047 CEST	192.168.2.8	1.1.1.1	0xdf6d	Standard query (0)	fls.doubleclick.net	65	IN (0x0001)	false
Oct 12, 2024 00:48:21.151201963 CEST	192.168.2.8	1.1.1.1	0x9320	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:23.680308104 CEST	192.168.2.8	1.1.1.1	0x515c	Standard query (0)	241.42.69.40.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 12, 2024 00:48:57.041229963 CEST	192.168.2.8	1.1.1.1	0xf9ab	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:49:10.168318033 CEST	192.168.2.8	1.1.1.1	0x3215	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 12, 2024 00:47:54.565749884 CEST	1.1.1.1	192.168.2.8	0x86df	No error (0)	www.redcrossblood.org	san.redcrossblood.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:54.575464964 CEST	1.1.1.1	192.168.2.8	0xa344	No error (0)	www.redcrossblood.org	san.redcrossblood.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:54.576090097 CEST	1.1.1.1	192.168.2.8	0xebb2	No error (0)	www.redcrossblood.org	san.redcrossblood.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:54.582402945 CEST	1.1.1.1	192.168.2.8	0x5695	No error (0)	www.redcrossblood.org	san.redcrossblood.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:56.130920887 CEST	1.1.1.1	192.168.2.8	0xbb2c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:56.130920887 CEST	1.1.1.1	192.168.2.8	0xbb2c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:56.131109953 CEST	1.1.1.1	192.168.2.8	0xc170	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 12, 2024 00:47:56.134573936 CEST	1.1.1.1	192.168.2.8	0xc991	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:56.135314941 CEST	1.1.1.1	192.168.2.8	0x8927	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:56.135905981 CEST	1.1.1.1	192.168.2.8	0x3aac	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:56.135905981 CEST	1.1.1.1	192.168.2.8	0x3aac	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:56.136315107 CEST	1.1.1.1	192.168.2.8	0xb2db	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:56.136315107 CEST	1.1.1.1	192.168.2.8	0xb2db	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:57.005352974 CEST	1.1.1.1	192.168.2.8	0x6aeb	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 12, 2024 00:47:57.005610943 CEST	1.1.1.1	192.168.2.8	0xb7fd	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.129631042 CEST	1.1.1.1	192.168.2.8	0xc82a	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.129631042 CEST	1.1.1.1	192.168.2.8	0xc82a	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.129647017 CEST	1.1.1.1	192.168.2.8	0xee41	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 12, 2024 00:47:57.413554907 CEST	1.1.1.1	192.168.2.8	0x7404	No error (0)	www.redcrossblood.org	san.redcrossblood.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:57.423638105 CEST	1.1.1.1	192.168.2.8	0x1074	No error (0)	www.redcrossblood.org	san.redcrossblood.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:57.828644991 CEST	1.1.1.1	192.168.2.8	0x12e7	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:57.829324961 CEST	1.1.1.1	192.168.2.8	0x9339	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:57.841650009 CEST	1.1.1.1	192.168.2.8	0x6b5e	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:57.841650009 CEST	1.1.1.1	192.168.2.8	0x6b5e	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:57.841650009 CEST	1.1.1.1	192.168.2.8	0x6b5e	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:57.841650009 CEST	1.1.1.1	192.168.2.8	0x6b5e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		108.128.136.169	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.841650009 CEST	1.1.1.1	192.168.2.8	0x6b5e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.162.222	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.841650009 CEST	1.1.1.1	192.168.2.8	0x6b5e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.114.115	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.841650009 CEST	1.1.1.1	192.168.2.8	0x6b5e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.203.182.68	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.841650009 CEST	1.1.1.1	192.168.2.8	0x6b5e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.39.134	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.841650009 CEST	1.1.1.1	192.168.2.8	0x6b5e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.16.68.25	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.841650009 CEST	1.1.1.1	192.168.2.8	0x6b5e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		3.254.33.149	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.841650009 CEST	1.1.1.1	192.168.2.8	0x6b5e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.213.85.12	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:57.842386007 CEST	1.1.1.1	192.168.2.8	0x7376	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:57.842386007 CEST	1.1.1.1	192.168.2.8	0x7376	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:57.842386007 CEST	1.1.1.1	192.168.2.8	0x7376	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:57.884174109 CEST	1.1.1.1	192.168.2.8	0x5326	No error (0)	resources.crowdtwist.com	prod.crowdtwist.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:57.884174109 CEST	1.1.1.1	192.168.2.8	0x5326	No error (0)	prod.crowdtwist.com	prod.crowdtwist.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:57.897536993 CEST	1.1.1.1	192.168.2.8	0xf6c2	No error (0)	resources.crowdtwist.com	prod.crowdtwist.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:57.897536993 CEST	1.1.1.1	192.168.2.8	0xf6c2	No error (0)	prod.crowdtwist.com	prod.crowdtwist.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.187676907 CEST	1.1.1.1	192.168.2.8	0xade	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.187676907 CEST	1.1.1.1	192.168.2.8	0xade	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.187737942 CEST	1.1.1.1	192.168.2.8	0x34c2	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.187737942 CEST	1.1.1.1	192.168.2.8	0x34c2	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 12, 2024 00:47:59.187737942 CEST	1.1.1.1	192.168.2.8	0x34c2	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 12, 2024 00:47:59.750009060 CEST	1.1.1.1	192.168.2.8	0xd955	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.750009060 CEST	1.1.1.1	192.168.2.8	0xd955	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.750502110 CEST	1.1.1.1	192.168.2.8	0x90f8	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.750502110 CEST	1.1.1.1	192.168.2.8	0x90f8	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.774238110 CEST	1.1.1.1	192.168.2.8	0xbdf8	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.774440050 CEST	1.1.1.1	192.168.2.8	0xe02d	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.788255930 CEST	1.1.1.1	192.168.2.8	0xcc42	No error (0)	redcross.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.788255930 CEST	1.1.1.1	192.168.2.8	0xcc42	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.788255930 CEST	1.1.1.1	192.168.2.8	0xcc42	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.788255930 CEST	1.1.1.1	192.168.2.8	0xcc42	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.247.205.49	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.788255930 CEST	1.1.1.1	192.168.2.8	0xcc42	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.162.222	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.788255930 CEST	1.1.1.1	192.168.2.8	0xcc42	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.156.76	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.788255930 CEST	1.1.1.1	192.168.2.8	0xcc42	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.16.68.25	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.788255930 CEST	1.1.1.1	192.168.2.8	0xcc42	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.96.94	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.788255930 CEST	1.1.1.1	192.168.2.8	0xcc42	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.114.115	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.788255930 CEST	1.1.1.1	192.168.2.8	0xcc42	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.213.85.12	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.788255930 CEST	1.1.1.1	192.168.2.8	0xcc42	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.39.134	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.792891979 CEST	1.1.1.1	192.168.2.8	0xf642	No error (0)	redcross.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.792891979 CEST	1.1.1.1	192.168.2.8	0xf642	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.792891979 CEST	1.1.1.1	192.168.2.8	0xf642	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.793190002 CEST	1.1.1.1	192.168.2.8	0x65c1	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.793190002 CEST	1.1.1.1	192.168.2.8	0x65c1	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.793190002 CEST	1.1.1.1	192.168.2.8	0x65c1	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.793190002 CEST	1.1.1.1	192.168.2.8	0x65c1	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.0.81	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.793190002 CEST	1.1.1.1	192.168.2.8	0x65c1	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.162.222	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.793190002 CEST	1.1.1.1	192.168.2.8	0x65c1	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.246.173.101	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.793190002 CEST	1.1.1.1	192.168.2.8	0x65c1	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.156.76	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.793190002 CEST	1.1.1.1	192.168.2.8	0x65c1	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		3.254.33.149	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.793190002 CEST	1.1.1.1	192.168.2.8	0x65c1	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.16.68.25	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.793190002 CEST	1.1.1.1	192.168.2.8	0x65c1	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.114.115	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.793190002 CEST	1.1.1.1	192.168.2.8	0x65c1	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.39.134	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.793798923 CEST	1.1.1.1	192.168.2.8	0xb57f	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.793798923 CEST	1.1.1.1	192.168.2.8	0xb57f	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.793798923 CEST	1.1.1.1	192.168.2.8	0xb57f	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.815998077 CEST	1.1.1.1	192.168.2.8	0x7557	No error (0)	smetrics.redcross.org	redcross.org.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.836563110 CEST	1.1.1.1	192.168.2.8	0x3d9c	No error (0)	smetrics.redcross.org	redcross.org.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.836563110 CEST	1.1.1.1	192.168.2.8	0x3d9c	No error (0)	redcross.org.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.836563110 CEST	1.1.1.1	192.168.2.8	0x3d9c	No error (0)	redcross.org.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.836563110 CEST	1.1.1.1	192.168.2.8	0x3d9c	No error (0)	redcross.org.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:47:59.874806881 CEST	1.1.1.1	192.168.2.8	0x125b	No error (0)	resources.crowdtwist.com	prod.crowdtwist.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.874806881 CEST	1.1.1.1	192.168.2.8	0x125b	No error (0)	prod.crowdtwist.com	prod.crowdtwist.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.967627048 CEST	1.1.1.1	192.168.2.8	0x3c26	No error (0)	resources.crowdtwist.com	prod.crowdtwist.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:47:59.967627048 CEST	1.1.1.1	192.168.2.8	0x3c26	No error (0)	prod.crowdtwist.com	prod.crowdtwist.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:00.606122017 CEST	1.1.1.1	192.168.2.8	0x8395	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:00.606766939 CEST	1.1.1.1	192.168.2.8	0x611d	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.667710066 CEST	1.1.1.1	192.168.2.8	0x49b9	No error (0)	td.doubleclick.net		142.250.185.226	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:01.668803930 CEST	1.1.1.1	192.168.2.8	0x8252	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.668803930 CEST	1.1.1.1	192.168.2.8	0x8252	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.668803930 CEST	1.1.1.1	192.168.2.8	0x8252	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.668883085 CEST	1.1.1.1	192.168.2.8	0x1821	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.668883085 CEST	1.1.1.1	192.168.2.8	0x1821	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.668883085 CEST	1.1.1.1	192.168.2.8	0x1821	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.670430899 CEST	1.1.1.1	192.168.2.8	0x24e3	No error (0)	4706068.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.670497894 CEST	1.1.1.1	192.168.2.8	0x7909	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.670639038 CEST	1.1.1.1	192.168.2.8	0xdfc7	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.682485104 CEST	1.1.1.1	192.168.2.8	0x8f46	No error (0)	4706068.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.682485104 CEST	1.1.1.1	192.168.2.8	0x8f46	No error (0)	dart.l.doubleclick.net		142.250.186.38	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:01.696470976 CEST	1.1.1.1	192.168.2.8	0xf7d6	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.696470976 CEST	1.1.1.1	192.168.2.8	0xf7d6	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 12, 2024 00:48:01.696470976 CEST	1.1.1.1	192.168.2.8	0xf7d6	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 12, 2024 00:48:01.696527004 CEST	1.1.1.1	192.168.2.8	0xfcfd	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.696527004 CEST	1.1.1.1	192.168.2.8	0xfcfd	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:01.697313070 CEST	1.1.1.1	192.168.2.8	0xcd6a	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.697313070 CEST	1.1.1.1	192.168.2.8	0xcd6a	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.697758913 CEST	1.1.1.1	192.168.2.8	0x1f26	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.697758913 CEST	1.1.1.1	192.168.2.8	0x1f26	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.700424910 CEST	1.1.1.1	192.168.2.8	0x814a	No error (0)	smetrics.redcross.org	redcross.org.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.744442940 CEST	1.1.1.1	192.168.2.8	0xfb47	No error (0)	smetrics.redcross.org	redcross.org.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.744442940 CEST	1.1.1.1	192.168.2.8	0xfb47	No error (0)	redcross.org.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:01.744442940 CEST	1.1.1.1	192.168.2.8	0xfb47	No error (0)	redcross.org.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:01.744442940 CEST	1.1.1.1	192.168.2.8	0xfb47	No error (0)	redcross.org.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:01.756660938 CEST	1.1.1.1	192.168.2.8	0xb692	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:01.756674051 CEST	1.1.1.1	192.168.2.8	0x35ae	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:02.369213104 CEST	1.1.1.1	192.168.2.8	0x4df1	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:02.369213104 CEST	1.1.1.1	192.168.2.8	0x4df1	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:02.369213104 CEST	1.1.1.1	192.168.2.8	0x4df1	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:02.369213104 CEST	1.1.1.1	192.168.2.8	0x4df1	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:02.369638920 CEST	1.1.1.1	192.168.2.8	0x3bd1	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:03.909090042 CEST	1.1.1.1	192.168.2.8	0xd4ed	No error (0)	pixel.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:03.909454107 CEST	1.1.1.1	192.168.2.8	0x6f8d	No error (0)	pixel.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:03.909454107 CEST	1.1.1.1	192.168.2.8	0x6f8d	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:03.909454107 CEST	1.1.1.1	192.168.2.8	0x6f8d	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:03.909454107 CEST	1.1.1.1	192.168.2.8	0x6f8d	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:03.912026882 CEST	1.1.1.1	192.168.2.8	0x3c6	No error (0)	adservice.google.com		142.250.184.226	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:03.916812897 CEST	1.1.1.1	192.168.2.8	0x89a5	No error (0)	adservice.google.com			65	IN (0x0001)	false
Oct 12, 2024 00:48:03.924442053 CEST	1.1.1.1	192.168.2.8	0x75e5	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:03.924442053 CEST	1.1.1.1	192.168.2.8	0x75e5	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 12, 2024 00:48:03.924442053 CEST	1.1.1.1	192.168.2.8	0x75e5	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 12, 2024 00:48:03.924740076 CEST	1.1.1.1	192.168.2.8	0xb957	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:03.924740076 CEST	1.1.1.1	192.168.2.8	0xb957	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:03.929076910 CEST	1.1.1.1	192.168.2.8	0xa66b	No error (0)	origin.acuityplatform.com	origin.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:03.935424089 CEST	1.1.1.1	192.168.2.8	0xe7a0	No error (0)	origin.acuityplatform.com	origin.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:03.982513905 CEST	1.1.1.1	192.168.2.8	0x2985	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:03.983160019 CEST	1.1.1.1	192.168.2.8	0xe0d0	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.280147076 CEST	1.1.1.1	192.168.2.8	0x4c48	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.280147076 CEST	1.1.1.1	192.168.2.8	0x4c48	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.280147076 CEST	1.1.1.1	192.168.2.8	0x4c48	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.280147076 CEST	1.1.1.1	192.168.2.8	0x4c48	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.329869032 CEST	1.1.1.1	192.168.2.8	0xebbd	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.338205099 CEST	1.1.1.1	192.168.2.8	0x1084	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.338205099 CEST	1.1.1.1	192.168.2.8	0x1084	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.338205099 CEST	1.1.1.1	192.168.2.8	0x1084	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.338205099 CEST	1.1.1.1	192.168.2.8	0x1084	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.363584042 CEST	1.1.1.1	192.168.2.8	0x2d5c	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.502559900 CEST	1.1.1.1	192.168.2.8	0xdd4c	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.502559900 CEST	1.1.1.1	192.168.2.8	0xdd4c	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.502559900 CEST	1.1.1.1	192.168.2.8	0xdd4c	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.502559900 CEST	1.1.1.1	192.168.2.8	0xdd4c	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.502559900 CEST	1.1.1.1	192.168.2.8	0xdd4c	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.502559900 CEST	1.1.1.1	192.168.2.8	0xdd4c	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.502559900 CEST	1.1.1.1	192.168.2.8	0xdd4c	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.502559900 CEST	1.1.1.1	192.168.2.8	0xdd4c	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.502559900 CEST	1.1.1.1	192.168.2.8	0xdd4c	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.502559900 CEST	1.1.1.1	192.168.2.8	0xdd4c	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.502559900 CEST	1.1.1.1	192.168.2.8	0xdd4c	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.502559900 CEST	1.1.1.1	192.168.2.8	0xdd4c	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.502559900 CEST	1.1.1.1	192.168.2.8	0xdd4c	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.504004002 CEST	1.1.1.1	192.168.2.8	0xfe3a	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.504004002 CEST	1.1.1.1	192.168.2.8	0xfe3a	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.504682064 CEST	1.1.1.1	192.168.2.8	0x44dd	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 12, 2024 00:48:04.507456064 CEST	1.1.1.1	192.168.2.8	0x7e15	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.520600080 CEST	1.1.1.1	192.168.2.8	0x7d4f	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.520600080 CEST	1.1.1.1	192.168.2.8	0x7d4f	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.520600080 CEST	1.1.1.1	192.168.2.8	0x7d4f	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.521363974 CEST	1.1.1.1	192.168.2.8	0xa7fc	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.521539927 CEST	1.1.1.1	192.168.2.8	0xa383	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.521539927 CEST	1.1.1.1	192.168.2.8	0xa383	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.521539927 CEST	1.1.1.1	192.168.2.8	0xa383	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.678714037 CEST	1.1.1.1	192.168.2.8	0x8f6f	No error (0)	pixel.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.678714037 CEST	1.1.1.1	192.168.2.8	0x8f6f	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.678714037 CEST	1.1.1.1	192.168.2.8	0x8f6f	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.678714037 CEST	1.1.1.1	192.168.2.8	0x8f6f	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:04.679071903 CEST	1.1.1.1	192.168.2.8	0xafac	No error (0)	pixel.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.968027115 CEST	1.1.1.1	192.168.2.8	0x9d39	No error (0)	origin.acuityplatform.com	origin.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:04.978558064 CEST	1.1.1.1	192.168.2.8	0xd08f	No error (0)	origin.acuityplatform.com	origin.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:05.024323940 CEST	1.1.1.1	192.168.2.8	0xbbc9	No error (0)	adservice.google.com		216.58.206.34	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:05.025438070 CEST	1.1.1.1	192.168.2.8	0x108	No error (0)	adservice.google.com			65	IN (0x0001)	false
Oct 12, 2024 00:48:05.103050947 CEST	1.1.1.1	192.168.2.8	0xdbf7	No error (0)	ad.doubleclick.net		172.217.16.198	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:05.104418039 CEST	1.1.1.1	192.168.2.8	0x411c	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 12, 2024 00:48:05.117651939 CEST	1.1.1.1	192.168.2.8	0x8d5d	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:05.117651939 CEST	1.1.1.1	192.168.2.8	0x8d5d	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:05.117651939 CEST	1.1.1.1	192.168.2.8	0x8d5d	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:05.239360094 CEST	1.1.1.1	192.168.2.8	0xa3b0	No error (0)	cdn.branch.io		108.138.26.113	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:05.239360094 CEST	1.1.1.1	192.168.2.8	0xa3b0	No error (0)	cdn.branch.io		108.138.26.87	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:05.239360094 CEST	1.1.1.1	192.168.2.8	0xa3b0	No error (0)	cdn.branch.io		108.138.26.116	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:05.239360094 CEST	1.1.1.1	192.168.2.8	0xa3b0	No error (0)	cdn.branch.io		108.138.26.79	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:06.360538006 CEST	1.1.1.1	192.168.2.8	0xa96d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:06.360538006 CEST	1.1.1.1	192.168.2.8	0xa96d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:06.743753910 CEST	1.1.1.1	192.168.2.8	0xeeed	No error (0)	e.acuityplatform.com		154.59.122.94	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:06.824376106 CEST	1.1.1.1	192.168.2.8	0xf0b7	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:06.824376106 CEST	1.1.1.1	192.168.2.8	0xf0b7	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:06.824668884 CEST	1.1.1.1	192.168.2.8	0xbc6c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:06.838938951 CEST	1.1.1.1	192.168.2.8	0x40d0	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:06.838938951 CEST	1.1.1.1	192.168.2.8	0x40d0	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:06.935472012 CEST	1.1.1.1	192.168.2.8	0x272e	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:06.935472012 CEST	1.1.1.1	192.168.2.8	0x272e	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:06.935472012 CEST	1.1.1.1	192.168.2.8	0x272e	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:06.935472012 CEST	1.1.1.1	192.168.2.8	0x272e	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:06.937640905 CEST	1.1.1.1	192.168.2.8	0x8645	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:07.260114908 CEST	1.1.1.1	192.168.2.8	0xf707	No error (0)	app.link		99.86.4.58	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.260114908 CEST	1.1.1.1	192.168.2.8	0xf707	No error (0)	app.link		99.86.4.74	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.260114908 CEST	1.1.1.1	192.168.2.8	0xf707	No error (0)	app.link		99.86.4.77	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.260114908 CEST	1.1.1.1	192.168.2.8	0xf707	No error (0)	app.link		99.86.4.94	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.351994038 CEST	1.1.1.1	192.168.2.8	0xc09d	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:07.351994038 CEST	1.1.1.1	192.168.2.8	0xc09d	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:07.351994038 CEST	1.1.1.1	192.168.2.8	0xc09d	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.353575945 CEST	1.1.1.1	192.168.2.8	0x9098	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:07.353575945 CEST	1.1.1.1	192.168.2.8	0x9098	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:07.383301973 CEST	1.1.1.1	192.168.2.8	0xd612	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:07.384212017 CEST	1.1.1.1	192.168.2.8	0x3eb1	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:07.385370970 CEST	1.1.1.1	192.168.2.8	0x842e	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.385370970 CEST	1.1.1.1	192.168.2.8	0x842e	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.386230946 CEST	1.1.1.1	192.168.2.8	0x7f51	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 12, 2024 00:48:07.387144089 CEST	1.1.1.1	192.168.2.8	0x46d8	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:07.387144089 CEST	1.1.1.1	192.168.2.8	0x46d8	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.387144089 CEST	1.1.1.1	192.168.2.8	0x46d8	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.399185896 CEST	1.1.1.1	192.168.2.8	0x3ef8	No error (0)	ad.doubleclick.net		142.250.184.230	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.399198055 CEST	1.1.1.1	192.168.2.8	0x43a9	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 12, 2024 00:48:07.401067019 CEST	1.1.1.1	192.168.2.8	0x4d9d	No error (0)	cdn.branch.io		18.239.50.124	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.401067019 CEST	1.1.1.1	192.168.2.8	0x4d9d	No error (0)	cdn.branch.io		18.239.50.55	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.401067019 CEST	1.1.1.1	192.168.2.8	0x4d9d	No error (0)	cdn.branch.io		18.239.50.112	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.401067019 CEST	1.1.1.1	192.168.2.8	0x4d9d	No error (0)	cdn.branch.io		18.239.50.16	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.577666998 CEST	1.1.1.1	192.168.2.8	0xa821	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.578460932 CEST	1.1.1.1	192.168.2.8	0xadd	Name error (3)	sync.search.spotxchange.com	none	none	65	IN (0x0001)	false
Oct 12, 2024 00:48:07.585760117 CEST	1.1.1.1	192.168.2.8	0xab45	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.795500994 CEST	1.1.1.1	192.168.2.8	0x9f66	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:07.796082020 CEST	1.1.1.1	192.168.2.8	0xe8ee	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:07.796082020 CEST	1.1.1.1	192.168.2.8	0xe8ee	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.844402075 CEST	1.1.1.1	192.168.2.8	0xbfc9	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:07.844402075 CEST	1.1.1.1	192.168.2.8	0xbfc9	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.844402075 CEST	1.1.1.1	192.168.2.8	0xbfc9	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.844402075 CEST	1.1.1.1	192.168.2.8	0xbfc9	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.844402075 CEST	1.1.1.1	192.168.2.8	0xbfc9	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.844402075 CEST	1.1.1.1	192.168.2.8	0xbfc9	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.844402075 CEST	1.1.1.1	192.168.2.8	0xbfc9	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.844402075 CEST	1.1.1.1	192.168.2.8	0xbfc9	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.844402075 CEST	1.1.1.1	192.168.2.8	0xbfc9	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.844402075 CEST	1.1.1.1	192.168.2.8	0xbfc9	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.844402075 CEST	1.1.1.1	192.168.2.8	0xbfc9	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.844402075 CEST	1.1.1.1	192.168.2.8	0xbfc9	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:07.844402075 CEST	1.1.1.1	192.168.2.8	0xbfc9	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.056619883 CEST	1.1.1.1	192.168.2.8	0x9827	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.056619883 CEST	1.1.1.1	192.168.2.8	0x9827	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.070859909 CEST	1.1.1.1	192.168.2.8	0x18d9	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:08.082523108 CEST	1.1.1.1	192.168.2.8	0x6f4	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:08.082523108 CEST	1.1.1.1	192.168.2.8	0x6f4	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.418572903 CEST	1.1.1.1	192.168.2.8	0xc0a0	No error (0)	api2.branch.io		108.156.60.61	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.418572903 CEST	1.1.1.1	192.168.2.8	0xc0a0	No error (0)	api2.branch.io		108.156.60.64	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.418572903 CEST	1.1.1.1	192.168.2.8	0xc0a0	No error (0)	api2.branch.io		108.156.60.103	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.418572903 CEST	1.1.1.1	192.168.2.8	0xc0a0	No error (0)	api2.branch.io		108.156.60.57	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.958020926 CEST	1.1.1.1	192.168.2.8	0xb5f0	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:08.958020926 CEST	1.1.1.1	192.168.2.8	0xb5f0	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:08.958020926 CEST	1.1.1.1	192.168.2.8	0xb5f0	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.958657980 CEST	1.1.1.1	192.168.2.8	0xe89d	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:08.958657980 CEST	1.1.1.1	192.168.2.8	0xe89d	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:08.960879087 CEST	1.1.1.1	192.168.2.8	0x84b3	No error (0)	app.link		18.239.18.44	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.960879087 CEST	1.1.1.1	192.168.2.8	0x84b3	No error (0)	app.link		18.239.18.5	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.960879087 CEST	1.1.1.1	192.168.2.8	0x84b3	No error (0)	app.link		18.239.18.118	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:08.960879087 CEST	1.1.1.1	192.168.2.8	0x84b3	No error (0)	app.link		18.239.18.88	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:09.403877974 CEST	1.1.1.1	192.168.2.8	0xfacc	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:09.569214106 CEST	1.1.1.1	192.168.2.8	0x52de	No error (0)	api2.branch.io		108.138.26.118	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:09.569214106 CEST	1.1.1.1	192.168.2.8	0x52de	No error (0)	api2.branch.io		108.138.26.27	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:09.569214106 CEST	1.1.1.1	192.168.2.8	0x52de	No error (0)	api2.branch.io		108.138.26.129	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:09.569214106 CEST	1.1.1.1	192.168.2.8	0x52de	No error (0)	api2.branch.io		108.138.26.116	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:10.163141966 CEST	1.1.1.1	192.168.2.8	0xe063	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:10.163546085 CEST	1.1.1.1	192.168.2.8	0x4ae4	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:10.163546085 CEST	1.1.1.1	192.168.2.8	0x4ae4	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:10.163546085 CEST	1.1.1.1	192.168.2.8	0x4ae4	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:10.164263964 CEST	1.1.1.1	192.168.2.8	0xdf3d	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:10.164263964 CEST	1.1.1.1	192.168.2.8	0xdf3d	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:10.768678904 CEST	1.1.1.1	192.168.2.8	0xb9a0	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:10.768678904 CEST	1.1.1.1	192.168.2.8	0xb9a0	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:10.768678904 CEST	1.1.1.1	192.168.2.8	0xb9a0	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:10.768780947 CEST	1.1.1.1	192.168.2.8	0xff09	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:10.768780947 CEST	1.1.1.1	192.168.2.8	0xff09	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:48:18.085495949 CEST	1.1.1.1	192.168.2.8	0x2f3a	No error (0)	fls.doubleclick.net		216.58.206.70	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:21.158238888 CEST	1.1.1.1	192.168.2.8	0x9320	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:48:23.688796997 CEST	1.1.1.1	192.168.2.8	0x515c	Name error (3)	241.42.69.40.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 12, 2024 00:48:57.049674988 CEST	1.1.1.1	192.168.2.8	0xf9ab	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Oct 12, 2024 00:49:10.175019026 CEST	1.1.1.1	192.168.2.8	0x3215	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:49:10.175019026 CEST	1.1.1.1	192.168.2.8	0x3215	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2024 00:49:10.175019026 CEST	1.1.1.1	192.168.2.8	0x3215	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cdnjs.cloudflare.com

https:

dpm.demdex.net

connect.facebook.net

redcross.demdex.net

smetrics.redcross.org

td.doubleclick.net

4706068.fls.doubleclick.net

adobedc.demdex.net

pixel.mathtag.com

adservice.google.com

edge.adobedc.net

dsum-sec.casalemedia.com

ib.adnxs.com

ad.doubleclick.net

bat.bing.com

cdn.branch.io

us-u.openx.net

www.facebook.com

e.acuityplatform.com

image2.pubmatic.com

app.link

api2.branch.io

www.bing.com

js-agent.newrelic.com

bam.nr-data.net

fls.doubleclick.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49719	104.17.25.14	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:47:56 UTC	561	OUT	GET /ajax/libs/jquery/3.6.1/jquery.slim.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.redcrossblood.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:47:56 UTC	950	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 22:47:56 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"63091225-60fd" Last-Modified: Fri, 26 Aug 2022 18:34:13 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Wed, 01 Oct 2025 22:47:56 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4vXBJW71ulz8Ug9ZH8nDoL%2FkN60oIEWeJQ4vkHd4uxOOsLQpT69sz3XHvrqXSegohSxihGI3vKz87PvpAyv%2FwgckVxHnP%2FYouu%2Bo%2FhxTA2MmtrSqrR1MzQlHqW5ufCc9OV8vgprK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d1265131c644319-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 22:47:56 UTC	419	IN	Data Raw: 37 62 66 61 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 Data Ascii: 7bfa/*! jQuery v3.6.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) OpenJS Foundation a
2024-10-11 22:47:56 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 65 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 5b 5d 2c 72 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 76 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c Data Ascii: :function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(g,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,v=t.flat?function(e){return t.flat.call
2024-10-11 22:47:56 UTC	1369	IN	Data Raw: 6c 6c 28 74 68 69 73 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 45 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 45 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 45 2e 6d 61 Data Ascii: ll(this)},get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=E.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return E.each(this,e)},map:function(n){return this.pushStack(E.ma
2024-10-11 22:47:56 UTC	1369	IN	Data Raw: 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 79 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 43 Data Ascii: lainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=y.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){C
2024-10-11 22:47:56 UTC	1369	IN	Data Raw: 30 7d 2c 4c 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 74 3d 5b 5d 2c 6a 3d 74 2e 70 6f 70 2c 71 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 70 75 73 68 2c 50 3d 74 2e 73 6c 69 63 65 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 49 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 Data Ascii: 0},L={}.hasOwnProperty,t=[],j=t.pop,q=t.push,O=t.push,P=t.slice,H=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},I="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|req
2024-10-11 22:47:56 UTC	1369	IN	Data Raw: 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 52 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 Data Ascii: =/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+R+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/(
2024-10-11 22:47:56 UTC	1369	IN	Data Raw: 28 29 29 29 7b 69 66 28 63 3d 74 2c 66 3d 65 2c 31 3d 3d 3d 64 26 26 28 55 2e 74 65 73 74 28 74 29 7c 7c 5f 2e 74 65 73 74 28 74 29 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 70 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 41 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 62 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 Data Ascii: ())){if(c=t,f=e,1===d&&(U.test(t)\|\|_.test(t))){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&p.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=A)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+be(l[o]);c=l.join(",")}try{retu
2024-10-11 22:47:56 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 76 65 28 61 29 7b 72 65 74 75 72 6e 20 6c 65 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 2b 6f 2c 6c 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 70 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 Data Ascii: tion ve(a){return le(function(o){return o=+o,le(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in p=se.support={},i=se.isXML=funct
2024-10-11 22:47:56 UTC	1369	IN	Data Raw: 76 61 72 20 6e 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 5b 6e 5d 3a 5b 5d 7d 7d 29 3a 28 78 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 78 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 Data Ascii: var n=t.getElementById(e);return n?[n]:[]}}):(x.filter.ID=function(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},x.find.ID=function(e,t){if("undefined"!=typeof t
2024-10-11 22:47:56 UTC	1369	IN	Data Raw: 22 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 52 2b 22 2a 6e 61 6d 65 22 2b 52 2b 22 2a 3d 22 2b 52 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 41 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e Data Ascii: ""),e.appendChild(t),e.querySelectorAll("[name='']").length\|\|v.push("\\["+R+"name"+R+"="+R+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+A+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49723	104.17.25.14	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:47:57 UTC	385	OUT	GET /ajax/libs/jquery/3.6.1/jquery.slim.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:47:57 UTC	955	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 22:47:57 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"63091225-60fd" Last-Modified: Fri, 26 Aug 2022 18:34:13 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1 Expires: Wed, 01 Oct 2025 22:47:57 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r0QDoG5VCGx%2BoDHBs4Pfc%2BgxY25DIX1wwbBM5f16Os0dHucqAgd8Gbzv%2F4LUS4LIUtAUphnmtYxHycYzzchjbImVeqsxUZYfmpsijHsJmOT6P1%2FDRSMYcoxD1wM9e6T2U7Tr3MRc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d126519add90f7d-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 22:47:57 UTC	414	IN	Data Raw: 33 39 37 65 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 Data Ascii: 397e/*! jQuery v3.6.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) OpenJS Foundation a
2024-10-11 22:47:57 UTC	1369	IN	Data Raw: 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 65 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 5b 5d 2c 72 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 76 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 Data Ascii: e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(g,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,v=t.flat?function(e){return t.flat
2024-10-11 22:47:57 UTC	1369	IN	Data Raw: 20 73 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 45 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 45 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b Data Ascii: s.call(this)},get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=E.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return E.each(this,e)},map:function(n){return this.pushStack
2024-10-11 22:47:57 UTC	1369	IN	Data Raw: 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 79 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: },isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=y.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t
2024-10-11 22:47:57 UTC	1369	IN	Data Raw: 3d 21 30 29 2c 30 7d 2c 4c 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 74 3d 5b 5d 2c 6a 3d 74 2e 70 6f 70 2c 71 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 70 75 73 68 2c 50 3d 74 2e 73 6c 69 63 65 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 49 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c Data Ascii: =!0),0},L={}.hasOwnProperty,t=[],j=t.pop,q=t.push,O=t.push,P=t.slice,H=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},I="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonl
2024-10-11 22:47:57 UTC	1369	IN	Data Raw: 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 52 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c Data Ascii: \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+R+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},
2024-10-11 22:47:57 UTC	1369	IN	Data Raw: 72 43 61 73 65 28 29 29 29 7b 69 66 28 63 3d 74 2c 66 3d 65 2c 31 3d 3d 3d 64 26 26 28 55 2e 74 65 73 74 28 74 29 7c 7c 5f 2e 74 65 73 74 28 74 29 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 70 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 41 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 62 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 Data Ascii: rCase())){if(c=t,f=e,1===d&&(U.test(t)\|\|_.test(t))){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&p.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=A)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+be(l[o]);c=l.join(",")}try
2024-10-11 22:47:57 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 76 65 28 61 29 7b 72 65 74 75 72 6e 20 6c 65 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 2b 6f 2c 6c 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 70 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d Data Ascii: }function ve(a){return le(function(o){return o=+o,le(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in p=se.support={},i=se.isXML=
2024-10-11 22:47:57 UTC	1369	IN	Data Raw: 26 26 45 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 5b 6e 5d 3a 5b 5d 7d 7d 29 3a 28 78 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 78 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 Data Ascii: &&E){var n=t.getElementById(e);return n?[n]:[]}}):(x.filter.ID=function(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},x.find.ID=function(e,t){if("undefined"!=typ
2024-10-11 22:47:57 UTC	1369	IN	Data Raw: 61 6d 65 22 2c 22 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 52 2b 22 2a 6e 61 6d 65 22 2b 52 2b 22 2a 3d 22 2b 52 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 41 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 Data Ascii: ame",""),e.appendChild(t),e.querySelectorAll("[name='']").length\|\|v.push("\\["+R+"name"+R+"="+R+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+A+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49724	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:47:58 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-11 22:47:58 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=64645 Date: Fri, 11 Oct 2024 22:47:58 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49727	108.128.136.169	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:47:58 UTC	740	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=723A22C757518E2C7F000101%40AdobeOrg&d_nsid=0&ts=1728686876789 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.redcrossblood.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:47:58 UTC	956	IN	HTTP/1.1 302 Found Date: Fri, 11 Oct 2024 22:47:58 GMT Content-Length: 0 Connection: close X-TID: GlzWkBOUR/s= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.redcrossblood.org Vary: Origin Access-Control-Allow-Credentials: true Location: https://dpm.demdex.net/id/rd?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=723A22C757518E2C7F000101%40AdobeOrg&d_nsid=0&ts=1728686876789 DCS: dcs-prod-irl1-1-v066-0c3536412.edge-irl1.demdex.com 0 ms set-cookie: demdex=56867263963802033431630789245748728165; Max-Age=15552000; Expires=Wed, 09 Apr 2025 22:47:58 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49730	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:47:59 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-11 22:47:59 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=64675 Date: Fri, 11 Oct 2024 22:47:59 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-11 22:47:59 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49731	108.128.136.169	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:47:59 UTC	798	OUT	GET /id/rd?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=723A22C757518E2C7F000101%40AdobeOrg&d_nsid=0&ts=1728686876789 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.redcrossblood.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56867263963802033431630789245748728165
2024-10-11 22:47:59 UTC	827	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 22:47:59 GMT Content-Type: application/json;charset=utf-8 Content-Length: 2311 Connection: close X-TID: y45naIVaSxw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.redcrossblood.org Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-1-v066-01fbc30c3.edge-irl1.demdex.com 2 ms set-cookie: demdex=56867263963802033431630789245748728165; Max-Age=15552000; Expires=Wed, 09 Apr 2025 22:47:59 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-11 22:47:59 UTC	2311	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 35 36 35 33 33 34 37 39 31 31 33 33 36 36 36 38 38 35 30 31 36 30 32 38 30 32 34 33 32 38 39 31 33 30 33 35 37 36 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"56533479113366688501602802432891303576","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49734	157.240.0.6	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:47:59 UTC	542	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:00 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-11 22:48:00 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-11 22:48:00 UTC	905	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-11 22:48:00 UTC	15479	IN	Data Raw: 45 54 48 45 52 0a 2a 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 54 4f 52 54 20 4f 52 20 4f 54 48 45 52 57 49 53 45 2c 20 41 52 49 53 49 4e 47 20 46 52 4f 4d 2c 20 4f 55 54 20 4f 46 20 4f 52 20 49 4e 0a 2a 20 43 4f 4e 4e 45 43 54 49 4f 4e 20 57 49 54 48 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 4f 52 20 54 48 45 20 55 53 45 20 4f 52 20 4f 54 48 45 52 20 44 45 41 4c 49 4e 47 53 20 49 4e 20 54 48 45 20 53 4f 46 54 57 41 52 45 2e 0a 2a 2f 0a 66 62 71 2e 76 65 72 73 69 6f 6e 3d 22 32 2e 39 2e 31 37 30 22 3b 0a 66 62 71 2e 5f 72 65 6c 65 61 73 65 53 65 67 6d 65 6e 74 20 3d 20 22 73 74 61 62 6c 65 22 3b 0a 66 62 71 2e 70 65 6e 64 69 6e 67 43 6f 6e 66 69 67 73 3d 5b 22 67 6c 6f 62 61 6c 5f 63 6f 6e 66 69 67 22 5d 3b 0a 66 62 Data Ascii: ETHER* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.*/fbq.version="2.9.170";fbq._releaseSegment = "stable";fbq.pendingConfigs=["global_config"];fb
2024-10-11 22:48:00 UTC	1500	IN	Data Raw: 29 3b 69 66 28 68 21 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 63 2c 65 76 65 6e 74 5f 74 79 70 65 3a 64 2c 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3a 68 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 22 43 4f 4e 53 54 41 4e 54 5f 56 41 4c 55 45 22 2c 69 64 3a 62 7d 7d 69 66 28 66 3d 3d 3d 22 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 22 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 63 2c 65 76 65 6e 74 5f 74 79 70 65 3a 64 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 22 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 22 2c 69 64 3a 62 7d 3b 69 66 28 66 3d 3d 3d 22 47 54 4d 22 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 63 2c 65 76 65 6e 74 5f 74 79 70 65 3a 64 2c 65 78 74 72 61 63 74 6f 72 Data Ascii: );if(h!=null)return{domain_uri:c,event_type:d,extractor_config:h,extractor_type:"CONSTANT_VALUE",id:b}}if(f==="GLOBAL_VARIABLE")return{domain_uri:c,event_type:d,extractor_type:"GLOBAL_VARIABLE",id:b};if(f==="GTM")return{domain_uri:c,event_type:d,extractor
2024-10-11 22:48:00 UTC	14884	IN	Data Raw: 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 66 69 6c 74 65 72 2c 64 3d 62 2e 6d 61 70 2c 65 3d 62 2e 72 65 64 75 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 72 65 Data Ascii: Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.filter,d=b.map,e=b.reduce;function g(a){re
2024-10-11 22:48:00 UTC	1500	IN	Data Raw: 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 52 65 73 6f 6c 76 65 4c 69 6e 6b 22 29 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 69 78 65 6c 43 6f 6f 6b 69 65 55 74 69 6c 73 22 29 3b 76 61 72 20 77 3d 73 2e 43 4c 49 43 4b 5f 49 44 5f 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 Data Ascii: s("SignalsFBEventsResolveLink");s=f.getFbeventsModules("SignalsPixelCookieUtils");var w=s.CLICK_ID_PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT
2024-10-11 22:48:00 UTC	14884	IN	Data Raw: 65 72 49 6e 74 65 67 72 61 74 69 6f 6e 73 3a 5b 22 61 75 74 6f 6d 61 74 69 63 6d 61 74 63 68 69 6e 67 66 6f 72 70 61 72 74 6e 65 72 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 5d 2c 43 6f 6d 6d 6f 6e 49 6e 63 6c 75 64 65 73 3a 5b 22 63 6f 6d 6d 6f 6e 69 6e 63 6c 75 64 65 73 22 5d 2c 44 65 66 61 75 6c 74 43 75 73 74 6f 6d 44 61 74 61 3a 5b 22 64 65 66 61 75 6c 74 63 75 73 74 6f 6d 64 61 74 61 22 5d 2c 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 3a 5b 22 63 6f 6f 6b 69 65 22 5d 2c 49 57 4c 42 6f 6f 74 73 74 72 61 70 70 65 72 3a 5b 22 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 5d 2c 49 57 4c 50 61 72 61 6d 65 74 65 72 73 3a 5b 22 69 77 6c 70 61 72 61 6d 65 74 65 72 73 22 5d 2c 45 53 54 52 75 6c 65 45 6e 67 69 6e 65 3a 5b 22 65 73 74 72 75 6c 65 65 6e Data Ascii: erIntegrations:["automaticmatchingforpartnerintegrations"],CommonIncludes:["commonincludes"],DefaultCustomData:["defaultcustomdata"],FirstPartyCookies:["cookie"],IWLBootstrapper:["iwlbootstrapper"],IWLParameters:["iwlparameters"],ESTRuleEngine:["estruleen
2024-10-11 22:48:00 UTC	1500	IN	Data Raw: 6c 21 3d 6e 75 6c 6c 3f 5b 7b 70 69 78 65 6c 3a 6b 2c 74 61 72 67 65 74 3a 6c 7d 5d 3a 6e 75 6c 6c 7d 6c 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 67 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 54 69 6d 69 6e 67 73 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 Data Ascii: l!=null?[{pixel:k,target:l}]:null}l.exports=new a(g)})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGetTimingsEvent",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbevents
2024-10-11 22:48:00 UTC	14884	IN	Data Raw: 29 7d 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 6e 28 74 68 69 73 2c 63 29 7d 68 28 63 2c 5b 7b 6b 65 79 3a 22 73 65 74 47 75 61 72 64 72 61 69 6c 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 64 28 63 2c 62 29 3b 69 66 28 63 21 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 5f 67 75 61 72 64 72 61 69 6c 73 3d 63 3b 63 3d 21 30 3b 76 61 72 20 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 68 3d 74 68 69 73 2e 5f 67 75 61 72 64 72 61 69 6c 73 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 69 3b 21 28 63 3d 28 69 3d 68 2e 6e 65 78 74 28 29 29 2e 64 Data Ascii: )}c=function(){function c(){n(this,c)}h(c,[{key:"setGuardrails",value:function(c){c=d(c,b);if(c!=null){this._guardrails=c;c=!0;var e=!1,f=void 0;try{for(var h=this._guardrails[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),i;!(c=(i=h.next()).d
2024-10-11 22:48:00 UTC	1491	IN	Data Raw: 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 7d 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 21 3d 6e 75 6c 6c 26 26 61 2e 61 70 70 65 6e 64 28 22 68 6d 65 22 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 29 2c 61 2e 61 70 70 65 6e 64 28 22 65 78 5f 6d 22 2c 66 2e 6a 6f 69 6e 28 22 2c 22 29 29 29 7d 7d 5d 29 3b 72 65 Data Ascii: ion(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null}),function(a){return a!=null});f.length>0&&(this.moduleEncodings.hash!=null&&a.append("hme",this.moduleEncodings.hash),a.append("ex_m",f.join(",")))}}]);re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49739	54.77.0.81	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:00 UTC	533	OUT	GET /id/rd?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=723A22C757518E2C7F000101%40AdobeOrg&d_nsid=0&ts=1728686876789 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56867263963802033431630789245748728165
2024-10-11 22:48:00 UTC	713	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 22:48:00 GMT Content-Type: application/json;charset=utf-8 Content-Length: 2311 Connection: close X-TID: Go0tH/l6T4g= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-irl1-1-v066-0cf635aa8.edge-irl1.demdex.com 2 ms set-cookie: demdex=56867263963802033431630789245748728165; Max-Age=15552000; Expires=Wed, 09 Apr 2025 22:48:00 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-11 22:48:00 UTC	2311	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 35 36 35 33 33 34 37 39 31 31 33 33 36 36 36 38 38 35 30 31 36 30 32 38 30 32 34 33 32 38 39 31 33 30 33 35 37 36 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"56533479113366688501602802432891303576","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49738	34.247.205.49	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:00 UTC	761	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: redcross.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56867263963802033431630789245748728165
2024-10-11 22:48:00 UTC	607	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 22:48:00 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: 5G+XfwLwRA4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Thu, 10 Oct 2024 10:02:55 GMT DCS: dcs-prod-irl1-2-v066-08cad5d87.edge-irl1.demdex.com 0 ms
2024-10-11 22:48:00 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49740	63.140.62.27	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:00 UTC	749	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=723A22C757518E2C7F000101%40AdobeOrg&mid=56533479113366688501602802432891303576&ts=1728686878713 HTTP/1.1 Host: smetrics.redcross.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.redcrossblood.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:00 UTC	679	IN	HTTP/1.1 200 OK access-control-allow-origin: https://www.redcrossblood.org access-control-allow-credentials: true date: Fri, 11 Oct 2024 22:48:00 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C56533479113366688501602802432891303576; Path=/; Domain=redcross.org; Max-Age=63072000; Expires=Sun, 11 Oct 2026 22:48:48 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-10-11 22:48:00 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 35 36 35 33 33 34 37 39 31 31 33 33 36 36 36 38 38 35 30 31 36 30 32 38 30 32 34 33 32 38 39 31 33 30 33 35 37 36 22 7d Data Ascii: {"mid":"56533479113366688501602802432891303576"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49748	142.250.185.226	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:02 UTC	1252	OUT	GET /td/fls/rul/activityi;fledge=1;src=4706068;type=rcbnew;cat=rcbne0;ord=4722219042743;npa=0;auiddc=1616239341.1728686880;ps=1;pcor=2078001472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a90v9189992675za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101686685;epver=2;~oref=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:02 UTC	795	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 11 Oct 2024 22:48:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 11-Oct-2024 23:03:02 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-11 22:48:02 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-10-11 22:48:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49751	142.250.186.38	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:02 UTC	1241	OUT	GET /activityi;src=4706068;type=rcbnew;cat=rcbne0;ord=4722219042743;npa=0;auiddc=1616239341.1728686880;ps=1;pcor=2078001472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a90v9189992675za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101686685;epver=2;~oref=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404? HTTP/1.1 Host: 4706068.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:02 UTC	1210	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 11 Oct 2024 22:48:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://4706068.fls.doubleclick.net/activityi;dc_pre=CP_jvLy0h4kDFXiK_Qcdcq0Gig;src=4706068;type=rcbnew;cat=rcbne0;ord=4722219042743;npa=0;auiddc=1616239341.1728686880;ps=1;pcor=2078001472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a90v9189992675za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101686685;epver=2;~oref=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49753	157.240.251.9	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:02 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:02 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-11 22:48:02 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-11 22:48:02 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-11 22:48:02 UTC	14681	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-11 22:48:02 UTC	16384	IN	Data Raw: 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 Data Ascii: c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="objec
2024-10-11 22:48:02 UTC	16384	IN	Data Raw: 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 Data Ascii: k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})()
2024-10-11 22:48:02 UTC	16384	IN	Data Raw: 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 68 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 67 3d 68 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 3f 5b 61 2c 63 2c 6a 2c 66 2c 67 5d 3a 6e 75 6c 6c 7d 63 3d 6e 65 77 20 61 28 67 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 63 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 Data Ascii: )==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"undefined":i(h))==="object"&&(g=h);return a!=null&&c!=null?[a,c,j,f,g]:null}c=new a(g);l.exports=c})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered(
2024-10-11 22:48:02 UTC	1702	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 68 2c 61 29 3f 68 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 61 29 3f 76 6f 69 64 20 30 3a 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 Data Ascii: unction p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.prototype.hasOwnProperty.call(h,a)?h[a]:a}function r(a){if(typeof a==="string")return a;if(typeof a==="number")return isNaN(a)?void 0:a;try{return JSON.string
2024-10-11 22:48:02 UTC	14682	IN	Data Raw: 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 7d 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 21 3d 6e 75 6c 6c 26 26 61 2e 61 70 70 65 6e 64 28 22 68 6d 65 22 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 29 2c 61 2e 61 70 70 65 6e 64 28 22 65 78 5f 6d 22 2c 66 2e 6a 6f 69 6e 28 22 2c 22 29 29 29 7d 7d 5d 29 3b 72 65 Data Ascii: ion(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null}),function(a){return a!=null});f.length>0&&(this.moduleEncodings.hash!=null&&a.append("hme",this.moduleEncodings.hash),a.append("ex_m",f.join(",")))}}]);re
2024-10-11 22:48:02 UTC	16384	IN	Data Raw: 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 61 72 20 63 3d 21 30 2c 64 3d 21 31 2c 65 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 66 3d 62 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 62 3b 21 28 63 3d 28 62 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 63 3d 21 30 29 7b 62 3d 62 2e 76 61 6c 75 65 3b 6c 2e 74 72 69 67 67 65 72 28 61 2c 62 29 7d 7d 63 Data Ascii: alsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){var c=!0,d=!1,e=void 0;try{for(var f=b[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),b;!(c=(b=f.next()).done);c=!0){b=b.value;l.trigger(a,b)}}c
2024-10-11 22:48:02 UTC	16384	IN	Data Raw: 2c 6c 28 7b 7d 2c 65 2c 62 28 64 5b 65 5d 29 29 29 7d 2c 7b 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 61 28 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 64 3d 42 28 65 2c 49 2e 6f 62 6a 65 63 74 28 29 29 3b 65 3d 63 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 66 3d 62 5b 65 5d 2c 67 3d 64 5b 65 5d 3b 66 3d 66 28 67 29 3b 72 65 74 75 72 6e 20 61 28 7b 7d 2c 63 2c 6c 28 7b 7d 2c 65 2c 66 29 29 7d 2c 7b 7d 29 3b 72 65 74 75 72 6e Data Ascii: ,l({},e,b(d[e])))},{})}}function y(a){return function(b){return b==null?null:a(b)}}function z(b){return function(e){var d=B(e,I.object());e=c(Object.keys(b),function(c,e){if(c==null)return null;var f=b[e],g=d[e];f=f(g);return a({},c,l({},e,f))},{});return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49755	63.140.62.222	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:02 UTC	484	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=723A22C757518E2C7F000101%40AdobeOrg&mid=56533479113366688501602802432891303576&ts=1728686878713 HTTP/1.1 Host: smetrics.redcross.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:02 UTC	611	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 11 Oct 2024 22:48:02 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C56533479113366688501602802432891303576; Path=/; Domain=redcross.org; Max-Age=63072000; Expires=Sun, 11 Oct 2026 22:48:48 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-10-11 22:48:02 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 35 36 35 33 33 34 37 39 31 31 33 33 36 36 36 38 38 35 30 31 36 30 32 38 30 32 34 33 32 38 39 31 33 30 33 35 37 36 22 7d Data Ascii: {"mid":"56533479113366688501602802432891303576"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49759	108.128.136.169	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:02 UTC	723	OUT	GET /ibs:dpid=411&dpuuid=ZwmrIQAAAEocsgO- HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56867263963802033431630789245748728165; dextp=144230-1-1728686880162\|144231-1-1728686880760
2024-10-11 22:48:02 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 22:48:02 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: Yoh58GONQMY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v066-0e2796f7b.edge-irl1.demdex.com 2 ms set-cookie: dpm=56867263963802033431630789245748728165; Max-Age=15552000; Expires=Wed, 09 Apr 2025 22:48:02 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56867263963802033431630789245748728165; Max-Age=15552000; Expires=Wed, 09 Apr 2025 22:48:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-11 22:48:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49762	142.250.186.38	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:03 UTC	1315	OUT	GET /activityi;dc_pre=CP_jvLy0h4kDFXiK_Qcdcq0Gig;src=4706068;type=rcbnew;cat=rcbne0;ord=4722219042743;npa=0;auiddc=1616239341.1728686880;ps=1;pcor=2078001472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a90v9189992675za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101686685;epver=2;~oref=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404? HTTP/1.1 Host: 4706068.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-11 22:48:03 UTC	984	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 11 Oct 2024 22:48:03 GMT Expires: Fri, 11 Oct 2024 22:48:03 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkyjSlqriV2RfvPIlYWbUxXtVU034nTKoT3zN--VKDFKrEa2AJ8-iExxIM4tjA; expires=Sun, 11-Oct-2026 22:48:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-11 22:48:03 UTC	406	IN	Data Raw: 38 62 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 22 3c 21 2d 2d 20 41 63 75 69 74 79 41 64 73 20 50 69 78 65 6c 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 0a 20 20 20 20 21 28 66 75 6e 63 74 69 6f 6e 28 61 2c 20 Data Ascii: 8b5<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent">"... AcuityAds Pixel --><script> 'use strict' !(function(a,
2024-10-11 22:48:03 UTC	1390	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 27 73 63 72 69 70 74 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 73 72 63 20 3d 20 27 68 74 74 70 73 3a 2f 2f 6f 72 69 67 69 6e 2e 61 63 75 69 74 79 70 6c 61 74 66 6f 72 6d 2e 63 6f 6d 2f 65 76 65 6e 74 2f 76 32 2f 70 69 78 65 6c 2e 6a 73 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 20 3d 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 5b 30 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 Data Ascii: } var t = 'script' var i = e.createElement(t) i.async = true i.src = 'https://origin.acuityplatform.com/event/v2/pixel.js' var c = e.getElementsByTagName(t)[0] c.parentNode.insertBef
2024-10-11 22:48:03 UTC	440	IN	Data Raw: 72 63 3d 34 37 30 36 30 36 38 3b 74 79 70 65 3d 72 63 62 6e 65 77 3b 63 61 74 3d 72 63 62 6e 65 30 3b 6f 72 64 3d 34 37 32 32 32 31 39 30 34 32 37 34 33 3b 6e 70 61 3d 30 3b 61 75 69 64 64 63 3d 2a 3b 70 73 3d 31 3b 70 63 6f 72 3d 32 30 37 38 30 30 31 34 37 32 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 70 73 63 64 6c 3d 6e 6f 61 Data Ascii: rc=4706068;type=rcbnew;cat=rcbne0;ord=4722219042743;npa=0;auiddc=*;ps=1;pcor=2078001472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noa
2024-10-11 22:48:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49760	63.140.62.17	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:03 UTC	876	OUT	POST /ee/v1/interact?configId=8e7ed3d9-5254-4632-b3b4-a45c9fec6d88&requestId=b594fdb8-d595-441c-bc69-8a1630e6d516 HTTP/1.1 Host: adobedc.demdex.net Connection: keep-alive Content-Length: 2769 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.redcrossblood.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.redcrossblood.org/give.html/404 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56867263963802033431630789245748728165; dextp=144230-1-1728686880162\|144231-1-1728686880760
2024-10-11 22:48:03 UTC	2769	OUT	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 63 6f 6e 66 69 67 4f 76 65 72 72 69 64 65 73 22 3a 7b 7d 2c 22 74 61 72 67 65 74 22 3a 7b 22 6d 69 67 72 61 74 69 6f 6e 22 3a 74 72 75 65 7d 2c 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 72 65 64 63 72 6f 73 73 62 6c 6f 6f 64 2e 6f 72 67 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 65 76 65 6e 74 73 22 3a 5b 7b 22 78 64 6d 22 3a 7b 22 65 76 65 6e 74 54 79 70 65 22 3a 22 77 65 62 2e 77 65 62 70 61 67 65 64 65 74 61 69 6c 73 2e 70 61 67 65 56 69 65 77 73 22 2c 22 77 65 62 22 3a 7b 22 77 65 62 50 61 67 65 44 65 74 61 69 6c 73 22 3a 7b 22 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 63 72 6f 73 73 62 6c 6f 6f 64 2e 6f 72 67 2f 67 69 76 65 2e 68 74 6d 6c 2f 34 30 Data Ascii: {"meta":{"configOverrides":{},"target":{"migration":true},"state":{"domain":"redcrossblood.org","cookiesEnabled":true}},"events":[{"xdm":{"eventType":"web.webpagedetails.pageViews","web":{"webPageDetails":{"URL":"https://www.redcrossblood.org/give.html/40
2024-10-11 22:48:04 UTC	787	IN	HTTP/1.1 200 OK x-request-id: b594fdb8-d595-441c-bc69-8a1630e6d516 vary: Origin access-control-allow-origin: https://www.redcrossblood.org access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Fri, 11 Oct 2024 22:48:03 GMT x-konductor: N/A x-adobe-edge: IRL1;6 server: jag set-cookie: demdex=56867263963802033431630789245748728165; Max-Age=15552000; Domain=demdex.net; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-10-11 22:48:04 UTC	5055	IN	Data Raw: 66 66 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 62 35 39 34 66 64 62 38 2d 64 35 39 35 2d 34 34 31 63 2d 62 63 36 39 2d 38 61 31 36 33 30 65 36 64 35 31 36 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 35 36 35 33 33 34 37 39 31 31 33 33 36 36 36 38 38 35 30 31 36 30 32 38 30 32 34 33 32 38 39 31 33 30 33 35 37 36 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 41 54 3a 65 79 4a 68 59 33 52 70 64 6d 6c 30 65 55 6c 6b 49 6a 6f 69 4e 54 63 7a 4e 6a 41 34 49 69 77 69 5a 58 68 77 5a 58 4a 70 5a 57 35 6a 5a 55 6c 6b 49 6a 6f Data Ascii: ff8{"requestId":"b594fdb8-d595-441c-bc69-8a1630e6d516","handle":[{"payload":[{"id":"56533479113366688501602802432891303576","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"id":"AT:eyJhY3Rpdml0eUlkIjoiNTczNjA4IiwiZXhwZXJpZW5jZUlkIjo
2024-10-11 22:48:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49772	216.200.232.249	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:04 UTC	682	OUT	GET /event/img?mt_id=1319619&mt_adid=149608&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3=&ord=104230782 HTTP/1.1 Host: pixel.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4706068.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:04 UTC	536	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 22:48:04 GMT Content-Type: image/gif Content-Length: 0 Connection: close P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Access-Control-Allow-Origin: * Cache-Control: no-cache Server: MT3 1668 f41eadd master ord ord-pixel-x21 config_version:"1717" X-XSS-Protection: 0 Referrer-Policy: strict-origin Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: 31536000 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: all

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49781	54.77.0.81	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:04 UTC	572	OUT	GET /ibs:dpid=411&dpuuid=ZwmrIQAAAEocsgO- HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56867263963802033431630789245748728165; dpm=56867263963802033431630789245748728165; dextp=144230-1-1728686880162\|144231-1-1728686880760\|144232-1-1728686882442\|144233-1-1728686882734
2024-10-11 22:48:04 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 22:48:04 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 0wOibFvzShc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v066-01385bb08.edge-irl1.demdex.com 2 ms set-cookie: dpm=56867263963802033431630789245748728165; Max-Age=15552000; Expires=Wed, 09 Apr 2025 22:48:04 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56867263963802033431630789245748728165; Max-Age=15552000; Expires=Wed, 09 Apr 2025 22:48:04 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-11 22:48:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49774	157.240.0.6	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:04 UTC	548	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://4706068.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:04 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-11 22:48:04 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-11 22:48:04 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-11 22:48:05 UTC	14681	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-11 22:48:05 UTC	16384	IN	Data Raw: 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 Data Ascii: c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="objec
2024-10-11 22:48:05 UTC	16384	IN	Data Raw: 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 Data Ascii: k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})()
2024-10-11 22:48:05 UTC	16384	IN	Data Raw: 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 68 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 67 3d 68 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 3f 5b 61 2c 63 2c 6a 2c 66 2c 67 5d 3a 6e 75 6c 6c 7d 63 3d 6e 65 77 20 61 28 67 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 63 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 Data Ascii: )==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"undefined":i(h))==="object"&&(g=h);return a!=null&&c!=null?[a,c,j,f,g]:null}c=new a(g);l.exports=c})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered(
2024-10-11 22:48:05 UTC	1702	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 68 2c 61 29 3f 68 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 61 29 3f 76 6f 69 64 20 30 3a 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 Data Ascii: unction p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.prototype.hasOwnProperty.call(h,a)?h[a]:a}function r(a){if(typeof a==="string")return a;if(typeof a==="number")return isNaN(a)?void 0:a;try{return JSON.string
2024-10-11 22:48:05 UTC	14682	IN	Data Raw: 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 7d 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 21 3d 6e 75 6c 6c 26 26 61 2e 61 70 70 65 6e 64 28 22 68 6d 65 22 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 29 2c 61 2e 61 70 70 65 6e 64 28 22 65 78 5f 6d 22 2c 66 2e 6a 6f 69 6e 28 22 2c 22 29 29 29 7d 7d 5d 29 3b 72 65 Data Ascii: ion(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null}),function(a){return a!=null});f.length>0&&(this.moduleEncodings.hash!=null&&a.append("hme",this.moduleEncodings.hash),a.append("ex_m",f.join(",")))}}]);re
2024-10-11 22:48:05 UTC	16384	IN	Data Raw: 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 61 72 20 63 3d 21 30 2c 64 3d 21 31 2c 65 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 66 3d 62 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 62 3b 21 28 63 3d 28 62 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 63 3d 21 30 29 7b 62 3d 62 2e 76 61 6c 75 65 3b 6c 2e 74 72 69 67 67 65 72 28 61 2c 62 29 7d 7d 63 Data Ascii: alsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){var c=!0,d=!1,e=void 0;try{for(var f=b[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),b;!(c=(b=f.next()).done);c=!0){b=b.value;l.trigger(a,b)}}c
2024-10-11 22:48:05 UTC	16384	IN	Data Raw: 2c 6c 28 7b 7d 2c 65 2c 62 28 64 5b 65 5d 29 29 29 7d 2c 7b 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 61 28 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 64 3d 42 28 65 2c 49 2e 6f 62 6a 65 63 74 28 29 29 3b 65 3d 63 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 66 3d 62 5b 65 5d 2c 67 3d 64 5b 65 5d 3b 66 3d 66 28 67 29 3b 72 65 74 75 72 6e 20 61 28 7b 7d 2c 63 2c 6c 28 7b 7d 2c 65 2c 66 29 29 7d 2c 7b 7d 29 3b 72 65 74 75 72 6e Data Ascii: ,l({},e,b(d[e])))},{})}}function y(a){return function(b){return b==null?null:a(b)}}function z(b){return function(e){var d=B(e,I.object());e=c(Object.keys(b),function(c,e){if(c==null)return null;var f=b[e],g=d[e];f=f(g);return a({},c,l({},e,f))},{});return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49773	142.250.184.226	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:04 UTC	1150	OUT	GET /ddm/fls/z/dc_pre=CP_jvLy0h4kDFXiK_Qcdcq0Gig;src=4706068;type=rcbnew;cat=rcbne0;ord=4722219042743;npa=0;auiddc=;ps=1;pcor=2078001472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a90v9189992675za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101686685;epver=2;~oref=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404 HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4706068.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:04 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 11 Oct 2024 22:48:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-11 22:48:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49783	63.140.62.17	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:04 UTC	771	OUT	POST /ee/irl1/v1/interact?configId=8e7ed3d9-5254-4632-b3b4-a45c9fec6d88&requestId=85186c0b-8788-4c2b-bb4a-79a55fc4db16 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 1710 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.redcrossblood.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.redcrossblood.org/give.html/404 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:04 UTC	1710	OUT	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 63 6f 6e 66 69 67 4f 76 65 72 72 69 64 65 73 22 3a 7b 7d 2c 22 74 61 72 67 65 74 22 3a 7b 22 6d 69 67 72 61 74 69 6f 6e 22 3a 74 72 75 65 7d 2c 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 72 65 64 63 72 6f 73 73 62 6c 6f 6f 64 2e 6f 72 67 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 37 32 33 41 32 32 43 37 35 37 35 31 38 45 32 43 37 46 30 30 30 31 30 31 5f 41 64 6f 62 65 4f 72 67 5f 63 6c 75 73 74 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 69 72 6c 31 22 7d 2c 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 37 32 33 41 32 32 43 37 35 37 35 31 38 45 32 43 37 46 30 30 30 31 30 31 5f 41 64 6f 62 65 4f 72 67 5f 69 64 65 Data Ascii: {"meta":{"configOverrides":{},"target":{"migration":true},"state":{"domain":"redcrossblood.org","cookiesEnabled":true,"entries":[{"key":"kndctr_723A22C757518E2C7F000101_AdobeOrg_cluster","value":"irl1"},{"key":"kndctr_723A22C757518E2C7F000101_AdobeOrg_ide
2024-10-11 22:48:05 UTC	639	IN	HTTP/1.1 200 OK x-request-id: 85186c0b-8788-4c2b-bb4a-79a55fc4db16 vary: Origin access-control-allow-origin: https://www.redcrossblood.org access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Fri, 11 Oct 2024 22:48:04 GMT x-konductor: N/A x-adobe-edge: IRL1;6 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-10-11 22:48:05 UTC	846	IN	Data Raw: 33 34 37 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 38 35 31 38 36 63 30 62 2d 38 37 38 38 2d 34 63 32 62 2d 62 62 34 61 2d 37 39 61 35 35 66 63 34 64 62 31 36 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 35 36 35 33 33 34 37 39 31 31 33 33 36 36 36 38 38 35 30 31 36 30 32 38 30 32 34 33 32 38 39 31 33 30 33 35 37 36 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 5d 2c 22 74 79 70 65 22 3a 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 3a 64 65 63 69 73 69 6f 6e 73 22 2c 22 65 76 65 6e 74 49 6e 64 65 78 22 3a 30 7d 2c 7b 22 70 61 79 6c 6f 61 Data Ascii: 347{"requestId":"85186c0b-8788-4c2b-bb4a-79a55fc4db16","handle":[{"payload":[{"id":"56533479113366688501602802432891303576","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[],"type":"personalization:decisions","eventIndex":0},{"payloa
2024-10-11 22:48:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	49789	172.64.151.101	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:04 UTC	637	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZwmrIgAIc-zJMAA9 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://redcross.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:05 UTC	1166	IN	HTTP/1.1 302 Found Date: Fri, 11 Oct 2024 22:48:05 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=88&external_user_id=ZwmrIgAIc-zJMAA9&C=1 CF-Ray: 8d126547afb88cd7-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZwmrJUt3uakAAD4NABH8gAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 11 Oct 2025 22:48:05 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPS=1237; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 22:48:05 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=1237; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 22:48:05 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n3vWUqkl9GLDb1O%2Fmk3OEEjOWkZznNIKLJylFDryb59ERi6btKhIyySSWOMXqYBtd%2FZ1Opm3qqgEiY533g%2BsvUDwIIxpfA6v%2F9bXLDApU7%2FYfZjFuiPzEq6LZ91UkcPsRabNjhMyO5O1OQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.8	49786	63.140.62.27	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:05 UTC	603	OUT	GET /ee/v1/interact?configId=8e7ed3d9-5254-4632-b3b4-a45c9fec6d88&requestId=b594fdb8-d595-441c-bc69-8a1630e6d516 HTTP/1.1 Host: adobedc.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56867263963802033431630789245748728165; dextp=144230-1-1728686880162\|144231-1-1728686880760\|144232-1-1728686882442\|144233-1-1728686882734
2024-10-11 22:48:05 UTC	419	IN	HTTP/1.1 404 Not Found x-request-id: b594fdb8-d595-441c-bc69-8a1630e6d516 vary: Origin date: Fri, 11 Oct 2024 22:48:05 GMT x-konductor: N/A x-adobe-edge: IRL1;6 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	49788	185.89.210.122	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:05 UTC	614	OUT	GET /setuid?entity=158&code=ZwmrIgAIc-zJMAA9 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://redcross.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:05 UTC	1375	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Fri, 11 Oct 2024 22:48:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D158%26code%3DZwmrIgAIc-zJMAA9 AN-X-Request-Uuid: 200587b2-64a2-44a5-823f-bf1b1a2dbaa2 Set-Cookie: XANDR_PANID=T9EBTAT2N3TXk5VsygPNvCle9dQQTGPN_lssDkqgqZL7jGSkapc76TjGCr7TzZgLf0wt3jVBPK9OI06tOW_1bQhIFRX4ZPML0W0LHxq_l9s.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 09-Jan-2025 22:48:05 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 29-Sep-2034 22:48:05 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8187182774765916003; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 09-Jan-2025 22:48:05 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.8	49792	216.200.232.253	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:05 UTC	435	OUT	GET /event/img?mt_id=1319619&mt_adid=149608&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3=&ord=104230782 HTTP/1.1 Host: pixel.mathtag.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:05 UTC	536	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 22:48:05 GMT Content-Type: image/gif Content-Length: 0 Connection: close P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Access-Control-Allow-Origin: * Cache-Control: no-cache Server: MT3 1668 f41eadd master ord ord-pixel-x25 config_version:"1717" X-XSS-Protection: 0 Referrer-Policy: strict-origin Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: 31536000 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: all

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	49795	157.240.0.6	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:05 UTC	1370	OUT	GET /signals/config/1599953746963987?v=2.9.170&r=stable&domain=www.redcrossblood.org&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:06 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-11 22:48:06 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-11 22:48:06 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-11 22:48:06 UTC	1491	IN	Data Raw: 61 29 2c 64 65 6c 65 74 65 20 63 5b 61 5d 29 7d 29 7d 7d 69 66 28 6b 2e 73 65 6e 73 69 74 69 76 65 5f 6b 65 79 73 21 3d 6e 75 6c 6c 29 7b 70 3d 6b 2e 73 65 6e 73 69 74 69 76 65 5f 6b 65 79 73 5b 66 5d 3b 69 66 28 70 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 71 3d 70 2e 63 64 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6a 28 71 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 28 61 29 3d 3d 3d 62 26 26 28 6c 3d 21 30 2c 6e 2e 70 75 73 68 28 62 29 2c 64 65 6c 65 74 65 20 63 5b 61 5d 29 7d 29 7d 29 7d 7d 6f 2e 75 6e 77 61 6e 74 65 64 50 61 72 61 6d 73 3d 6d 3b 6f 2e 72 65 73 74 72 69 63 74 65 64 50 61 72 61 6d 73 3d 6e 3b 69 66 28 6c 26 26 21 68 29 7b 6b 3d 6d 2e 6c 65 6e 67 74 68 3e 30 3b 66 3d 6e 2e 6c 65 Data Ascii: a),delete c[a])})}}if(k.sensitive_keys!=null){p=k.sensitive_keys[f];if(p!=null){var q=p.cd;Object.keys(c).forEach(function(a){j(q,function(b){i(a)===b&&(l=!0,n.push(b),delete c[a])})})}}o.unwantedParams=m;o.restrictedParams=n;if(l&&!h){k=m.length>0;f=n.le
2024-10-11 22:48:06 UTC	14893	IN	Data Raw: 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 22 72 6c 22 29 26 26 63 2e 72 6c 2e 6c 65 6e 67 74 68 3e 30 29 7b 6e 3d 6e 65 77 20 55 52 4c 28 63 2e 72 6c 29 3b 6d 3d 68 28 69 2c 6e 2c 6c 2c 66 2c 6a 29 3b 6b 26 26 6d 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6e 2e 73 65 61 72 63 68 3d 6d 2c 63 2e 72 6c 3d 6e 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 6b 26 26 67 2e 6c 6f 67 55 73 65 72 45 72 72 6f 72 28 7b 74 79 70 65 3a 22 55 4e 57 41 4e 54 45 44 5f 55 52 4c 5f 44 41 54 41 22 7d 29 3b 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 65 6e 64 3a 76 61 6c 69 64 61 74 65 55 72 6c 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e 69 64 29 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 Data Ascii: ype.hasOwnProperty.call(c,"rl")&&c.rl.length>0){n=new URL(c.rl);m=h(i,n,l,f,j);k&&m.length>0&&(n.search=m,c.rl=n.toString())}k&&g.logUserError({type:"UNWANTED_URL_DATA"});a.performanceMark("fbevents:end:validateUrlProcessing",b.id)})})})();return e.export
2024-10-11 22:48:06 UTC	1500	IN	Data Raw: 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 Data Ascii: (a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b
2024-10-11 22:48:06 UTC	14884	IN	Data Raw: 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 3d 65 2e 70 6c 75 67 69 6e 43 6f 6e 66 69 67 2e 67 65 74 28 62 2c 22 70 72 6f 74 65 63 74 65 64 44 61 74 61 4d 6f 64 65 22 29 3b 69 66 28 69 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 6a 3d 69 2e 73 74 61 6e 64 61 72 64 50 61 72 61 6d 73 3b 67 28 64 28 63 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 20 69 6e 20 6a 7c 7c 64 65 6c 65 74 65 20 63 5b 61 5d 7d 29 7d 29 3b 76 61 72 20 6b 3d 36 3b 6f 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 66 29 7b 66 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 63 2e 69 64 2c 22 50 72 6f 74 65 63 74 65 64 44 61 74 61 4d 6f 64 65 22 29 3b 69 66 28 21 66 29 72 65 74 75 72 6e 7b 7d 3b 66 3d 65 2e 70 6c 75 67 69 6e 43 6f 6e 66 69 67 Data Ascii: (c==null)return;i=e.pluginConfig.get(b,"protectedDataMode");if(i==null)return;var j=i.standardParams;g(d(c),function(a){a in j\|\|delete c[a]})});var k=6;o.listen(function(c,d,f){f=e.optIns.isOptedIn(c.id,"ProtectedDataMode");if(!f)return{};f=e.pluginConfig
2024-10-11 22:48:06 UTC	1500	IN	Data Raw: 28 7b 61 63 74 69 6f 6e 3a 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e Data Ascii: ({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return
2024-10-11 22:48:06 UTC	14884	IN	Data Raw: 4c 6f 63 61 6c 53 74 6f 72 61 67 65 49 74 65 6d 3a 68 2c 72 65 6d 6f 76 65 4c 6f 63 61 6c 53 74 6f 72 61 67 65 49 74 65 6d 3a 69 2c 69 73 4c 6f 63 61 6c 53 74 6f 72 61 67 65 53 75 70 70 6f 72 74 65 64 3a 6a 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 6c 61 73 74 65 78 74 65 72 6e 61 6c 72 65 66 65 72 72 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: LocalStorageItem:h,removeLocalStorageItem:i,isLocalStorageSupported:j}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.lastexternalreferrer",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){
2024-10-11 22:48:06 UTC	1500	IN	Data Raw: 64 5f 64 65 73 74 69 6e 61 74 69 6f 6e 73 22 3a 74 72 75 65 2c 22 73 75 67 67 65 73 74 65 64 5f 68 6f 6d 65 5f 6c 69 73 74 69 6e 67 73 22 3a 74 72 75 65 2c 22 73 75 67 67 65 73 74 65 64 5f 68 6f 74 65 6c 73 22 3a 74 72 75 65 2c 22 73 75 67 67 65 73 74 65 64 5f 6a 6f 62 73 22 3a 74 72 75 65 2c 22 73 75 67 67 65 73 74 65 64 5f 6c 6f 63 61 6c 5f 73 65 72 76 69 63 65 5f 62 75 73 69 6e 65 73 73 65 73 22 3a 74 72 75 65 2c 22 73 75 67 67 65 73 74 65 64 5f 6c 6f 63 61 74 69 6f 6e 5f 62 61 73 65 64 5f 69 74 65 6d 73 22 3a 74 72 75 65 2c 22 73 75 67 67 65 73 74 65 64 5f 76 65 68 69 63 6c 65 73 22 3a 74 72 75 65 2c 22 74 72 61 6e 73 6d 69 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 74 72 61 76 65 6c 5f 63 6c 61 73 73 22 3a 74 72 75 65 2c 22 74 72 61 76 65 6c 5f 65 6e 64 Data Ascii: d_destinations":true,"suggested_home_listings":true,"suggested_hotels":true,"suggested_jobs":true,"suggested_local_service_businesses":true,"suggested_location_based_items":true,"suggested_vehicles":true,"transmission":true,"travel_class":true,"travel_end
2024-10-11 22:48:06 UTC	3335	IN	Data Raw: 74 6d 6c 22 7d 7d 5d 7d 2c 7b 22 75 72 6c 22 3a 7b 22 69 5f 63 6f 6e 74 61 69 6e 73 22 3a 22 22 7d 7d 5d 7d 2c 22 69 64 22 3a 22 32 36 36 30 35 33 30 34 32 38 35 37 38 31 39 35 35 22 7d 2c 7b 22 72 75 6c 65 22 3a 7b 22 61 6e 64 22 3a 5b 7b 22 65 76 65 6e 74 22 3a 7b 22 65 71 22 3a 22 43 6f 6d 70 6c 65 74 65 52 65 67 69 73 74 72 61 74 69 6f 6e 22 7d 7d 5d 7d 2c 22 69 64 22 3a 22 32 37 35 39 30 30 31 35 33 32 30 35 38 39 32 37 33 22 7d 2c 7b 22 72 75 6c 65 22 3a 7b 22 61 6e 64 22 3a 5b 7b 22 65 76 65 6e 74 22 3a 7b 22 65 71 22 3a 22 4c 65 61 64 22 7d 7d 5d 7d 2c 22 69 64 22 3a 22 38 32 35 38 38 31 31 37 37 30 38 36 35 30 32 36 22 7d 2c 7b 22 72 75 6c 65 22 3a 7b 22 6f 72 22 3a 5b 7b 22 65 76 65 6e 74 22 3a 7b 22 65 71 22 3a 22 4c 65 61 64 22 7d 7d 2c 7b 22 Data Ascii: tml"}}]},{"url":{"i_contains":""}}]},"id":"26605304285781955"},{"rule":{"and":[{"event":{"eq":"CompleteRegistration"}}]},"id":"27590015320589273"},{"rule":{"and":[{"event":{"eq":"Lead"}}]},"id":"8258811770865026"},{"rule":{"or":[{"event":{"eq":"Lead"}},{"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.8	49801	216.58.206.34	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:05 UTC	903	OUT	GET /ddm/fls/z/dc_pre=CP_jvLy0h4kDFXiK_Qcdcq0Gig;src=4706068;type=rcbnew;cat=rcbne0;ord=4722219042743;npa=0;auiddc=;ps=1;pcor=2078001472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a90v9189992675za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101686685;epver=2;~oref=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404 HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:05 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 11 Oct 2024 22:48:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-11 22:48:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.8	49807	172.64.151.101	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:05 UTC	703	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZwmrIgAIc-zJMAA9&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://redcross.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZwmrJUt3uakAAD4NABH8gAAA; CMPS=1237; CMPRO=1237
2024-10-11 22:48:06 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 22:48:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8d12654d9b1e434f-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZwmrJUt3uakAAD4NABH8gAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 11 Oct 2025 22:48:06 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPRO=1237; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 22:48:06 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SyaVj3nS%2Bj0ygygWz8IZxykZTMpNATpsKpuKgw8umlKgm6HuW1tXg1oNHO77kAuf0BBpJ4GK6L75%2FKlRCZ1rrcGp4dB27VQHdMrUAN4sBy1ykvlVSgNE9zJdNjvYSNqRl4qRWrN1HqmA2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-10-11 22:48:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.8	49803	172.217.16.198	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:06 UTC	1304	OUT	GET /activity;register_conversion=1;src=4706068;type=rcbnew;cat=rcbne0;ord=4722219042743;npa=0;auiddc=1616239341.1728686880;ps=1;pcor=2078001472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a90v9189992675za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101686685;epver=2;~oref=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkyjSlqriV2RfvPIlYWbUxXtVU034nTKoT3zN--VKDFKrEa2AJ8-iExxIM4tjA
2024-10-11 22:48:06 UTC	2949	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 11 Oct 2024 22:48:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"14059422195467041397"}],"aggregatable_trigger_data":[{"filters":[{"14":["7122039"]}],"key_piece":"0x8cfe7852a3924299","source_keys":["12","13","14","15","16","17","18","19","20","21","16736204","16736205","16736206","16736207","20560192","20560193","20560194","20560195","20561396","20561397","20561398","20561399","22946080","22946081","22946082","22946083","628857220","628857221","628857222","628857223","634860084","634860085","634860086","634860087","640939812","640939813","640939814","640939815"]},{"key_piece":"0x54eb60ff5a00329a","not_filters":{"14":["7122039"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","16736204","16736205","16736206","16736207","20560192","20560193","20560194","20560195","20561396","20561397","20561398","20561399","22946080","22946081","22946082","22946083","628857220","628857221","628857222","628857223","634860084","634860085","634860086","634860087","640939812","6409 [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 10-Nov-2024 22:48:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.8	49804	150.171.28.10	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:06 UTC	523	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:06 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 50523 Content-Type: application/javascript Last-Modified: Thu, 19 Sep 2024 15:43:41 GMT Accept-Ranges: bytes ETag: "803483b3aaadb1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 6F9601427AA24BBBB4FF6EDFA06B4284 Ref B: EWR311000107047 Ref C: 2024-10-11T22:48:06Z Date: Fri, 11 Oct 2024 22:48:06 GMT Connection: close
2024-10-11 22:48:06 UTC	3672	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-10-11 22:48:06 UTC	8192	IN	Data Raw: 22 2c 22 69 74 65 6d 73 22 5d 2c 62 65 67 69 6e 5f 63 68 65 63 6b 6f 75 74 3a 5b 22 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 69 74 65 6d 73 22 2c 22 63 6f 75 70 6f 6e 22 5d 2c 63 68 65 63 6b 6f 75 74 5f 70 72 6f 67 72 65 73 73 3a 5b 22 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 69 74 65 6d 73 22 2c 22 63 6f 75 70 6f 6e 22 2c 22 63 68 65 63 6b 6f 75 74 5f 73 74 65 70 22 2c 22 63 68 65 63 6b 6f 75 74 5f 6f 70 74 69 6f 6e 22 5d 2c 65 78 63 65 70 74 69 6f 6e 3a 5b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 22 66 61 74 61 6c 22 5d 2c 67 65 6e 65 72 61 74 65 5f 6c 65 61 64 3a 5b 22 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 74 72 61 6e 73 61 63 74 Data Ascii: ","items"],begin_checkout:["revenue_value","currency","items","coupon"],checkout_progress:["revenue_value","currency","items","coupon","checkout_step","checkout_option"],exception:["description","fatal"],generate_lead:["revenue_value","currency","transact
2024-10-11 22:48:06 UTC	4144	IN	Data Raw: 65 72 74 79 28 22 64 69 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 22 29 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 3d 6f 2e 64 69 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 3d 3d 3d 21 30 29 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 6c 74 22 29 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 69 6d 67 41 6c 74 3d 6f 2e 61 6c 74 29 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 6c 61 72 69 74 79 50 72 6f 6a 65 63 74 49 64 22 29 26 26 6f 2e 63 6c 61 72 69 74 79 50 72 6f 6a 65 63 74 49 64 26 26 74 79 70 65 6f 66 20 6f 2e 63 6c 61 72 69 74 79 50 72 6f 6a 65 63 74 49 64 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 Data Ascii: erty("disableContainer")&&(this.uetConfig.disableContainer=o.disableContainer===!0);o.hasOwnProperty("alt")&&(this.uetConfig.imgAlt=o.alt);o.hasOwnProperty("clarityProjectId")&&o.clarityProjectId&&typeof o.clarityProjectId=="string"&&(n=document.createEle
2024-10-11 22:48:06 UTC	8192	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 3b 68 3d 75 3d 3d 3d 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3f 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3a 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3b 74 68 69 73 2e 65 76 74 28 68 2c 75 2c 73 2c 6e 5b 32 5d 29 7d 65 6c 73 65 20 69 66 28 6e 5b 30 5d 3d 3d 3d 22 73 65 74 22 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 5b 31 5d 5b 30 5d 21 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 3b 66 6f 72 28 69 20 69 6e 20 6e 5b 31 5d 5b 30 5d 29 74 68 69 73 2e 6b 6e 6f 77 6e 50 61 72 61 6d 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 28 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 5b 69 5d 3d 6e 5b 31 5d 5b 30 5d 5b 69 5d 2c 69 3d 3d 3d 22 70 69 64 22 26 26 74 68 69 73 2e Data Ascii: undefined)return;h=u===this.pageViewEvt?this.pageLoadEvt:this.customEvt;this.evt(h,u,s,n[2])}else if(n[0]==="set"){if(typeof n[1][0]!="object")return;for(i in n[1][0])this.knownParams.hasOwnProperty(i)&&(this.pageLevelParams[i]=n[1][0][i],i==="pid"&&this.
2024-10-11 22:48:06 UTC	8192	IN	Data Raw: 6e 2e 6d 74 70 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 29 2c 6e 7d 3b 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 63 68 61 72 41 74 28 6e 2e 6c 65 6e 67 74 68 2d 31 29 3b 72 65 74 75 72 6e 28 74 3d 3d 3d 22 26 22 7c 7c 74 3d 3d 3d 22 3f 22 29 26 26 28 6e 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 31 29 29 2c 6e 7d 3b 74 68 69 73 2e 68 65 6c 70 65 72 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 74 3d 7b 65 72 72 4d 73 67 3a 6e 2c 74 61 67 49 64 3a 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 Data Ascii: n.mtp=navigator.maxTouchPoints),n};this.removeTrailingAmp=function(n){var t=n.charAt(n.length-1);return(t==="&"\|\|t==="?")&&(n=n.substring(0,n.length-1)),n};this.helperError=function(n){if(typeof CustomEvent=="function"){var t={errMsg:n,tagId:this.beaconPa
2024-10-11 22:48:06 UTC	8192	IN	Data Raw: 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 3e 30 3f 28 74 2e 70 61 67 65 74 79 70 65 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 61 67 65 54 79 70 65 28 74 2e 70 61 67 65 74 79 70 65 2c 74 68 69 73 2e 76 61 6c 69 64 52 65 74 61 69 6c 50 61 67 65 54 79 70 65 56 61 6c 75 65 73 29 2c 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 72 6f 64 49 64 28 74 2e 70 72 6f 64 69 64 29 29 29 3a 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 74 68 69 73 2e 74 68 72 6f 77 45 72 72 6f 72 28 74 68 69 73 2e 6d 69 73 73 69 6e 67 50 61 67 65 54 79 70 65 45 78 63 65 70 74 69 6f 6e Data Ascii: t.hasOwnProperty("pagetype")>0?(t.pagetype=this.validatePageType(t.pagetype,this.validRetailPageTypeValues),t.hasOwnProperty("prodid")>0&&(t.prodid=this.validateProdId(t.prodid))):t.hasOwnProperty("prodid")>0&&this.throwError(this.missingPageTypeException
2024-10-11 22:48:06 UTC	8192	IN	Data Raw: 75 3c 3d 33 3f 74 5b 69 5d 3d 22 22 3a 64 65 6c 65 74 65 20 74 5b 69 5d 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 29 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 49 6d 67 28 66 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 70 75 73 68 28 72 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 6c 65 6e 67 74 68 3e 32 30 26 26 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 73 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 Data Ascii: u<=3?t[i]="":delete t[i],r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r));this.fireBeaconImg(f);this.snippetEventQueue.push(r);this.snippetEventQueue.length>20&&this.snippetEventQueue.shift();try{typeof CustomEvent=="function"&&(s=new CustomEve
2024-10-11 22:48:06 UTC	1747	IN	Data Raw: 28 21 74 68 69 73 2e 69 73 41 64 53 74 6f 72 61 67 65 41 6c 6c 6f 77 65 64 28 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 69 3d 6e 3d 3d 3d 30 3f 74 68 69 73 2e 73 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3a 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 76 69 64 43 6f 6f 6b 69 65 2c 74 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 69 2c 22 22 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 29 7c 7c 28 74 3d 74 68 69 73 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 42 61 63 6b 75 70 28 69 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 29 2c 74 68 69 73 2e 69 6e 73 69 67 68 Data Ascii: (!this.isAdStorageAllowed())return null;var i=n===0?this.sessionCookieName:this.uetConfig.vidCookie,t=this.getCookie(i,"",this.insightsCookieMaxLength);return this.stringExists(t)\|\|(t=this.getLocalStorageBackup(i,this.insightsCookieMaxLength)),this.insigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.8	49806	108.138.26.113	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:06 UTC	538	OUT	GET /branch-latest.min.js HTTP/1.1 Host: cdn.branch.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:07 UTC	536	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 23431 Connection: close Date: Fri, 11 Oct 2024 22:48:07 GMT Cache-Control: max-age=300 Content-Encoding: gzip Last-Modified: Wed, 10 Apr 2024 21:44:10 GMT x-amz-version-id: JdSJSDd4bnNFPjlwdZ2RC7ixUU_rrhPQ ETag: "f4ec9657a3dc111d088e2eca7b9796a4" Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 56317bf75183e752b06c880e8a1e502a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: X_mtfkdHEFsJf8o_PdQGfTGBVxgbe_Sv2P-g-ZpoHj0WMYkg2Q2-lQ==
2024-10-11 22:48:07 UTC	8444	IN	Data Raw: 1f 8b 08 08 4d 04 17 66 00 03 62 75 69 6c 64 2e 6d 69 6e 2e 6a 73 00 ed bd 79 5f db c8 b2 30 fc 3f 9f 42 68 72 89 34 16 c2 26 c9 2c 52 14 bf 04 48 c2 4c 16 06 48 32 33 84 e3 db 5a 6c 14 6c cb 58 36 4b c0 ef 67 7f aa aa bb a5 6e 49 06 66 ce 39 f7 79 7e f7 77 ce 12 ac 5e aa b7 ea ea aa ea aa 6a ab 3f 1f 47 b3 34 1b 5b b6 71 b3 f1 fd ca 8a b1 9d 4d ae a7 e9 e0 74 66 1c 9d 26 c6 f6 30 cb e7 d3 c4 78 9b 86 53 36 bd 36 b6 e6 b3 d3 6c 9a bb 2b c6 e1 fe ce ef eb 6f d3 28 19 e7 c9 fa 5e 9c 8c 67 69 3f 4d a6 9e b1 35 61 d1 69 b2 be e9 b6 57 be df 58 b9 60 53 83 b1 c0 94 ed 98 41 30 bb 9e 24 59 df f8 10 7e 4d a2 99 1b 27 fd 74 9c ec 4f b3 49 32 9d a5 49 de 6d 4a bf f6 8a 7e 32 27 74 22 fb 26 ed 5b 2c 08 b6 a6 53 76 ed 4e a6 d9 2c 43 a8 b7 b7 90 26 ea 17 89 f6 34 99 Data Ascii: Mfbuild.min.jsy_0?Bhr4&,RHLH23ZllX6KgnIf9y~w^j?G4[qMtf&0xS66l+o(^gi?M5aiWX`SA0$Y~M'tOI2ImJ~2't"&[,SvN,C&4
2024-10-11 22:48:07 UTC	2864	IN	Data Raw: 8d b4 1c 64 29 cb f6 2c 86 16 c4 fc f2 62 fb 34 1d c6 d0 8c b3 a4 fc ef 18 0e da a4 35 46 0b e7 c6 62 91 2c 36 cc a0 27 0e ca 82 8a 88 f3 41 1c 7f 5c 74 e5 61 2b ca 78 ab 70 be cd 99 2f fc 6c d7 d6 30 88 0a 05 7a 6a b5 44 94 06 89 89 85 5a b1 67 b6 28 df 19 04 6d 0c e9 51 c8 8e 65 8c 60 bb 6b ae 11 de 98 9e b9 36 c9 72 7e 29 10 98 a8 24 93 e4 20 ee 36 9c e7 3b cc 3a e5 72 bb 60 88 e6 41 61 b3 57 98 54 29 4c 19 cf 3c 3e 3b 51 19 d1 85 ff da ba 72 46 ce 25 45 72 f4 13 4b 84 f4 3d 10 1b 70 06 70 62 03 20 01 e2 91 36 e5 59 fb 29 70 e9 e7 40 af 1a e0 0d 65 2b 2e b1 8c b2 13 73 04 4c b5 87 30 db 4c 43 4d 2b 6c 59 ed 17 ca cc 74 71 46 ba 18 58 d7 6e 01 5f 33 68 45 fc a7 3e 7f 1b d1 06 cd 1c a9 c2 83 0e 2f 0e 9f 62 e2 81 03 3a 73 94 61 d6 c6 15 82 94 7c 06 23 0b Data Ascii: d),b45Fb,6'A\ta+xp/l0zjDZg(mQe`k6r~)$ 6;:r`AaWT)L<>;QrF%ErK=ppb 6Y)p@e+.sL0LCM+lYtqFXn_3hE>/b:sa\|#
2024-10-11 22:48:07 UTC	1432	IN	Data Raw: c0 67 05 e3 cf 65 80 8a 9c cc a5 01 21 d8 b6 75 71 8d e7 f1 cd fe 5d d8 81 ff 3e d1 4e 90 ef 92 3e fe 57 11 b3 db fe 7d d2 00 97 34 e5 19 d8 20 ce 73 91 53 93 88 3c e2 55 85 00 b4 f5 74 fb 87 27 3f ab 6d 0a 36 5b 9e 73 7c 98 9a d8 29 a4 9f 86 99 d2 28 99 aa b6 20 92 a1 ef 5c 2e a3 94 e3 5f 97 95 65 97 2a 1a 88 65 3c 5a 45 ab a0 0f 55 19 e9 4f d1 cf d1 e6 cf 8d 2d 46 9d f8 47 6c 71 81 cf d3 af 54 b4 81 44 5c 3f ff 87 b8 fe 87 b8 fe af 23 ae 88 ec 35 0d 37 e1 fb 1f ff c1 f7 ff e0 fb ff 4a 7c 2f 6f 6d 08 d1 7f c7 1b ab ff a0 fa 7f 50 fd 7f 1b aa db de ca 7f f0 fa 3f 78 fd bf 0e af 7d 44 6b 7c b7 d6 67 ee 3b 41 bc d1 40 a3 b8 42 93 aa 69 d3 b9 c3 31 05 ed 55 d0 ff 59 f5 4b 89 30 aa 4d ec a6 b1 74 bf 10 b6 06 eb 94 81 6e 29 98 4b 56 51 47 ef de 16 ad fe 3b ee Data Ascii: ge!uq]>N>W}4 sS<Ut'?m6[s\|)( \._e*e<ZEUO-FGlqTD\?#57J\|/omP?x}Dk\|g;A@Bi1UYK0Mtn)KVQG;
2024-10-11 22:48:07 UTC	10024	IN	Data Raw: d6 81 7e 16 b3 0f ab f7 58 87 5a 3e 83 45 c5 95 04 59 a9 fe af 89 91 50 ea 7c 41 11 53 48 61 10 a2 82 41 08 83 65 f3 4d ee b7 b8 e4 2c 45 56 e0 c5 73 a6 16 d2 f4 51 e5 aa d0 bd 21 d0 06 4e 6f 01 3d d8 14 98 d9 c0 ec 09 83 62 5c 68 cb e2 af cc e0 1b 80 22 70 6c 97 b9 53 e6 31 37 63 84 92 4c 8e 08 79 f5 77 dd 82 6d f5 2c 16 08 de 46 f2 34 b6 13 91 fb 45 c9 e4 c6 91 74 f1 55 58 f7 c4 1a 38 f3 66 4f 5c 0c d2 32 0f 06 0e 0f d4 32 08 06 c4 5f 4b a1 2e 2c 85 ba fe dd 42 5d a8 0a 75 fd 66 a1 ae c1 bd 23 74 0f ba 31 67 e6 55 77 95 23 0c 58 79 40 0c bc d7 90 bd da 26 87 96 81 1b b3 ae d5 d0 57 9d 51 e4 7d e1 aa 9c 23 e8 fd 68 69 bf 97 d7 7b c9 47 72 66 3b 87 61 cd 7f 44 ba 5f 98 b6 f3 0e 25 a2 77 d6 7d 9e 27 28 d7 83 7c 32 b7 6c 58 d5 66 8f 65 84 e4 3f 14 92 bf 32 Data Ascii: ~XZ>EYP\|ASHaAeM,EVsQ!No=b\h"plS17cLywm,F4EtUX8fO\22_K.,B]uf#t1gUw#Xy@&WQ}#hi{Grf;aD_%w}'(\|2lXfe?2
2024-10-11 22:48:07 UTC	667	IN	Data Raw: 01 0e 0f 87 2b e5 6e 5e d2 16 bc 25 f4 a6 94 10 6e 6f a5 ab bc 39 9b ce 45 c7 76 b9 34 6a 3b bc 87 6d 0e 40 c1 60 d8 23 65 92 60 f5 84 f0 42 3c 6c 85 1d df da df 3b 00 aa 0a dc 56 b2 2d bc ef 96 dd d1 3d 72 07 68 f1 d4 08 49 b3 40 d7 a4 10 81 61 9f 85 ee 15 5d d6 2b 5d d8 79 b7 b5 cf e0 7c ce 81 0d dd dd dd 5a 82 e0 28 6e 70 24 27 05 76 f0 62 15 af bf 50 11 d0 c1 bf 5d 4b 63 a0 ff bb 0e d7 33 1e dd 8c 16 c6 08 0e 06 e4 99 c3 0c 0a b3 b1 63 00 15 35 06 c0 47 3e ba e9 2f fe db 16 41 04 28 ca af 45 0f ce 26 f8 f8 d2 20 e5 a1 36 12 ba 76 88 f7 81 bd 26 36 94 bb 66 6d e3 f4 61 b4 11 2c 80 1a d7 f8 23 e0 3f ca 37 1f f1 ae b6 c8 96 ce 4f 7e 82 ee 49 89 5b 80 86 69 45 61 b2 19 6c 10 51 66 13 c8 40 78 4d e9 97 b7 a5 17 c5 25 6c 22 7a ee 83 9b 29 f7 4b 31 23 e1 12 Data Ascii: +n^%no9Ev4j;m@`#e`B<l;V-=rhI@a]+]y\|Z(np$'vbP]Kc3c5G>/A(E& 6v&6fma,#?7O~I[iEalQf@xM%l"z)K1#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.8	49818	35.244.159.8	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:07 UTC	619	OUT	GET /w/1.0/sd?id=537148856&val=ZwmrIgAIc-zJMAA9 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://redcross.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:07 UTC	489	IN	HTTP/1.1 302 Found Server: OXGW/0.0.0 Date: Fri, 11 Oct 2024 22:48:06 GMT Content-Length: 0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/sd?cc=1&id=537148856&val=ZwmrIgAIc-zJMAA9 Set-Cookie: i=1cedf4d0-8247-4969-bd96-110a7773066d\|1728686887; Version=1; Expires=Sat, 11-Oct-2025 22:48:07 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.8	49811	157.240.0.6	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:07 UTC	1376	OUT	GET /signals/config/1599953746963987?v=2.9.170&r=stable&domain=www.redcrossblood.org&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://4706068.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:07 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-11 22:48:07 UTC	1669	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-11 22:48:07 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-11 22:48:07 UTC	13829	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-11 22:48:07 UTC	16384	IN	Data Raw: 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 2e 67 65 74 28 64 2e 69 64 2c 22 70 72 6f 68 69 62 69 74 65 64 53 6f 75 72 63 65 73 22 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 69 28 66 2e 70 72 6f 68 69 62 69 74 65 64 53 6f 75 72 63 65 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 64 6f 6d 61 69 6e 21 3d 6e 75 6c 6c 26 26 62 2e 64 6f 6d 61 69 6e 3d 3d 3d 6a 28 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 7d 29 2e 6c 65 6e 67 74 68 3e 30 3b 66 26 26 28 65 2e 6c 6f 63 6b 73 2e 6c 6f 63 6b 28 22 70 72 6f 68 69 62 69 74 65 64 5f 73 6f 75 72 63 65 73 5f 22 2b 63 29 2c 67 2e 63 6f 6e 73 6f 6c 65 57 61 72 6e 28 22 5b 66 62 70 69 78 65 6c 5d 20 22 2b 64 2e 69 64 2b 22 20 69 73 20 75 Data Ascii: d==null)return;var f=b.get(d.id,"prohibitedSources");if(f==null)return;f=i(f.prohibitedSources,function(b){return b.domain!=null&&b.domain===j(a.location.hostname)}).length>0;f&&(e.locks.lock("prohibited_sources_"+c),g.consoleWarn("[fbpixel] "+d.id+" is u
2024-10-11 22:48:07 UTC	16384	IN	Data Raw: 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 Data Ascii: story);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",log
2024-10-11 22:48:07 UTC	16384	IN	Data Raw: 70 76 22 2c 71 3d 22 63 68 66 76 22 2c 72 3d 5b 6f 2c 70 2c 71 5d 2c 73 3d 5b 5d 2c 74 3d 32 30 30 2c 75 3d 6e 65 77 20 4d 61 70 28 29 2c 76 3d 6e 75 6c 6c 2c 77 3d 21 30 3b 66 75 6e 63 74 69 6f 6e 20 78 28 62 2c 65 2c 61 29 7b 77 3d 21 31 3b 77 68 69 6c 65 28 61 2e 6c 65 6e 67 74 68 3e 30 29 7b 62 3d 61 2e 73 68 69 66 74 28 29 3b 76 61 72 20 66 3d 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 7c 7c 6e 65 77 20 63 28 29 2c 67 3d 21 30 2c 68 3d 21 31 2c 69 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6a 3d 72 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 6b 3b 21 28 67 3d 28 6b 3d 6a 2e 6e 65 78 74 28 29 29 2e 64 Data Ascii: pv",q="chfv",r=[o,p,q],s=[],t=200,u=new Map(),v=null,w=!0;function x(b,e,a){w=!1;while(a.length>0){b=a.shift();var f=b.customParams\|\|new c(),g=!0,h=!1,i=void 0;try{for(var j=r[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),k;!(g=(k=j.next()).d
2024-10-11 22:48:07 UTC	2554	IN	Data Raw: 36 33 32 61 32 37 34 35 65 38 35 63 32 39 33 65 35 61 61 63 30 38 36 33 33 37 30 64 39 62 64 33 33 33 30 62 39 39 33 38 63 30 30 63 61 64 66 64 32 31 35 32 32 37 64 37 37 22 2c 22 63 63 63 37 66 31 39 33 32 61 65 31 39 35 66 62 65 65 61 30 66 35 32 64 64 65 66 31 32 32 37 61 62 33 30 35 37 38 66 65 65 32 37 39 37 64 31 36 39 38 36 66 63 62 31 34 35 66 36 37 34 35 37 35 22 2c 22 64 63 61 38 33 65 37 31 37 62 31 66 36 34 65 62 31 34 31 30 35 37 61 37 34 31 35 61 33 33 30 61 64 31 33 36 31 66 35 31 37 30 33 65 66 61 32 65 34 37 37 36 66 34 30 30 34 37 38 39 38 61 30 34 22 2c 22 63 65 61 65 65 65 33 63 30 66 39 31 63 36 63 38 35 33 62 64 61 35 32 30 30 65 66 62 35 61 31 62 39 34 63 38 35 66 64 38 62 62 32 31 31 37 31 30 34 37 63 62 64 31 39 30 35 39 63 31 35 Data Ascii: 632a2745e85c293e5aac0863370d9bd3330b9938c00cadfd215227d77","ccc7f1932ae195fbeea0f52ddef1227ab30578fee2797d16986fcb145f674575","dca83e717b1f64eb141057a7415a330ad1361f51703efa2e4776f40047898a04","ceaeee3c0f91c6c853bda5200efb5a1b94c85fd8bb21171047cbd19059c15
2024-10-11 22:48:07 UTC	11291	IN	Data Raw: 64 5f 64 65 73 74 69 6e 61 74 69 6f 6e 73 22 3a 74 72 75 65 2c 22 73 75 67 67 65 73 74 65 64 5f 68 6f 6d 65 5f 6c 69 73 74 69 6e 67 73 22 3a 74 72 75 65 2c 22 73 75 67 67 65 73 74 65 64 5f 68 6f 74 65 6c 73 22 3a 74 72 75 65 2c 22 73 75 67 67 65 73 74 65 64 5f 6a 6f 62 73 22 3a 74 72 75 65 2c 22 73 75 67 67 65 73 74 65 64 5f 6c 6f 63 61 6c 5f 73 65 72 76 69 63 65 5f 62 75 73 69 6e 65 73 73 65 73 22 3a 74 72 75 65 2c 22 73 75 67 67 65 73 74 65 64 5f 6c 6f 63 61 74 69 6f 6e 5f 62 61 73 65 64 5f 69 74 65 6d 73 22 3a 74 72 75 65 2c 22 73 75 67 67 65 73 74 65 64 5f 76 65 68 69 63 6c 65 73 22 3a 74 72 75 65 2c 22 74 72 61 6e 73 6d 69 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 74 72 61 76 65 6c 5f 63 6c 61 73 73 22 3a 74 72 75 65 2c 22 74 72 61 76 65 6c 5f 65 6e 64 Data Ascii: d_destinations":true,"suggested_home_listings":true,"suggested_hotels":true,"suggested_jobs":true,"suggested_local_service_businesses":true,"suggested_location_based_items":true,"suggested_vehicles":true,"transmission":true,"travel_class":true,"travel_end

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.8	49814	157.240.0.6	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:07 UTC	1532	OUT	GET /signals/config/1731308323821672?v=2.9.170&r=stable&domain=www.redcrossblood.org&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C145%2C172%2C158%2C117%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C127 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:07 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-11 22:48:07 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-11 22:48:07 UTC	907	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-11 22:48:07 UTC	15477	IN	Data Raw: 48 45 52 0a 2a 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 54 4f 52 54 20 4f 52 20 4f 54 48 45 52 57 49 53 45 2c 20 41 52 49 53 49 4e 47 20 46 52 4f 4d 2c 20 4f 55 54 20 4f 46 20 4f 52 20 49 4e 0a 2a 20 43 4f 4e 4e 45 43 54 49 4f 4e 20 57 49 54 48 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 4f 52 20 54 48 45 20 55 53 45 20 4f 52 20 4f 54 48 45 52 20 44 45 41 4c 49 4e 47 53 20 49 4e 20 54 48 45 20 53 4f 46 54 57 41 52 45 2e 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 Data Ascii: HER* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.*/(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance
2024-10-11 22:48:07 UTC	1500	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 75 28 61 2c 62 29 7d 29 2c 63 3d 21 30 29 3a 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 61 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 67 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 61 29 3b 69 66 28 21 63 29 7b 76 61 72 20 64 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 45 28 29 3f 28 67 2e 63 62 71 2e 65 73 74 4c 69 73 74 65 6e 65 72 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 75 28 61 2c 62 29 7d 29 2c 62 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 62 2e 72 65 6d 6f Data Ascii: function(a,b){u(a,b)}),c=!0):b.addEventListener?b.addEventListener("click",a,{capture:!0,once:!1,passive:!0}):g.attachEvent("onclick",a);if(!c){var d=setTimeout(function c(){E()?(g.cbq.estListener.listen(function(a,b){u(a,b)}),b.removeEventListener?b.remo
2024-10-11 22:48:07 UTC	14884	IN	Data Raw: 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 Data Ascii: d correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeve
2024-10-11 22:48:07 UTC	1500	IN	Data Raw: 75 73 22 3a 22 41 43 54 49 56 45 22 2c 22 72 75 6c 65 5f 69 64 22 3a 22 33 30 36 38 37 39 34 30 33 32 33 31 34 31 39 22 7d 2c 7b 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 7b 22 74 79 70 65 22 3a 31 2c 22 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 7b 22 74 61 72 67 65 74 54 79 70 65 22 3a 31 2c 22 65 78 74 72 61 63 74 6f 72 22 3a 32 2c 22 6f 70 65 72 61 74 6f 72 22 3a 32 2c 22 61 63 74 69 6f 6e 22 3a 31 2c 22 76 61 6c 75 65 22 3a 22 64 6f 6e 61 74 65 22 7d 5d 7d 2c 22 64 65 72 69 76 65 64 5f 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 22 44 6f 6e 61 74 65 22 2c 22 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 73 22 3a 5b 31 5d 2c 22 72 75 6c 65 5f 73 74 61 74 75 73 22 3a 22 41 43 54 49 56 45 22 2c 22 72 75 6c 65 5f 69 64 22 3a 22 32 31 36 33 31 39 39 31 30 33 39 35 30 32 35 36 Data Ascii: us":"ACTIVE","rule_id":"306879403231419"},{"condition":{"type":1,"conditions":[{"targetType":1,"extractor":2,"operator":2,"action":1,"value":"donate"}]},"derived_event_name":"Donate","transformations":[1],"rule_status":"ACTIVE","rule_id":"2163199103950256
2024-10-11 22:48:07 UTC	1500	IN	Data Raw: 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 65 76 65 6e 74 76 61 6c 69 64 61 74 69 6f 6e 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 31 37 33 31 33 30 38 33 32 33 38 32 31 36 37 32 22 2c 20 22 45 76 65 6e 74 56 61 6c 69 64 61 74 69 6f 6e 22 2c 20 74 72 75 65 29 3b 0a 63 6f 6e 66 69 67 2e 73 65 74 28 22 31 37 33 31 33 30 38 33 32 33 38 32 31 36 37 32 22 2c 20 22 70 72 6f 74 65 63 74 65 64 44 61 74 61 4d 6f 64 65 22 2c 20 7b 22 73 74 61 6e 64 61 72 64 50 61 72 61 6d 73 22 3a 7b 22 6c 65 61 64 5f 65 76 65 6e 74 5f 73 6f 75 72 63 65 22 3a 74 72 75 65 2c 22 6e 65 74 5f 72 65 76 65 6e 75 65 22 3a 74 72 75 65 2c 22 70 72 65 64 69 63 74 65 64 5f 6c 74 76 22 3a 74 72 75 65 2c 22 70 72 6f 64 75 63 74 5f 63 61 74 61 6c 6f 67 5f 69 64 22 3a 74 72 75 65 Data Ascii: q.loadPlugin("eventvalidation");instance.optIn("1731308323821672", "EventValidation", true);config.set("1731308323821672", "protectedDataMode", {"standardParams":{"lead_event_source":true,"net_revenue":true,"predicted_ltv":true,"product_catalog_id":true
2024-10-11 22:48:07 UTC	2660	IN	Data Raw: 5f 76 65 68 69 63 6c 65 73 22 3a 74 72 75 65 2c 22 74 72 61 6e 73 6d 69 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 74 72 61 76 65 6c 5f 63 6c 61 73 73 22 3a 74 72 75 65 2c 22 74 72 61 76 65 6c 5f 65 6e 64 22 3a 74 72 75 65 2c 22 74 72 61 76 65 6c 5f 73 74 61 72 74 22 3a 74 72 75 65 2c 22 74 72 69 6d 22 3a 74 72 75 65 2c 22 75 73 65 72 5f 62 75 63 6b 65 74 22 3a 74 72 75 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 69 6e 22 3a 74 72 75 65 2c 22 79 65 61 72 22 3a 74 72 75 65 7d 7d 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 70 72 6f 74 65 63 74 65 64 64 61 74 61 6d 6f 64 65 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 31 37 33 31 33 30 38 33 32 33 38 32 31 36 37 32 22 2c 20 22 50 72 6f 74 65 63 74 65 64 44 61 74 61 4d 6f 64 65 Data Ascii: _vehicles":true,"transmission":true,"travel_class":true,"travel_end":true,"travel_start":true,"trim":true,"user_bucket":true,"value":true,"vin":true,"year":true}});fbq.loadPlugin("protecteddatamode");instance.optIn("1731308323821672", "ProtectedDataMode
2024-10-11 22:48:07 UTC	4064	IN	Data Raw: 2c 22 4d 41 4e 55 41 4c 22 2c 22 4f 54 48 45 52 22 2c 22 4e 4f 4e 45 22 5d 7d 5d 2c 22 73 74 61 74 65 5f 6f 66 5f 76 65 68 69 63 6c 65 22 3a 5b 7b 22 72 65 71 75 69 72 65 5f 65 78 61 63 74 5f 6d 61 74 63 68 22 3a 74 72 75 65 2c 22 70 6f 74 65 6e 74 69 61 6c 5f 6d 61 74 63 68 65 73 22 3a 5b 22 4e 45 57 22 2c 22 55 53 45 44 22 2c 22 43 50 4f 22 5d 7d 5d 2c 22 6d 69 6c 65 61 67 65 2e 75 6e 69 74 22 3a 5b 7b 22 72 65 71 75 69 72 65 5f 65 78 61 63 74 5f 6d 61 74 63 68 22 3a 74 72 75 65 2c 22 70 6f 74 65 6e 74 69 61 6c 5f 6d 61 74 63 68 65 73 22 3a 5b 22 4b 4d 22 2c 22 4d 49 22 5d 7d 5d 2c 22 66 75 65 6c 5f 74 79 70 65 22 3a 5b 7b 22 72 65 71 75 69 72 65 5f 65 78 61 63 74 5f 6d 61 74 63 68 22 3a 74 72 75 65 2c 22 70 6f 74 65 6e 74 69 61 6c 5f 6d 61 74 63 68 65 Data Ascii: ,"MANUAL","OTHER","NONE"]}],"state_of_vehicle":[{"require_exact_match":true,"potential_matches":["NEW","USED","CPO"]}],"mileage.unit":[{"require_exact_match":true,"potential_matches":["KM","MI"]}],"fuel_type":[{"require_exact_match":true,"potential_matche
2024-10-11 22:48:07 UTC	1500	IN	Data Raw: 2c 22 70 6f 74 65 6e 74 69 61 6c 5f 6d 61 74 63 68 65 73 22 3a 5b 22 5e 28 5b 5c 5c 28 5c 5c 7b 5c 5c 5b 5d 3f 29 5c 5c 73 2a 28 5b 5c 22 27 5d 3f 29 28 2e 7b 30 2c 32 30 34 38 7d 29 3f 5b 5c 22 27 5d 3f 5c 5c 73 2a 28 2c 5c 5c 73 2a 5b 5c 22 27 5d 3f 28 2e 7b 30 2c 32 30 34 38 7d 29 5b 5c 22 27 5d 3f 5c 5c 73 2a 29 2a 2c 3f 5b 5c 5c 29 5c 5c 7d 5c 5c 5d 5d 3f 24 22 5d 7d 5d 2c 22 73 75 67 67 65 73 74 65 64 5f 68 6f 74 65 6c 73 22 3a 5b 7b 22 72 65 71 75 69 72 65 5f 65 78 61 63 74 5f 6d 61 74 63 68 22 3a 66 61 6c 73 65 2c 22 70 6f 74 65 6e 74 69 61 6c 5f 6d 61 74 63 68 65 73 22 3a 5b 22 5e 28 5b 5c 5c 28 5c 5c 7b 5c 5c 5b 5d 3f 29 5c 5c 73 2a 28 5b 5c 22 27 5d 3f 29 28 2e 7b 30 2c 32 30 34 38 7d 29 3f 5b 5c 22 27 5d 3f 5c 5c 73 2a 28 2c 5c 5c 73 2a 5b 5c Data Ascii: ,"potential_matches":["^([\$\\{\\[]?)\\s([\"']?)(.{0,2048})?[\"']?\\s(,\\s[\"']?(.{0,2048})[\"']?\\s),?[\$\\}\\]]?$"]}],"suggested_hotels":[{"require_exact_match":false,"potential_matches":["^([\\(\\{\\[]?)\\s([\"']?)(.{0,2048})?[\"']?\\s(,\\s[\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.8	49815	157.240.251.35	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:07 UTC	939	OUT	GET /tr/?id=1599953746963987&ev=PageView&dl=https%3A%2F%2Fwww.redcrossblood.org&rl=&if=false&ts=1728686885745&sw=1280&sh=1024&v=2.9.170&r=stable&a=adobe_launch&ec=0&o=4124&fbp=fb.1.1728686885735.994445313720174329&pm=1&hrl=a461c4&ler=empty&cdl=API_unavailable&it=1728686879974&coo=false&cs_cc=1&cas=25946852104906138%2C25115343601446968%2C6660002284063960&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:07 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 11 Oct 2024 22:48:07 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.8	49816	157.240.251.35	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:07 UTC	1031	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1599953746963987&ev=PageView&dl=https%3A%2F%2Fwww.redcrossblood.org&rl=&if=false&ts=1728686885745&sw=1280&sh=1024&v=2.9.170&r=stable&a=adobe_launch&ec=0&o=4124&fbp=fb.1.1728686885735.994445313720174329&pm=1&hrl=a461c4&ler=empty&cdl=API_unavailable&it=1728686879974&coo=false&cs_cc=1&cas=25946852104906138%2C25115343601446968%2C6660002284063960&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:07 UTC	795	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7424653646577450467", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7424653646577450467"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-11 22:48:07 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-11 22:48:07 UTC	1673	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-10-11 22:48:07 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.8	49817	185.89.210.122	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:07 UTC	819	OUT	GET /bounce?%2Fsetuid%3Fentity%3D158%26code%3DZwmrIgAIc-zJMAA9 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://redcross.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=T9EBTAT2N3TXk5VsygPNvCle9dQQTGPN_lssDkqgqZL7jGSkapc76TjGCr7TzZgLf0wt3jVBPK9OI06tOW_1bQhIFRX4ZPML0W0LHxq_l9s.; receive-cookie-deprecation=1; uuid2=8187182774765916003
2024-10-11 22:48:07 UTC	1588	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 11 Oct 2024 22:48:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 8365496d-45f2-473c-9181-cbfec681c84a Set-Cookie: XANDR_PANID=T9EBTAT2N3TXk5VsygPNvCle9dQQTGPN_lssDkqgqZL7jGSkapc76TjGCr7TzZgLf0wt3jVBPK9OI06tOW_1bQhIFRX4ZPML0W0LHxq_l9s.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 09-Jan-2025 22:48:07 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4.FErk#WF']wIg2E>?h1RYn!]tbPl1MwL(!R7qUY#QvHRWWGYQ%qQU)aaPYW^hxG[ls-<QG=%9sk?bIRwi:w9Ld1syFi%_pSf?(lOfM!wwdE*j7U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 09-Jan-2025 22:48:07 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 29-Sep-2034 22:48:07 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8187182774765916003; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 09-Jan-2025 22:48:07 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-10-11 22:48:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.8	49820	150.171.28.10	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:07 UTC	537	OUT	GET /p/action/36000116.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:07 UTC	570	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 371 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 55C79CD0758E4AE6A2C6BD207EAD9D6E Ref B: EWR30EDGE0119 Ref C: 2024-10-11T22:48:07Z Date: Fri, 11 Oct 2024 22:48:07 GMT Connection: close
2024-10-11 22:48:07 UTC	371	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 63 2c 6b 2c 61 2c 62 2c 74 2c 65 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 73 20 3d 20 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 0d 0a 20 20 20 20 69 66 20 28 63 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 6f 20 3d 20 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 65 74 6f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 6f 20 26 26 20 77 5b 75 6f 5d 20 26 26 20 74 79 70 65 6f 66 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 28 7b 27 63 6f 27 3a 20 63 2c 20 27 6b 63 27 3a 20 6b 2c 20 27 61 74 27 3a Data Ascii: (function(w,d,c,k,a,b,t,e) { var cs = d.currentScript; if (cs) { var uo = cs.getAttribute('data-ueto'); if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') { w[uo].setUserSignals({'co': c, 'kc': k, 'at':

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.8	49813	154.59.122.94	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:07 UTC	1248	OUT	GET /pj?pk=6890959346797160070&pu=https%3A%2F%2F4706068.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCP_jvLy0h4kDFXiK_Qcdcq0Gig%3Bsrc%3D4706068%3Btype%3Drcbnew%3Bcat%3Drcbne0%3Bord%3D4722219042743%3Bnpa%3D0%3Bauiddc%3D1616239341.1728686880%3Bps%3D1%3Bpcor%3D2078001472%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe4a90v9189992675za200%3Bgcd%3D13l3l3l3l1l1%3Bdma%3D0%3Btag_exp%3D101533421~101671035~101686685%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.redcrossblood.org%252Fgive.html%252F404%3F&pixelKey=6890959346797160070 HTTP/1.1 Host: e.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://4706068.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:07 UTC	207	IN	HTTP/1.1 204 No Content set-cookie: auid=1097574414485; Domain=acuityplatform.com; Expires=Sat, 11-Oct-2025 22:48:07 GMT; Path=/; SameSite=None; Secure access-control-allow-origin: * connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.8	49823	63.140.62.17	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:07 UTC	452	OUT	GET /ee/irl1/v1/interact?configId=8e7ed3d9-5254-4632-b3b4-a45c9fec6d88&requestId=85186c0b-8788-4c2b-bb4a-79a55fc4db16 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:07 UTC	419	IN	HTTP/1.1 404 Not Found x-request-id: 85186c0b-8788-4c2b-bb4a-79a55fc4db16 vary: Origin date: Fri, 11 Oct 2024 22:48:07 GMT x-konductor: N/A x-adobe-edge: IRL1;6 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.8	49831	172.64.151.101	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:07 UTC	464	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZwmrIgAIc-zJMAA9&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZwmrJUt3uakAAD4NABH8gAAA; CMPS=1237; CMPRO=1237
2024-10-11 22:48:08 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 22:48:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8d1265599a7f7d13-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZwmrJUt3uakAAD4NABH8gAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 11 Oct 2025 22:48:07 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPRO=1237; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 22:48:07 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qnds5Z3imGGx%2BjLVy5qraliKCvqqpXQEu6GLiClBWhl2GofLrbz1vai1G4orrTryHVFWJaEFtsQTpkbW8QjbCECldtX17zuaOOBuHbNKtnQrPbi%2BbuIqMF7QEuWN3d2rLQo37kGi2r22Cw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-10-11 22:48:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.8	49835	35.244.159.8	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:07 UTC	683	OUT	GET /w/1.0/sd?cc=1&id=537148856&val=ZwmrIgAIc-zJMAA9 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://redcross.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=1cedf4d0-8247-4969-bd96-110a7773066d\|1728686887
2024-10-11 22:48:08 UTC	366	IN	HTTP/1.1 200 OK Server: OXGW/0.0.0 Date: Fri, 11 Oct 2024 22:48:07 GMT Content-Type: image/gif Content-Length: 43 Vary: Accept Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-11 22:48:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.8	49832	150.171.27.10	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:07 UTC	342	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:08 UTC	651	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 50523 Content-Type: application/javascript Last-Modified: Thu, 19 Sep 2024 15:43:41 GMT Accept-Ranges: bytes ETag: "803483b3aaadb1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: B46412BDF818477BAFDFE33A1D5A5DC0 Ref B: EWR30EDGE1406 Ref C: 2024-10-11T22:48:08Z Date: Fri, 11 Oct 2024 22:48:07 GMT Connection: close
2024-10-11 22:48:08 UTC	2461	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-10-11 22:48:08 UTC	8192	IN	Data Raw: 72 63 68 61 73 65 22 2c 22 63 61 6e 63 65 6c 22 2c 22 6f 74 68 65 72 22 5d 7d 2c 66 6c 69 67 68 74 5f 73 74 61 72 74 64 61 74 65 3a 7b 74 79 70 65 3a 22 64 61 74 65 22 7d 2c 66 6c 69 67 68 74 5f 65 6e 64 64 61 74 65 3a 7b 74 79 70 65 3a 22 64 61 74 65 22 7d 2c 66 6c 69 67 68 74 5f 74 6f 74 61 6c 76 61 6c 75 65 3a 7b 74 79 70 65 3a 22 6e 75 6d 62 65 72 22 7d 2c 61 66 66 69 6c 69 61 74 69 6f 6e 3a 7b 7d 2c 62 72 73 5f 72 65 73 70 6f 6e 73 65 5f 69 64 3a 7b 7d 2c 63 68 65 63 6b 6f 75 74 5f 6f 70 74 69 6f 6e 3a 7b 7d 2c 63 68 65 63 6b 6f 75 74 5f 73 74 65 70 3a 7b 74 79 70 65 3a 22 69 6e 74 65 67 65 72 22 7d 2c 63 6f 6e 74 65 6e 74 5f 69 64 3a 7b 7d 2c 63 6f 6e 74 65 6e 74 5f 74 79 70 65 3a 7b 7d 2c 63 6f 75 70 6f 6e 3a 7b 7d 2c 63 75 72 72 65 6e 63 79 3a 7b Data Ascii: rchase","cancel","other"]},flight_startdate:{type:"date"},flight_enddate:{type:"date"},flight_totalvalue:{type:"number"},affiliation:{},brs_response_id:{},checkout_option:{},checkout_step:{type:"integer"},content_id:{},content_type:{},coupon:{},currency:{
2024-10-11 22:48:08 UTC	5355	IN	Data Raw: 21 31 3b 6f 2e 64 69 73 61 62 6c 65 56 69 73 69 62 69 6c 69 74 79 45 76 65 6e 74 73 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 56 69 73 69 62 69 6c 69 74 79 45 76 65 6e 74 73 3d 21 30 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 72 65 6d 6f 76 65 51 75 65 72 79 46 72 6f 6d 55 72 6c 73 3d 21 31 3b 6f 2e 72 65 6d 6f 76 65 51 75 65 72 79 46 72 6f 6d 55 72 6c 73 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 72 65 6d 6f 76 65 51 75 65 72 79 46 72 6f 6d 55 72 6c 73 3d 21 30 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 61 6c 6c 52 65 70 3d 21 31 3b 6f 2e 61 6c 6c 52 65 70 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 61 6c 6c 52 65 70 3d 21 30 29 3b 6c 3d 22 Data Ascii: !1;o.disableVisibilityEvents===!0&&(this.uetConfig.disableVisibilityEvents=!0);this.uetConfig.removeQueryFromUrls=!1;o.removeQueryFromUrls===!0&&(this.uetConfig.removeQueryFromUrls=!0);this.uetConfig.allRep=!1;o.allRep===!0&&(this.uetConfig.allRep=!0);l="
2024-10-11 22:48:08 UTC	8192	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 3b 68 3d 75 3d 3d 3d 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3f 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3a 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3b 74 68 69 73 2e 65 76 74 28 68 2c 75 2c 73 2c 6e 5b 32 5d 29 7d 65 6c 73 65 20 69 66 28 6e 5b 30 5d 3d 3d 3d 22 73 65 74 22 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 5b 31 5d 5b 30 5d 21 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 3b 66 6f 72 28 69 20 69 6e 20 6e 5b 31 5d 5b 30 5d 29 74 68 69 73 2e 6b 6e 6f 77 6e 50 61 72 61 6d 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 28 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 5b 69 5d 3d 6e 5b 31 5d 5b 30 5d 5b 69 5d 2c 69 3d 3d 3d 22 70 69 64 22 26 26 74 68 69 73 2e Data Ascii: undefined)return;h=u===this.pageViewEvt?this.pageLoadEvt:this.customEvt;this.evt(h,u,s,n[2])}else if(n[0]==="set"){if(typeof n[1][0]!="object")return;for(i in n[1][0])this.knownParams.hasOwnProperty(i)&&(this.pageLevelParams[i]=n[1][0][i],i==="pid"&&this.
2024-10-11 22:48:08 UTC	8192	IN	Data Raw: 6e 2e 6d 74 70 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 29 2c 6e 7d 3b 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 63 68 61 72 41 74 28 6e 2e 6c 65 6e 67 74 68 2d 31 29 3b 72 65 74 75 72 6e 28 74 3d 3d 3d 22 26 22 7c 7c 74 3d 3d 3d 22 3f 22 29 26 26 28 6e 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 31 29 29 2c 6e 7d 3b 74 68 69 73 2e 68 65 6c 70 65 72 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 74 3d 7b 65 72 72 4d 73 67 3a 6e 2c 74 61 67 49 64 3a 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 Data Ascii: n.mtp=navigator.maxTouchPoints),n};this.removeTrailingAmp=function(n){var t=n.charAt(n.length-1);return(t==="&"\|\|t==="?")&&(n=n.substring(0,n.length-1)),n};this.helperError=function(n){if(typeof CustomEvent=="function"){var t={errMsg:n,tagId:this.beaconPa
2024-10-11 22:48:08 UTC	8192	IN	Data Raw: 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 3e 30 3f 28 74 2e 70 61 67 65 74 79 70 65 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 61 67 65 54 79 70 65 28 74 2e 70 61 67 65 74 79 70 65 2c 74 68 69 73 2e 76 61 6c 69 64 52 65 74 61 69 6c 50 61 67 65 54 79 70 65 56 61 6c 75 65 73 29 2c 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 72 6f 64 49 64 28 74 2e 70 72 6f 64 69 64 29 29 29 3a 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 74 68 69 73 2e 74 68 72 6f 77 45 72 72 6f 72 28 74 68 69 73 2e 6d 69 73 73 69 6e 67 50 61 67 65 54 79 70 65 45 78 63 65 70 74 69 6f 6e Data Ascii: t.hasOwnProperty("pagetype")>0?(t.pagetype=this.validatePageType(t.pagetype,this.validRetailPageTypeValues),t.hasOwnProperty("prodid")>0&&(t.prodid=this.validateProdId(t.prodid))):t.hasOwnProperty("prodid")>0&&this.throwError(this.missingPageTypeException
2024-10-11 22:48:08 UTC	8192	IN	Data Raw: 75 3c 3d 33 3f 74 5b 69 5d 3d 22 22 3a 64 65 6c 65 74 65 20 74 5b 69 5d 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 29 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 49 6d 67 28 66 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 70 75 73 68 28 72 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 6c 65 6e 67 74 68 3e 32 30 26 26 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 73 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 Data Ascii: u<=3?t[i]="":delete t[i],r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r));this.fireBeaconImg(f);this.snippetEventQueue.push(r);this.snippetEventQueue.length>20&&this.snippetEventQueue.shift();try{typeof CustomEvent=="function"&&(s=new CustomEve
2024-10-11 22:48:08 UTC	1747	IN	Data Raw: 28 21 74 68 69 73 2e 69 73 41 64 53 74 6f 72 61 67 65 41 6c 6c 6f 77 65 64 28 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 69 3d 6e 3d 3d 3d 30 3f 74 68 69 73 2e 73 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3a 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 76 69 64 43 6f 6f 6b 69 65 2c 74 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 69 2c 22 22 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 29 7c 7c 28 74 3d 74 68 69 73 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 42 61 63 6b 75 70 28 69 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 29 2c 74 68 69 73 2e 69 6e 73 69 67 68 Data Ascii: (!this.isAdStorageAllowed())return null;var i=n===0?this.sessionCookieName:this.uetConfig.vidCookie,t=this.getCookie(i,"",this.insightsCookieMaxLength);return this.stringExists(t)\|\|(t=this.getLocalStorageBackup(i,this.insightsCookieMaxLength)),this.insigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.8	49826	198.47.127.205	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:07 UTC	682	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=ZwmrIgAIc-zJMAA9 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://redcross.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:08 UTC	664	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 11 Oct 2024 22:48:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_218=22978-ZwmrIgAIc-zJMAA9&KRTB&23194-ZwmrIgAIc-zJMAA9&KRTB&23209-ZwmrIgAIc-zJMAA9&KRTB&23244-ZwmrIgAIc-zJMAA9; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 09-Jan-2025 22:48:07 GMT; path=/ Set-Cookie: PugT=1728686887; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 10-Nov-2024 22:48:07 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-10-11 22:48:08 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.8	49825	99.86.4.58	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:07 UTC	610	OUT	GET /_r?sdk=web2.85.0&branch_key=key_live_mmHU3rrXl3U4GfMnF6H0sddfrzccH9ha&callback=branch_callback__0 HTTP/1.1 Host: app.link Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:08 UTC	741	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 91 Connection: close Server: openresty Date: Fri, 11 Oct 2024 22:48:08 GMT Set-Cookie: _s=LykGLh85jWOygP17vcgDWvqJ3d1VE7qgurfCEvo%2FbxstH%2BVrlRNg0oNTyYk8ausy; Max-Age=31536000; Domain=.app.link; Path=/; Expires=Sat, 11 Oct 2025 22:48:08 GMT; Secure; SameSite=None X-Content-Type-Options: nosniff ETag: W/"5b-nRE7ehQ76gJKdLJoOb8fMDzFn/8" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Platform-Version,Sec-CH-UA-Model X-Cache: Miss from cloudfront Via: 1.1 c05282a87474a55ae2a8dd2aa77d1232.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: ZNKnCO0vdwzIIDEglmd4WCcaNInHZgWJ7amiYUrPUcFbPylpHG2Jug==
2024-10-11 22:48:08 UTC	91	IN	Data Raw: 2f 2a 2a 2f 20 74 79 70 65 6f 66 20 62 72 61 6e 63 68 5f 63 61 6c 6c 62 61 63 6b 5f 5f 30 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 62 72 61 6e 63 68 5f 63 61 6c 6c 62 61 63 6b 5f 5f 30 28 22 31 33 37 33 34 31 39 32 33 31 33 30 38 31 34 31 30 37 31 22 29 3b Data Ascii: /**/ typeof branch_callback__0 === 'function' && branch_callback__0("1373419231308141071");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.8	49828	157.240.251.9	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	1189	OUT	GET /signals/config/1599953746963987?v=2.9.170&r=stable&domain=www.redcrossblood.org&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:08 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-11 22:48:08 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-11 22:48:08 UTC	1491	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-11 22:48:08 UTC	14893	IN	Data Raw: 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 Data Ascii: urn!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModu
2024-10-11 22:48:08 UTC	1491	IN	Data Raw: 61 29 2c 64 65 6c 65 74 65 20 63 5b 61 5d 29 7d 29 7d 7d 69 66 28 6b 2e 73 65 6e 73 69 74 69 76 65 5f 6b 65 79 73 21 3d 6e 75 6c 6c 29 7b 70 3d 6b 2e 73 65 6e 73 69 74 69 76 65 5f 6b 65 79 73 5b 66 5d 3b 69 66 28 70 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 71 3d 70 2e 63 64 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6a 28 71 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 28 61 29 3d 3d 3d 62 26 26 28 6c 3d 21 30 2c 6e 2e 70 75 73 68 28 62 29 2c 64 65 6c 65 74 65 20 63 5b 61 5d 29 7d 29 7d 29 7d 7d 6f 2e 75 6e 77 61 6e 74 65 64 50 61 72 61 6d 73 3d 6d 3b 6f 2e 72 65 73 74 72 69 63 74 65 64 50 61 72 61 6d 73 3d 6e 3b 69 66 28 6c 26 26 21 68 29 7b 6b 3d 6d 2e 6c 65 6e 67 74 68 3e 30 3b 66 3d 6e 2e 6c 65 Data Ascii: a),delete c[a])})}}if(k.sensitive_keys!=null){p=k.sensitive_keys[f];if(p!=null){var q=p.cd;Object.keys(c).forEach(function(a){j(q,function(b){i(a)===b&&(l=!0,n.push(b),delete c[a])})})}}o.unwantedParams=m;o.restrictedParams=n;if(l&&!h){k=m.length>0;f=n.le
2024-10-11 22:48:08 UTC	1491	IN	Data Raw: 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 22 72 6c 22 29 26 26 63 2e 72 6c 2e 6c 65 6e 67 74 68 3e 30 29 7b 6e 3d 6e 65 77 20 55 52 4c 28 63 2e 72 6c 29 3b 6d 3d 68 28 69 2c 6e 2c 6c 2c 66 2c 6a 29 3b 6b 26 26 6d 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6e 2e 73 65 61 72 63 68 3d 6d 2c 63 2e 72 6c 3d 6e 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 6b 26 26 67 2e 6c 6f 67 55 73 65 72 45 72 72 6f 72 28 7b 74 79 70 65 3a 22 55 4e 57 41 4e 54 45 44 5f 55 52 4c 5f 44 41 54 41 22 7d 29 3b 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 65 6e 64 3a 76 61 6c 69 64 61 74 65 55 72 6c 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e 69 64 29 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 Data Ascii: ype.hasOwnProperty.call(c,"rl")&&c.rl.length>0){n=new URL(c.rl);m=h(i,n,l,f,j);k&&m.length>0&&(n.search=m,c.rl=n.toString())}k&&g.logUserError({type:"UNWANTED_URL_DATA"});a.performanceMark("fbevents:end:validateUrlProcessing",b.id)})})})();return e.export
2024-10-11 22:48:08 UTC	13402	IN	Data Raw: 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 3b 76 61 72 20 62 3d 61 2e 69 6e 64 65 78 4f 66 28 22 41 6e 64 72 6f 69 64 22 29 3e 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 62 7d 65 2e 65 78 70 6f 72 74 73 3d 63 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 41 6e 64 72 6f 69 64 49 41 57 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 Data Ascii: exports:{}};e.exports;(function(){"use strict";var a=f.navigator;a=a.userAgent;var b=a.indexOf("Android")>=0;function c(){return b}e.exports=c})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetIsAndroidIAW",function(){return f
2024-10-11 22:48:08 UTC	1491	IN	Data Raw: 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 Data Ascii: (a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b
2024-10-11 22:48:08 UTC	1491	IN	Data Raw: 6f 72 69 67 69 6e 7d 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 3d 65 2e 70 6c 75 67 69 6e 43 6f 6e 66 69 67 2e 67 65 74 28 62 2c 22 70 72 6f 74 65 63 74 65 64 44 61 74 61 4d 6f 64 65 22 29 3b 69 66 28 69 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 6a 3d 69 2e 73 74 61 6e 64 61 72 64 50 61 72 61 6d 73 3b 67 28 64 28 63 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 20 69 6e 20 6a 7c 7c 64 65 6c 65 74 65 20 63 5b 61 5d 7d 29 7d 29 3b 76 61 72 20 6b 3d 36 3b 6f 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 66 29 7b 66 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 63 2e 69 64 2c 22 50 72 6f 74 65 63 74 65 64 44 61 74 61 4d 6f 64 65 22 29 3b 69 66 28 21 66 29 72 65 74 75 72 6e 7b 7d 3b 66 3d 65 2e 70 6c 75 Data Ascii: origin}if(c==null)return;i=e.pluginConfig.get(b,"protectedDataMode");if(i==null)return;var j=i.standardParams;g(d(c),function(a){a in j\|\|delete c[a]})});var k=6;o.listen(function(c,d,f){f=e.optIns.isOptedIn(c.id,"ProtectedDataMode");if(!f)return{};f=e.plu
2024-10-11 22:48:08 UTC	13402	IN	Data Raw: 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 67 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c Data Ascii: "},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=function(){function a(a,b){var c=[],d=!0,e=!1,f=void 0;try{for(var g=a[typeof Symbol==="function"?Symbol
2024-10-11 22:48:08 UTC	1491	IN	Data Raw: 28 7b 61 63 74 69 6f 6e 3a 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e Data Ascii: ({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.8	49833	142.250.184.230	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	1002	OUT	GET /activity;register_conversion=1;src=4706068;type=rcbnew;cat=rcbne0;ord=4722219042743;npa=0;auiddc=1616239341.1728686880;ps=1;pcor=2078001472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a90v9189992675za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101686685;epver=2;~oref=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkyjSlqriV2RfvPIlYWbUxXtVU034nTKoT3zN--VKDFKrEa2AJ8-iExxIM4tjA; ar_debug=1
2024-10-11 22:48:08 UTC	2949	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 11 Oct 2024 22:48:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"14059422195467041397"}],"aggregatable_trigger_data":[{"filters":[{"14":["7122039"]}],"key_piece":"0x8cfe7852a3924299","source_keys":["12","13","14","15","16","17","18","19","20","21","16736204","16736205","16736206","16736207","20560192","20560193","20560194","20560195","20561396","20561397","20561398","20561399","22946080","22946081","22946082","22946083","628857220","628857221","628857222","628857223","634860084","634860085","634860086","634860087","640939812","640939813","640939814","640939815"]},{"key_piece":"0x54eb60ff5a00329a","not_filters":{"14":["7122039"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","16736204","16736205","16736206","16736207","20560192","20560193","20560194","20560195","20561396","20561397","20561398","20561399","22946080","22946081","22946082","22946083","628857220","628857221","628857222","628857223","634860084","634860085","634860086","634860087","640939812","6409 [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 10-Nov-2024 22:48:08 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.8	49834	18.239.50.124	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	357	OUT	GET /branch-latest.min.js HTTP/1.1 Host: cdn.branch.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:08 UTC	536	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 23431 Connection: close Date: Fri, 11 Oct 2024 22:48:09 GMT Cache-Control: max-age=300 Content-Encoding: gzip Last-Modified: Wed, 10 Apr 2024 21:44:10 GMT x-amz-version-id: JdSJSDd4bnNFPjlwdZ2RC7ixUU_rrhPQ ETag: "f4ec9657a3dc111d088e2eca7b9796a4" Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 704c8a207b209dd3861e2faa8d55cc08.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: DVtw2jn3bhp5KsTiIBRGSUTjBhyXjY0bbYAwK0XAUlbe8fJcnWk7hQ==
2024-10-11 22:48:08 UTC	8444	IN	Data Raw: 1f 8b 08 08 4d 04 17 66 00 03 62 75 69 6c 64 2e 6d 69 6e 2e 6a 73 00 ed bd 79 5f db c8 b2 30 fc 3f 9f 42 68 72 89 34 16 c2 26 c9 2c 52 14 bf 04 48 c2 4c 16 06 48 32 33 84 e3 db 5a 6c 14 6c cb 58 36 4b c0 ef 67 7f aa aa bb a5 6e 49 06 66 ce 39 f7 79 7e f7 77 ce 12 ac 5e aa b7 ea ea aa ea aa 6a ab 3f 1f 47 b3 34 1b 5b b6 71 b3 f1 fd ca 8a b1 9d 4d ae a7 e9 e0 74 66 1c 9d 26 c6 f6 30 cb e7 d3 c4 78 9b 86 53 36 bd 36 b6 e6 b3 d3 6c 9a bb 2b c6 e1 fe ce ef eb 6f d3 28 19 e7 c9 fa 5e 9c 8c 67 69 3f 4d a6 9e b1 35 61 d1 69 b2 be e9 b6 57 be df 58 b9 60 53 83 b1 c0 94 ed 98 41 30 bb 9e 24 59 df f8 10 7e 4d a2 99 1b 27 fd 74 9c ec 4f b3 49 32 9d a5 49 de 6d 4a bf f6 8a 7e 32 27 74 22 fb 26 ed 5b 2c 08 b6 a6 53 76 ed 4e a6 d9 2c 43 a8 b7 b7 90 26 ea 17 89 f6 34 99 Data Ascii: Mfbuild.min.jsy_0?Bhr4&,RHLH23ZllX6KgnIf9y~w^j?G4[qMtf&0xS66l+o(^gi?M5aiWX`SA0$Y~M'tOI2ImJ~2't"&[,SvN,C&4
2024-10-11 22:48:08 UTC	2864	IN	Data Raw: 8d b4 1c 64 29 cb f6 2c 86 16 c4 fc f2 62 fb 34 1d c6 d0 8c b3 a4 fc ef 18 0e da a4 35 46 0b e7 c6 62 91 2c 36 cc a0 27 0e ca 82 8a 88 f3 41 1c 7f 5c 74 e5 61 2b ca 78 ab 70 be cd 99 2f fc 6c d7 d6 30 88 0a 05 7a 6a b5 44 94 06 89 89 85 5a b1 67 b6 28 df 19 04 6d 0c e9 51 c8 8e 65 8c 60 bb 6b ae 11 de 98 9e b9 36 c9 72 7e 29 10 98 a8 24 93 e4 20 ee 36 9c e7 3b cc 3a e5 72 bb 60 88 e6 41 61 b3 57 98 54 29 4c 19 cf 3c 3e 3b 51 19 d1 85 ff da ba 72 46 ce 25 45 72 f4 13 4b 84 f4 3d 10 1b 70 06 70 62 03 20 01 e2 91 36 e5 59 fb 29 70 e9 e7 40 af 1a e0 0d 65 2b 2e b1 8c b2 13 73 04 4c b5 87 30 db 4c 43 4d 2b 6c 59 ed 17 ca cc 74 71 46 ba 18 58 d7 6e 01 5f 33 68 45 fc a7 3e 7f 1b d1 06 cd 1c a9 c2 83 0e 2f 0e 9f 62 e2 81 03 3a 73 94 61 d6 c6 15 82 94 7c 06 23 0b Data Ascii: d),b45Fb,6'A\ta+xp/l0zjDZg(mQe`k6r~)$ 6;:r`AaWT)L<>;QrF%ErK=ppb 6Y)p@e+.sL0LCM+lYtqFXn_3hE>/b:sa\|#
2024-10-11 22:48:08 UTC	1432	IN	Data Raw: c0 67 05 e3 cf 65 80 8a 9c cc a5 01 21 d8 b6 75 71 8d e7 f1 cd fe 5d d8 81 ff 3e d1 4e 90 ef 92 3e fe 57 11 b3 db fe 7d d2 00 97 34 e5 19 d8 20 ce 73 91 53 93 88 3c e2 55 85 00 b4 f5 74 fb 87 27 3f ab 6d 0a 36 5b 9e 73 7c 98 9a d8 29 a4 9f 86 99 d2 28 99 aa b6 20 92 a1 ef 5c 2e a3 94 e3 5f 97 95 65 97 2a 1a 88 65 3c 5a 45 ab a0 0f 55 19 e9 4f d1 cf d1 e6 cf 8d 2d 46 9d f8 47 6c 71 81 cf d3 af 54 b4 81 44 5c 3f ff 87 b8 fe 87 b8 fe af 23 ae 88 ec 35 0d 37 e1 fb 1f ff c1 f7 ff e0 fb ff 4a 7c 2f 6f 6d 08 d1 7f c7 1b ab ff a0 fa 7f 50 fd 7f 1b aa db de ca 7f f0 fa 3f 78 fd bf 0e af 7d 44 6b 7c b7 d6 67 ee 3b 41 bc d1 40 a3 b8 42 93 aa 69 d3 b9 c3 31 05 ed 55 d0 ff 59 f5 4b 89 30 aa 4d ec a6 b1 74 bf 10 b6 06 eb 94 81 6e 29 98 4b 56 51 47 ef de 16 ad fe 3b ee Data Ascii: ge!uq]>N>W}4 sS<Ut'?m6[s\|)( \._e*e<ZEUO-FGlqTD\?#57J\|/omP?x}Dk\|g;A@Bi1UYK0Mtn)KVQG;
2024-10-11 22:48:08 UTC	10691	IN	Data Raw: d6 81 7e 16 b3 0f ab f7 58 87 5a 3e 83 45 c5 95 04 59 a9 fe af 89 91 50 ea 7c 41 11 53 48 61 10 a2 82 41 08 83 65 f3 4d ee b7 b8 e4 2c 45 56 e0 c5 73 a6 16 d2 f4 51 e5 aa d0 bd 21 d0 06 4e 6f 01 3d d8 14 98 d9 c0 ec 09 83 62 5c 68 cb e2 af cc e0 1b 80 22 70 6c 97 b9 53 e6 31 37 63 84 92 4c 8e 08 79 f5 77 dd 82 6d f5 2c 16 08 de 46 f2 34 b6 13 91 fb 45 c9 e4 c6 91 74 f1 55 58 f7 c4 1a 38 f3 66 4f 5c 0c d2 32 0f 06 0e 0f d4 32 08 06 c4 5f 4b a1 2e 2c 85 ba fe dd 42 5d a8 0a 75 fd 66 a1 ae c1 bd 23 74 0f ba 31 67 e6 55 77 95 23 0c 58 79 40 0c bc d7 90 bd da 26 87 96 81 1b b3 ae d5 d0 57 9d 51 e4 7d e1 aa 9c 23 e8 fd 68 69 bf 97 d7 7b c9 47 72 66 3b 87 61 cd 7f 44 ba 5f 98 b6 f3 0e 25 a2 77 d6 7d 9e 27 28 d7 83 7c 32 b7 6c 58 d5 66 8f 65 84 e4 3f 14 92 bf 32 Data Ascii: ~XZ>EYP\|ASHaAeM,EVsQ!No=b\h"plS17cLywm,F4EtUX8fO\22_K.,B]uf#t1gUw#Xy@&WQ}#hi{Grf;aD_%w}'(\|2lXfe?2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.8	49836	150.171.28.10	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	992	OUT	GET /action/0?ti=36000116&Ver=2&mid=4b408772-4a66-4de2-bd45-627b4428fe36&sid=e18a3ed0882211ef86434debddada293&vid=e18a7d30882211efb9ae97a772c9cfbd&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Schedule%20a%20Blood,%20Platelet%20or%20Plasma%20Donation%20%7C%20American%20Red%20Cross&p=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404&r=&lt=6461&evt=pageLoad&sv=1&cdb=AQAQ&rn=145956 HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:08 UTC	864	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MUID=0B73865488A46BCF2056934189BD6A9C; domain=.bing.com; expires=Wed, 05-Nov-2025 22:48:08 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: MR=0; domain=bat.bing.com; expires=Fri, 18-Oct-2024 22:48:08 GMT; path=/; SameSite=None; Secure; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 85E4B36788FD4FD59CEE03B0E3637EA0 Ref B: EWR30EDGE0317 Ref C: 2024-10-11T22:48:08Z Date: Fri, 11 Oct 2024 22:48:07 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.8	49838	150.171.27.10	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	356	OUT	GET /p/action/36000116.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:08 UTC	570	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 371 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: EB340B51B3F7490881F15AED2CDFBB54 Ref B: EWR30EDGE0306 Ref C: 2024-10-11T22:48:08Z Date: Fri, 11 Oct 2024 22:48:08 GMT Connection: close
2024-10-11 22:48:08 UTC	371	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 63 2c 6b 2c 61 2c 62 2c 74 2c 65 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 73 20 3d 20 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 0d 0a 20 20 20 20 69 66 20 28 63 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 6f 20 3d 20 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 65 74 6f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 6f 20 26 26 20 77 5b 75 6f 5d 20 26 26 20 74 79 70 65 6f 66 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 28 7b 27 63 6f 27 3a 20 63 2c 20 27 6b 63 27 3a 20 6b 2c 20 27 61 74 27 3a Data Ascii: (function(w,d,c,k,a,b,t,e) { var cs = d.currentScript; if (cs) { var uo = cs.getAttribute('data-ueto'); if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') { w[uo].setUserSignals({'co': c, 'kc': k, 'at':

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.8	49840	157.240.251.35	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	698	OUT	GET /tr/?id=1599953746963987&ev=PageView&dl=https%3A%2F%2Fwww.redcrossblood.org&rl=&if=false&ts=1728686885745&sw=1280&sh=1024&v=2.9.170&r=stable&a=adobe_launch&ec=0&o=4124&fbp=fb.1.1728686885735.994445313720174329&pm=1&hrl=a461c4&ler=empty&cdl=API_unavailable&it=1728686879974&coo=false&cs_cc=1&cas=25946852104906138%2C25115343601446968%2C6660002284063960&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:08 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 11 Oct 2024 22:48:08 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.8	49841	185.89.210.122	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	554	OUT	GET /bounce?%2Fsetuid%3Fentity%3D158%26code%3DZwmrIgAIc-zJMAA9 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=8187182774765916003; anj=dTM7k!M4.FErk#WF']wIg2E>?h1RYn!]tbPl1MwL(!R7qUY#QvHRWWGYQ%qQU)aaPYW^hxG[ls-<QG=%9sk?bIRwi:w9Ld1syFi%_pSf?(lOfM!wwdE*j7U.
2024-10-11 22:48:08 UTC	1588	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 11 Oct 2024 22:48:08 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 377ca95e-ed7a-4112-9ba6-4faad3d13856 Set-Cookie: XANDR_PANID=JdxzkFrA5690AdweLEpYQZKLsVZ4LWVJscXRlLz1AOL7CxLSZj2x5Wi5t0k6NPsoP5gAfBEmhEqZ_hXCzucRMEXd7iBrKMFnEiHYgtK2cKY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 09-Jan-2025 22:48:08 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4.FErk#WF']wIg2E>?h1RYn!]ta]8i_jAez_UZ18%4Qt'^K<JD]^km)y)g:s97)#ahAD%AyD$25A)(rF5k*pv7Pzm#UCB4n]#xqes%6lNABt939; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 09-Jan-2025 22:48:08 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 29-Sep-2034 22:48:08 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8187182774765916003; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 09-Jan-2025 22:48:08 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-10-11 22:48:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.8	49845	34.98.64.218	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	444	OUT	GET /w/1.0/sd?cc=1&id=537148856&val=ZwmrIgAIc-zJMAA9 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=1cedf4d0-8247-4969-bd96-110a7773066d\|1728686887
2024-10-11 22:48:08 UTC	366	IN	HTTP/1.1 200 OK Server: OXGW/0.0.0 Date: Fri, 11 Oct 2024 22:48:08 GMT Content-Type: image/gif Content-Length: 43 Vary: Accept Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-11 22:48:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.8	49842	157.240.251.35	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	735	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1599953746963987&ev=PageView&dl=https%3A%2F%2Fwww.redcrossblood.org&rl=&if=false&ts=1728686885745&sw=1280&sh=1024&v=2.9.170&r=stable&a=adobe_launch&ec=0&o=4124&fbp=fb.1.1728686885735.994445313720174329&pm=1&hrl=a461c4&ler=empty&cdl=API_unavailable&it=1728686879974&coo=false&cs_cc=1&cas=25946852104906138%2C25115343601446968%2C6660002284063960&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:08 UTC	747	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7424653650950074082", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7424653650950074082"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-11 22:48:08 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-11 22:48:08 UTC	1706	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.8	49843	150.171.28.10	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	1074	OUT	GET /action/0?ti=36000116&Ver=2&mid=5f076345-f7de-4f2e-b6d5-26ed9bf4cf9c&sid=e18a3ed0882211ef86434debddada293&vid=e18a7d30882211efb9ae97a772c9cfbd&vids=0&msclkid=N&page_path=%2FRCOBIO_2889_Test&spa=Y&p=https%3A%2F%2Fwww.redcrossblood.org%2FRCOBIO_2889_Test&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Schedule%20a%20Blood,%20Platelet%20or%20Plasma%20Donation%20%7C%20American%20Red%20Cross&r=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404&evt=pageLoad&sv=1&cdb=AQAQ&rn=434181 HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:08 UTC	864	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MUID=3E6E11B06FAD627E2FBC04A56EB463EF; domain=.bing.com; expires=Wed, 05-Nov-2025 22:48:08 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: MR=0; domain=bat.bing.com; expires=Fri, 18-Oct-2024 22:48:08 GMT; path=/; SameSite=None; Secure; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: B2679F255AD5418F8B240FBE235B5EDC Ref B: EWR30EDGE0716 Ref C: 2024-10-11T22:48:08Z Date: Fri, 11 Oct 2024 22:48:08 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.8	49848	150.171.28.10	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	747	OUT	POST /actionp/0?ti=36000116&Ver=2&mid=4b408772-4a66-4de2-bd45-627b4428fe36&sid=e18a3ed0882211ef86434debddada293&vid=e18a7d30882211efb9ae97a772c9cfbd&vids=1&msclkid=N&evt=pageHide HTTP/1.1 Host: bat.bing.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.redcrossblood.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:08 UTC	864	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MUID=3694BA1517306A871242AF0016526BDE; domain=.bing.com; expires=Wed, 05-Nov-2025 22:48:08 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: MR=0; domain=bat.bing.com; expires=Fri, 18-Oct-2024 22:48:08 GMT; path=/; SameSite=None; Secure; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: EFC7178E8B3644279B4B5143681DDA0F Ref B: EWR30EDGE1107 Ref C: 2024-10-11T22:48:08Z Date: Fri, 11 Oct 2024 22:48:08 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.8	49846	157.240.253.35	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	970	OUT	GET /tr/?id=1599953746963987&ev=PageView&dl=https%3A%2F%2F4706068.fls.doubleclick.net&rl=https%3A%2F%2Fwww.redcrossblood.org&if=true&ts=1728686887017&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.3.1728686887013.139129801368517081&pm=1&hrl=2be532&ler=other&cdl=API_unavailable&it=1728686885262&coo=false&cs_cc=1&cas=25946852104906138%2C25115343601446968%2C6660002284063960&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4706068.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:09 UTC	468	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=129, ullat=130 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 11 Oct 2024 22:48:09 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.8	49844	157.240.251.9	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	1351	OUT	GET /signals/config/1731308323821672?v=2.9.170&r=stable&domain=www.redcrossblood.org&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C145%2C172%2C158%2C117%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C127 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:09 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-11 22:48:09 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-11 22:48:09 UTC	1491	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-11 22:48:09 UTC	14893	IN	Data Raw: 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 Data Ascii: urn!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModu
2024-10-11 22:48:09 UTC	1491	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 75 28 61 2c 62 29 7d 29 2c 63 3d 21 30 29 3a 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 61 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 67 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 61 29 3b 69 66 28 21 63 29 7b 76 61 72 20 64 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 45 28 29 3f 28 67 2e 63 62 71 2e 65 73 74 4c 69 73 74 65 6e 65 72 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 75 28 61 2c 62 29 7d 29 2c 62 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 62 2e 72 65 6d 6f Data Ascii: function(a,b){u(a,b)}),c=!0):b.addEventListener?b.addEventListener("click",a,{capture:!0,once:!1,passive:!0}):g.attachEvent("onclick",a);if(!c){var d=setTimeout(function c(){E()?(g.cbq.estListener.listen(function(a,b){u(a,b)}),b.removeEventListener?b.remo
2024-10-11 22:48:09 UTC	1491	IN	Data Raw: 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 Data Ascii: installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f
2024-10-11 22:48:09 UTC	13402	IN	Data Raw: 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 70 72 6f 74 65 63 74 65 64 64 61 74 61 6d 6f 64 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 Data Ascii: a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("fbevents.plugins.protecteddatamode",function(){return e.exports})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f
2024-10-11 22:48:09 UTC	1491	IN	Data Raw: 75 73 22 3a 22 41 43 54 49 56 45 22 2c 22 72 75 6c 65 5f 69 64 22 3a 22 33 30 36 38 37 39 34 30 33 32 33 31 34 31 39 22 7d 2c 7b 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 7b 22 74 79 70 65 22 3a 31 2c 22 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 7b 22 74 61 72 67 65 74 54 79 70 65 22 3a 31 2c 22 65 78 74 72 61 63 74 6f 72 22 3a 32 2c 22 6f 70 65 72 61 74 6f 72 22 3a 32 2c 22 61 63 74 69 6f 6e 22 3a 31 2c 22 76 61 6c 75 65 22 3a 22 64 6f 6e 61 74 65 22 7d 5d 7d 2c 22 64 65 72 69 76 65 64 5f 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 22 44 6f 6e 61 74 65 22 2c 22 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 73 22 3a 5b 31 5d 2c 22 72 75 6c 65 5f 73 74 61 74 75 73 22 3a 22 41 43 54 49 56 45 22 2c 22 72 75 6c 65 5f 69 64 22 3a 22 32 31 36 33 31 39 39 31 30 33 39 35 30 32 35 36 Data Ascii: us":"ACTIVE","rule_id":"306879403231419"},{"condition":{"type":1,"conditions":[{"targetType":1,"extractor":2,"operator":2,"action":1,"value":"donate"}]},"derived_event_name":"Donate","transformations":[1],"rule_status":"ACTIVE","rule_id":"2163199103950256
2024-10-11 22:48:09 UTC	2000	IN	Data Raw: 3a 5b 5d 7d 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 65 76 65 6e 74 76 61 6c 69 64 61 74 69 6f 6e 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 31 37 33 31 33 30 38 33 32 33 38 32 31 36 37 32 22 2c 20 22 45 76 65 6e 74 56 61 6c 69 64 61 74 69 6f 6e 22 2c 20 74 72 75 65 29 3b 0a 63 6f 6e 66 69 67 2e 73 65 74 28 22 31 37 33 31 33 30 38 33 32 33 38 32 31 36 37 32 22 2c 20 22 70 72 6f 74 65 63 74 65 64 44 61 74 61 4d 6f 64 65 22 2c 20 7b 22 73 74 61 6e 64 61 72 64 50 61 72 61 6d 73 22 3a 7b 22 6c 65 61 64 5f 65 76 65 6e 74 5f 73 6f 75 72 63 65 22 3a 74 72 75 65 2c 22 6e 65 74 5f 72 65 76 65 6e 75 65 22 3a 74 72 75 65 2c 22 70 72 65 64 69 63 74 65 64 5f 6c 74 76 22 3a 74 72 75 65 2c 22 70 72 6f 64 75 63 74 5f 63 61 74 61 6c 6f 67 Data Ascii: :[]});fbq.loadPlugin("eventvalidation");instance.optIn("1731308323821672", "EventValidation", true);config.set("1731308323821672", "protectedDataMode", {"standardParams":{"lead_event_source":true,"net_revenue":true,"predicted_ltv":true,"product_catalog
2024-10-11 22:48:09 UTC	4064	IN	Data Raw: 7d 5d 2c 22 62 6c 61 63 6b 6c 69 73 74 65 64 49 66 72 61 6d 65 52 65 66 65 72 72 65 72 73 22 3a 7b 22 67 6f 6f 67 6c 65 22 3a 74 72 75 65 7d 7d 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 63 63 72 75 6c 65 65 76 61 6c 75 61 74 6f 72 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 31 37 33 31 33 30 38 33 32 33 38 32 31 36 37 32 22 2c 20 22 43 43 52 75 6c 65 45 76 61 6c 75 61 74 6f 72 22 2c 20 74 72 75 65 29 3b 0a 63 6f 6e 66 69 67 2e 73 65 74 28 22 31 37 33 31 33 30 38 33 32 33 38 32 31 36 37 32 22 2c 20 22 63 6c 69 65 6e 74 48 69 6e 74 22 2c 20 7b 22 64 65 6c 61 79 49 6e 4d 73 22 3a 32 30 30 2c 22 64 69 73 61 62 6c 65 42 61 63 6b 75 70 54 69 6d 65 6f 75 74 22 3a 66 61 6c 73 65 7d 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e Data Ascii: }],"blacklistedIframeReferrers":{"google":true}});fbq.loadPlugin("ccruleevaluator");instance.optIn("1731308323821672", "CCRuleEvaluator", true);config.set("1731308323821672", "clientHint", {"delayInMs":200,"disableBackupTimeout":false});fbq.loadPlugin
2024-10-11 22:48:09 UTC	4064	IN	Data Raw: 65 73 22 3a 5b 22 5e 2d 3f 5c 5c 64 2b 24 22 5d 7d 5d 2c 22 6e 75 6d 5f 69 6e 66 61 6e 74 73 22 3a 5b 7b 22 72 65 71 75 69 72 65 5f 65 78 61 63 74 5f 6d 61 74 63 68 22 3a 66 61 6c 73 65 2c 22 70 6f 74 65 6e 74 69 61 6c 5f 6d 61 74 63 68 65 73 22 3a 5b 22 5e 2d 3f 5c 5c 64 2b 24 22 5d 7d 5d 2c 22 70 72 65 66 65 72 72 65 64 5f 6e 75 6d 5f 73 74 6f 70 73 22 3a 5b 7b 22 72 65 71 75 69 72 65 5f 65 78 61 63 74 5f 6d 61 74 63 68 22 3a 66 61 6c 73 65 2c 22 70 6f 74 65 6e 74 69 61 6c 5f 6d 61 74 63 68 65 73 22 3a 5b 22 5e 2d 3f 5c 5c 64 2b 24 22 5d 7d 5d 2c 22 6d 69 6c 65 61 67 65 2e 76 61 6c 75 65 22 3a 5b 7b 22 72 65 71 75 69 72 65 5f 65 78 61 63 74 5f 6d 61 74 63 68 22 3a 66 61 6c 73 65 2c 22 70 6f 74 65 6e 74 69 61 6c 5f 6d 61 74 63 68 65 73 22 3a 5b 22 5e 2d Data Ascii: es":["^-?\\d+$"]}],"num_infants":[{"require_exact_match":false,"potential_matches":["^-?\\d+$"]}],"preferred_num_stops":[{"require_exact_match":false,"potential_matches":["^-?\\d+$"]}],"mileage.value":[{"require_exact_match":false,"potential_matches":["^-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.8	49847	157.240.253.35	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	1080	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1599953746963987&ev=PageView&dl=https%3A%2F%2F4706068.fls.doubleclick.net&rl=https%3A%2F%2Fwww.redcrossblood.org&if=true&ts=1728686887017&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.3.1728686887013.139129801368517081&pm=1&hrl=2be532&ler=other&cdl=API_unavailable&it=1728686885262&coo=false&cs_cc=1&cas=25946852104906138%2C25115343601446968%2C6660002284063960&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://4706068.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:09 UTC	795	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7424653653763949749", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7424653653763949749"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-11 22:48:09 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-11 22:48:09 UTC	1676	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-10-11 22:48:09 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.8	49850	157.240.251.35	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	875	OUT	GET /tr/?id=1731308323821672&ev=PageView&dl=https%3A%2F%2Fwww.redcrossblood.org&rl=&if=false&ts=1728686886925&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.1.1728686885735.994445313720174329&pm=1&hrl=a57d20&ler=empty&cdl=API_unavailable&cs_est=true&it=1728686879974&coo=false&cs_cc=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:09 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 11 Oct 2024 22:48:09 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.8	49851	157.240.251.35	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:08 UTC	990	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1731308323821672&ev=PageView&dl=https%3A%2F%2Fwww.redcrossblood.org&rl=&if=false&ts=1728686886925&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.1.1728686885735.994445313720174329&pm=1&hrl=a57d20&ler=empty&cdl=API_unavailable&cs_est=true&it=1728686879974&coo=false&cs_cc=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:09 UTC	795	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7424653654603325688", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7424653654603325688"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-11 22:48:09 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-11 22:48:09 UTC	1673	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-10-11 22:48:09 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.8	49852	108.156.60.61	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:09 UTC	632	OUT	POST /v1/open HTTP/1.1 Host: api2.branch.io Connection: keep-alive Content-Length: 266 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.redcrossblood.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:09 UTC	266	OUT	Data Raw: 62 72 6f 77 73 65 72 5f 66 69 6e 67 65 72 70 72 69 6e 74 5f 69 64 3d 31 33 37 33 34 31 39 32 33 31 33 30 38 31 34 31 30 37 31 26 73 64 6b 3d 77 65 62 32 2e 38 35 2e 30 26 6f 70 74 69 6f 6e 73 3d 25 37 42 25 32 32 6e 6f 5f 6a 6f 75 72 6e 65 79 73 25 32 32 25 33 41 66 61 6c 73 65 25 37 44 26 63 75 72 72 65 6e 74 5f 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 72 65 64 63 72 6f 73 73 62 6c 6f 6f 64 2e 6f 72 67 25 32 46 67 69 76 65 2e 68 74 6d 6c 25 32 46 34 30 34 26 73 63 72 65 65 6e 5f 68 65 69 67 68 74 3d 31 30 32 34 26 73 63 72 65 65 6e 5f 77 69 64 74 68 3d 31 32 38 30 26 6f 73 5f 76 65 72 73 69 6f 6e 3d 31 30 26 62 72 61 6e 63 68 5f 6b 65 79 3d 6b 65 79 5f 6c 69 76 65 5f 6d 6d 48 55 33 72 72 58 6c 33 55 34 47 66 4d 6e 46 36 48 30 73 Data Ascii: browser_fingerprint_id=1373419231308141071&sdk=web2.85.0&options=%7B%22no_journeys%22%3Afalse%7D&current_url=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404&screen_height=1024&screen_width=1280&os_version=10&branch_key=key_live_mmHU3rrXl3U4GfMnF6H0s
2024-10-11 22:48:09 UTC	552	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 279 Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache Date: Fri, 11 Oct 2024 22:48:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Branch-Request-Id: 7d0c0292-abb8-4b3f-9c9f-fc91945081d1-2024101122 X-Powered-By: Branch X-Cache: Miss from cloudfront Via: 1.1 fabf8b14862325981b1496bd502a7818.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P2 X-Amz-Cf-Id: 24bQNnxKP6OgZJnvTkyUFkLFvfL8jeXQ5zI8i5_2IEQcnlyZQWzldQ==
2024-10-11 22:48:09 UTC	279	IN	Data Raw: 7b 22 62 72 6f 77 73 65 72 5f 66 69 6e 67 65 72 70 72 69 6e 74 5f 69 64 22 3a 22 31 33 37 33 34 31 39 32 33 31 33 30 38 31 34 31 30 37 31 22 2c 22 64 61 74 61 22 3a 22 7b 5c 22 2b 63 6c 69 63 6b 65 64 5f 62 72 61 6e 63 68 5f 6c 69 6e 6b 5c 22 3a 66 61 6c 73 65 2c 5c 22 2b 69 73 5f 66 69 72 73 74 5f 73 65 73 73 69 6f 6e 5c 22 3a 74 72 75 65 7d 22 2c 22 68 61 73 5f 61 70 70 22 3a 66 61 6c 73 65 2c 22 69 64 65 6e 74 69 74 79 5f 69 64 22 3a 22 31 33 37 33 34 31 39 32 33 36 31 34 37 36 36 37 32 32 35 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 64 63 72 6f 73 73 62 6c 6f 6f 64 2e 61 70 70 2e 6c 69 6e 6b 3f 25 32 34 69 64 65 6e 74 69 74 79 5f 69 64 3d 31 33 37 33 34 31 39 32 33 36 31 34 37 36 36 37 32 32 35 22 2c 22 73 65 73 73 69 6f 6e 5f 69 64 Data Ascii: {"browser_fingerprint_id":"1373419231308141071","data":"{\"+clicked_branch_link\":false,\"+is_first_session\":true}","has_app":false,"identity_id":"1373419236147667225","link":"https://redcrossblood.app.link?%24identity_id=1373419236147667225","session_id

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.8	49854	185.64.191.210	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:09 UTC	591	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=ZwmrIgAIc-zJMAA9 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KRTBCOOKIE_218=22978-ZwmrIgAIc-zJMAA9&KRTB&23194-ZwmrIgAIc-zJMAA9&KRTB&23209-ZwmrIgAIc-zJMAA9&KRTB&23244-ZwmrIgAIc-zJMAA9; PugT=1728686887
2024-10-11 22:48:09 UTC	664	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 11 Oct 2024 22:48:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_218=22978-ZwmrIgAIc-zJMAA9&KRTB&23194-ZwmrIgAIc-zJMAA9&KRTB&23209-ZwmrIgAIc-zJMAA9&KRTB&23244-ZwmrIgAIc-zJMAA9; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 09-Jan-2025 22:48:08 GMT; path=/ Set-Cookie: PugT=1728686888; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 10-Nov-2024 22:48:08 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-10-11 22:48:09 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.8	49853	157.240.253.35	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:09 UTC	639	OUT	GET /fr/b.php?p=1531105787105294&e=ZwmrIgAIc-zJMAA9&t=2592000&o=0 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://redcross.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:09 UTC	1774	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/gif report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7424653654891301311"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} Date: Fri, 11 Oct 2024 15:48:09 PDT document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(self), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: public Cache-Control: public, max-age=0 Expires: Fri, 11 Oct 2024 15:48:09 PDT X-Content-Type-Options: nosniff
2024-10-11 22:48:09 UTC	658	IN	Data Raw: 72 65 70 6f 72 74 69 6e 67 2d 65 6e 64 70 6f 69 6e 74 73 3a 20 63 6f 6f 70 5f 72 65 70 6f 72 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 2f 63 6f 6f 70 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 2c 20 64 65 66 61 75 6c 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 72 6f 77 73 65 72 5f 65 72 72 6f 72 5f 72 65 70 6f 72 74 73 2f 3f 64 65 76 69 63 65 5f 6c 65 76 65 6c 3d 75 6e 6b 6e 6f 77 6e 26 62 72 73 69 64 3d 37 34 32 34 36 35 33 36 35 34 38 39 31 33 30 31 33 31 31 22 2c 20 70 65 72 6d 69 73 73 69 6f 6e 73 5f 70 6f 6c 69 63 79 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 Data Ascii: reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7424653654891301311", permissions_policy="https://www.facebook.com/aja
2024-10-11 22:48:09 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.8	49856	23.206.229.226	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:09 UTC	2123	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A4109008217 X-BM-CBT: 1696494873 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: 229C124F14F843F693B4EF574DFCAAAB X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A4109008217 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,d-thshldspcl40 X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 516 Connection: Keep-Alive Cache-Control: no-cache Cookie: SRCHUID=V=2&GUID=7A0479E0E07C4D7D91A8C7552F34E6D4&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&LUT=1696493908190&IPMH=7bc3b11d&IPMID=1696494873321&HV=1696494765; MUID=4E6D5F19647E45969740B90CC0355D4C; _SS=SID=1F4D6C7F4B26664337657FDE4A3767CB&CPID=1696494874312&AC=1&CPH=893a1c21; _EDGE_S=SID=1F4D6C7F4B26664337657FDE4A3767CB; MUIDB=4E6D5F19647E45969740B90CC0355D4C
2024-10-11 22:48:09 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-10-11 22:48:09 UTC	515	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 34 45 36 44 35 46 31 39 36 34 37 45 34 35 39 36 39 37 34 30 42 39 30 43 43 30 33 35 35 44 34 43 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 30 36 38 37 30 43 30 39 41 31 46 37 34 43 39 43 42 33 41 42 46 30 34 30 46 43 39 46 30 41 37 38 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>4E6D5F19647E45969740B90CC0355D4C</CID><Events><E><T>Event.ClientInst</T><IG>06870C09A1F74C9CB3ABF040FC9F0A78</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-10-11 22:48:09 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: B590345549174810AEBC1F7AFD5BE790 Ref B: LAX311000114047 Ref C: 2024-10-11T22:48:09Z Date: Fri, 11 Oct 2024 22:48:09 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.ecd7ce17.1728686889.6f7fb1be

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.8	49855	18.239.18.44	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:09 UTC	510	OUT	GET /_r?sdk=web2.85.0&branch_key=key_live_mmHU3rrXl3U4GfMnF6H0sddfrzccH9ha&callback=branch_callback__0 HTTP/1.1 Host: app.link Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _s=LykGLh85jWOygP17vcgDWvqJ3d1VE7qgurfCEvo%2FbxstH%2BVrlRNg0oNTyYk8ausy
2024-10-11 22:48:10 UTC	742	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 91 Connection: close Server: openresty Date: Fri, 11 Oct 2024 22:48:09 GMT Set-Cookie: _s=LykGLh85jWOygP17vcgDWvqJ3d1VE7qgurfCEvo%2FbxstH%2BVrlRNg0oNTyYk8ausy; Max-Age=15724800; Domain=.app.link; Path=/; Expires=Fri, 11 Apr 2025 22:48:09 GMT; Secure; SameSite=None X-Content-Type-Options: nosniff ETag: W/"5b-nRE7ehQ76gJKdLJoOb8fMDzFn/8" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Platform-Version,Sec-CH-UA-Model X-Cache: Miss from cloudfront Via: 1.1 6c60742ba67aa10b881e511aba8e470a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: keDyES3jw68SOCs9j7Q72bW5KS2R5tT5YZtgqxxJ6XWQQLhIYH_yyw==
2024-10-11 22:48:10 UTC	91	IN	Data Raw: 2f 2a 2a 2f 20 74 79 70 65 6f 66 20 62 72 61 6e 63 68 5f 63 61 6c 6c 62 61 63 6b 5f 5f 30 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 62 72 61 6e 63 68 5f 63 61 6c 6c 62 61 63 6b 5f 5f 30 28 22 31 33 37 33 34 31 39 32 33 31 33 30 38 31 34 31 30 37 31 22 29 3b Data Ascii: /**/ typeof branch_callback__0 === 'function' && branch_callback__0("1373419231308141071");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.8	49859	157.240.251.35	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:09 UTC	723	OUT	GET /tr/?id=1599953746963987&ev=PageView&dl=https%3A%2F%2F4706068.fls.doubleclick.net&rl=https%3A%2F%2Fwww.redcrossblood.org&if=true&ts=1728686887017&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.3.1728686887013.139129801368517081&pm=1&hrl=2be532&ler=other&cdl=API_unavailable&it=1728686885262&coo=false&cs_cc=1&cas=25946852104906138%2C25115343601446968%2C6660002284063960&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:10 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 11 Oct 2024 22:48:09 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.8	49858	157.240.251.35	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:09 UTC	634	OUT	GET /tr/?id=1731308323821672&ev=PageView&dl=https%3A%2F%2Fwww.redcrossblood.org&rl=&if=false&ts=1728686886925&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.1.1728686885735.994445313720174329&pm=1&hrl=a57d20&ler=empty&cdl=API_unavailable&cs_est=true&it=1728686879974&coo=false&cs_cc=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:10 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 11 Oct 2024 22:48:09 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.8	49862	162.247.243.39	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:09 UTC	544	OUT	GET /nr-spa-1184.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:10 UTC	549	IN	HTTP/1.1 200 OK Connection: close Content-Length: 38395 Last-Modified: Wed, 18 Oct 2023 21:30:59 GMT ETag: "6b93dbf34696df852c6d69d1652851de" Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 Content-Type: application/javascript Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 11 Oct 2024 22:48:10 GMT X-Served-By: cache-nyc-kteb1890028-NYC X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6f 29 7b 69 66 28 21 6e 5b 65 5d 29 7b 69 66 28 21 74 5b 65 5d 29 7b 76 61 72 20 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 6e 72 5f 72 65 71 75 69 72 65 26 26 5f 5f 6e 72 5f 72 65 71 75 69 72 65 3b 69 66 28 21 6f 26 26 61 29 72 65 74 75 72 6e 20 61 28 65 2c 21 30 29 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 28 65 2c 21 30 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 65 2b 22 27 22 29 7d 76 61 72 20 73 3d 6e 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 65 5d 5b 30 5d 2e 63 61 6c 6c 28 73 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 Data Ascii: !function(t,n,e){function r(e,o){if(!n[e]){if(!t[e]){var a="function"==typeof __nr_require&&__nr_require;if(!o&&a)return a(e,!0);if(i)return i(e,!0);throw new Error("Cannot find module '"+e+"'")}var s=n[e]={exports:{}};t[e][0].call(s.exports,function(n){v
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 69 6f 6e 3d 28 65 7c 7c 22 68 74 74 70 3a 2f 2f 63 75 73 74 6f 6d 2e 74 72 61 6e 73 61 63 74 69 6f 6e 22 29 2b 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 6e 29 7b 76 61 72 20 65 3d 6e 3f 6e 2d 6d 2e 6f 66 66 73 65 74 3a 74 3b 64 2e 73 74 6f 72 65 28 22 63 6d 22 2c 22 66 69 6e 69 73 68 65 64 22 2c 7b 6e 61 6d 65 3a 22 66 69 6e 69 73 68 65 64 22 7d 2c 7b 74 69 6d 65 3a 65 7d 29 2c 6f 28 74 2c 7b 6e 61 6d 65 3a 22 66 69 6e 69 73 68 65 64 22 2c 73 74 61 72 74 3a 65 2b 6d 2e 6f 66 66 73 65 74 2c 6f 72 69 67 69 6e 3a 22 6e 72 22 7d 29 2c 76 28 22 61 70 69 2d 61 64 64 50 61 67 65 41 63 74 69 6f 6e 22 2c 5b 65 2c 22 66 69 6e 69 73 68 65 64 22 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6e 29 7b 69 66 28 6e 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 Data Ascii: ion=(e\|\|"http://custom.transaction")+n)}function i(t,n){var e=n?n-m.offset:t;d.store("cm","finished",{name:"finished"},{time:e}),o(t,{name:"finished",start:e+m.offset,origin:"nr"}),v("api-addPageAction",[e,"finished"])}function o(t,n){if(n&&"object"==type
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 77 6e 50 72 6f 70 65 72 74 79 28 22 63 72 65 61 74 65 22 29 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3a 7b 7d 2c 65 3d 30 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 6e 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 75 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 21 28 65 2e 6c 65 6e 67 74 68 3e 3d 64 29 29 7b 76 61 72 20 69 2c 6f 3d 35 3b 73 77 69 74 63 68 28 74 3d 6e 28 74 29 2c 74 79 70 65 6f 66 20 72 29 7b 63 61 73 65 22 6f 62 6a 65 63 74 22 3a 72 3f 69 3d 6e 28 63 28 72 29 29 3a 6f 3d 39 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 6f 3d 36 2c 69 3d 72 25 31 3f 72 3a 72 2b 22 2e 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 62 6f 6f 6c 65 61 6e 22 3a 6f 3d 72 3f 37 3a 38 3b 62 Data Ascii: wnProperty("create")?Object.create(null):{},e=0;return t}function a(t,n){var e=[];return u(t,function(t,r){if(!(e.length>=d)){var i,o=5;switch(t=n(t),typeof r){case"object":r?i=n(c(r)):o=9;break;case"number":o=6,i=r%1?r:r+".";break;case"boolean":o=r?7:8;b
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 2c 65 2b 3d 61 2e 6c 65 6e 67 74 68 2c 72 2b 3d 61 3b 65 6c 73 65 20 69 66 28 6f 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 65 2b 3d 39 2c 73 3d 30 3b 73 3c 6f 2e 6c 65 6e 67 74 68 26 26 28 61 3d 69 28 63 28 6f 5b 73 5d 29 29 2c 65 2b 3d 61 2e 6c 65 6e 67 74 68 2c 21 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 26 26 65 3e 3d 6e 29 29 3b 73 2b 2b 29 75 2e 70 75 73 68 28 61 29 3b 72 2b 3d 22 26 22 2b 74 2b 22 3d 25 35 42 22 2b 75 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 25 35 44 22 7d 7d 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 22 26 22 2b 74 2b 22 3d 22 2b 69 28 6e 29 3a 22 22 7d 76 61 72 20 75 3d 74 28 34 31 29 2c 63 3d 74 28 32 32 29 2c Data Ascii: ,e+=a.length,r+=a;else if(o.length){for(e+=9,s=0;s<o.length&&(a=i(c(o[s])),e+=a.length,!("undefined"!=typeof n&&e>=n));s++)u.push(a);r+="&"+t+"=%5B"+u.join(",")+"%5D"}}),r}function s(t,n){return n&&"string"==typeof n?"&"+t+"="+i(n):""}var u=t(41),c=t(22),
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2c 7b 7d 29 2c 6e 61 76 69 67 61 74 69 6f 6e 3a 76 2e 61 64 64 50 4e 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 61 76 69 67 61 74 69 6f 6e 2c 7b 7d 29 7d 3b 69 2e 70 75 73 68 28 67 2e 70 61 72 61 6d 28 22 70 65 72 66 22 2c 78 28 6f 29 29 29 7d 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 70 61 69 6e 74 22 29 3b 61 26 26 61 2e 6c 65 6e 67 74 68 3e 30 26 26 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 21 74 2e Data Ascii: rformance.timing,{}),navigation:v.addPN(window.performance.navigation,{})};i.push(g.param("perf",x(o)))}if(window.performance&&window.performance.getEntriesByType){var a=window.performance.getEntriesByType("paint");a&&a.length>0&&a.forEach(function(t){!t.
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 20 69 66 28 43 29 61 3d 21 30 2c 6f 3d 79 2e 78 68 72 3b 65 6c 73 65 7b 69 66 28 22 65 76 65 6e 74 73 22 21 3d 3d 74 29 72 65 74 75 72 6e 21 31 3b 6f 3d 79 2e 69 6d 67 7d 7d 76 61 72 20 75 3d 69 3b 61 26 26 22 65 76 65 6e 74 73 22 3d 3d 3d 74 3f 73 3d 65 2e 62 6f 64 79 2e 65 3a 61 3f 73 3d 78 28 65 2e 62 6f 64 79 29 3a 75 3d 69 2b 67 2e 6f 62 6a 28 65 2e 62 6f 64 79 2c 6e 2e 6d 61 78 42 79 74 65 73 29 3b 76 61 72 20 63 3d 6f 28 75 2c 73 29 3b 72 65 74 75 72 6e 20 63 7c 7c 6f 21 3d 3d 79 2e 62 65 61 63 6f 6e 7c 7c 28 63 3d 79 2e 69 6d 67 28 69 2b 67 2e 6f 62 6a 28 65 2e 62 6f 64 79 2c 6e 2e 6d 61 78 42 79 74 65 73 29 29 29 2c 63 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 69 66 28 74 26 26 74 2e 69 6e 66 6f 26 26 74 2e 69 6e 66 6f 2e 65 72 72 6f 72 42 65 Data Ascii: if(C)a=!0,o=y.xhr;else{if("events"!==t)return!1;o=y.img}}var u=i;a&&"events"===t?s=e.body.e:a?s=x(e.body):u=i+g.obj(e.body,n.maxBytes);var c=o(u,s);return c\|\|o!==y.beacon\|\|(c=y.img(i+g.obj(e.body,n.maxBytes))),c}function c(t){if(t&&t.info&&t.info.errorBe
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 20 6c 74 65 20 49 45 20 38 5d 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 39 5d 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 22 3b 76 61 72 20 69 2c 6f 3d 72 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 64 69 76 22 29 2e 6c 65 6e 67 74 68 3b 69 3d 34 3d 3d 3d 6f 3f 36 3a 33 3d 3d 3d 6f 3f 37 3a 32 3d 3d 3d 6f 3f 38 3a 31 3d 3d 3d 6f 3f 39 3a 30 2c 6e 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 7b 7d 5d 2c 31 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 61 2e 73 65 6e 64 46 69 6e 61 6c 28 63 2c 21 31 29 2c 64 2e 63 6f 6e 64 69 74 69 6f 6e 61 6c 6c 79 53 65 74 28 29 7d 76 61 72 20 69 3d 74 Data Ascii: lte IE 8]><div></div><![endif]-->...[if lte IE 9]><div></div><![endif]-->";var i,o=r.getElementsByTagName("div").length;i=4===o?6:3===o?7:2===o?8:1===o?9:0,n.exports=i},{}],11:[function(t,n,e){function r(t){a.sendFinal(c,!1),d.conditionallySet()}var i=t
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 22 73 22 29 2c 6f 28 74 5b 22 63 22 2b 64 2b 73 5d 2c 65 2c 6e 2c 22 63 65 22 29 2c 6f 28 74 5b 6c 2b 61 5d 2c 65 2c 6e 2c 22 72 71 22 29 2c 6f 28 74 5b 68 2b 61 5d 2c 65 2c 6e 2c 22 72 70 22 29 2c 6f 28 74 5b 68 2b 73 5d 2c 65 2c 6e 2c 22 72 70 65 22 29 2c 6f 28 74 2e 64 6f 6d 4c 6f 61 64 69 6e 67 2c 65 2c 6e 2c 22 64 6c 22 29 2c 6f 28 74 2e 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 2c 65 2c 6e 2c 22 64 69 22 29 2c 6f 28 74 5b 6d 2b 61 5d 2c 65 2c 6e 2c 22 64 73 22 29 2c 6f 28 74 5b 6d 2b 73 5d 2c 65 2c 6e 2c 22 64 65 22 29 2c 6f 28 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 2c 65 2c 6e 2c 22 64 63 22 29 2c 6f 28 74 5b 70 2b 61 5d 2c 65 2c 6e 2c 22 6c 22 29 2c 6f 28 74 5b 70 2b 73 5d 2c 65 2c 6e 2c 22 6c 65 22 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 Data Ascii: "s"),o(t["c"+d+s],e,n,"ce"),o(t[l+a],e,n,"rq"),o(t[h+a],e,n,"rp"),o(t[h+s],e,n,"rpe"),o(t.domLoading,e,n,"dl"),o(t.domInteractive,e,n,"di"),o(t[m+a],e,n,"ds"),o(t[m+s],e,n,"de"),o(t.domComplete,e,n,"dc"),o(t[p+a],e,n,"l"),o(t[p+s],e,n,"le"),n}function i(t
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 20 22 29 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 30 3d 3d 3d 74 5b 6e 5d 2e 69 6e 64 65 78 4f 66 28 22 4e 52 45 55 4d 3d 22 29 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 2c 69 2c 6f 2c 73 3d 74 5b 6e 5d 2e 73 75 62 73 74 72 69 6e 67 28 22 4e 52 45 55 4d 3d 22 2e 6c 65 6e 67 74 68 29 2e 73 70 6c 69 74 28 22 26 22 29 2c 75 3d 30 3b 75 3c 73 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 30 3d 3d 3d 73 5b 75 5d 2e 69 6e 64 65 78 4f 66 28 22 73 3d 22 29 3f 69 3d 73 5b 75 5d 2e 73 75 62 73 74 72 69 6e 67 28 32 29 3a 30 3d 3d 3d 73 5b 75 5d 2e 69 6e 64 65 78 4f 66 28 22 70 3d 22 29 3f 28 72 3d 73 5b 75 5d Data Ascii: }}function o(){for(var t=document.cookie.split(" "),n=0;n<t.length;n++)if(0===t[n].indexOf("NREUM=")){for(var e,r,i,o,s=t[n].substring("NREUM=".length).split("&"),u=0;u<s.length;u++)0===s[u].indexOf("s=")?i=s[u].substring(2):0===s[u].indexOf("p=")?(r=s[u]
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 22 3b 76 61 72 20 72 3d 5b 5d 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 77 69 6e 64 6f 77 2e 41 72 72 61 79 7c 7c 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 61 70 70 6c 79 28 65 29 29 7b 66 6f 72 28 76 61 72 20 73 3d 65 2e 6c 65 6e 67 74 68 2c 75 3d 30 3b 75 3c 73 3b 75 2b 3d 31 29 72 5b 75 5d 3d 6f 28 75 2c 65 29 7c 7c 22 6e 75 6c 6c 22 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 3f 22 5b 5d 22 3a 22 5b 22 2b 72 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 5d 22 7d 72 65 74 75 72 6e 20 61 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 6f 28 74 2c 65 29 3b 6e 26 26 72 2e 70 75 73 68 28 69 28 74 29 2b 22 3a 22 2b 6e 29 7d 29 2c 30 3d Data Ascii: ";var r=[];if(e instanceof window.Array\|\|"[object Array]"===Object.prototype.toString.apply(e)){for(var s=e.length,u=0;u<s;u+=1)r[u]=o(u,e)\|\|"null";return 0===r.length?"[]":"["+r.join(",")+"]"}return a(e,function(t){var n=o(t,e);n&&r.push(i(t)+":"+n)}),0=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.8	49860	157.240.251.35	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:09 UTC	760	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1599953746963987&ev=PageView&dl=https%3A%2F%2F4706068.fls.doubleclick.net&rl=https%3A%2F%2Fwww.redcrossblood.org&if=true&ts=1728686887017&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.3.1728686887013.139129801368517081&pm=1&hrl=2be532&ler=other&cdl=API_unavailable&it=1728686885262&coo=false&cs_cc=1&cas=25946852104906138%2C25115343601446968%2C6660002284063960&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:10 UTC	747	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7424653659324930657", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7424653659324930657"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-11 22:48:10 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-11 22:48:10 UTC	1707	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.8	49861	157.240.251.35	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:10 UTC	671	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1731308323821672&ev=PageView&dl=https%3A%2F%2Fwww.redcrossblood.org&rl=&if=false&ts=1728686886925&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.1.1728686885735.994445313720174329&pm=1&hrl=a57d20&ler=empty&cdl=API_unavailable&cs_est=true&it=1728686879974&coo=false&cs_cc=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:10 UTC	747	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7424653659714415678", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7424653659714415678"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-11 22:48:10 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-11 22:48:10 UTC	1706	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.8	49864	108.156.60.61	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:10 UTC	637	OUT	POST /v1/pageview HTTP/1.1 Host: api2.branch.io Connection: keep-alive Content-Length: 2357 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.redcrossblood.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:10 UTC	2357	OUT	Data Raw: 65 76 65 6e 74 3d 70 61 67 65 76 69 65 77 26 6d 65 74 61 64 61 74 61 3d 25 37 42 25 32 32 75 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 72 65 64 63 72 6f 73 73 62 6c 6f 6f 64 2e 6f 72 67 25 32 46 67 69 76 65 2e 68 74 6d 6c 25 32 46 34 30 34 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 61 67 65 6e 74 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 32 43 25 32 30 6c 69 6b 65 25 32 30 47 65 63 6b 6f 29 25 32 30 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 25 32 30 Data Ascii: event=pageview&metadata=%7B%22url%22%3A%22https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404%22%2C%22user_agent%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20
2024-10-11 22:48:10 UTC	456	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 28 Connection: close Access-Control-Allow-Origin: * Date: Fri, 11 Oct 2024 22:48:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Powered-By: Branch X-Cache: Miss from cloudfront Via: 1.1 80779e7124f8d44ce2216c35ac5328a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P2 X-Amz-Cf-Id: -eBVPSf_GZH-gG3BKNPTnc3R22eeJd3I9KpZzB7zIU26dKK09EAQZg==
2024-10-11 22:48:10 UTC	28	IN	Data Raw: 7b 22 62 72 61 6e 63 68 5f 76 69 65 77 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d Data Ascii: {"branch_view_enabled":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.8	49865	108.138.26.118	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:10 UTC	345	OUT	GET /v1/open HTTP/1.1 Host: api2.branch.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:10 UTC	444	IN	HTTP/1.1 404 Not Found Content-Type: text/plain Content-Length: 18 Connection: close Access-Control-Allow-Origin: * Date: Fri, 11 Oct 2024 22:48:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Powered-By: Branch X-Cache: Error from cloudfront Via: 1.1 8dc3ccc34d68ee81173fff2a80f72bde.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: gHhMsMQYEoJcCi-iMMQfps54qoDJaSuFPYr_8YGLADM2Vsp7g9bfbg==
2024-10-11 22:48:10 UTC	18	IN	Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.8	49868	162.247.243.29	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:10 UTC	1036	OUT	GET /1/20e6e07576?a=94805257&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=15627&ck=1&ref=https://www.redcrossblood.org/give.html/404&be=2844&fe=14867&dc=6446&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1728686873483,%22n%22:0,%22f%22:25,%22dn%22:34,%22dne%22:57,%22c%22:57,%22s%22:58,%22ce%22:799,%22rq%22:799,%22rp%22:1392,%22rpe%22:1596,%22dl%22:1424,%22di%22:6443,%22ds%22:6443,%22de%22:6461,%22dc%22:14867,%22l%22:14867,%22le%22:14870%7D,%22navigation%22:%7B%7D%7D&fp=6407&fcp=6407&jsonp=NREUM.setToken HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:10 UTC	495	IN	HTTP/1.1 200 Connection: close Content-Length: 79 content-type: text/javascript access-control-expose-headers: Date date: Fri, 11 Oct 2024 22:48:10 GMT access-control-allow-origin: * set-cookie: JSESSIONID=8cbb532589c4573e; Path=/; Domain=.nr-data.net; Secure; SameSite=None access-control-allow-credentials: true cross-origin-resource-policy: cross-origin timing-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS x-served-by: cache-ewr-kewr1740048-EWR
2024-10-11 22:48:10 UTC	79	IN	Data Raw: 4e 52 45 55 4d 2e 73 65 74 54 6f 6b 65 6e 28 7b 27 73 74 6e 27 3a 30 2c 27 65 72 72 27 3a 31 2c 27 69 6e 73 27 3a 31 2c 27 73 70 61 27 3a 31 2c 27 73 72 27 3a 30 2c 27 73 72 73 27 3a 30 2c 27 73 74 27 3a 31 2c 27 73 74 73 27 3a 30 7d 29 Data Ascii: NREUM.setToken({'stn':0,'err':1,'ins':1,'spa':1,'sr':0,'srs':0,'st':1,'sts':0})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.8	49866	157.240.251.35	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:10 UTC	400	OUT	GET /fr/b.php?p=1531105787105294&e=ZwmrIgAIc-zJMAA9&t=2592000&o=0 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:11 UTC	1798	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/gif report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7424653658607520707"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} Date: Fri, 11 Oct 2024 15:48:10 PDT document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(self), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" Pragma: public Cache-Control: public, max-age=0 Expires: Fri, 11 Oct 2024 15:48:10 PDT X-Content-Type-Options: nosniff
2024-10-11 22:48:11 UTC	657	IN	Data Raw: 72 65 70 6f 72 74 69 6e 67 2d 65 6e 64 70 6f 69 6e 74 73 3a 20 63 6f 6f 70 5f 72 65 70 6f 72 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 2f 63 6f 6f 70 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 2c 20 64 65 66 61 75 6c 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 72 6f 77 73 65 72 5f 65 72 72 6f 72 5f 72 65 70 6f 72 74 73 2f 3f 64 65 76 69 63 65 5f 6c 65 76 65 6c 3d 75 6e 6b 6e 6f 77 6e 26 62 72 73 69 64 3d 37 34 32 34 36 35 33 36 35 38 36 30 37 35 32 30 37 30 37 22 2c 20 70 65 72 6d 69 73 73 69 6f 6e 73 5f 70 6f 6c 69 63 79 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 Data Ascii: reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7424653658607520707", permissions_policy="https://www.facebook.com/aja
2024-10-11 22:48:11 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.8	49867	162.247.243.39	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:10 UTC	363	OUT	GET /nr-spa-1184.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:10 UTC	550	IN	HTTP/1.1 200 OK Connection: close Content-Length: 38395 Last-Modified: Wed, 18 Oct 2023 21:30:59 GMT ETag: "6b93dbf34696df852c6d69d1652851de" Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 Content-Type: application/javascript Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 11 Oct 2024 22:48:10 GMT X-Served-By: cache-ewr-kewr1740050-EWR X-Cache: MISS X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6f 29 7b 69 66 28 21 6e 5b 65 5d 29 7b 69 66 28 21 74 5b 65 5d 29 7b 76 61 72 20 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 6e 72 5f 72 65 71 75 69 72 65 26 26 5f 5f 6e 72 5f 72 65 71 75 69 72 65 3b 69 66 28 21 6f 26 26 61 29 72 65 74 75 72 6e 20 61 28 65 2c 21 30 29 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 28 65 2c 21 30 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 65 2b 22 27 22 29 7d 76 61 72 20 73 3d 6e 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 65 5d 5b 30 5d 2e 63 61 6c 6c 28 73 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 Data Ascii: !function(t,n,e){function r(e,o){if(!n[e]){if(!t[e]){var a="function"==typeof __nr_require&&__nr_require;if(!o&&a)return a(e,!0);if(i)return i(e,!0);throw new Error("Cannot find module '"+e+"'")}var s=n[e]={exports:{}};t[e][0].call(s.exports,function(n){v
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 69 6f 6e 3d 28 65 7c 7c 22 68 74 74 70 3a 2f 2f 63 75 73 74 6f 6d 2e 74 72 61 6e 73 61 63 74 69 6f 6e 22 29 2b 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 6e 29 7b 76 61 72 20 65 3d 6e 3f 6e 2d 6d 2e 6f 66 66 73 65 74 3a 74 3b 64 2e 73 74 6f 72 65 28 22 63 6d 22 2c 22 66 69 6e 69 73 68 65 64 22 2c 7b 6e 61 6d 65 3a 22 66 69 6e 69 73 68 65 64 22 7d 2c 7b 74 69 6d 65 3a 65 7d 29 2c 6f 28 74 2c 7b 6e 61 6d 65 3a 22 66 69 6e 69 73 68 65 64 22 2c 73 74 61 72 74 3a 65 2b 6d 2e 6f 66 66 73 65 74 2c 6f 72 69 67 69 6e 3a 22 6e 72 22 7d 29 2c 76 28 22 61 70 69 2d 61 64 64 50 61 67 65 41 63 74 69 6f 6e 22 2c 5b 65 2c 22 66 69 6e 69 73 68 65 64 22 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6e 29 7b 69 66 28 6e 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 Data Ascii: ion=(e\|\|"http://custom.transaction")+n)}function i(t,n){var e=n?n-m.offset:t;d.store("cm","finished",{name:"finished"},{time:e}),o(t,{name:"finished",start:e+m.offset,origin:"nr"}),v("api-addPageAction",[e,"finished"])}function o(t,n){if(n&&"object"==type
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 77 6e 50 72 6f 70 65 72 74 79 28 22 63 72 65 61 74 65 22 29 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3a 7b 7d 2c 65 3d 30 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 6e 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 75 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 21 28 65 2e 6c 65 6e 67 74 68 3e 3d 64 29 29 7b 76 61 72 20 69 2c 6f 3d 35 3b 73 77 69 74 63 68 28 74 3d 6e 28 74 29 2c 74 79 70 65 6f 66 20 72 29 7b 63 61 73 65 22 6f 62 6a 65 63 74 22 3a 72 3f 69 3d 6e 28 63 28 72 29 29 3a 6f 3d 39 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 6f 3d 36 2c 69 3d 72 25 31 3f 72 3a 72 2b 22 2e 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 62 6f 6f 6c 65 61 6e 22 3a 6f 3d 72 3f 37 3a 38 3b 62 Data Ascii: wnProperty("create")?Object.create(null):{},e=0;return t}function a(t,n){var e=[];return u(t,function(t,r){if(!(e.length>=d)){var i,o=5;switch(t=n(t),typeof r){case"object":r?i=n(c(r)):o=9;break;case"number":o=6,i=r%1?r:r+".";break;case"boolean":o=r?7:8;b
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 2c 65 2b 3d 61 2e 6c 65 6e 67 74 68 2c 72 2b 3d 61 3b 65 6c 73 65 20 69 66 28 6f 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 65 2b 3d 39 2c 73 3d 30 3b 73 3c 6f 2e 6c 65 6e 67 74 68 26 26 28 61 3d 69 28 63 28 6f 5b 73 5d 29 29 2c 65 2b 3d 61 2e 6c 65 6e 67 74 68 2c 21 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 26 26 65 3e 3d 6e 29 29 3b 73 2b 2b 29 75 2e 70 75 73 68 28 61 29 3b 72 2b 3d 22 26 22 2b 74 2b 22 3d 25 35 42 22 2b 75 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 25 35 44 22 7d 7d 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 22 26 22 2b 74 2b 22 3d 22 2b 69 28 6e 29 3a 22 22 7d 76 61 72 20 75 3d 74 28 34 31 29 2c 63 3d 74 28 32 32 29 2c Data Ascii: ,e+=a.length,r+=a;else if(o.length){for(e+=9,s=0;s<o.length&&(a=i(c(o[s])),e+=a.length,!("undefined"!=typeof n&&e>=n));s++)u.push(a);r+="&"+t+"=%5B"+u.join(",")+"%5D"}}),r}function s(t,n){return n&&"string"==typeof n?"&"+t+"="+i(n):""}var u=t(41),c=t(22),
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2c 7b 7d 29 2c 6e 61 76 69 67 61 74 69 6f 6e 3a 76 2e 61 64 64 50 4e 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 61 76 69 67 61 74 69 6f 6e 2c 7b 7d 29 7d 3b 69 2e 70 75 73 68 28 67 2e 70 61 72 61 6d 28 22 70 65 72 66 22 2c 78 28 6f 29 29 29 7d 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 70 61 69 6e 74 22 29 3b 61 26 26 61 2e 6c 65 6e 67 74 68 3e 30 26 26 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 21 74 2e Data Ascii: rformance.timing,{}),navigation:v.addPN(window.performance.navigation,{})};i.push(g.param("perf",x(o)))}if(window.performance&&window.performance.getEntriesByType){var a=window.performance.getEntriesByType("paint");a&&a.length>0&&a.forEach(function(t){!t.
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 20 69 66 28 43 29 61 3d 21 30 2c 6f 3d 79 2e 78 68 72 3b 65 6c 73 65 7b 69 66 28 22 65 76 65 6e 74 73 22 21 3d 3d 74 29 72 65 74 75 72 6e 21 31 3b 6f 3d 79 2e 69 6d 67 7d 7d 76 61 72 20 75 3d 69 3b 61 26 26 22 65 76 65 6e 74 73 22 3d 3d 3d 74 3f 73 3d 65 2e 62 6f 64 79 2e 65 3a 61 3f 73 3d 78 28 65 2e 62 6f 64 79 29 3a 75 3d 69 2b 67 2e 6f 62 6a 28 65 2e 62 6f 64 79 2c 6e 2e 6d 61 78 42 79 74 65 73 29 3b 76 61 72 20 63 3d 6f 28 75 2c 73 29 3b 72 65 74 75 72 6e 20 63 7c 7c 6f 21 3d 3d 79 2e 62 65 61 63 6f 6e 7c 7c 28 63 3d 79 2e 69 6d 67 28 69 2b 67 2e 6f 62 6a 28 65 2e 62 6f 64 79 2c 6e 2e 6d 61 78 42 79 74 65 73 29 29 29 2c 63 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 69 66 28 74 26 26 74 2e 69 6e 66 6f 26 26 74 2e 69 6e 66 6f 2e 65 72 72 6f 72 42 65 Data Ascii: if(C)a=!0,o=y.xhr;else{if("events"!==t)return!1;o=y.img}}var u=i;a&&"events"===t?s=e.body.e:a?s=x(e.body):u=i+g.obj(e.body,n.maxBytes);var c=o(u,s);return c\|\|o!==y.beacon\|\|(c=y.img(i+g.obj(e.body,n.maxBytes))),c}function c(t){if(t&&t.info&&t.info.errorBe
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 20 6c 74 65 20 49 45 20 38 5d 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 39 5d 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 22 3b 76 61 72 20 69 2c 6f 3d 72 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 64 69 76 22 29 2e 6c 65 6e 67 74 68 3b 69 3d 34 3d 3d 3d 6f 3f 36 3a 33 3d 3d 3d 6f 3f 37 3a 32 3d 3d 3d 6f 3f 38 3a 31 3d 3d 3d 6f 3f 39 3a 30 2c 6e 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 7b 7d 5d 2c 31 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 61 2e 73 65 6e 64 46 69 6e 61 6c 28 63 2c 21 31 29 2c 64 2e 63 6f 6e 64 69 74 69 6f 6e 61 6c 6c 79 53 65 74 28 29 7d 76 61 72 20 69 3d 74 Data Ascii: lte IE 8]><div></div><![endif]-->...[if lte IE 9]><div></div><![endif]-->";var i,o=r.getElementsByTagName("div").length;i=4===o?6:3===o?7:2===o?8:1===o?9:0,n.exports=i},{}],11:[function(t,n,e){function r(t){a.sendFinal(c,!1),d.conditionallySet()}var i=t
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 22 73 22 29 2c 6f 28 74 5b 22 63 22 2b 64 2b 73 5d 2c 65 2c 6e 2c 22 63 65 22 29 2c 6f 28 74 5b 6c 2b 61 5d 2c 65 2c 6e 2c 22 72 71 22 29 2c 6f 28 74 5b 68 2b 61 5d 2c 65 2c 6e 2c 22 72 70 22 29 2c 6f 28 74 5b 68 2b 73 5d 2c 65 2c 6e 2c 22 72 70 65 22 29 2c 6f 28 74 2e 64 6f 6d 4c 6f 61 64 69 6e 67 2c 65 2c 6e 2c 22 64 6c 22 29 2c 6f 28 74 2e 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 2c 65 2c 6e 2c 22 64 69 22 29 2c 6f 28 74 5b 6d 2b 61 5d 2c 65 2c 6e 2c 22 64 73 22 29 2c 6f 28 74 5b 6d 2b 73 5d 2c 65 2c 6e 2c 22 64 65 22 29 2c 6f 28 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 2c 65 2c 6e 2c 22 64 63 22 29 2c 6f 28 74 5b 70 2b 61 5d 2c 65 2c 6e 2c 22 6c 22 29 2c 6f 28 74 5b 70 2b 73 5d 2c 65 2c 6e 2c 22 6c 65 22 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 Data Ascii: "s"),o(t["c"+d+s],e,n,"ce"),o(t[l+a],e,n,"rq"),o(t[h+a],e,n,"rp"),o(t[h+s],e,n,"rpe"),o(t.domLoading,e,n,"dl"),o(t.domInteractive,e,n,"di"),o(t[m+a],e,n,"ds"),o(t[m+s],e,n,"de"),o(t.domComplete,e,n,"dc"),o(t[p+a],e,n,"l"),o(t[p+s],e,n,"le"),n}function i(t
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 20 22 29 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 30 3d 3d 3d 74 5b 6e 5d 2e 69 6e 64 65 78 4f 66 28 22 4e 52 45 55 4d 3d 22 29 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 2c 69 2c 6f 2c 73 3d 74 5b 6e 5d 2e 73 75 62 73 74 72 69 6e 67 28 22 4e 52 45 55 4d 3d 22 2e 6c 65 6e 67 74 68 29 2e 73 70 6c 69 74 28 22 26 22 29 2c 75 3d 30 3b 75 3c 73 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 30 3d 3d 3d 73 5b 75 5d 2e 69 6e 64 65 78 4f 66 28 22 73 3d 22 29 3f 69 3d 73 5b 75 5d 2e 73 75 62 73 74 72 69 6e 67 28 32 29 3a 30 3d 3d 3d 73 5b 75 5d 2e 69 6e 64 65 78 4f 66 28 22 70 3d 22 29 3f 28 72 3d 73 5b 75 5d Data Ascii: }}function o(){for(var t=document.cookie.split(" "),n=0;n<t.length;n++)if(0===t[n].indexOf("NREUM=")){for(var e,r,i,o,s=t[n].substring("NREUM=".length).split("&"),u=0;u<s.length;u++)0===s[u].indexOf("s=")?i=s[u].substring(2):0===s[u].indexOf("p=")?(r=s[u]
2024-10-11 22:48:10 UTC	1378	IN	Data Raw: 22 3b 76 61 72 20 72 3d 5b 5d 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 77 69 6e 64 6f 77 2e 41 72 72 61 79 7c 7c 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 61 70 70 6c 79 28 65 29 29 7b 66 6f 72 28 76 61 72 20 73 3d 65 2e 6c 65 6e 67 74 68 2c 75 3d 30 3b 75 3c 73 3b 75 2b 3d 31 29 72 5b 75 5d 3d 6f 28 75 2c 65 29 7c 7c 22 6e 75 6c 6c 22 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 3f 22 5b 5d 22 3a 22 5b 22 2b 72 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 5d 22 7d 72 65 74 75 72 6e 20 61 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 6f 28 74 2c 65 29 3b 6e 26 26 72 2e 70 75 73 68 28 69 28 74 29 2b 22 3a 22 2b 6e 29 7d 29 2c 30 3d Data Ascii: ";var r=[];if(e instanceof window.Array\|\|"[object Array]"===Object.prototype.toString.apply(e)){for(var s=e.length,u=0;u<s;u+=1)r[u]=o(u,e)\|\|"null";return 0===r.length?"[]":"["+r.join(",")+"]"}return a(e,function(t){var n=o(t,e);n&&r.push(i(t)+":"+n)}),0=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.8	49871	162.247.243.29	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:11 UTC	892	OUT	GET /1/20e6e07576?a=94805257&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=15627&ck=1&ref=https://www.redcrossblood.org/give.html/404&be=2844&fe=14867&dc=6446&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1728686873483,%22n%22:0,%22f%22:25,%22dn%22:34,%22dne%22:57,%22c%22:57,%22s%22:58,%22ce%22:799,%22rq%22:799,%22rp%22:1392,%22rpe%22:1596,%22dl%22:1424,%22di%22:6443,%22ds%22:6443,%22de%22:6461,%22dc%22:14867,%22l%22:14867,%22le%22:14870%7D,%22navigation%22:%7B%7D%7D&fp=6407&fcp=6407&jsonp=NREUM.setToken HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8cbb532589c4573e
2024-10-11 22:48:11 UTC	495	IN	HTTP/1.1 200 Connection: close Content-Length: 79 access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-expose-headers: Date timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Fri, 11 Oct 2024 22:48:11 GMT content-type: text/javascript access-control-allow-credentials: true set-cookie: JSESSIONID=8cbb532589c4573e; Path=/; Domain=.nr-data.net; Secure; SameSite=None x-served-by: cache-nyc-kteb1890059-NYC
2024-10-11 22:48:11 UTC	79	IN	Data Raw: 4e 52 45 55 4d 2e 73 65 74 54 6f 6b 65 6e 28 7b 27 73 74 6e 27 3a 30 2c 27 65 72 72 27 3a 31 2c 27 69 6e 73 27 3a 31 2c 27 73 70 61 27 3a 31 2c 27 73 72 27 3a 30 2c 27 73 72 73 27 3a 30 2c 27 73 74 27 3a 31 2c 27 73 74 73 27 3a 30 7d 29 Data Ascii: NREUM.setToken({'stn':0,'err':1,'ins':1,'spa':1,'sr':0,'srs':0,'st':1,'sts':0})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.8	49870	108.138.26.118	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:11 UTC	349	OUT	GET /v1/pageview HTTP/1.1 Host: api2.branch.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:11 UTC	444	IN	HTTP/1.1 404 Not Found Content-Type: text/plain Content-Length: 18 Connection: close Access-Control-Allow-Origin: * Date: Fri, 11 Oct 2024 22:48:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Powered-By: Branch X-Cache: Error from cloudfront Via: 1.1 85ca8c4198fb707d10ecc2a784a315be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: fG84iBTtozNgNrlIKxU9kM2Zxuwk-KwBMIyYlOJ-rAOEZSeF4BrMLA==
2024-10-11 22:48:11 UTC	18	IN	Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.8	49872	162.247.243.29	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:14 UTC	777	OUT	POST /events/1/20e6e07576?a=94805257&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=19275&ck=1&ref=https://www.redcrossblood.org/give.html/404 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 860 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.redcrossblood.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8cbb532589c4573e
2024-10-11 22:48:14 UTC	860	OUT	Data Raw: 62 65 6c 2e 37 3b 31 2c 37 2c 2c 65 76 35 2c 65 76 35 2c 69 67 2c 27 69 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 63 72 6f 73 73 62 6c 6f 6f 64 2e 6f 72 67 2f 2f 67 69 76 65 2e 68 74 6d 6c 2c 31 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 63 72 6f 73 73 62 6c 6f 6f 64 2e 6f 72 67 2f 67 69 76 65 2e 68 74 6d 6c 2f 34 30 34 2c 2c 2c 21 21 21 21 27 30 39 36 36 36 66 38 38 2d 62 31 37 32 2d 34 37 36 66 2d 62 61 61 64 2d 35 63 64 65 61 65 66 66 36 35 37 64 2c 27 31 2c 34 78 7a 2c 34 78 7a 3b 32 2c 31 2c 32 6a 75 2c 31 67 71 2c 78 2c 79 2c 27 67 65 74 2c 35 6b 2c 27 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 3a 34 34 33 2c 27 2f 69 64 2c 2c 31 73 37 2c 2c 27 34 2c 21 21 21 3b 32 2c 2c 34 31 61 2c 77 78 2c Data Ascii: bel.7;1,7,,ev5,ev5,ig,'initialPageLoad,'https://www.redcrossblood.org//give.html,1,'https://www.redcrossblood.org/give.html/404,,,!!!!'09666f88-b172-476f-baad-5cdeaeff657d,'1,4xz,4xz;2,1,2ju,1gq,x,y,'get,5k,'dpm.demdex.net:443,'/id,,1s7,,'4,!!!;2,,41a,wx,
2024-10-11 22:48:14 UTC	319	IN	HTTP/1.1 200 Connection: close Content-Length: 24 content-type: image/gif date: Fri, 11 Oct 2024 22:48:14 GMT access-control-allow-origin: https://www.redcrossblood.org access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-ewr-kewr1740026-EWR
2024-10-11 22:48:14 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.8	49873	162.247.243.29	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:14 UTC	513	OUT	GET /events/1/20e6e07576?a=94805257&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=19275&ck=1&ref=https://www.redcrossblood.org/give.html/404 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8cbb532589c4573e
2024-10-11 22:48:15 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 access-control-allow-credentials: true access-control-allow-origin: * content-type: image/gif date: Fri, 11 Oct 2024 22:48:14 GMT access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS x-served-by: cache-nyc-kteb1890073-NYC
2024-10-11 22:48:15 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.8	49874	63.140.62.17	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:18 UTC	734	OUT	POST /ee/irl1/v1/collect?configId=8e7ed3d9-5254-4632-b3b4-a45c9fec6d88&requestId=bfe1fb0e-cc74-4cc6-9618-ab54bbfa6f25 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 2592 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=utf-8 Accept: / Origin: https://www.redcrossblood.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:18 UTC	2592	OUT	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 63 6f 6e 66 69 67 4f 76 65 72 72 69 64 65 73 22 3a 7b 7d 2c 22 74 61 72 67 65 74 22 3a 7b 22 6d 69 67 72 61 74 69 6f 6e 22 3a 74 72 75 65 7d 2c 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 72 65 64 63 72 6f 73 73 62 6c 6f 6f 64 2e 6f 72 67 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 37 32 33 41 32 32 43 37 35 37 35 31 38 45 32 43 37 46 30 30 30 31 30 31 5f 41 64 6f 62 65 4f 72 67 5f 63 6c 75 73 74 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 69 72 6c 31 22 7d 2c 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 37 32 33 41 32 32 43 37 35 37 35 31 38 45 32 43 37 46 30 30 30 31 30 31 5f 41 64 6f 62 65 4f 72 67 5f 69 64 65 Data Ascii: {"meta":{"configOverrides":{},"target":{"migration":true},"state":{"domain":"redcrossblood.org","cookiesEnabled":true,"entries":[{"key":"kndctr_723A22C757518E2C7F000101_AdobeOrg_cluster","value":"irl1"},{"key":"kndctr_723A22C757518E2C7F000101_AdobeOrg_ide
2024-10-11 22:48:18 UTC	573	IN	HTTP/1.1 204 No Content x-request-id: bfe1fb0e-cc74-4cc6-9618-ab54bbfa6f25 vary: Origin access-control-allow-origin: https://www.redcrossblood.org access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Fri, 11 Oct 2024 22:48:18 GMT x-konductor: N/A x-adobe-edge: IRL1;6 server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.8	49875	216.58.206.70	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:18 UTC	984	OUT	GET /activityi;src=4706068;type=rcopa0;cat=rconeADO;u6=56533479113366688501602802432891303576;ord=8269349374745.352? HTTP/1.1 Host: fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkyjSlqriV2RfvPIlYWbUxXtVU034nTKoT3zN--VKDFKrEa2AJ8-iExxIM4tjA; ar_debug=1
2024-10-11 22:48:19 UTC	826	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 11 Oct 2024 22:48:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Location: https://4706068.fls.doubleclick.net/activityi;dc_pre=CKHrpsS0h4kDFcGngwcdCs8J7w;src=4706068;type=rcopa0;cat=rconeADO;u6=56533479113366688501602802432891303576;ord=8269349374745.352? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.8	49876	142.250.186.38	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:19 UTC	1026	OUT	GET /activityi;dc_pre=CKHrpsS0h4kDFcGngwcdCs8J7w;src=4706068;type=rcopa0;cat=rconeADO;u6=56533479113366688501602802432891303576;ord=8269349374745.352? HTTP/1.1 Host: 4706068.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkyjSlqriV2RfvPIlYWbUxXtVU034nTKoT3zN--VKDFKrEa2AJ8-iExxIM4tjA; ar_debug=1
2024-10-11 22:48:19 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 11 Oct 2024 22:48:19 GMT Expires: Fri, 11 Oct 2024 22:48:19 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-11 22:48:19 UTC	387	IN	Data Raw: 31 37 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4b 48 72 70 73 53 30 68 34 6b 44 46 63 Data Ascii: 17c<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CKHrpsS0h4kDFc
2024-10-11 22:48:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.8	49878	162.247.243.29	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:20 UTC	777	OUT	POST /events/1/20e6e07576?a=94805257&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=25639&ck=1&ref=https://www.redcrossblood.org/give.html/404 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 190 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.redcrossblood.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8cbb532589c4573e
2024-10-11 22:48:20 UTC	190	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 34 78 7a 2c 3b 65 2c 27 66 63 70 2c 34 78 7a 2c 3b 65 2c 27 6c 6f 61 64 2c 62 67 7a 2c 31 3b 36 2c 27 63 6c 73 2c 30 2e 30 30 30 30 38 32 38 31 35 32 39 30 31 35 34 35 33 38 30 35 3b 65 2c 27 66 69 2c 69 32 35 2c 33 3b 35 2c 27 74 79 70 65 2c 27 70 6f 69 6e 74 65 72 64 6f 77 6e 3b 36 2c 27 66 69 64 2c 32 2e 3b 36 2c 33 2c 30 2e 30 30 30 30 38 32 38 31 35 32 39 30 31 35 34 35 33 38 30 35 3b 65 2c 27 6c 63 70 2c 38 34 7a 2c 32 3b 36 2c 27 73 69 7a 65 2c 36 39 38 34 33 30 2e 3b 35 2c 27 65 69 64 2c 27 72 69 67 68 74 2d 73 69 64 65 Data Ascii: bel.6;e,'fp,4xz,;e,'fcp,4xz,;e,'load,bgz,1;6,'cls,0.00008281529015453805;e,'fi,i25,3;5,'type,'pointerdown;6,'fid,2.;6,3,0.00008281529015453805;e,'lcp,84z,2;6,'size,698430.;5,'eid,'right-side
2024-10-11 22:48:20 UTC	319	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Fri, 11 Oct 2024 22:48:20 GMT content-type: image/gif access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-origin: https://www.redcrossblood.org x-served-by: cache-nyc-kteb1890028-NYC
2024-10-11 22:48:20 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.8	49877	142.250.184.226	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:20 UTC	828	OUT	GET /ddm/fls/z/dc_pre=CKHrpsS0h4kDFcGngwcdCs8J7w;src=4706068;type=rcopa0;cat=rconeADO;u6=56533479113366688501602802432891303576;ord=8269349374745.352 HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4706068.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:21 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 11 Oct 2024 22:48:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-11 22:48:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.8	49879	162.247.243.29	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:21 UTC	513	OUT	GET /events/1/20e6e07576?a=94805257&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=25639&ck=1&ref=https://www.redcrossblood.org/give.html/404 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8cbb532589c4573e
2024-10-11 22:48:21 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS content-type: image/gif date: Fri, 11 Oct 2024 22:48:21 GMT access-control-allow-credentials: true access-control-allow-origin: * x-served-by: cache-ewr-kewr1740046-EWR
2024-10-11 22:48:21 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.8	49880	216.58.206.34	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:48:21 UTC	581	OUT	GET /ddm/fls/z/dc_pre=CKHrpsS0h4kDFcGngwcdCs8J7w;src=4706068;type=rcopa0;cat=rconeADO;u6=56533479113366688501602802432891303576;ord=8269349374745.352 HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 22:48:22 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 11 Oct 2024 22:48:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-11 22:48:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.8	63432	162.247.243.29	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 22:49:10 UTC	4559	OUT	POST /jserrors/1/20e6e07576?a=94805257&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=75640&ck=1&ref=https://www.redcrossblood.org/give.html/404&ierr=%5B%7B%22params%22:%7B%22stackHash%22:-687274247,%22exceptionClass%22:%22TypeError%22,%22request_uri%22:%22/give.html/404%22,%22message%22:%22Cannot%20convert%20undefined%20or%20null%20to%20object%22,%22stack_trace%22:%22TypeError:%20Cannot%20convert%20undefined%20or%20null%20to%20object%5Cn%20%20%20%20at%20hasOwnProperty%20(%3Canonymous%3E)%5Cn%20%20%20%20at%20r%20(https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive/new-relic/new-relic-rcbbloodapp-prod.js:2:24084)%5Cn%20%20%20%20at%20r.%3Canonymous%3E%20(https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive/new-relic/new-relic-rcbbloodapp-prod.js:2:4839)%5Cn%20%20%20%20at%20Object.n%20%5Bas%20emit%5D%20(https://www.redcrossblood.org/etc/clientlibs/redcross/rcbblooddrive/new-relic/new-relic-rcbbloodapp-prod.js:2:23416)%5Cn%20%20%20%20at%20u%20(https://www.redcrossblood.org/etc/clie [TRUNCATED] Host: bam.nr-data.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.redcrossblood.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.redcrossblood.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8cbb532589c4573e
2024-10-11 22:49:10 UTC	363	IN	HTTP/1.1 200 Connection: close Content-Length: 24 content-type: image/gif access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-origin: https://www.redcrossblood.org cross-origin-resource-policy: cross-origin access-control-allow-credentials: true date: Fri, 11 Oct 2024 22:49:10 GMT x-served-by: cache-nyc-kteb1890097-NYC
2024-10-11 22:49:10 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Target ID:	0
Start time:	18:47:47
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:47:50
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1908,i,4374098285260909332,9140003001819726548,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:47:53
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.redcrossblood.org//give.html"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.redcrossblood.org//give.html	HTTP Parser: No favicon
Source: https://www.redcrossblood.org/give.html/404	HTTP Parser: No favicon
Source: https://www.redcrossblood.org/give.html/404	HTTP Parser: No favicon
Source: https://www.redcrossblood.org/give.html/404	HTTP Parser: No favicon
Source: https://www.redcrossblood.org/give.html/404	HTTP Parser: No favicon
Source: https://www.redcrossblood.org/give.html/404	HTTP Parser: No favicon
Source: https://www.redcrossblood.org/give.html/404	HTTP Parser: No favicon

Source: chromecache_197.2.dr	String found in binary or memory: <!-- End Facebook Pixel Code --><img src='//pixel.mathtag.com/event/img?mt_id=1319619&mt_adid=149608&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3=&ord=104230782' width='1' height='1' /><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CP_jvLy0h4kDFXiK_Qcdcq0Gig;src=4706068;type=rcbnew;cat=rcbne0;ord=4722219042743;npa=0;auiddc=*;ps=1;pcor=2078001472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a90v9189992675za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101686685;epver=2;~oref=https%3A%2F%2Fwww.redcrossblood.org%2Fgive.html%2F404"/></body></html> equals www.facebook.com (Facebook)
Source: chromecache_147.2.dr, chromecache_130.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},kk:function(){e=Ab()},sd:function(){d()}}};var hc=la(["data-gtm-yt-inspected-"]),YC=["www.youtube.com","www.youtube-nocookie.com"],ZC,$C=!1; equals www.youtube.com (Youtube)
Source: chromecache_147.2.dr, chromecache_130.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=EA(a,c,e);V(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return V(122),!0;if(d&&f){for(var m=Lb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},HA=function(){var a=[],b=function(c){return qb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_147.2.dr, chromecache_130.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={nh:e,lh:f,mh:g,Xh:k,Yh:m,Ie:n,Eb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(iD(w,"iframe_api")\|\|iD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!$C&&gD(x[A],p.Ie))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_153.2.dr, chromecache_209.2.dr	String found in binary or memory: return b}WC.F="internal.enableAutoEventOnTimer";var hc=la(["data-gtm-yt-inspected-"]),YC=["www.youtube.com","www.youtube-nocookie.com"],ZC,$C=!1; equals www.youtube.com (Youtube)
Source: chromecache_202.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_202.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_202.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_197.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=1599953746963987&ev=PageView&noscript=1" equals www.facebook.com (Facebook)
Source: chromecache_147.2.dr, chromecache_130.2.dr, chromecache_168.2.dr, chromecache_208.2.dr	String found in binary or memory: var kC=function(a,b,c,d,e){var f=bA("fsl",c?"nv.mwt":"mwt",0),g;g=c?bA("fsl","nv.ids",[]):bA("fsl","ids",[]);if(!g.length)return!0;var k=gA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);V(121);if(m==="https://www.facebook.com/tr/")return V(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Oy(k,Qy(b, equals www.facebook.com (Facebook)

Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.redcrossblood.org
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: s7.addthis.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: resources.crowdtwist.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: s.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: redcross.demdex.net
Source: global traffic	DNS traffic detected: DNS query: smetrics.redcross.org
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: 4706068.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: c.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: adobedc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: pixel.mathtag.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: origin.acuityplatform.com
Source: global traffic	DNS traffic detected: DNS query: edge.adobedc.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.branch.io
Source: global traffic	DNS traffic detected: DNS query: e.acuityplatform.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: app.link
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sync.search.spotxchange.com
Source: global traffic	DNS traffic detected: DNS query: api2.branch.io
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: 241.42.69.40.in-addr.arpa

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.redcrossblood.org//give.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Windows Analysis Report
http://www.redcrossblood.org//give.html